last executing test programs: 7m26.760505246s ago: executing program 3 (id=844): r0 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&r', 0x2}], 0x1}}], 0x2, 0x400c404) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) 7m24.260256397s ago: executing program 3 (id=851): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_emit_ethernet(0x26c, &(0x7f000001b240)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "14d61e", 0x236, 0x21, 0x1fe, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, {[@hopopts={0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5d, 0x0, [0x9, 0x1]}}]}, @hopopts={0x33, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xb}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x84, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x3e}, @generic={0x6, 0x55, "3b399c492a91f832a36a93815bf2903418b36e8ea699b5e37ca62f35a4236a54bae01b2c06a0e3e03905d2e472558b1fd1fd8849e349a2eba7a7e09ec0bdb78dbb521b859b4f6b5265e45194448f520a3a7a3a79e9"}, @padn={0x1, 0x1, [0x0]}, @generic={0x10, 0x60, "feeb3dae0907ee427b56fcc33dbc58a313c4f9641602876d7d7ad7d61e764856a8a0e45a0a14ef66db7a0b8ca64200b59b037382f6f1e035906b0617155ab1e1ed8af7b2df529e64744d652521b704a0a6a1beb7bcf608686990a6d63b832550"}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x4, 0x0, "ea8dce", 0x8, "944557"}, "29ca320e277892ffeebe39d493e386d20b41ba7dffc74010c68f8496a8966742e87c939ff6b308f9b64e7f28436c37599b8f8f63d88f8b2adc79ca4ad06e60b5ddaad1763014eed62da49ab87c831f7d42fdd9a4084c4c7bd07a44309e3c047ad3ebdc3cff19154646f4111590c6d6056f96956dd3d272bba70d1a3f83a89f81cc659a22b5bf5315772c2c6bb2b5c8c53a2d1acbb2840ad1789e84c437ed4716f38f50bc45eec09beaa62076d5e88b09bece51f6992ea789db1322efaa3afdf3ee803b9f7f835ed0f88be9fb67557e96ce020ecb7bd14b8eddf60d4b043a"}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1c, 0x120000, 0x7ff, 0x2009, 0x2, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6a, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x60c2}, {r0, 0x40}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x230}], 0x20000000000003ca, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r7 = shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r6, 0x0) shmdt(r7) rmdir(&(0x7f0000000200)='./cgroup/../file0\x00') 7m16.726601191s ago: executing program 3 (id=863): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') set_mempolicy(0x4005, 0x0, 0x4) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000280)={&(0x7f0000000e80)={0xd0, 0x0, 0x1, 0x70ad29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c0c1) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x10000000000, 0x0, 0x5, 0x0, 0x0, {0x0, 0x1, 0x101, 0x8000000000000000, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x1004, {0x3, 0x0, 0x0, 0x100000004, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 7m13.696435853s ago: executing program 3 (id=867): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_enter(r3, 0x5291, 0x0, 0x0, 0x0, 0x0) 7m13.275619496s ago: executing program 3 (id=869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)) getpriority(0x0, r7) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 7m13.060738236s ago: executing program 3 (id=870): socket(0x18, 0x5, 0x86b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8a, 0x9, 0xffffffffffffffff, 0x400, r0}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6m57.967874807s ago: executing program 32 (id=870): socket(0x18, 0x5, 0x86b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8a, 0x9, 0xffffffffffffffff, 0x400, r0}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m37.115612307s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 1m20.876152146s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 1m1.996108437s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 44.505545511s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 31.188533381s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 24.310428055s ago: executing program 0 (id=1608): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="4f1c3ac70eaa70474c49b3a0180000000000000000000000010000009500000000000000735c6d42"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_usb_connect$uac1(0x5, 0x82, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x4, 0x40, '\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xfc, 0xb, {0x7, 0x25, 0x1, 0x81, 0x7, 0x801}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0x7, 0x7, {0x7, 0x25, 0x1, 0x81, 0x5, 0xa}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2d, 'net'}, {0x2d, 'devices'}, {0x2d, 'net_prio'}, {0x2d, 'net_cls'}]}, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 19.788140611s ago: executing program 0 (id=1620): socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd25, 0x3, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x40}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x5c52037a}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'gre0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x10008095, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 16.713682646s ago: executing program 0 (id=1626): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x2400c000) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x42) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0xff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[], 