last executing test programs: 2m49.010744056s ago: executing program 2 (id=1759): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe}, 0x50) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) tkill(r2, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004331}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0) chdir(0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setresuid(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 2m47.510996577s ago: executing program 2 (id=1764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 2m45.848046218s ago: executing program 2 (id=1769): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f00002c8000/0x2000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) 2m44.465553871s ago: executing program 2 (id=1774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24040004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a320000000005000100070000004fb4cd9cd66676c4fe30f694b1a3183070d114a45d6cc77fed38fbc2e41816cd0f2c6679adbca7883fb2a4c7286f039d47a0a810a526ff48d98907a10f209751bbab2df459a52445d8341210cbcc792f1fbf63194d5e1b32791b701273f14067980399f746e5b1c98c3218f8ba89710072a728580448aa4c64a72739e615a4fd0fdb367523984dc7f6f71644834a11975d13ce29af711c6512110549ba"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, 0x0, &(0x7f0000000ac0)}, 0x1b) socket(0xb, 0x5, 0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz0\x00', @default, 0x7, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff99, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x653, 0x2003) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 2m43.382467961s ago: executing program 2 (id=1777): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ptrace$setsig(0x4203, r1, 0x6, &(0x7f00000000c0)={0x37, 0x1ff, 0x7}) sendmsg$GTP_CMD_NEWPDP(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e24, 0x5}, @ah_ip4_spec={@broadcast, @private=0xa010100, 0xfffffff7, 0x7}, 0x2e67, 0x200, 0x5, 0x10004e55, 0xffffffffffffffff}}}) 2m42.317197877s ago: executing program 2 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYBLOB="10000180040004800800010000400300"], 0x28}}, 0x0) 2m26.116402555s ago: executing program 32 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYBLOB="10000180040004800800010000400300"], 0x28}}, 0x0) 17.781158433s ago: executing program 3 (id=2078): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r8, &(0x7f00000004c0)="d7", 0x1, 0x10000, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000100)=0x4) 15.382295053s ago: executing program 4 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r5, 0x10, 0x0, 0x1062200) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8}, 0x50) shutdown(r3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x38, 0x0, &(0x7f00007d0000)) read(0xffffffffffffffff, &(0x7f0000000140)=""/132, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfcfe}, @HCI_OP_WRITE_AUTH_ENABLE={{0x5}, 0xe}}}, 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) 15.02534113s ago: executing program 1 (id=2083): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) getsockopt$inet6_int(r0, 0x29, 0x47, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(0x3) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000007440)={0x0, 0xb, {}, {0xffffffffffffffff}, 0x1ff, 0x6}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000b00)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x28, {0x2, 0x4e21, @empty}, 'lo\x00'}) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 13.750162964s ago: executing program 4 (id=2084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0x94}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x82, {0x0, 0x0, 0x0, 0x0, 0x20e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x18, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x38005, 0x62120}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x693c, 0xdc3e, {}, {0xee01}, 0x1, 0x8}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3, 0x0, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 13.325467193s ago: executing program 5 (id=2085): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = syz_io_uring_setup(0x3913, &(0x7f0000000000)={0x0, 0xb848, 0x1, 0x3, 0x114}, 0x0, &(0x7f0000000300)) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000002c0)=0xfff) io_uring_enter(r5, 0x3c92, 0xb93d, 0x8, &(0x7f0000000440)={[0xfffffffffffffff3]}, 0x8) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000e80)={{r8, 0x0, 0x8, 0xb0e, 0x1000, 0x4, 0x60, 0x6, 0xe, 0x5, 0x6, 0x0, 0xfffffffffffffffc, 0x144, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r8, 0xffff, 0x7, 0x8, 0x331b, 0x3, 0x200000100000000, 0x100, 0x4, 0xffffffd3, 0x5, 0x1, 0xfffffffffffff609, 0xff}}) 12.44338541s ago: executing program 3 (id=2087): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xfaf, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0xfffffffe, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r8) r9 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001580), 0x810000, &(0x7f00000016c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r9, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302c6e6f6465766d61702c736d61636b6673666c6f6f723d7766646e6f2c61707072616973655f747970653d696d617369672c736d61636b66736465663d2b571d18f29c649da056c951e96b3605837d4cccbd7139e02eb2ffbc038956ebef23959eb0f635a60093430f0ecabdb614af6ab6b52c7375626a5f7573"]) ioctl$COMEDI_CMDTEST(r8, 0x8050640a, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000001340)="97d09a1768072b193fc4d34b4d8bacbfa9fd35fa275fc73f179e89786749950a090cd80ba77360c256256d3578d228cc0fc21c63d0d4"}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8404}, 0x20000004) 12.281186345s ago: executing program 0 (id=2088): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ptrace$setsig(0x4203, r1, 0x6, &(0x7f00000000c0)={0x37, 0x1ff, 0x7}) sendmsg$GTP_CMD_NEWPDP(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e24, 0x5}, @ah_ip4_spec={@broadcast, @private=0xa010100, 0xfffffff7, 0x7}, 0x2e67, 0x200, 0x5, 0x10004e55, 0xffffffffffffffff}}}) 12.1388435s ago: executing program 1 (id=2089): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300), 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 10.885093268s ago: executing program 0 (id=2091): socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x6}, 0x22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 10.869506936s ago: executing program 3 (id=2092): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0xfc00000000000000, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4, 0x40}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 9.717453848s ago: executing program 0 (id=2093): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11fc, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) socket(0x2, 0x80805, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000003c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) syz_usb_connect(0x0, 0x6e, &(0x7f0000001140)=ANY=[@ANYRESHEX], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="500000001000e800000000000000", @ANYBLOB="a5f9ad8800000000300012800b00010067656e65766500002000028008000200e000000114000700ff0100000000000000", @ANYRESDEC=r0], 0x50}}, 0x8080) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x400, 0x0) 9.682344106s ago: executing program 4 (id=2094): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) read$FUSE(r2, &(0x7f0000006280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x39, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 8.882437346s ago: executing program 1 (id=2095): r0 = syz_open_dev$vcsn(0x0, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x52, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c001}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0xa}}, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8.164043512s ago: executing program 4 (id=2096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffd) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r7 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r7, 0x0, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9, r8}, 0xc) 7.839646839s ago: executing program 1 (id=2097): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"]) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x1, 0x0, 0x6}]}) socket$inet6(0x10, 0x4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 7.768866337s ago: executing program 5 (id=2098): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x2e, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454089861"}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@generic={0xff, 0x13, "50d650847249ad288702ebd0d654b985e8908d"}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}, @rthdr={{0x18}}], 0xf8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191", 0xb6}, {&(0x7f0000002840)="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", 0xfe0}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.551737254s ago: executing program 3 (id=2099): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ptrace$setsig(0x4203, r1, 0x6, &(0x7f00000000c0)={0x37, 0x1ff, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) sendmsg$GTP_CMD_NEWPDP(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e24, 0x5}, @ah_ip4_spec={@broadcast, @private=0xa010100, 0xfffffff7, 0x7}, 0x2e67, 0x200, 0x5, 0x10004e55, 0xffffffffffffffff}}}) 6.217055109s ago: executing program 0 (id=2100): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x1}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r5 = getpid() fcntl$setownex(r1, 0xf, &(0x7f00000007c0)={0x0, r5}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r3, &(0x7f00000000c0)="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", 0x4fe, 0x6000000000000000, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x2004c004) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6.216698461s ago: executing program 1 (id=2101): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 4.716574674s ago: executing program 5 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xfaf, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0xfffffffe, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r8) r9 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001580), 0x810000, &(0x7f00000016c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r9, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302c6e6f6465766d61702c736d61636b6673666c6f6f723d7766646e6f2c61707072616973655f747970653d696d617369672c736d61636b66736465663d2b571d18f29c649da056c951e96b3605837d4cccbd7139e02eb2ffbc038956ebef23959eb0f635a60093430f0ecabdb614af6ab6b52c7375626a5f7573"]) ioctl$COMEDI_CMDTEST(r8, 0x8050640a, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000001340)="97d09a1768072b193fc4d34b4d8bacbfa9fd35fa275fc73f179e89786749950a090cd80ba77360c256256d3578d228cc0fc21c63d0d4"}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8404}, 0x20000004) 4.595282853s ago: executing program 3 (id=2103): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect$uac1(0x4, 0x9f, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x3, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6e3, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x7, 0x1, "32ea98e0acca"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x3}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x9, "99ad646319"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x1, 0x5e, 0x7, ';', "3d97"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xf9, 0x1, {0x7, 0x25, 0x1, 0x102, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xe, 0x9, {0x7, 0x25, 0x1, 0x2, 0xf, 0x1000}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x0, 0x0}, {0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="5203a324de4d6eeb49a7eb289618982058bdaadd61c61f36a94132e21920935daab5893675cd70117d1a23401505ebd6c8376d2994a0825e004f8da6e029"]}, {0x40, &(0x7f0000000440)=ANY=[]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xb8, &(0x7f0000000100)=ANY=[]}]}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r5, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r6, r7, 0x0) 4.041824043s ago: executing program 4 (id=2104): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000700000001010000009d00000000010000050900010173797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r5 = getpid() sched_setattr(r5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[], 0x24, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r3) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 3.718738975s ago: executing program 5 (id=2105): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) io_setup(0x4fe, &(0x7f0000000100)=0x0) listen(0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r7, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000840) 3.232982359s ago: executing program 0 (id=2106): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x88880) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0xff, 0x0) fanotify_init(0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r8, 0x0) r9 = fsmount(r2, 0x0, 0x1) fchdir(r9) prctl$PR_SET_SECUREBITS(0x1c, 0xd083e057b138d53c) syz_usb_connect(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r9], 0x0) 3.141632016s ago: executing program 5 (id=2107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000100)={0x2e, 0x3}, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24040004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a320000000005000100070000004fb4cd9cd66676c4fe30f694b1a3183070d114a45d6cc77fed38fbc2e41816cd0f2c6679adbca7883fb2a4c7286f039d47a0a810a526ff48d98907a10f209751bbab2df459a52445d8341210cbcc792f1fbf63194d5e1b32791b701273f14067980399f746e5b1c98c3218f8ba89710072a728580448aa4c64a72739e615a4fd0fdb367523984dc7f6f71644834a11975d13ce29af711c6512110549ba"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, 0x0, &(0x7f0000000ac0)}, 0x1b) socket(0xb, 0x5, 0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz0\x00', @default, 0x7, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff99, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x653, 0x2003) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 2.841832292s ago: executing program 1 (id=2108): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x100008, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES8]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) getdents(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) unshare(0x42000000) 1.521120619s ago: executing program 5 (id=2109): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x88880) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0xff, 0x0) fanotify_init(0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r8, 0x0) r9 = fsmount(r2, 0x0, 0x1) fchdir(r9) prctl$PR_SET_SECUREBITS(0x1c, 0xd083e057b138d53c) syz_usb_connect(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r9], 0x0) 1.484217711s ago: executing program 4 (id=2110): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1a, 0x2, 0x2b) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) process_mrelease(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1d8, 0x230, 0x242, 0x1d8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4e21, 0x0, 0x3, 0x4e24, 0x4, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x2c, 0x3, 0x7, 0x281, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x48050) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(r5) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) sendmsg$unix(r2, 