0x10}], 0x1}, 0x20040051) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0xf2, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="2e000300010000", 0x7) 13.903227947s ago: executing program 0 (id=1630): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000000702"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x208000}, 0x50) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) dup3(r5, r3, 0x80000) write(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x4, 0xf1c1, 0x9], &(0x7f0000000140)=[0x4], 0x0, &(0x7f00000001c0)}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) r7 = syz_open_procfs(0x0, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000e40)={0x40, 0x9, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x17, 0x27, "82ffff0000415cf30e5e0e568d42896d335edfabac49316a5f39d163c915995227510c1ad58e8e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x20, 0x15, 0x2f, "d9459730533a922f381192be9ea4a903e135deafdd9b808934b119e09dd95a99c5833c9fb694f01f8bb4a7b3d2ff2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.155513816s ago: executing program 5 (id=890): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r4, &(0x7f0000000040), 0x0, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 10.358800738s ago: executing program 0 (id=1633): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x1b) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$amidi(&(0x7f0000000040), 0x437d, 0x109000) r6 = syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) sendmsg$nl_generic(r5, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={0x0, 0x4c0}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 10.021752251s ago: executing program 2 (id=1634): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x4004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRESDEC=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)={0x4000}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0xbc4, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xb94, 0x2, [@TCA_BASIC_EMATCHES={0xb90, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x485b}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x1, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x6}, {0x4, 0x4, 0x1}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x80, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x10, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0xff, 0x1}, {0x7, 0x6, 0x2}}}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x81, 0x5, 0x2, "2e204cc1ed"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0xafc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x7ff}, {0x2, 0x0, 0x2}}}, @TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0xd, 0x4, 0xa7d}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9e2ad21ea49ecd", @TCF_META_TYPE_VAR="e0b9", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b5d5cc1c6b78fa462e", @TCF_META_TYPE_VAR="d82b57b1b65cf3"]}]}}, @TCF_EM_IPT={0x8e4, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_MATCH_DATA={0xc, 0x5, "da3d8058f50622ed"}, @TCA_EM_IPT_MATCH_DATA={0xb6, 0x5, "3f611d01f9b21122fe2fff142c67bc08ea5026db6cacb8bc53f04091f52d6673a31ecefcf963b4e239f54a30f2b98b03552d104ca95001eb3507e54eebcbb65ce80cab77eeb246f526656052577c4d479d713f020e9a90f2a8b8cd689106cc0c19a3df47f2105dfd00674e2b407b6461265e58e980d54ddd86d5cfdd6dc8f3a4ec69a41bd3bcadae5d47d227ff4373e239f5feef58afbe1e83d815fefed0c7d9a326fce58c1bf2fc3a721b1f3a139cf86e5f"}, @TCA_EM_IPT_MATCH_DATA={0x804, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x380, 0x3, 0x9}, {0x5, 0x4a6, 0x1, 0x4}}}, @TCF_EM_IPT={0x138, 0x4, 0x0, 0x0, {{0x8, 0x9, 0x2ed}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "9804b7495a53a20513d795c32abbe221a8fdfa5c25ed63c3eeabe8ac20adb9fdc9e3d54263d7700ad9d678c616c72090952ab51e695c0ec0470de571142d08b60fb9fffebfe1a47176e71c0899b9043ee056bf5876600b06d636efb87557457d63b6739097d4fcf666bd950cb0c7b68d8b6411720523a420f4275a025547238157dca884a828f6a51175d40a030e99f31cb1fea9129c94f4dc3893d50c53706c51b661a300704f4ed098be94ea2c763cb11210e6a1f610dd75c90445aded2aa9dbe205138ac72c7d390cf3f40736d3bada70d6c6928b37666abae554314a6d"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffc, 0x7, 0x9}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1}}}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0xba, 0x1}, {0x2, 0x6}}}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_INT=0x80000000, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a161942c98bf5dc895", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="500e5f55cced998f3d6f", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9}, {0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5c}}]}]}}]}, 0xbc4}, 0x1, 0x0, 0x0, 0x4810}, 0x814) 9.647002069s ago: executing program 4 (id=1636): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b60008000900020000"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727a606495803509f84729f3e8a2fbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f37feb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b56549616bfede82c598301c98b0420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b336851d9c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf3800"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x39, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a0011fc387ea6be1", 