0x0, 0x0) quotactl$Q_GETFMT(0x1, &(0x7f0000000180)=@sr0, 0x0, &(0x7f00000001c0)) kcmp(r6, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000014) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) 761.773757ms ago: executing program 3 (id=2111): r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0xac6c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5b48e1f1bedc84047f6ee0cc6e176e2ab7835be643b0c1aa89d165c8050794f545", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32, @ANYBLOB="04006e8004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) 0s ago: executing program 0 (id=2112): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, r5, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') kernel console output (not intermixed with test programs): 0x6 has invalid maxpacket 1023, setting to 64 [ 740.404608][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.423582][ T5817] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 740.431681][ T5882] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.432609][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.453891][ T5882] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 740.463728][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.472007][ T5882] usb 2-1: Product: syz [ 740.495110][ T5817] usb 4-1: Product: syz [ 740.500535][ T5817] usb 4-1: Manufacturer: syz [ 740.585398][ T5817] usb 4-1: SerialNumber: syz [ 740.592637][ T5817] usb 4-1: config 0 descriptor?? [ 740.607520][ T5817] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 740.637229][ T5882] usb 2-1: Manufacturer: syz [ 740.641828][ T5882] usb 2-1: SerialNumber: syz [ 740.646796][ T5868] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 740.665425][ T5882] usb 2-1: config 0 descriptor?? [ 740.665471][ T5817] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 740.672136][T12786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 740.694045][ T5882] usb-storage 2-1:0.20: USB Mass Storage device detected [ 741.108687][ T5882] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 741.118083][ T5868] usb 3-1: device descriptor read/64, error -71 [ 741.258912][ T5817] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 741.522405][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.531186][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.652402][ T5868] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 741.701802][ T30] audit: type=1400 audit(2000000344.114:1202): avc: denied { map } for pid=12805 comm="syz.4.1454" path="socket:[33415]" dev="sockfs" ino=33415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 741.734898][ T30] audit: type=1400 audit(2000000344.143:1203): avc: denied { accept } for pid=12805 comm="syz.4.1454" path="socket:[33415]" dev="sockfs" ino=33415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 741.843882][ T5868] usb 3-1: device descriptor read/64, error -71 [ 741.904729][T12808] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1454'. [ 741.972483][ T5868] usb usb3-port1: attempt power cycle [ 742.431826][ T5868] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 742.431913][ T30] audit: type=1326 audit(2000000344.741:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 742.650098][ T5868] usb 3-1: device descriptor read/8, error -71 [ 742.668430][ T30] audit: type=1326 audit(2000000344.741:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 742.811825][ T5817] usb 4-1: USB disconnect, device number 22 [ 742.844529][ T5882] scsi host1: usb-storage 2-1:0.20 [ 742.868289][ T30] audit: type=1326 audit(2000000344.741:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 742.893024][ T5882] usb 2-1: USB disconnect, device number 45 [ 742.903912][ T30] audit: type=1326 audit(2000000344.741:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 742.928212][ T30] audit: type=1326 audit(2000000344.741:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 742.964027][ T30] audit: type=1326 audit(2000000344.741:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 743.009039][ T30] audit: type=1326 audit(2000000344.751:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 743.065676][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 743.117212][ T5868] usb 3-1: device descriptor read/8, error -71 [ 743.150113][T12821] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1457'. [ 743.255289][ T5868] usb usb3-port1: unable to enumerate USB device [ 744.734126][T12839] netlink: 'syz.4.1461': attribute type 23 has an invalid length. [ 745.175078][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 745.843951][ T793] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 746.251298][T12857] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1466'. [ 746.271092][ T793] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 746.377455][ T793] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.388889][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.404942][ T793] usb 3-1: Product: syz [ 746.411755][ T793] usb 3-1: Manufacturer: syz [ 746.422626][ T793] usb 3-1: SerialNumber: syz [ 746.438722][ T793] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.488534][ T5882] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.620139][T12861] netlink: 'syz.3.1467': attribute type 2 has an invalid length. [ 747.718925][ T5882] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 747.726254][ T5882] ath9k_htc: Failed to initialize the device [ 747.737829][T12866] netlink: 'syz.0.1468': attribute type 23 has an invalid length. [ 747.812772][ T5882] usb 3-1: ath9k_htc: USB layer deinitialized [ 747.968864][T12870] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1470'. [ 748.013288][ T5868] usb 3-1: USB disconnect, device number 29 [ 748.047067][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1472'. [ 748.328004][T12878] netlink: 'syz.0.1473': attribute type 23 has an invalid length. [ 748.375818][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 748.664456][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 748.676963][ T5868] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 748.702008][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.218273][ T5868] usb 3-1: Product: syz [ 749.241944][ T5868] usb 3-1: Manufacturer: syz [ 749.246647][ T5868] usb 3-1: SerialNumber: syz [ 749.254811][ T5868] usb 3-1: config 0 descriptor?? [ 749.263037][ T5868] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 749.365316][ T5868] pctv452e: pctv452e_power_ctrl: 1 [ 749.365316][ T5868] [ 749.774555][ T5868] usb 3-1: selecting invalid altsetting 3 [ 749.788316][ T5868] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 749.788316][ T5868] [ 749.799247][ T5868] dvb-usb: bulk message failed: -22 (5/0) [ 749.827459][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 749.838666][ T5868] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 749.847805][ T5868] usb 3-1: media controller created [ 749.855571][ T5868] dvb-usb: bulk message failed: -22 (8/0) [ 749.862193][ T5868] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 749.871021][ T5868] dvb-usb: MAC address reading failed. [ 750.039727][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.103568][ T5868] DVB: Unable to find symbol stb0899_attach() [ 750.207733][ T5868] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 750.957184][T12915] netlink: 'syz.1.1480': attribute type 12 has an invalid length. [ 751.168810][ T5868] rc_core: IR keymap rc-tt-1500 not found [ 751.174575][ T5868] Registered IR keymap rc-empty [ 751.314655][ T5868] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 751.444070][ T5868] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15 [ 751.619248][T12921] netlink: 'syz.0.1483': attribute type 23 has an invalid length. [ 751.660932][ T5868] dvb-usb: schedule remote query interval to 100 msecs. [ 751.667869][ T5868] pctv452e: pctv452e_power_ctrl: 0 [ 751.667869][ T5868] [ 751.776805][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 751.782694][ T5817] dvb-usb: error -22 while querying for an remote control event. [ 751.829468][ T5868] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 751.914397][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 751.933713][ T5817] dvb-usb: error -22 while querying for an remote control event. [ 751.942129][ T5868] usb 3-1: USB disconnect, device number 30 [ 752.359603][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 240 seconds [ 752.370619][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 240 seconds [ 752.385106][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 240 seconds [ 752.396614][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 240 seconds [ 753.497616][ T5868] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 755.041782][T12950] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1487'. [ 755.541146][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.063522][T12965] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1491'. [ 756.128651][T12961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.545131][T12971] netlink: 'syz.3.1495': attribute type 12 has an invalid length. [ 756.569427][T12971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.053492][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 757.062454][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'. [ 757.578888][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 757.858783][ T5868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 758.544516][ T5868] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 758.825452][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 758.834474][T12994] netlink: 'syz.4.1499': attribute type 5 has an invalid length. [ 758.842275][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'. [ 758.894926][T12994] geneve2: entered promiscuous mode [ 758.900240][T12994] geneve2: entered allmulticast mode [ 759.091193][T10896] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 759.232938][ T5868] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 759.239360][T10896] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 759.277431][T10896] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 759.288757][T12997] nbd: nbd0 already in use [ 759.296140][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.314764][T10896] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 759.323609][ T5868] usb 4-1: Product: syz [ 759.334398][ T5868] usb 4-1: Manufacturer: syz [ 759.347849][ T5868] usb 4-1: SerialNumber: syz [ 759.370108][ T5868] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 759.392369][ T921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 760.552459][ T921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 760.559511][ T921] ath9k_htc: Failed to initialize the device [ 760.599365][ T921] usb 4-1: ath9k_htc: USB layer deinitialized [ 760.630429][T13013] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 761.838239][ T5922] usb 4-1: USB disconnect, device number 23 [ 762.180861][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 763.168567][T13037] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1507'. [ 769.048795][T13103] FAT-fs (loop5): unable to read boot sector [ 770.652623][T13117] netlink: 'syz.3.1526': attribute type 10 has an invalid length. [ 770.778559][T13117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.795788][T13117] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 772.721929][T13138] pim6reg: entered allmulticast mode [ 772.742691][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 772.742704][ T30] audit: type=1326 audit(2000000373.121:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 772.851125][T13138] pim6reg: left allmulticast mode [ 772.875683][ T30] audit: type=1326 audit(2000000373.121:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 773.704142][ T30] audit: type=1326 audit(2000000373.121:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 773.732248][ T30] audit: type=1326 audit(2000000373.121:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 774.464402][ T30] audit: type=1326 audit(2000000373.121:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 774.654679][ T30] audit: type=1326 audit(2000000373.121:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 774.781639][ T30] audit: type=1326 audit(2000000373.121:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 774.892918][ T30] audit: type=1326 audit(2000000373.121:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 775.344372][ T30] audit: type=1326 audit(2000000373.121:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 775.491858][ T30] audit: type=1326 audit(2000000373.121:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 776.725954][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 778.257849][ T793] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 778.640957][ T793] usb 2-1: device descriptor read/64, error -71 [ 778.914348][ T793] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 778.948307][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.221440][ T793] usb 2-1: device descriptor read/64, error -71 [ 779.481904][ T793] usb usb2-port1: attempt power cycle [ 780.992152][ T793] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 782.539608][ T793] usb 2-1: device not accepting address 48, error -71 [ 782.613089][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1550'. [ 783.988046][ T921] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 784.329103][T13230] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 786.405597][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 270 seconds [ 786.416425][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 270 seconds [ 786.427756][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 270 seconds [ 786.439026][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 270 seconds [ 787.155259][ T921] usb 4-1: device descriptor read/all, error -71 [ 787.710024][T13263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.188016][ T5817] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 788.360135][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 788.370928][ T5817] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 788.381167][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.389834][ T5817] usb 2-1: Product: syz [ 788.394497][ T5817] usb 2-1: Manufacturer: syz [ 788.399126][ T5817] usb 2-1: SerialNumber: syz [ 788.407694][ T5817] usb 2-1: config 0 descriptor?? [ 788.427467][ T5817] usb 2-1: selecting invalid altsetting 3 [ 788.434838][ T5817] comedi comedi5: could not set alternate setting 3 in high speed [ 788.443796][ T5817] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 788.460515][ T5817] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 788.657373][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 788.709974][T13259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1562'. [ 788.795564][ T5817] usb 2-1: USB disconnect, device number 50 [ 789.927454][T13283] team0: Device vxcan1 is of different type [ 790.584300][T13289] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1567'. [ 793.192337][T13312] xt_TCPMSS: Only works on TCP SYN packets [ 793.208018][T13312] sit2: entered allmulticast mode [ 793.712086][T13317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 796.337483][T13341] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1581'. [ 797.328859][T13350] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1583'. [ 798.373359][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 798.643059][ T921] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 798.816441][ T921] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 798.877600][ T921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 798.887788][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.897576][ T921] usb 4-1: Product: syz [ 798.904032][ T921] usb 4-1: Manufacturer: syz [ 798.909054][ T921] usb 4-1: SerialNumber: syz [ 798.983475][T13369] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.1588'. [ 799.248943][ T921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 799.268670][ T5817] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 799.659814][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 800.396397][ T5817] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 800.403497][ T5817] ath9k_htc: Failed to initialize the device [ 800.517913][ T5817] usb 4-1: ath9k_htc: USB layer deinitialized [ 801.808767][ T5882] usb 4-1: USB disconnect, device number 26 [ 804.735128][T13429] vivid-007: disconnect [ 805.177339][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 805.177350][ T30] audit: type=1400 audit(2000000403.484:1257): avc: denied { ioctl } for pid=13431 comm="syz.2.1602" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 805.491132][T13425] vivid-007: reconnect [ 809.088622][T13464] sp0: Synchronizing with TNC [ 809.458438][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.467350][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.477605][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.486621][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.497412][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.506485][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.518405][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.539443][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.550172][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 809.559435][T13464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 811.393612][T13464] lo speed is unknown, defaulting to 1000 [ 813.376212][ T30] audit: type=1326 audit(2000000411.164:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 813.540854][ T30] audit: type=1326 audit(2000000411.183:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 813.564846][ T30] audit: type=1326 audit(2000000411.201:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.053213][ T30] audit: type=1326 audit(2000000411.201:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.127082][ T30] audit: type=1326 audit(2000000411.201:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.196433][ T30] audit: type=1326 audit(2000000411.201:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.221283][ T30] audit: type=1326 audit(2000000411.201:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.266554][ T30] audit: type=1326 audit(2000000411.201:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.464457][ T30] audit: type=1326 audit(2000000411.201:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 814.899944][ T30] audit: type=1326 audit(2000000411.201:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 816.403751][T13514] __nla_validate_parse: 159 callbacks suppressed [ 816.403782][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 816.421572][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 816.830444][T13515] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 817.883238][T13528] netlink: 'syz.1.1622': attribute type 1 has an invalid length. [ 817.891165][T13528] netlink: 'syz.1.1622': attribute type 2 has an invalid length. [ 817.898975][T13528] netlink: 'syz.1.1622': attribute type 1 has an invalid length. [ 817.906744][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1622'. [ 818.625447][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 300 seconds [ 818.636746][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 300 seconds [ 818.649229][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 300 seconds [ 818.661185][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 300 seconds [ 820.266633][T13548] netlink: 'syz.0.1627': attribute type 8 has an invalid length. [ 820.427711][ T5806] Bluetooth: hci4: unexpected event 0x05 length: 10 > 4 [ 820.721323][T13543] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 820.860570][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.867784][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.879051][T13554] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 821.000571][T13543] bond0: (slave netdevsim0): Releasing backup interface [ 821.028819][T13543] team0: Port device netdevsim0 added [ 821.309172][T13572] xt_socket: unknown flags 0x4 [ 821.318055][T13573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1629'. [ 821.350010][T13554] team0: Port device netdevsim0 removed [ 821.366435][T13554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 825.232412][T13577] lo speed is unknown, defaulting to 1000 [ 826.427511][T13623] overlayfs: failed to resolve './file1/file0': -2 [ 826.928629][T13627] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 826.936402][T13627] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1639'. [ 826.971591][T13627] delete_channel: no stack [ 827.954367][T13638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=40995 sclass=netlink_xfrm_socket pid=13638 comm=syz.1.1642 [ 828.059175][T13642] netlink: 'syz.1.1642': attribute type 13 has an invalid length. [ 828.067128][T13642] netlink: 'syz.1.1642': attribute type 17 has an invalid length. [ 828.196878][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 828.196891][ T30] audit: type=1400 audit(2000000425.008:1288): avc: denied { read } for pid=13639 comm="syz.2.1643" dev="sockfs" ino=35813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 828.330781][T13648] netlink: 'syz.0.1645': attribute type 23 has an invalid length. [ 828.543722][T13650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 828.733716][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 829.033328][T13642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.363531][T13709] netlink: 'syz.4.1657': attribute type 23 has an invalid length. [ 836.426342][T13689] Process accounting resumed [ 836.602192][ T30] audit: type=1400 audit(2000000432.884:1289): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 836.690644][T13726] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 837.149474][ T30] audit: type=1400 audit(2000000432.893:1290): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 837.550773][T13734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1663'. [ 837.896906][T13739] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 844.616594][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.113529][T13827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.135304][T13827] team0: Port device batadv0 added [ 849.195567][T13845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 849.204391][T13845] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 849.216390][T13845] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 850.558955][T13852] loop9: detected capacity change from 0 to 7 [ 850.574694][T13852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.791778][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 330 seconds [ 850.804633][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 330 seconds [ 850.816039][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 330 seconds [ 850.829384][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 330 seconds [ 851.215868][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.583775][ T30] audit: type=1326 audit(2000000446.906:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 851.759421][T13864] pim6reg: entered allmulticast mode [ 851.794771][T13864] pim6reg: left allmulticast mode [ 851.876981][T13853] usb usb8: usbfs: process 13853 (syz.1.1687) did not claim interface 0 before use [ 851.929932][ T30] audit: type=1326 audit(2000000446.924:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 852.050993][ T30] audit: type=1326 audit(2000000446.924:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 852.234065][ T30] audit: type=1326 audit(2000000446.924:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 852.357709][ T30] audit: type=1326 audit(2000000446.924:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 852.674215][ T30] audit: type=1326 audit(2000000446.924:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 853.296661][ T30] audit: type=1326 audit(2000000446.924:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 853.355980][ T30] audit: type=1326 audit(2000000446.924:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 854.437377][ T30] audit: type=1326 audit(2000000447.055:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 854.478072][ T30] audit: type=1326 audit(2000000447.055:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbf39aeb9 code=0x7ffc0000 [ 855.281754][ T5806] Bluetooth: hci4: Unknown advertising packet type: 0x73 [ 855.281910][ T5806] Bluetooth: hci4: Malformed LE Event: 0x0d [ 857.322585][T13913] random: crng reseeded on system resumption [ 857.350557][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 857.350567][ T30] audit: type=1400 audit(2000000452.265:1312): avc: denied { read write } for pid=13888 comm="syz.2.1696" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 857.395590][ T30] audit: type=1400 audit(2000000452.265:1313): avc: denied { ioctl open } for pid=13888 comm="syz.2.1696" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 857.773133][ T30] audit: type=1400 audit(2000000452.602:1314): avc: denied { shutdown } for pid=13897 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 859.822369][T13942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.623778][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 861.827628][T13953] Bluetooth: MGMT ver 1.23 [ 861.961979][ T30] audit: type=1400 audit(2000000456.550:1315): avc: denied { execute_no_trans } for pid=13943 comm="syz.4.1708" path=2F6D656D66643A2D42D54E49C56A9A707070F00A84AE0A202864656C6574656429 dev="hugetlbfs" ino=38264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 863.318736][T13971] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 863.327994][T13971] team0: Port device batadv2 added [ 863.434955][T13972] Cannot find del_set index 4 as target [ 863.507260][T13972] overlayfs: overlapping lowerdir path [ 863.805766][T13973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1714'. [ 865.851885][ T30] audit: type=1400 audit(2000000460.244:1316): avc: denied { setattr } for pid=13980 comm="syz.0.1717" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 865.855383][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 865.930016][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 865.996070][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1720'. [ 866.044731][T13999] tipc: Enabled bearer , priority 10 [ 866.140923][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 866.162382][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 866.186439][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 868.880781][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 868.889700][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 868.898962][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'. [ 869.043757][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 869.118539][T14026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1726'. [ 871.125502][ T5131] Bluetooth: hci4: command 0x0405 tx timeout [ 871.624807][T14072] binder: BINDER_SET_CONTEXT_MGR already set [ 871.631620][T14072] binder: 14062:14072 ioctl 4018620d 2000000000c0 returned -16 [ 873.464770][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 873.840679][T14098] tmpfs: Bad value for 'mpol' [ 875.291882][T14111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1739'. [ 876.227659][T14125] netlink: 'syz.1.1743': attribute type 4 has an invalid length. [ 877.541023][ T5868] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 877.839138][ T5868] usb 4-1: device descriptor read/64, error -71 [ 878.429700][T14125] lo speed is unknown, defaulting to 1000 [ 878.476827][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 878.495918][ T5868] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 878.776395][T14158] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1749'. [ 878.962417][T14163] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1751'. [ 880.121486][ T30] audit: type=1400 audit(2000000473.499:1317): avc: denied { mounton } for pid=14169 comm="syz.4.1753" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 882.468138][ T30] audit: type=1326 audit(2000000475.781:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 882.540079][ T30] audit: type=1326 audit(2000000475.781:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 882.607688][ T30] audit: type=1326 audit(2000000475.781:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 882.935816][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 360 seconds [ 882.946563][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 360 seconds [ 882.960785][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 360 seconds [ 882.972555][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 360 seconds [ 883.001022][ T30] audit: type=1326 audit(2000000475.781:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 883.043935][ T30] audit: type=1326 audit(2000000475.781:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 883.129688][ T30] audit: type=1326 audit(2000000475.781:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d62f5b78e code=0x7ffc0000 [ 883.217142][ T30] audit: type=1326 audit(2000000475.781:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2d62f9c1d7 code=0x7ffc0000 [ 883.350234][ T30] audit: type=1326 audit(2000000475.781:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d62f9aeb9 code=0x7ffc0000 [ 883.433096][ T30] audit: type=1326 audit(2000000475.781:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2d62f9c1d7 code=0x7ffc0000 [ 883.762020][ T5882] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 883.901063][ T5882] usb 4-1: device descriptor read/64, error -71 [ 884.253481][ T5882] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 884.533333][ T5882] usb 4-1: device descriptor read/64, error -71 [ 884.617088][T14230] netlink: 'syz.1.1767': attribute type 4 has an invalid length. [ 884.632076][T14230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14230 comm=syz.1.1767 [ 884.724999][ T5882] usb usb4-port1: attempt power cycle [ 885.205172][ T5882] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 885.237824][ T5882] usb 4-1: device descriptor read/8, error -71 [ 885.495997][T14234] netlink: 'syz.0.1768': attribute type 11 has an invalid length. [ 885.592075][ T5882] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 885.970130][ T5882] usb 4-1: device descriptor read/8, error -71 [ 886.134439][ T5882] usb usb4-port1: unable to enumerate USB device [ 