0x0}, 0x50) setreuid(0xffffffffffffffff, 0xee00) getresgid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) fcntl$setownex(r6, 0xf, 0x0) fsopen(0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r8 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r8, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 9.115638254s ago: executing program 4 (id=1637): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, 0x0, &(0x7f0000000080)=r8}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r10, 0x0, 0x138) 8.019853124s ago: executing program 4 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="873c0000fdb2baad8d57b3f934b207555b5fe29e4e1dcf73adbdf67d6b3ed7d42c10d7f144111ed49bda7eb4624b965769ea6e92d9c127ef5939ce7f51f61a4f02cc728bf4f6caeca1a92d6439aaaa3bdf307c410b59d6463429a9d38f5af6784cde9e49209e4c8b9e2aa250f496e3e12d8c94d00bea26909b88e0fd44ab45adbc0b132944c4c10c08bd48ce14a8cfe0829383ef644ed0", @ANYRES16=r4, @ANYBLOB="01002dbd70000000000003000000400001802c00040014000100020000007f000001000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.622452662s ago: executing program 1 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.647442079s ago: executing program 4 (id=1640): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.230145746s ago: executing program 1 (id=1642): mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc6a91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}, {{&(0x7f0000000240)=@abs, 0x6e, 0x0}}], 0x2, 0x34000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = dup(r3) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0xd11, &(0x7f00000000c0)={0x0, 0x980e, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 4.902891007s ago: executing program 2 (id=1643): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, 0x0, 0x46) recvmmsg(r6, 0x0, 0x0, 0x2000, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=@newqdisc={0x440, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x6, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x1, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x5, 0x9, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x0, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x10000007, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x10000, 0x4, 0x2, 0x2, 0x8, 0x7, 0xeb, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x2000043, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0xffffffff, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x80, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000001, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_RATE64={0xc, 0x4, 0xbc47f22da0fcce63}]}}]}, 0x440}}, 0x8840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 3.965962451s ago: executing program 0 (id=1644): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='s|m\x99R\xa9F\xdb\x0e\xe2\xd6-QJsS\x05_.S\x85`\xb0wd\xda\xd4\xa5\xa3\x91urce\x91\x81\x126\xa8\xb8\xb6\xb7\x94\xcd`\xe4=:\xba\xc9\xdeg`<\xa3\x84@\x85\x9aTX\x1c!G~e\x1c\xa2\xf5n.\xbc-\x9e\xa5(\xe7\fL\xa4\xbc<\xea\x84\xf4\xf0\xe3,+\x9c\xe0\xa9\xa6\x19', &(0x7f0000000580)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbe\b\x00g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fSc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xa9\xb7\vS\xae&\xe8\x02T\xd5M4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xaa\xdf\xbe\x8b\x89\x81|l\x93Il\x90\xc9\x98\'OY\x05\xa5M\xf4o\x8b\xf0\xa3\x81\xd6\xbf@\xee\x92\xc8Q\an\xec\x03V\x854\x91s\xbaM\xd6\xafd\xc5\x1a\xdb\xb4=\x14\xed\x18:\x1c\x13\xea\xd4j\x83\x87\tR}<{\x9b\x9b\xc7M\xdf\xbd\xcc\xbb\x9b\xf0\r\x14\xb6\xe06\xae\xcd\xfa\x1b\"\xe4+\xd7\xab\x83\x83\xc9\x9a\xbbN\xbe\xaa\xda\x12{0\x85\xd6\xb0\xd8\'\x040xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_enter(r5, 0x5291, 0x0, 0x0, 0x0, 0x0) 3.51773187s ago: executing program 1 (id=1646): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_enter(r5, 0x5291, 0x0, 0x0, 0x0, 0x0) 2.774921071s ago: executing program 2 (id=1647): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2280c2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3ae62ba3fbb7f104}, 0xc, &(0x7f0000000380)={&(0x7f0000002080)=ANY=[@ANYBLOB="50100000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf252d0b00000800030043f383a28cbf33f51939711b9c0f000000000000002ebd0db83f325e232496145114325e1f30df813d0f7fe9a8776e7993ed8e0965bad3f4ac9c6816f3417c66f021d0812fa330c539f8f1abd02ed5888554da", @ANYRES32=0x0, @ANYBLOB="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"], 0x1050}, 0x1, 0x0, 0x0, 0x8050}, 0xc891) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) pipe(&(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x200081, 0x4) r9 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) write$cgroup_int(r0, &(0x7f0000002040)=0x1, 0x12) 2.581532044s ago: executing program 1 (id=1648): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b60008000900020000"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x39, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a0011fc387ea6be1", 0x0}, 