886.730997][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 886.731012][ T30] audit: type=1400 audit(2000000479.738:1345): avc: denied { listen } for pid=14246 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 886.860505][ T30] audit: type=1400 audit(2000000479.738:1346): avc: denied { accept } for pid=14246 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 887.829550][T14262] pim6reg: entered allmulticast mode [ 887.846986][T14262] pim6reg: left allmulticast mode [ 887.902193][ T30] audit: type=1326 audit(2000000480.795:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.006223][ T30] audit: type=1326 audit(2000000480.795:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.131833][ T30] audit: type=1326 audit(2000000480.795:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.158112][ T30] audit: type=1326 audit(2000000480.795:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.158137][ T30] audit: type=1326 audit(2000000480.795:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.158159][ T30] audit: type=1326 audit(2000000480.795:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.158180][ T30] audit: type=1326 audit(2000000480.795:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.158200][ T30] audit: type=1326 audit(2000000480.795:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9eeb59aeb9 code=0x7ffc0000 [ 888.723759][ T5806] Bluetooth: hci3: ISO packet too small [ 888.906484][T14275] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 889.402231][T14283] zonefs (nbd1) ERROR: Not a zoned block device [ 892.608971][T14307] tipc: Started in network mode [ 892.669377][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 892.669392][ T30] audit: type=1400 audit(2000000485.276:1370): avc: denied { create } for pid=14296 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 892.697911][T14307] tipc: Node identity 84e, cluster identity 4711 [ 892.714387][T14307] tipc: Node number set to 2126 [ 893.793626][T14318] lo speed is unknown, defaulting to 1000 [ 894.639198][ T5868] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 895.245364][ T5868] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 895.293441][ T5868] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 895.302665][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.314321][ T5868] usb 4-1: Product: syz [ 895.322143][ T5868] usb 4-1: Manufacturer: syz [ 895.330512][ T5868] usb 4-1: SerialNumber: syz [ 895.655477][T14338] : renamed from bond_slave_0 (while UP) [ 896.035499][ T5868] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 896.089212][ T921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 896.886009][T14354] pim6reg: entered allmulticast mode [ 897.190261][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 897.211007][ T921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 897.220025][ T921] ath9k_htc: Failed to initialize the device [ 897.357828][ T921] usb 4-1: ath9k_htc: USB layer deinitialized [ 898.692018][ T5922] usb 4-1: USB disconnect, device number 33 [ 900.359689][T14378] netlink: 'syz.0.1801': attribute type 6 has an invalid length. [ 901.197848][T14383] infiniband syz2: set active [ 901.202608][T14383] infiniband syz2: added veth1_to_team [ 901.293883][T14383] RDS/IB: syz2: added [ 901.297917][T14383] smc: adding ib device syz2 with port count 1 [ 901.304173][T14383] smc: ib device syz2 port 1 has pnetid SYZ (user defined) [ 902.145131][T14388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 904.950523][T14411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1807'. [ 905.463297][T14424] gre1: entered promiscuous mode [ 906.221434][T14432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 906.231288][T14432] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 906.239352][T14432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 906.247667][T14432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 906.261298][T14432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 906.365076][T14437] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 906.377249][ T30] audit: type=1400 audit(2000000498.128:1371): avc: denied { listen } for pid=14433 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 906.580928][ T30] audit: type=1400 audit(2000000498.343:1372): avc: denied { create } for pid=14433 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 906.681896][T14439] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 906.824092][T14439] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 908.155532][T14430] lo speed is unknown, defaulting to 1000 [ 908.195785][T14437] macvlan2: entered promiscuous mode [ 908.201210][T14437] macvlan2: entered allmulticast mode [ 908.208904][T14437] bond3: entered promiscuous mode [ 908.291496][T14437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 908.383152][T14437] bond3: left promiscuous mode [ 908.564305][ T5806] Bluetooth: hci5: command tx timeout [ 909.022075][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 909.031033][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1816'. [ 909.040029][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1816'. [ 910.303997][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.396895][T14430] chnl_net:caif_netlink_parms(): no params data found [ 910.527725][T14430] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.545977][T14430] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.554420][T14430] bridge_slave_0: entered allmulticast mode [ 910.562605][T14430] bridge_slave_0: entered promiscuous mode [ 910.575799][T14430] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.583996][T14430] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.595916][T14430] bridge_slave_1: entered allmulticast mode [ 910.604071][T14430] bridge_slave_1: entered promiscuous mode [ 910.725314][ T5806] Bluetooth: hci5: command tx timeout [ 910.731572][T14430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.751537][T14430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.865746][T14472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 910.894612][T14472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 911.280909][T14430] team0: Port device team_slave_0 added [ 911.298498][T14430] team0: Port device team_slave_1 added [ 911.368666][T14430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.383388][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.438761][T14430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.464271][T14430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.479943][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.671922][T14430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.956848][T14487] pim6reg: entered allmulticast mode [ 912.968807][T14432] Bluetooth: hci5: command tx timeout [ 913.011679][ T30] audit: type=1326 audit(2000000504.292:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.036883][T14487] pim6reg: left allmulticast mode [ 913.042012][ T30] audit: type=1326 audit(2000000504.292:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.065763][ T30] audit: type=1326 audit(2000000504.292:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.089878][ T30] audit: type=1326 audit(2000000504.292:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.118796][ T30] audit: type=1326 audit(2000000504.292:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.214312][ T30] audit: type=1326 audit(2000000504.292:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.319450][ T30] audit: type=1326 audit(2000000504.292:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.343875][ T30] audit: type=1326 audit(2000000504.292:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.375129][ T30] audit: type=1326 audit(2000000504.292:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 913.415372][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 913.424814][ T30] audit: type=1326 audit(2000000504.292:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 914.848641][T14430] hsr_slave_0: entered promiscuous mode [ 914.858593][T14430] hsr_slave_1: entered promiscuous mode [ 914.867219][T14430] debugfs: 'hsr0' already exists in 'hsr' [ 914.882074][T14430] Cannot create hsr debugfs directory [ 914.917899][ T5179] udevd[5179]: worker [5974] /devices/virtual/block/nbd0 timeout; kill it [ 915.043200][ T5179] udevd[5179]: seq 14089 '/devices/virtual/block/nbd0' killed [ 915.085354][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 390 seconds [ 915.097295][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 390 seconds [ 915.108619][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 390 seconds [ 915.138797][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 390 seconds [ 915.171502][T14432] Bluetooth: hci5: command tx timeout [ 915.837582][T14430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 915.899598][T14430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 916.049471][T14430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 916.109093][T14430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 916.153308][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 916.162277][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 916.171580][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 917.140369][T14430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.221463][T14430] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.358203][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.365310][ T7303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.374574][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.381610][ T7303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.410441][T14430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 917.601475][T14430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.393573][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 918.393591][ T30] audit: type=1400 audit(2000000509.390:1472): avc: denied { prog_run } for pid=14533 comm="syz.4.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 918.763655][ T30] audit: type=1400 audit(2000000509.746:1473): avc: denied { read } for pid=14548 comm="syz.3.1832" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 921.021351][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.074173][ T30] audit: type=1400 audit(2000000509.764:1474): avc: denied { open } for pid=14548 comm="syz.3.1832" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 921.403358][ T30] audit: type=1400 audit(2000000509.764:1475): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 921.669135][ T30] audit: type=1400 audit(2000000509.905:1476): avc: denied { map_read map_write } for pid=14548 comm="syz.3.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.708619][ T30] audit: type=1400 audit(2000000511.935:1477): avc: denied { setopt } for pid=14561 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 921.733085][ T30] audit: type=1400 audit(2000000512.028:1478): avc: denied { create } for pid=14561 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 921.767450][ T30] audit: type=1400 audit(2000000512.037:1479): avc: denied { write } for pid=14561 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 921.792420][ T30] audit: type=1400 audit(2000000512.037:1480): avc: denied { append } for pid=14561 comm="syz.1.1834" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.835737][ T30] audit: type=1400 audit(2000000512.112:1481): avc: denied { mount } for pid=14563 comm="syz.0.1835" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 921.942584][T14430] veth0_vlan: entered promiscuous mode [ 921.953860][T14430] veth1_vlan: entered promiscuous mode [ 922.015224][T14430] veth0_macvtap: entered promiscuous mode [ 922.025473][T14430] veth1_macvtap: entered promiscuous mode [ 922.089183][T14583] netlink: 'syz.1.1838': attribute type 23 has an invalid length. [ 922.100097][T14430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.125308][T14430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.232905][ T6108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.321977][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 922.330901][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'. [ 922.339901][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'. [ 922.695460][ T6108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.707888][ T6108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.932743][ T6108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.083215][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.091008][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.107677][T14594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1840'. [ 923.286131][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.304688][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.750838][T14605] openvswitch: netlink: Actions may not be safe on all matching packets [ 923.988312][T14607] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 923.997429][T14607] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 924.009145][T14607] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 924.110440][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 924.110467][ T30] audit: type=1400 audit(2000000514.703:1507): avc: denied { create } for pid=14602 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 924.975858][T14605] vlan0: entered promiscuous mode [ 925.049575][T14605] vlan0: entered allmulticast mode [ 925.054701][T14605] hsr_slave_1: entered allmulticast mode [ 925.175680][ T30] audit: type=1400 audit(2000000514.713:1508): avc: denied { read } for pid=14602 comm="syz.5.1809" dev="nsfs" ino=4026533970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 925.234387][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 925.240146][ T30] audit: type=1400 audit(2000000514.713:1509): avc: denied { open } for pid=14602 comm="syz.5.1809" path="net:[4026533970]" dev="nsfs" ino=4026533970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 925.948474][ T30] audit: type=1400 audit(2000000515.545:1510): avc: denied { ioctl } for pid=14604 comm="syz.3.1842" path="socket:[41294]" dev="sockfs" ino=41294 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.975753][ T30] audit: type=1400 audit(2000000515.592:1511): avc: denied { write } for pid=14604 comm="syz.3.1842" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 926.090907][ T30] audit: type=1400 audit(2000000515.732:1512): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 926.210021][ T30] audit: type=1400 audit(2000000515.779:1513): avc: denied { ioctl } for pid=14604 comm="syz.3.1842" path="socket:[40797]" dev="sockfs" ino=40797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 926.236094][ T30] audit: type=1400 audit(2000000515.826:1514): avc: denied { ioctl } for pid=14612 comm="syz.0.1843" path="socket:[40805]" dev="sockfs" ino=40805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 926.288125][ T30] audit: type=1400 audit(2000000516.612:1515): avc: denied { write } for pid=14620 comm="syz.5.1844" name="swradio0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 926.748484][ T30] audit: type=1400 audit(2000000516.930:1516): avc: denied { remount } for pid=14620 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 928.751426][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 928.834241][T14643] netlink: 'syz.3.1851': attribute type 23 has an invalid length. [ 928.966109][T14646] netlink: 'syz.1.1849': attribute type 23 has an invalid length. [ 929.088426][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1850'. [ 929.097550][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1850'. [ 929.106743][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1850'. [ 930.069995][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 930.070005][ T30] audit: type=1400 audit(2000000520.288:1527): avc: denied { read write } for pid=14653 comm="syz.1.1853" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 930.697223][ T30] audit: type=1400 audit(2000000520.288:1528): avc: denied { open } for pid=14653 comm="syz.1.1853" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 931.025027][ T30] audit: type=1400 audit(2000000520.681:1529): avc: denied { getopt } for pid=14653 comm="syz.1.