0x50) setreuid(0xffffffffffffffff, 0xee00) getresgid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) fcntl$setownex(r6, 0xf, 0x0) fsopen(0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r8 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r8, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 1.628916614s ago: executing program 2 (id=1649): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg$qrtr(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) gettid() setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) recvmsg$can_raw(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.547586473s ago: executing program 1 (id=1650): socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffffff, 0x0, 0x32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006862b6c243ffabae7e010401010000000000000000010000050a000200000000051b0000ba6359d63587dfb4142c5a20b236c2304af2681385458fd05d28eb159b77b893202e8deafa4b34157c20007de32dc326d56ac6d957ab48d38fa588c8c355ee660400ccc77733b0cf71c81d709d595c0bdd153f3c9c57d71e30ba38640a8858ace43eeb8cecb8834280"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) 1.503812173s ago: executing program 4 (id=1651): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={r5, r6+60000000}) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r10, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5cf00000", @ANYRES16=r10, @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r11, r11, 0x0, 0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) 129.181745ms ago: executing program 4 (id=1652): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, 0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r9, 0x2) getpeername$packet(r9, 0x0, &(0x7f0000000680)) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x60000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000003d000900000000000020000003"], 0x1c}}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 5.190875ms ago: executing program 1 (id=1653): timerfd_create(0x7, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x341e83, 0x0) write$sequencer(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="9401", @ANYRES64], 0x24) gettid() getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r6, 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r7 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x80000000, 0x0) wait4(r7, 0x0, 0x20000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=1654): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r4 = dup(0xffffffffffffffff) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r5, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x0, @generic}], 0x8) write$6lowpan_enable(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x168, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback}]}]}, 0x168}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): ) [ 646.901570][T11087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.228532][T11091] siw: device registration error -23 [ 647.821868][ T5842] Bluetooth: hci0: command tx timeout [ 649.350422][T11117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.375403][T11117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.678105][ T30] audit: type=1400 audit(2000000180.476:1251): avc: denied { watch watch_reads } for pid=11105 comm="syz.2.1055" path="pipe:[3935]" dev="pipefs" ino=3935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 650.214274][ T5842] Bluetooth: hci0: command tx timeout [ 651.045428][T11130] slcan: can't register candev [ 651.050506][T11130] Falling back ldisc for ttyS3. [ 651.159105][T11018] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 652.341698][T11018] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 652.576742][T11018] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 652.795582][T11018] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 653.529007][T11161] input: syz0 as /devices/virtual/input/input16 [ 653.587022][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 655.033401][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 655.374992][ T30] audit: type=1400 audit(2000000186.297:1252): avc: denied { read } for pid=11167 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 658.889248][T11226] siw: device registration error -23 [ 659.201244][T11018] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 659.240180][T11018] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 659.260729][T11018] wireguard: wg0: Could not create IPv4 socket [ 659.285813][T11018] wireguard: wg1: Could not create IPv4 socket [ 659.338383][T11018] wireguard: wg2: Could not create IPv4 socket [ 661.248014][T11247] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1077'. [ 662.545939][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 663.909587][T11267] QAT: failed to copy from user cfg_data. [ 664.683602][T11270] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 664.704216][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.029649][T11276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 665.036344][T11276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 665.156179][T11276] vhci_hcd vhci_hcd.0: Device attached [ 665.729392][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 