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 931.093360][T14674] tmpfs: Unknown parameter 'mpoult' [ 931.292137][ T30] audit: type=1400 audit(2000000520.830:1530): avc: denied { bind } for pid=14653 comm="syz.1.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 931.333314][ T30] audit: type=1400 audit(2000000520.999:1531): avc: denied { watch } for pid=14647 comm="syz.3.1852" path="/347/file0" dev="tmpfs" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 931.805565][ T30] audit: type=1400 audit(2000000520.999:1532): avc: denied { watch_sb } for pid=14647 comm="syz.3.1852" path="/347/file0" dev="tmpfs" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 932.026115][T14668] veth3: entered allmulticast mode [ 932.318740][ T30] audit: type=1400 audit(2000000521.232:1533): avc: denied { ioctl } for pid=14666 comm="syz.4.1856" path="socket:[41466]" dev="sockfs" ino=41466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 932.345351][ T30] audit: type=1400 audit(2000000521.270:1534): avc: denied { shutdown } for pid=14661 comm="syz.0.1855" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 932.390967][ T30] audit: type=1400 audit(2000000521.270:1535): avc: denied { mounton } for pid=14661 comm="syz.0.1855" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 932.441656][ T30] audit: type=1400 audit(2000000521.270:1536): avc: denied { read write } for pid=14658 comm="syz.5.1854" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 932.591058][T14686] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 932.904804][T14692] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 933.122754][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1859'. [ 933.408943][ T5922] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 933.676763][ T5922] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 933.706875][ T5922] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 933.716454][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.753825][ T5922] usb 4-1: Product: syz [ 933.780984][ T5922] usb 4-1: Manufacturer: syz [ 933.790368][ T5922] usb 4-1: SerialNumber: syz [ 933.960558][ T5922] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 933.984276][ T5882] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 934.490009][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'. [ 934.880419][T14715] xt_TCPMSS: Only works on TCP SYN packets [ 934.974174][T14717] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1863'. [ 935.141142][ T5882] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 935.148187][ T5882] ath9k_htc: Failed to initialize the device [ 935.422968][ T5882] usb 4-1: ath9k_htc: USB layer deinitialized [ 936.919114][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 936.919130][ T30] audit: type=1400 audit(2000000526.134:1544): avc: denied { create } for pid=14722 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 937.011669][ T793] usb 4-1: USB disconnect, device number 34 [ 937.051946][ T30] audit: type=1400 audit(2000000526.134:1545): avc: denied { ioctl } for pid=14722 comm="syz.5.1866" path="socket:[41541]" dev="sockfs" ino=41541 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 937.225487][ T5868] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 937.333599][ T30] audit: type=1400 audit(2000000526.938:1546): avc: denied { read } for pid=14730 comm="syz.3.1868" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 937.450417][ T5868] usb 6-1: device descriptor read/64, error -71 [ 938.016978][ T30] audit: type=1400 audit(2000000526.938:1547): avc: denied { open } for pid=14730 comm="syz.3.1868" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 938.048639][ T5868] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 938.100603][ T30] audit: type=1400 audit(2000000526.938:1548): avc: denied { ioctl } for pid=14730 comm="syz.3.1868" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 938.138994][ T30] audit: type=1400 audit(2000000527.041:1549): avc: denied { create } for pid=14730 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 938.219669][ T5868] usb 6-1: device descriptor read/64, error -71 [ 938.349870][ T5868] usb usb6-port1: attempt power cycle [ 938.552877][T14740] xt_connbytes: Forcing CT accounting to be enabled [ 938.559742][T14740] set match dimension is over the limit! [ 938.879538][T14742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 939.147603][ T5868] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 939.182424][ T5868] usb 6-1: device descriptor read/8, error -71 [ 939.505027][T14752] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1872'. [ 940.400016][ T30] audit: type=1400 audit(2000000529.969:1550): avc: denied { read write } for pid=14754 comm="syz.1.1873" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 940.427706][ T30] audit: type=1400 audit(2000000529.969:1551): avc: denied { open } for pid=14754 comm="syz.1.1873" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 940.458504][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 940.475478][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 940.557003][T14755] ceph: No mds server is up or the cluster is laggy [ 940.801084][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 940.809970][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 940.825726][ T30] audit: type=1400 audit(2000000529.969:1552): avc: denied { ioctl } for pid=14754 comm="syz.1.1873" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 941.293654][T14773] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1876'. [ 942.700889][ T30] audit: type=1400 audit(2000000531.438:1553): avc: denied { mount } for pid=14779 comm="syz.3.1879" name="/" dev="overlay" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 942.776707][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'. [ 943.573960][T14799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1882'. [ 943.636832][ T30] audit: type=1400 audit(2000000532.869:1554): avc: denied { append } for pid=14791 comm="syz.3.1882" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 944.266690][ T30] audit: type=1400 audit(2000000533.084:1555): avc: denied { ioctl } for pid=14791 comm="syz.3.1882" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 944.561620][T14808] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1884'. [ 944.925612][T14432] Bluetooth: Frame is too long (len 16, expected len 4) [ 945.010197][ T30] audit: type=1400 audit(2000000534.169:1556): avc: denied { name_bind } for pid=14809 comm="syz.1.1885" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 945.213196][ T30] audit: type=1400 audit(2000000534.478:1557): avc: denied { read write } for pid=14813 comm="syz.1.1886" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 945.827331][ T30] audit: type=1400 audit(2000000534.478:1558): avc: denied { open } for pid=14813 comm="syz.1.1886" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 945.851664][ T30] audit: type=1400 audit(2000000534.712:1559): avc: denied { append } for pid=14813 comm="syz.1.1886" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 945.941269][ T30] audit: type=1400 audit(2000000534.712:1560): avc: denied { open } for pid=14813 comm="syz.1.1886" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 946.236119][T14820] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 946.244935][T14820] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 946.256657][T14820] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 947.104892][ T30] audit: type=1400 audit(2000000534.712:1561): avc: denied { ioctl } for pid=14813 comm="syz.1.1886" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 947.392379][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 420 seconds [ 947.403114][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 420 seconds [ 947.424316][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 420 seconds [ 947.438749][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 420 seconds [ 947.483637][ T30] audit: type=1400 audit(2000000536.601:1562): avc: denied { read write } for pid=14822 comm="syz.5.1888" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 948.351901][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1888'. [ 948.990285][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'. [ 950.590191][T14854] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1894'. [ 951.227771][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 951.236771][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1896'. [ 951.245800][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1896'. [ 951.916479][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 952.364442][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 952.364457][ T30] audit: type=1400 audit(2000000540.689:1567): avc: denied { write } for pid=14865 comm="syz.1.1897" name="protocols" dev="proc" ino=4026533027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 952.755291][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 952.831884][ T30] audit: type=1400 audit(2000000541.549:1568): avc: denied { create } for pid=14869 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 952.851645][ T30] audit: type=1400 audit(2000000541.549:1569): avc: denied { accept } for pid=14869 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 952.871347][T10894] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.707475][ T30] audit: type=1400 audit(2000000542.157:1570): avc: denied { ioctl } for pid=14882 comm="syz.1.1901" path="socket:[42292]" dev="sockfs" ino=42292 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 954.058080][ T30] audit: type=1400 audit(2000000542.167:1571): avc: denied { read } for pid=14882 comm="syz.1.1901" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 954.092307][ T30] audit: type=1400 audit(2000000542.167:1572): avc: denied { open } for pid=14882 comm="syz.1.1901" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 954.220832][ T30] audit: type=1400 audit(2000000542.185:1573): avc: denied { ioctl } for pid=14882 comm="syz.1.1901" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 954.676925][T14896] lo speed is unknown, defaulting to 1000 [ 955.204991][ T30] audit: type=1400 audit(2000000543.617:1574): avc: denied { mount } for pid=14890 comm="syz.0.1903" name="/" dev="ramfs" ino=42333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 955.341421][ T30] audit: type=1400 audit(2000000543.953:1575): avc: denied { create } for pid=14892 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 955.371779][ T30] audit: type=1400 audit(2000000543.953:1576): avc: denied { ioctl } for pid=14892 comm="syz.1.1902" path="socket:[42341]" dev="sockfs" ino=42341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 957.954943][ T5882] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 958.123026][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 958.123042][ T30] audit: type=1400 audit(2000000546.554:1580): avc: denied { recv } for pid=14878 comm="syz.3.1900" saddr=10.128.0.169 src=45686 daddr=10.128.1.121 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 958.215987][T10894] wlan0: Trigger new scan to find an IBSS to join [ 958.222552][ T5882] usb 6-1: device descriptor read/64, error -71 [ 958.521251][ T5882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 958.745216][ T5882] usb 6-1: device descriptor read/64, error -71 [ 958.927558][ T5882] usb usb6-port1: attempt power cycle [ 959.248061][ T30] audit: type=1400 audit(2000000547.573:1581): avc: denied { bind } for pid=14931 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 959.295150][T14935] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 959.315358][ T5882] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 959.357229][ T5882] usb 6-1: device descriptor read/8, error -71 [ 959.378155][T14935] team0: Port device batadv3 added [ 959.391533][ T30] audit: type=1400 audit(2000000547.573:1582): avc: denied { name_bind } for pid=14931 comm="syz.3.1911" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 959.461232][T14935] hub 9-0:1.0: USB hub found [ 959.466258][T14935] hub 9-0:1.0: 1 port detected [ 959.503313][ T30] audit: type=1400 audit(2000000547.573:1583): avc: denied { node_bind } for pid=14931 comm="syz.3.1911" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 959.675806][ T30] audit: type=1400 audit(2000000547.976:1584): avc: denied { append } for pid=14937 comm="syz.1.1912" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.686665][ T5882] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 959.738913][ T30] audit: type=1400 audit(2000000547.976:1585): avc: denied { open } for pid=14937 comm="syz.1.1912" path="/dev/sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.788073][ T30] audit: type=1400 audit(2000000547.976:1586): avc: denied { ioctl } for pid=14937 comm="syz.1.1912" path="/dev/sg0" dev="devtmpfs" ino=779 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.964422][ T5882] usb 6-1: device not accepting address 9, error -71 [ 960.046812][ T5882] usb usb6-port1: unable to enumerate USB device [ 960.812804][T14945] fuse: Unknown parameter 'f’' [ 961.906272][T14961] overlay: ./file0 is not a directory [ 961.915983][ T30] audit: type=1400 audit(2000000550.099:1587): avc: denied { mounton } for pid=14954 comm="syz.3.1915" path="/358/file0" dev="tmpfs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 962.022275][ T30] audit: type=1400 audit(2000000550.099:1588): avc: denied { mount } for pid=14954 comm="syz.3.1915" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 962.075591][ T30] audit: type=1400 audit(2000000550.146:1589): avc: denied { ioctl } for pid=14954 comm="syz.3.1915" path="socket:[41864]" dev="sockfs" ino=41864 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 963.258616][T14975] overlayfs: failed to clone upperpath [ 963.568806][ T6125] wlan0: Trigger new scan to find an IBSS to join [ 965.349770][ T30] audit: type=1400 audit(2000000553.298:1590): avc: denied { bind } for pid=14992 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 965.496877][ T30] audit: type=1400 audit(2000000553.448:1591): avc: denied { create } for pid=14986 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 965.837973][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.563271][ T30] audit: type=1400 audit(2000000554.168:1592): avc: denied { name_bind } for pid=15001 comm="syz.1.1923" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 966.585654][ T30] audit: type=1400 audit(2000000554.215:1593): avc: denied { getopt } for pid=15001 comm="syz.1.