665.796389][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1086'. [ 666.062435][ T9232] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 666.134093][T11280] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 666.142266][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 666.427585][T11300] syz2: rxe_newlink: already configured on wg0 [ 666.899333][T11277] vhci_hcd: connection reset by peer [ 666.910781][T10534] vhci_hcd: stop threads [ 666.921001][T10534] vhci_hcd: release socket [ 666.922413][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 666.935101][T10534] vhci_hcd: disconnect device [ 667.041095][ T30] audit: type=1800 audit(2000000197.967:1253): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1089" name="/" dev="fuse" ino=1 res=0 errno=0 [ 667.092678][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 667.099661][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 667.111517][ T5911] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 667.122012][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.126572][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.137386][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.146356][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.161116][ T5911] usb 2-1: Product: syz [ 667.167770][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.170974][ T5911] usb 2-1: Manufacturer: syz [ 667.179742][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.184313][ T5911] usb 2-1: SerialNumber: syz [ 667.214039][ T5911] usb 2-1: config 0 descriptor?? [ 667.217245][T11307] Failed to initialize the IGMP autojoin socket (err -2) [ 667.437660][ T5834] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 667.703141][T11320] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 667.745466][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 667.754530][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1090'. [ 667.781454][T11320] geneve2: entered promiscuous mode [ 667.786775][T11320] geneve2: entered allmulticast mode [ 667.971620][ T5911] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 668.244665][ T5911] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 668.280536][ T5911] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 668.332062][ T5911] usb 2-1: USB disconnect, device number 10 [ 669.155591][T11346] option changes via remount are deprecated (pid=11342 comm=syz.1.1094) [ 670.212214][ T5842] Bluetooth: hci0: command tx timeout [ 670.452795][T11348] could not allocate digest TFM handle sha224-ssse3 [ 670.486132][ T30] audit: type=1400 audit(2000000201.418:1254): avc: denied { setopt } for pid=11352 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 670.639828][T11356] program syz.0.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.830849][T11362] program syz.0.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.084676][T11362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 671.192828][ T9232] vhci_hcd: vhci_device speed not set [ 671.277712][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 672.114161][T11366] hsr0: entered promiscuous mode [ 672.294957][ T5842] Bluetooth: hci0: command tx timeout [ 673.879288][T11367] hsr_slave_0: left promiscuous mode [ 673.886906][T11367] hsr_slave_1: left promiscuous mode [ 673.908181][T11367] hsr0 (unregistering): left promiscuous mode [ 674.322110][ T5842] Bluetooth: hci0: command tx timeout [ 675.609003][ T9232] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 676.367260][T11403] syzkaller0: Caught tx_queue_len zero misconfig [ 676.392847][ T5842] Bluetooth: hci0: command tx timeout [ 676.461879][ T9232] usb 5-1: Using ep0 maxpacket: 32 [ 676.485098][ T9232] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.519609][ T9232] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 676.562108][ T9232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.609401][ T9232] usb 5-1: Product: syz [ 676.633614][ T9232] usb 5-1: Manufacturer: syz [ 676.659931][ T9232] usb 5-1: SerialNumber: syz [ 676.757664][ T9232] usb 5-1: config 0 descriptor?? [ 677.867519][ T9232] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 677.877011][ T5842] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 678.262531][ T9232] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 678.565258][T11307] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 678.944653][T11307] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 679.338522][ T5890] usb 5-1: USB disconnect, device number 26 [ 679.396877][T11307] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 679.660681][T11451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.096300][ T30] audit: type=1400 audit(2000000211.028:1255): avc: denied { setopt } for pid=11440 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 680.171442][T11307] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 680.241130][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1113'. [ 680.412026][ T1205] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 680.964964][T11466] 9pnet_virtio: no channels available for device 127.0.0.1 [ 681.579542][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 681.610672][ T1205] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 681.619053][ T1205] usb 2-1: config 0 has no interface number 0 [ 681.631601][ T1205] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 682.099019][ T1205] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 682.125888][ T49] Bluetooth: (null): Non-link packet received in non-active state [ 682.134442][ T49] Bluetooth: (null): Invalid header checksum [ 682.151144][ T49] Bluetooth: (null): Invalid header checksum [ 682.179529][ T1205] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 682.192080][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 682.200148][ T1205] usb 2-1: Product: syz [ 682.204549][ T1205] usb 2-1: SerialNumber: syz [ 682.209908][ T49] Bluetooth: (null): Invalid header checksum [ 682.216341][ T1205] usb 2-1: config 0 descriptor?? [ 682.230835][ T49] Bluetooth: (null): Invalid header checksum [ 682.239367][ T1205] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 682.246679][ T49] Bluetooth: (null): Invalid header checksum [ 682.255485][ T1205] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input17 [ 682.293083][ T49] Bluetooth: (null): Invalid header checksum [ 683.207916][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.218810][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.339605][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 684.348190][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 684.357333][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 684.364795][ T1205] usb 2-1: USB disconnect, device number 11 [ 684.370726][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 684.370749][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 685.279590][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.328739][ T1205] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 686.306151][T11520] ceph: No mds server is up or the cluster is laggy [ 686.316580][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 686.966622][T11307] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 687.030928][T11307] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 687.052845][T11307] wireguard: wg0: Could not create IPv4 socket [ 687.063700][T11307] wireguard: wg1: Could not create IPv4 socket [ 687.071321][T11307] wireguard: wg2: Could not create IPv4 socket [ 687.229483][T11535] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 687.246368][T11535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.796901][ T30] audit: type=1400 audit(2000000218.619:1256): avc: denied { mount } for pid=11536 comm="syz.4.1126" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 687.989076][ T30] audit: type=1400 audit(2000000218.639:1257): avc: denied { mounton } for pid=11536 comm="syz.4.1126" path="/224/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 688.011313][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.150778][T11538] orangefs_mount: mount request failed with -4 [ 688.152811][ T30] audit: type=1400 audit(2000000218.689:1258): avc: denied { unmount } for pid=11536 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 688.513827][T11551] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 688.607394][T11546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.825358][T11573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.131217][ T5950] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 690.905055][ T5950] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 690.924168][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.007517][ T5950] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 693.344131][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.354141][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.362206][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.376168][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.383560][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.431715][ T5950] usb 3-1: USB disconnect, device number 20 [ 694.264541][T11627] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 694.275631][T11619] Failed to initialize the IGMP autojoin socket (err -2) [ 695.432389][ T5834] Bluetooth: hci0: command tx timeout [ 696.565718][T11643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 697.220207][T11660] NILFS (nullb0): couldn't find nilfs on the device [ 697.513724][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 697.846077][T11664] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 697.859810][T11664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.013945][T11619] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 698.294146][T11619] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 698.771584][ T30] audit: type=1400 audit(2000000229.469:1259): avc: denied { create } for pid=11666 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 699.143793][T11619] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 699.296419][T11619] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 699.600794][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 699.629058][T11697] syz_tun: left allmulticast mode [ 700.057261][T11697] syz_tun: left promiscuous mode [ 700.062563][T11697] bridge0: port 4(syz_tun) entered