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 968.542290][T14432] Bluetooth: hci5: Unknown advertising packet type: 0x73 [ 968.542345][T14432] Bluetooth: hci5: Malformed LE Event: 0x0d [ 969.813792][T15041] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 971.201090][T15053] netlink: 'syz.4.1937': attribute type 4 has an invalid length. [ 972.193265][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1941'. [ 972.429960][ T5882] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 972.451022][T14545] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 972.574122][ T5882] usb 2-1: device descriptor read/64, error -71 [ 972.729268][T14545] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 972.835239][T15072] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 972.865606][ T30] audit: type=1400 audit(2000000560.342:1594): avc: denied { read } for pid=15069 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 973.285069][ T5882] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 973.310964][T14545] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 973.320182][T14545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.329249][T14545] usb 6-1: Product: syz [ 973.338398][T14545] usb 6-1: Manufacturer: syz [ 973.346093][T14545] usb 6-1: SerialNumber: syz [ 973.360040][T14545] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 973.377496][ T793] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 973.402324][T15061] lo speed is unknown, defaulting to 1000 [ 973.434629][ T5882] usb 2-1: device descriptor read/64, error -71 [ 973.576939][ T5882] usb usb2-port1: attempt power cycle [ 973.648601][ T30] audit: type=1400 audit(2000000561.062:1595): avc: denied { block_suspend } for pid=15073 comm="syz.3.1943" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 974.231885][ T5882] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 974.538522][ T793] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 974.546168][ T793] ath9k_htc: Failed to initialize the device [ 974.598576][ T793] usb 6-1: ath9k_htc: USB layer deinitialized [ 974.613429][ T5882] usb 2-1: device descriptor read/8, error -71 [ 974.705020][T15082] usb usb8: usbfs: process 15082 (syz.0.1944) did not claim interface 0 before use [ 974.886268][ T5883] usb 6-1: USB disconnect, device number 10 [ 975.984517][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 976.123921][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 976.457599][ T5868] usb 4-1: device descriptor read/64, error -71 [ 976.737992][ T5868] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 976.877072][ T5868] usb 4-1: device descriptor read/64, error -71 [ 977.092758][ T5868] usb usb4-port1: attempt power cycle [ 977.743188][ T5883] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 977.974307][ T30] audit: type=1326 audit(2000000565.103:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.017590][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 978.028979][T10896] Bluetooth: hci6: Frame reassembly failed (-84) [ 978.042241][ T30] audit: type=1326 audit(2000000565.103:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.066544][ T5868] usb 4-1: device descriptor read/8, error -71 [ 978.078769][ T30] audit: type=1326 audit(2000000565.224:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.114968][ T30] audit: type=1326 audit(2000000565.224:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.128450][ T5883] usb 2-1: device descriptor read/64, error -71 [ 978.139259][ T30] audit: type=1326 audit(2000000565.224:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.182329][ T30] audit: type=1326 audit(2000000565.290:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca90b5b78e code=0x7ffc0000 [ 978.340835][ T30] audit: type=1326 audit(2000000565.290:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca90b5b78e code=0x7ffc0000 [ 978.373124][ T30] audit: type=1326 audit(2000000565.290:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.401358][ T30] audit: type=1326 audit(2000000565.299:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.0.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca90b9aeb9 code=0x7ffc0000 [ 978.459805][ T5883] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 978.854982][ T5883] usb 2-1: device descriptor read/64, error -71 [ 978.972893][ T5883] usb usb2-port1: attempt power cycle [ 978.995724][ T30] audit: type=1400 audit(2000000566.085:1605): avc: denied { unmount } for pid=15129 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 979.159720][T15138] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.400225][ T5883] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 979.507315][ T5883] usb 2-1: device descriptor read/8, error -71 [ 979.763441][ T5868] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 979.848782][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 979.853972][ T5883] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 979.870986][ T5883] usb 2-1: device descriptor read/8, error -71 [ 979.893653][ T5868] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 979.917822][ T5868] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 979.927992][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.950868][ T5868] usb 4-1: Product: syz [ 979.955185][ T5868] usb 4-1: Manufacturer: syz [ 979.961636][ T5868] usb 4-1: SerialNumber: syz [ 979.973825][ T5868] usb 4-1: config 0 descriptor?? [ 980.001548][ T5868] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 980.004652][ T5883] usb usb2-port1: unable to enumerate USB device [ 980.011398][ T5868] usb 4-1: setting power ON [ 980.020764][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 980.032777][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.044467][ T5868] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 980.053556][ T5868] usb 4-1: media controller created [ 980.068735][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.084714][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 450 seconds [ 980.095586][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 450 seconds [ 980.106723][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 450 seconds [ 980.117859][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 450 seconds [ 980.138555][ T5868] usb 4-1: selecting invalid altsetting 6 [ 980.144409][ T5868] usb 4-1: digital interface selection failed (-22) [ 980.151056][ T5868] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 980.160470][ T5868] usb 4-1: setting power OFF [ 980.165441][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 980.172114][ T5806] Bluetooth: hci6: command 0x1003 tx timeout [ 980.179395][T14432] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 980.191443][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 980.200740][ T5868] (NULL device *): no alternate interface [ 980.800024][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1958'. [ 980.817674][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 981.153169][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 981.671724][ T5868] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 981.694278][ T30] audit: type=1400 audit(2000000568.592:1606): avc: denied { map } for pid=15169 comm="syz.4.1962" path="socket:[43191]" dev="sockfs" ino=43191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 981.765554][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 981.781709][ T30] audit: type=1400 audit(2000000568.592:1607): avc: denied { read accept } for pid=15169 comm="syz.4.1962" path="socket:[43191]" dev="sockfs" ino=43191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 981.806240][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.844294][ T5868] usb 6-1: Product: syz [ 981.848500][ T5868] usb 6-1: Manufacturer: syz [ 981.861944][ T5868] usb 6-1: SerialNumber: syz [ 982.052963][ T5868] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 982.078734][ T921] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 982.909242][T15081] usb 4-1: USB disconnect, device number 38 [ 983.678876][T15081] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 983.729598][ T921] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 983.736673][ T921] ath9k_htc: Failed to initialize the device [ 983.767148][ T921] usb 6-1: ath9k_htc: USB layer deinitialized [ 983.890103][T15081] usb 4-1: device descriptor read/64, error -71 [ 983.993757][T15189] ubi: mtd0 is already attached to ubi31 [ 984.082421][ T30] audit: type=1400 audit(2000000570.809:1608): avc: denied { accept } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 984.448568][ T30] audit: type=1400 audit(2000000570.827:1609): avc: denied { bind } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 984.486996][ T30] audit: type=1400 audit(2000000570.827:1610): avc: denied { listen } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 984.602873][T15081] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 984.878482][ T10] usb 6-1: USB disconnect, device number 11 [ 984.920508][ T30] audit: type=1400 audit(2000000570.827:1611): avc: denied { connect } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 984.954078][ T30] audit: type=1400 audit(2000000570.893:1612): avc: denied { accept } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 985.065941][ T30] audit: type=1400 audit(2000000570.940:1613): avc: denied { write } for pid=15184 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 985.085859][ T30] audit: type=1400 audit(2000000571.183:1614): avc: denied { bind } for pid=15188 comm="syz.1.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 985.105901][ T30] audit: type=1400 audit(2000000571.183:1615): avc: denied { node_bind } for pid=15188 comm="syz.1.1967" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 985.130828][T15081] usb 4-1: device descriptor read/64, error -71 [ 985.248778][T15081] usb usb4-port1: attempt power cycle [ 985.553393][ T30] audit: type=1400 audit(2000000571.248:1616): avc: denied { getopt } for pid=15188 comm="syz.1.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 985.664749][T15081] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 985.890059][T15081] usb 4-1: device descriptor read/8, error -71 [ 986.156753][T15081] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 986.178279][T15081] usb 4-1: device descriptor read/8, error -71 [ 986.295379][ T5883] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 986.303152][T15081] usb usb4-port1: unable to enumerate USB device [ 986.322200][T15214] siw: device registration error -23 [ 986.468959][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 986.481425][ T5883] usb 2-1: config 0 has no interface number 0 [ 986.506680][ T5883] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 986.519836][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.538828][ T5883] usb 2-1: Product: syz [ 986.552131][ T5883] usb 2-1: Manufacturer: syz [ 986.556862][ T5883] usb 2-1: SerialNumber: syz [ 986.593627][ T5883] usb 2-1: config 0 descriptor?? [ 986.646319][ T30] audit: type=1400 audit(2000000573.222:1617): avc: denied { read write } for pid=15212 comm="syz.3.1973" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 986.677222][ T5883] usb 2-1: selecting invalid altsetting 1 [ 986.688492][ T5883] dvb_ttusb_budget: ttusb_init_controller: error [ 986.696094][ T5883] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 986.835075][ T5883] DVB: Unable to find symbol stv0299_attach() [ 986.900617][ T5883] DVB: Unable to find symbol tda8083_attach() [ 986.913133][ T5883] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 986.984722][ T5883] usb 2-1: USB disconnect, device number 59 [ 988.130146][T15225] pim6reg: entered allmulticast mode [ 988.145441][T15225] pim6reg: left allmulticast mode [ 988.571184][T15234] netlink: 'syz.0.1976': attribute type 4 has an invalid length. [ 989.564557][T15246] netlink: 'syz.3.1977': attribute type 11 has an invalid length. [ 989.606594][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 989.647798][ T30] audit: type=1400 audit(2000000575.598:1647): avc: denied { connect } for pid=15226 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 989.969365][ T30] audit: type=1400 audit(2000000575.598:1648): avc: denied { write } for pid=15226 comm="syz.1.1975" path="socket:[42876]" dev="sockfs" ino=42876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 990.031229][ T30] audit: type=1400 audit(2000000575.963:1649): avc: denied { getopt } for pid=15231 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 991.408289][ T921] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 991.495378][T15262] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1982'. [ 991.505363][T15262] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1982'. [ 991.613812][ T921] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 991.638570][ T921] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 991.647869][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.656059][ T921] usb 2-1: Product: syz [ 991.660303][ T921] usb 2-1: Manufacturer: syz [ 991.668002][ T921] usb 2-1: SerialNumber: syz [ 991.783640][ T921] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 991.804577][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 993.266410][ T30] audit: type=1400 audit(2000000578.984:1650): avc: denied { mount } for pid=15268 comm="syz.5.1985" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 993.345384][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 993.371809][ T10] ath9k_htc: Failed to initialize the device [ 993.652620][ T30] audit: type=1400 audit(2000000579.480:1651): avc: denied { write } for pid=15256 comm="syz.1.1981" path="socket:[42957]" dev="sockfs" ino=42957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 994.740974][ T30] audit: type=1400 audit(2000000579.480:1652): avc: denied { accept } for pid=15256 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 995.116298][ T5817] usb 2-1: USB disconnect, device number 60 [ 995.129321][ T5817] usb 2-1: ath9k_htc: USB layer deinitialized [ 995.414983][T15284] netlink: 'syz.5.1986': attribute type 6 has an invalid length. [ 997.029030][T15285] usb usb8: usbfs: process 15285 (syz.0.1987) did not claim interface 0 before use [ 997.261231][ T30] audit: type=1400 audit(2000000583.165:1653): avc: denied { read } for pid=15286 comm="syz.3.1989" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 997.880021][ T30] audit: type=1400 audit(2000000583.165:1654): avc: denied { open } for pid=15286 comm="syz.3.1989" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 998.315165][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1993'. [ 998.337897][T15311] netlink: 'syz.3.1995': attribute type 23 has an invalid length. [ 998.622143][ T5817] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 998.778251][ T30] audit: type=1326 audit(2000000584.578:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 999.281181][ T30] audit: type=1326 audit(2000000584.578:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 999.305145][ T5817] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 999.320449][ T30] audit: type=1326 audit(2000000584.625:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 999.359419][T15321] pim6reg: entered allmulticast mode [ 999.428152][T15321] pim6reg: left allmulticast mode [ 999.475715][ T5817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 999.491035][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.760571][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1998'. [ 999.797223][T15327] tipc: Enabled bearer , priority 10 [ 999.878456][ T5817] usb 2-1: Product: syz [ 999.890421][ T5817] usb 2-1: Manufacturer: syz [ 1000.003495][ T30] audit: type=1326 audit(2000000584.625:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 1000.049999][ T5817] usb 2-1: SerialNumber: syz [ 1000.088389][ T30] audit: type=1326 audit(2000000584.625:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 1000.133614][ T30] audit: type=1326 audit(2000000584.625:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 1000.395039][ T5817] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1000.432147][ T921] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1000.504123][ T30] audit: type=1326 audit(2000000584.625:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 1000.686964][ T30] audit: type=1326 audit(2000000584.625:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fbc7cf9aeb9 code=0x7ffc0000 [ 1001.294456][ T7303] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1001.577302][ T921] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1001.607479][ T921] ath9k_htc: Failed to initialize the device [ 1001.678152][ T921] usb 2-1: ath9k_htc: USB layer deinitialized [ 1003.443362][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1003.443446][ T30] audit: type=1400 audit(2000000588.806:1684): avc: denied { read write } for pid=15361 comm="syz.5.2008" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1003.869846][T15081] usb 2-1: USB disconnect, device number 61 [ 1005.117056][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 1006.100440][ T30] audit: type=1400 audit(2000000590.882:1685): avc: denied { map } for pid=15383 comm="syz.1.2013" path="socket:[43554]" dev="sockfs" ino=43554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1006.340254][ T5817] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1006.590532][ T30] audit: type=1400 audit(2000000590.882:1686): avc: denied { read } for pid=15383 comm="syz.1.2013" path="socket:[43554]" dev="sockfs" ino=43554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1006.614130][ T30] audit: type=1400 audit(2000000590.882:1687): avc: denied { write } for pid=15383 comm="syz.1.2013" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1006.637616][ T30] audit: type=1400 audit(2000000590.892:1688): avc: denied { ioctl } for pid=15383 comm="syz.1.2013" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1006.863639][ T5817] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1007.269792][T15403] netlink: 'syz.0.2019': attribute type 23 has an invalid length. [ 1007.637443][ T5817] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1007.662950][ T5817] usb 4-1: can't read configurations, error -71 [ 1012.134000][T15454] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2031'. [ 1012.279709][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 480 seconds [ 1012.290715][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 480 seconds [ 1012.301939][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 480 seconds [ 1012.313107][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 480 seconds [ 1012.975269][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2034'. [ 1013.278827][ T921] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1013.706910][ T30] audit: type=1400 audit(2000000598.235:1689): avc: denied { getopt } for pid=15467 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1013.727084][ T921] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1013.792813][ T921] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1013.804247][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.822507][ T921] usb 6-1: Product: syz [ 1013.827172][ T921] usb 6-1: Manufacturer: syz [ 1013.831763][ T921] usb 6-1: SerialNumber: syz [ 1014.320637][ T921] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1014.494221][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1014.525325][ T5817] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1014.561530][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 1014.570445][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 1014.579425][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 1015.049432][ T5817] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1015.339297][T15484] 9pnet_virtio: no channels available for device ./bus [ 1015.873132][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1015.882379][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1015.892504][ T5817] usb 4-1: SerialNumber: syz [ 1016.024767][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1016.067553][ T10] ath9k_htc: Failed to initialize the device [ 1016.230372][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 1016.719253][ T5868] usb 6-1: USB disconnect, device number 12 [ 1016.908036][ T30] audit: type=1400 audit(2000000601.537:1690): avc: denied { create } for pid=15494 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1017.416178][ T30] audit: type=1400 audit(2000000601.537:1691): avc: denied { bind } for pid=15494 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1017.435955][ T30] audit: type=1400 audit(2000000601.845:1692): avc: denied { listen } for pid=15494 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1017.931770][ T5817] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1017.950485][ T5817] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1017.971636][ T921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1017.999960][ T5817] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1018.091639][ T30] audit: type=1400 audit(2000000602.640:1693): avc: denied { read } for pid=15508 comm="syz.3.2044" dev="sockfs" ino=44465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1018.634410][ T921] usb 6-1: Using ep0 maxpacket: 32 [ 1018.662987][T15515] lo speed is unknown, defaulting to 1000 [ 1018.847402][ T921] usb 6-1: config 7 has an invalid interface number: 102 but max is 2 [ 1018.858909][ T921] usb 6-1: config 7 has an invalid interface number: 255 but max is 2 [ 1018.909863][ T30] audit: type=1400 audit(2000000602.687:1694): avc: denied { setopt } for pid=15508 comm="syz.3.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1018.929476][ T921] usb 6-1: config 7 has an invalid interface number: 232 but max is 2 [ 1018.938252][ T921] usb 6-1: config 7 has an invalid interface number: 13 but max is 2 [ 1018.954079][ T921] usb 6-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 1018.992482][ T5817] usb 4-1: USB disconnect, device number 45 [ 1019.083413][ T921] usb 6-1: config 7 has no interface number 0 [ 1019.089493][ T921] usb 6-1: config 7 has no interface number 1 [ 1019.104703][ T30] audit: type=1400 audit(2000000603.594:1695): avc: denied { bind } for pid=15508 comm="syz.3.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1019.556127][ T921] usb 6-1: config 7 has no interface number 2 [ 1019.562223][ T921] usb 6-1: config 7 has no interface number 3 [ 1019.570634][ T921] usb 6-1: config 7 interface 255 altsetting 254 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1019.580905][ T921] usb 6-1: config 7 interface 255 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 1019.595762][ T921] usb 6-1: config 7 interface 232 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 1019.632387][ T921] usb 6-1: config 7 interface 232 altsetting 56 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1019.644072][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 1019.690124][ T921] usb 6-1: config 7 interface 232 altsetting 56 has a duplicate endpoint with address 0x9, skipping [ 1019.726206][ T921] usb 6-1: config 7 interface 232 altsetting 56 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1019.750459][ T921] usb 6-1: config 7 interface 232 altsetting 56 has a duplicate endpoint with address 0x6, skipping [ 1019.789553][ T921] usb 6-1: config 7 interface 232 altsetting 56 has a duplicate endpoint with address 0x9, skipping [ 1019.812970][ T921] usb 6-1: config 7 interface 232 altsetting 56 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1019.828279][ T921] usb 6-1: config 7 interface 232 altsetting 56 endpoint 0xE has an invalid bInterval 128, changing to 11 [ 1019.868226][ T921] usb 6-1: config 7 interface 232 altsetting 56 has a duplicate endpoint with address 0x5, skipping [ 1020.059708][ T921] usb 6-1: config 7 interface 232 altsetting 56 has a duplicate endpoint with address 0x3, skipping [ 1020.102451][ T921] usb 6-1: config 7 interface 232 altsetting 56 has 13 endpoint descriptors, different from the interface descriptor's value: 22 [ 1020.193412][ T921] usb 6-1: config 7 interface 102 has no altsetting 0 [ 1020.454213][ T921] usb 6-1: config 7 interface 255 has no altsetting 0 [ 1020.463565][ T921] usb 6-1: config 7 interface 232 has no altsetting 0 [ 1020.474277][ T921] usb 6-1: config 7 interface 13 has no altsetting 0 [ 1020.485353][ T921] usb 6-1: string descriptor 0 read error: -71 [ 1020.491535][ T921] usb 6-1: New USB device found, idVendor=0763, idProduct=2008, bcdDevice=18.29 [ 1020.622864][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.634856][T15544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15544 comm=syz.4.2048 [ 1020.890333][ T30] audit: type=1400 audit(2000000605.185:1696): avc: denied { name_connect } for pid=15537 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1021.236551][T15529] IPVS: stopping backup sync thread 12645 ... [ 1021.283329][ T921] usb 6-1: can't set config #7, error -71 [ 1021.297064][ T30] audit: type=1400 audit(2000000605.194:1697): avc: denied { listen } for pid=15537 comm="syz.3.2051" lport=42276 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1021.330456][ T30] audit: type=1400 audit(2000000605.194:1698): avc: denied { accept } for pid=15537 comm="syz.3.2051" lport=42276 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1021.411883][ T30] audit: type=1400 audit(2000000605.587:1699): avc: denied { setopt } for pid=15528 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1021.482269][ T921] usb 6-1: USB disconnect, device number 13 [ 1021.568950][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 1021.604771][T15545] IPVS: Error connecting to the multicast addr [ 1022.001901][ T30] audit: type=1400 audit(2000000606.288:1700): avc: denied { create } for pid=15553 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1022.784046][ T30] audit: type=1400 audit(2000000606.288:1701): avc: denied { getopt } for pid=15553 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1023.381516][T15569] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 1023.392484][T15569] veth1_macvtap: left promiscuous mode [ 1023.476664][ T30] audit: type=1400 audit(2000000607.682:1702): avc: denied { bind } for pid=15564 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1023.969703][ T5868] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1024.172179][ T5868] usb 4-1: device descriptor read/64, error -71 [ 1024.461070][ T5868] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1025.038181][ T5868] usb 4-1: device descriptor read/64, error -71 [ 1025.166957][ T5868] usb usb4-port1: attempt power cycle [ 1026.417928][T15597] netlink: 'syz.4.2062': attribute type 10 has an invalid length. [ 1026.459875][T15597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.796448][T15597] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1026.805387][ T5868] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1027.088723][T15606] Cannot find add_set index 2 as target [ 1027.817079][ T5868] usb 4-1: device not accepting address 48, error -71 [ 1028.247801][ T30] audit: type=1400 audit(2000000612.135:1703): avc: denied { shutdown } for pid=15609 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1028.568313][T15618] siw: device registration error -23 [ 1029.205917][ T30] audit: type=1400 audit(2000000612.135:1704): avc: denied { read } for pid=15609 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1029.226032][ T30] audit: type=1400 audit(2000000612.462:1705): avc: denied { create } for pid=15610 comm="syz.5.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1029.807765][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2069'. [ 1029.861810][T15622] NILFS (nullb0): couldn't find nilfs on the device [ 1030.097298][ T30] audit: type=1400 audit(2000000613.884:1706): avc: denied { create } for pid=15624 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1030.272613][ T30] audit: type=1400 audit(2000000613.884:1707): avc: denied { write } for pid=15624 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1031.110750][ T30] audit: type=1400 audit(2000000614.595:1708): avc: denied { watch watch_reads } for pid=15624 comm="syz.5.2071" path="/proc/182/map_files" dev="proc" ino=44764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1031.171466][T15631] netlink: 'syz.3.2066': attribute type 6 has an invalid length. [ 1033.792771][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 1035.800177][ T6108] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1036.190207][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 1036.217683][T14432] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1037.591569][ T30] audit: type=1400 audit(2000000620.881:1709): avc: denied { create } for pid=15687 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1037.888599][ T30] audit: type=1400 audit(2000000620.890:1710): avc: denied { kexec_image_load } for pid=15687 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1037.942869][ T30] audit: type=1400 audit(2000000621.021:1711): avc: denied { connect } for pid=15687 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1038.031728][ T30] audit: type=1400 audit(2000000621.021:1712): avc: denied { ioctl } for pid=15687 comm="syz.1.2083" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1038.151277][ T30] audit: type=1400 audit(2000000621.030:1713): avc: denied { create } for pid=15687 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1038.182958][ T30] audit: type=1400 audit(2000000621.030:1714): avc: denied { ioctl } for pid=15687 comm="syz.1.2083" path="socket:[44890]" dev="sockfs" ino=44890 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1038.669608][T15699] siw: device registration error -23 [ 1038.821755][T15700] veth5: entered allmulticast mode [ 1040.635356][ T30] audit: type=1400 audit(2000000623.734:1715): avc: denied { map } for pid=15723 comm="syz.3.2092" path="socket:[45196]" dev="sockfs" ino=45196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1041.220772][T15729] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2092'. [ 1041.234280][ T30] audit: type=1400 audit(2000000623.734:1716): avc: denied { read accept } for pid=15723 comm="syz.3.2092" path="socket:[45196]" dev="sockfs" ino=45196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1041.365116][T15730] netlink: 'syz.3.2092': attribute type 4 has an invalid length. [ 1041.505273][ T30] audit: type=1400 audit(2000000624.426:1717): avc: denied { connect } for pid=15723 comm="syz.3.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1041.763001][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1043.834166][T15754] 9pnet_fd: Insufficient options for proto=fd [ 1043.859268][ T30] audit: type=1400 audit(2000000626.727:1718): avc: denied { mounton } for pid=15747 comm="syz.1.2097" path="/422/file0" dev="tmpfs" ino=2260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1044.694222][ T95] block nbd0: Possible stuck request ffff888026650000: control (read@0,1024B). Runtime 510 seconds [ 1044.706876][ T95] block nbd0: Possible stuck request ffff888026650200: control (read@1024,1024B). Runtime 510 seconds [ 1044.722366][ T95] block nbd0: Possible stuck request ffff888026650400: control (read@2048,1024B). Runtime 510 seconds [ 1044.733342][ T95] block nbd0: Possible stuck request ffff888026650600: control (read@3072,1024B). Runtime 510 seconds [ 1045.175538][ T30] audit: type=1326 audit(2000000626.755:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.1.2097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d62f9aeb9 code=0x0 [ 1045.298138][T15767] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 1046.686460][T15780] netlink: 'syz.0.2100': attribute type 4 has an invalid length. [ 1046.720903][T15780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15780 comm=syz.0.2100 [ 1046.794321][ T5868] lo speed is unknown, defaulting to 1000 [ 1046.809349][ T5868] syz0: Port: 1 Link DOWN [ 1047.114334][ T5868] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1047.295964][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 1047.308844][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1047.317586][ T5868] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1047.336926][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1047.409233][T15787] overlayfs: failed to clone upperpath [ 1047.496941][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1047.518924][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1047.546483][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1047.572418][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1047.595763][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1047.693251][ T30] audit: type=1400 audit(2000000630.328:1720): avc: denied { map } for pid=15788 comm="syz.5.2105" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1047.725475][ T5868] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1047.968277][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.975546][ T30] audit: type=1400 audit(2000000630.328:1721): avc: denied { execute } for pid=15788 comm="syz.5.2105" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1048.002712][ T5868] usb 4-1: Product: syz [ 1048.042145][ T5868] usb 4-1: Manufacturer: syz [ 1048.055604][ T5868] usb 4-1: SerialNumber: syz [ 1048.067070][ T5868] usb 4-1: config 0 descriptor?? [ 1048.076277][T15782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1048.111731][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1048.272644][ T5868] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1048.340249][T11109] udevd[11109]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.852916][T15803] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1048.879212][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.888951][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.915506][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.925072][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.804214][ T30] audit: type=1400 audit(2000000632.292:1722): avc: denied { write } for pid=15808 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1050.058557][ T30] audit: type=1400 audit(2000000632.554:1723): avc: denied { ioctl } for pid=15808 comm="syz.4.2110" path="socket:[45349]" dev="sockfs" ino=45349 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1050.156373][ T60] wlan0: Trigger new scan to find an IBSS to join [ 1050.290000][T15804] lo speed is unknown, defaulting to 1000 [ 1050.514251][ T921] usb 4-1: USB disconnect, device number 50 [ 1051.926373][ T31] INFO: task syz.2.1780:14284 blocked for more than 143 seconds. [ 1051.943805][ T31] Tainted: G L syzkaller #0 [ 1052.004006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.032615][ T31] task:syz.2.1780 state:D stack:25720 pid:14284 tgid:14280 ppid:5812 task_flags:0x400040 flags:0x00080002 [ 1052.051081][ T31] Call Trace: [ 1052.057697][ T31] [ 1052.063051][ T31] ? __schedule+0xf65/0x5e10 [ 1052.071320][ T31] __schedule+0xfe4/0x5e10 [ 1052.079341][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1052.087581][ T31] ? __pfx___schedule+0x10/0x10 [ 1052.096161][ T31] ? find_held_lock+0x2b/0x80 [ 1052.101325][ T31] ? schedule+0x2bf/0x390 [ 1052.106749][ T31] schedule+0xdd/0x390 [ 1052.112100][ T31] io_schedule+0x8a/0xf0 [ 1052.117420][ T31] folio_wait_bit_common+0x414/0xa70 [ 1052.123014][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 1052.130529][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1052.139555][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1052.146109][ T31] ? __pfx___might_resched+0x10/0x10 [ 1052.156064][ T31] migrate_pages_batch+0x1b85/0x4530 [ 1052.163716][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1052.170711][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1052.176805][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1052.182726][ T31] ? finish_task_switch.isra.0+0x204/0xb70 [ 1052.188680][ T31] ? rcu_is_watching+0x12/0xc0 [ 1052.249964][ T31] ? __schedule+0xf65/0x5e10 [ 1052.254638][ T31] ? __schedule+0xff6/0x5e10 [ 1052.259635][ T31] migrate_pages_sync+0x4db/0x880 [ 1052.264779][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1052.271410][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1052.276759][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1052.282497][ T31] migrate_pages+0x1a5b/0x2810 [ 1052.287280][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1052.292710][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1052.298184][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 1052.303432][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1052.309697][ T31] ? __nr_to_section+0xaa/0x100 [ 1052.314744][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 1052.320093][ T31] compact_zone+0x240c/0x4320 [ 1052.324876][ T31] ? debug_object_free+0x295/0x550 [ 1052.330082][ T31] ? debug_object_init+0x11/0x20 [ 1052.335051][ T31] ? __pfx_compact_zone+0x10/0x10 [ 1052.340166][ T31] ? __flush_work+0x928/0xcb0 [ 1052.344922][ T31] ? __flush_work+0x928/0xcb0 [ 1052.349657][ T31] compact_node+0x17f/0x2c0 [ 1052.354455][ T31] ? __pfx_compact_node+0x10/0x10 [ 1052.359484][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 1052.364915][ T31] ? __lru_add_drain_all+0x441/0x650 [ 1052.370215][ T31] sysctl_compaction_handler+0x141/0x210 [ 1052.375886][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 1052.381240][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1052.387167][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1052.392634][ T31] iter_file_splice_write+0x82b/0x10a0 [ 1052.398155][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1052.404160][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 1052.409670][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1052.415604][ T31] direct_splice_actor+0x192/0x6c0 [ 1052.420782][ T31] splice_direct_to_actor+0x345/0xa30 [ 1052.426271][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 1052.432186][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1052.438195][ T31] do_splice_direct+0x174/0x240 [ 1052.443139][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 1052.448510][ T31] ? avc_policy_seqno+0x9/0x20 [ 1052.453346][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1052.459356][ T31] ? rw_verify_area+0xce/0x6d0 [ 1052.464151][ T31] do_sendfile+0xadc/0xe20 [ 1052.468634][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 1052.473701][ T31] __x64_sys_sendfile64+0x154/0x220 [ 1052.478929][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1052.484733][ T31] do_syscall_64+0xc9/0xf80 [ 1052.489362][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.495313][ T31] RIP: 0033:0x7fe4f599aeb9 [ 1052.499816][ T31] RSP: 002b:00007fe4f68ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1052.508251][ T31] RAX: ffffffffffffffda RBX: 00007fe4f5c16090 RCX: 00007fe4f599aeb9 [ 1052.516324][ T31] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000008 [ 1052.524429][ T31] RBP: 00007fe4f5a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1052.532470][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1052.540749][ T31] R13: 00007fe4f5c16128 R14: 00007fe4f5c16090 R15: 00007ffd014cf0c8 [ 1052.548795][ T31] [ 1052.551946][ T31] [ 1052.551946][ T31] Showing all locks held in the system: [ 1052.559759][ T31] 1 lock held by ksoftirqd/1/23: [ 1052.565247][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1052.575238][ T31] 1 lock held by khungtaskd/31: [ 1052.580155][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1052.590036][ T31] 1 lock held by klogd/5168: [ 1052.594711][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1052.604726][ T31] 2 locks held by getty/5570: [ 1052.610776][ T31] #0: ffff8880374820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1052.620610][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1052.630742][ T31] 2 locks held by syz-executor/5818: [ 1052.636075][ T31] #0: ffff88804bbb40e0 (&type->s_umount_key#71){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1052.646467][ T31] #1: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1052.656717][ T31] 1 lock held by udevd/5974: [ 1052.661322][ T31] #0: ffff88802657e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1052.670677][ T31] 3 locks held by kworker/u8:8/6108: [ 1052.676079][ T31] #0: ffff888031c1a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1052.687187][ T31] #1: ffffc9000b517c98 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1052.700420][ T31] #2: ffffffff903f3168 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1052.710002][ T31] 1 lock held by syz.2.1780/14284: [ 1052.715169][ T31] #0: ffff888079526420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1052.725223][ T31] 3 locks held by syz.1.2108/15804: [ 1052.730519][ T31] #0: ffffffff903da830 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1052.739972][ T31] #1: ffffffff903f3168 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1052.749092][ T31] #2: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1052.759407][ T31] [ 1052.761803][ T31] ============================================= [ 1052.761803][ T31] [ 1052.770589][ T31] NMI backtrace for cpu 0 [ 1052.770604][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.770626][ T31] Tainted: [L]=SOFTLOCKUP [ 1052.770632][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1052.770642][ T31] Call Trace: [ 1052.770647][ T31] [ 1052.770654][ T31] dump_stack_lvl+0x100/0x190 [ 1052.770679][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1052.770703][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1052.770724][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1052.770751][ T31] sys_info+0x141/0x190 [ 1052.770772][ T31] watchdog+0xcc3/0xfe0 [ 1052.770804][ T31] ? __pfx_watchdog+0x10/0x10 [ 1052.770829][ T31] ? __kthread_parkme+0x18c/0x230 [ 1052.770855][ T31] ? __pfx_watchdog+0x10/0x10 [ 1052.770881][ T31] ? __pfx_watchdog+0x10/0x10 [ 1052.770903][ T31] kthread+0x3b3/0x730 [ 1052.770922][ T31] ? __pfx_kthread+0x10/0x10 [ 1052.770939][ T31] ? ret_from_fork+0x79/0xaf0 [ 1052.770957][ T31] ? ret_from_fork+0x79/0xaf0 [ 1052.770977][ T31] ? rcu_is_watching+0x12/0xc0 [ 1052.770999][ T31] ? __pfx_kthread+0x10/0x10 [ 1052.771018][ T31] ret_from_fork+0x754/0xaf0 [ 1052.771039][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1052.771061][ T31] ? __switch_to+0x7b9/0x10c0 [ 1052.771082][ T31] ? __pfx_kthread+0x10/0x10 [ 1052.771101][ T31] ret_from_fork_asm+0x1a/0x30 [ 1052.771129][ T31] [ 1052.771136][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1052.915113][ C1] NMI backtrace for cpu 1 [ 1052.915127][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.915146][ C1] Tainted: [L]=SOFTLOCKUP [ 1052.915150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1052.915158][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1052.915176][ C1] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ac 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1052.915188][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1052.915200][ C1] RAX: 0000000005716b1f RBX: ffff88801e2c24c0 RCX: ffffffff8b76d4b5 [ 1052.915209][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45b4f RDI: ffffffff8bfa3620 [ 1052.915217][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 1052.915225][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c58498 [ 1052.915233][ C1] R13: 0000000000000001 R14: ffffffff90b749d0 R15: 0000000000000000 [ 1052.915242][ C1] FS: 0000000000000000(0000) GS:ffff8881246db000(0000) knlGS:0000000000000000 [ 1052.915256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1052.915265][ C1] CR2: 00007ffbb456a6c8 CR3: 000000004bcb8000 CR4: 00000000003526f0 [ 1052.915273][ C1] Call Trace: [ 1052.915277][ C1] [ 1052.915282][ C1] default_idle+0x9/0x10 [ 1052.915302][ C1] default_idle_call+0x6c/0xb0 [ 1052.915317][ C1] do_idle+0x35b/0x4b0 [ 1052.915335][ C1] ? __pfx_do_idle+0x10/0x10 [ 1052.915354][ C1] cpu_startup_entry+0x4f/0x60 [ 1052.915371][ C1] start_secondary+0x21d/0x2d0 [ 1052.915385][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1052.915400][ C1] common_startup_64+0x13e/0x148 [ 1052.915422][ C1] [ 1053.096968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1053.103809][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.114624][ T31] Tainted: [L]=SOFTLOCKUP [ 1053.118924][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1053.128955][ T31] Call Trace: [ 1053.132224][ T31] [ 1053.135150][ T31] dump_stack_lvl+0x100/0x190 [ 1053.139832][ T31] vpanic+0x20d/0x630 [ 1053.143813][ T31] panic+0xd1/0xd1 [ 1053.147525][ T31] ? __pfx_panic+0x10/0x10 [ 1053.151920][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1053.158049][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1053.164182][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1053.170311][ T31] ? watchdog.cold+0x198/0x1ca [ 1053.175046][ T31] ? watchdog+0xcd3/0xfe0 [ 1053.179352][ T31] watchdog.cold+0x1a9/0x1ca [ 1053.183931][ T31] ? __pfx_watchdog+0x10/0x10 [ 1053.188587][ T31] ? __kthread_parkme+0x18c/0x230 [ 1053.193599][ T31] ? __pfx_watchdog+0x10/0x10 [ 1053.198261][ T31] ? __pfx_watchdog+0x10/0x10 [ 1053.202923][ T31] kthread+0x3b3/0x730 [ 1053.206970][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.211540][ T31] ? ret_from_fork+0x79/0xaf0 [ 1053.216195][ T31] ? ret_from_fork+0x79/0xaf0 [ 1053.220851][ T31] ? rcu_is_watching+0x12/0xc0 [ 1053.225599][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.230170][ T31] ret_from_fork+0x754/0xaf0 [ 1053.234743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.239837][ T31] ? __switch_to+0x7b9/0x10c0 [ 1053.244501][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.249073][ T31] ret_from_fork_asm+0x1a/0x30 [ 1053.253823][ T31] [ 1053.257145][ T31] Kernel Offset: disabled [ 1053.261441][ T31] Rebooting in 86400 seconds..