disabled state [ 700.082410][T11697] team0: left allmulticast mode [ 700.087265][T11697] team_slave_0: left allmulticast mode [ 700.095053][T11697] team_slave_1: left allmulticast mode [ 700.112212][T11697] team0: left promiscuous mode [ 700.127120][T11697] team_slave_0: left promiscuous mode [ 700.312147][T11704] overlayfs: conflicting lowerdir path [ 700.414840][T11697] team_slave_1: left promiscuous mode [ 700.420397][T11697] bridge0: port 3(team0) entered disabled state [ 700.475806][T11697] bridge_slave_0: left allmulticast mode [ 700.485947][T11697] bridge_slave_0: left promiscuous mode [ 700.492951][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.502976][T11697] bridge_slave_1: left allmulticast mode [ 700.508884][T11697] bridge_slave_1: left promiscuous mode [ 700.518013][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.541134][T11697] bond0: (slave bond_slave_0): Releasing backup interface [ 700.564659][T11697] bond0: (slave bond_slave_1): Releasing backup interface [ 700.633474][T11707] netlink: 'syz.2.1145': attribute type 10 has an invalid length. [ 700.662203][T11697] team0: Port device team_slave_0 removed [ 700.689687][T11697] team0: Port device team_slave_1 removed [ 700.720498][ T5970] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 700.755803][T11697] bond1: (slave gretap1): Releasing active interface [ 700.807708][T11690] team0: Mode changed to "loadbalance" [ 700.815428][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 700.828901][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 700.976339][T11707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.988373][T11707] team0: Port device bond0 added [ 701.495905][ T5970] usb 5-1: device descriptor read/64, error -71 [ 701.670429][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 701.751274][ T5970] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 701.899195][T11716] team0 (unregistering): Port device bond0 removed [ 701.944803][ T5970] usb 5-1: device descriptor read/64, error -71 [ 702.121564][ T5970] usb usb5-port1: attempt power cycle [ 702.292510][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 702.500137][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 702.516650][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 702.559571][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 702.588975][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.721588][ T24] usb 1-1: Product: syz [ 702.725776][ T24] usb 1-1: Manufacturer: syz [ 702.730434][ T24] usb 1-1: SerialNumber: syz [ 702.738835][ T24] usb 1-1: config 0 descriptor?? [ 703.139911][ T5970] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 703.309796][T11762] program syz.2.1152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.388169][ T5970] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 703.399013][T11757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.418779][ T5834] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 703.428591][ T24] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 703.437207][ T5970] usb 5-1: device descriptor read/8, error -71 [ 703.469159][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 703.486105][T11764] program syz.2.1152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.581878][ T5970] usb usb5-port1: unable to enumerate USB device [ 703.616701][T11764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 703.685537][T11619] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 703.705251][T11619] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 703.723468][T11619] wireguard: wg0: Could not create IPv4 socket [ 703.735404][T11619] wireguard: wg1: Could not create IPv4 socket [ 703.743026][T11619] wireguard: wg2: Could not create IPv4 socket [ 703.751540][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 703.910374][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 704.076660][ T30] audit: type=1400 audit(2000000235.009:1260): avc: denied { connect } for pid=11775 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 704.492410][ T24] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 704.523593][ T24] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 704.607842][ T24] usb 2-1: Product: syz [ 704.655220][ T24] usb 2-1: Manufacturer: syz [ 704.659872][ T24] usb 2-1: SerialNumber: syz [ 704.744070][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 705.046753][ T24] vp7045: USB control message 'out' went wrong. [ 705.085040][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 705.101593][ T1205] usb 1-1: USB disconnect, device number 11 [ 705.161429][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 705.174626][ T24] usb 2-1: USB disconnect, device number 12 [ 706.672392][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.681602][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.689370][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.845734][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.853409][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.160133][ T5950] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 707.509891][T11830] Failed to initialize the IGMP autojoin socket (err -2) [ 707.587219][T11836] NILFS (nullb0): couldn't find nilfs on the device [ 707.991827][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 708.020952][ T5950] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 708.176205][ T5950] usb 3-1: config 0 has no interface number 0 [ 708.828815][ T5950] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 708.920749][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.937717][ T5950] usb 3-1: config 0 descriptor?? [ 708.960541][ T5842] Bluetooth: hci0: command tx timeout [ 709.051672][ T5950] viperboard 3-1:0.143: version 0.00 found at bus 003 address 021 [ 709.977204][ T5950] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 709.987235][ T5950] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 710.030071][ T5970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 710.199668][ T5950] usb 3-1: USB disconnect, device number 21 [ 710.270031][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 710.408928][ T30] audit: type=1400 audit(2000000241.280:1261): avc: denied { listen } for pid=11868 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 710.555026][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.633045][ T5970] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 710.670805][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.689640][ T5970] usb 5-1: Product: syz [ 710.699416][ T5970] usb 5-1: Manufacturer: syz [ 710.720904][ T30] audit: type=1400 audit(2000000241.290:1262): avc: denied { accept } for pid=11868 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 710.744884][ T5970] usb 5-1: SerialNumber: syz [ 710.971291][T11880] vxfs: WRONG superblock magic 00000000 at 1 [ 710.978175][T11880] vxfs: WRONG superblock magic 00000000 at 8 [ 710.984255][T11880] vxfs: can't find superblock. [ 711.040143][ T5842] Bluetooth: hci0: command tx timeout [ 711.278774][T11878] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 711.600425][ T5970] usb 5-1: config 0 descriptor?? [ 712.193238][T11895] Failed to initialize the IGMP autojoin socket (err -2) [ 712.398167][ T5970] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 712.412478][ T5970] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 712.450419][ T5970] usb 5-1: USB disconnect, device number 31 [ 713.111257][ T5842] Bluetooth: hci0: command tx timeout [ 713.443180][ T30] audit: type=1400 audit(2000000244.370:1263): avc: denied { read write } for pid=11917 comm="syz.0.1174" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 714.424267][ T30] audit: type=1400 audit(2000000244.370:1264): avc: denied { open } for pid=11917 comm="syz.0.1174" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 714.449298][ T30] audit: type=1326 audit(2000000245.040:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.0.1174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f122d58e929 code=0x0 [ 714.472193][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.786780][ T5842] Bluetooth: hci0: command tx timeout [ 716.519705][ T30] audit: type=1400 audit(2000000247.130:1266): avc: denied { connect } for pid=11938 comm="syz.4.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 716.540516][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.931076][T11951] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 716.954251][T11951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.411961][T11950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.588338][T11830] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 717.634992][T11830] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 717.684190][T11941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.851427][T11830] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 717.879530][ T5950] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 718.160232][T11830] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 718.409472][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 718.432283][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 718.684041][T11974] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 718.989733][ T30] audit: type=1400 audit(2000000249.470:1267): avc: denied { map } for pid=11969 comm="syz.0.1183" path="socket:[33256]" dev="sockfs" ino=33256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 719.313810][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.459979][ T5950] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 719.469118][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.477236][ T5950] usb 3-1: Product: syz [ 719.481521][ T5950] usb 3-1: Manufacturer: syz [ 719.486153][ T5950] usb 3-1: SerialNumber: syz [ 719.493036][ T5950] usb 3-1: config 0 descriptor?? [ 719.954227][ T5950] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 719.964397][ T5950] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 721.286133][ T5950] usb 3-1: USB disconnect, device number 22 [ 722.821124][ T30] audit: type=1400 audit(2000000253.761:1268): avc: denied { read write } for pid=12034 comm="syz.1.1194" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 722.844723][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.854503][ T30] audit: type=1400 audit(2000000253.791:1269): avc: denied { open } for pid=12034 comm="syz.1.1194" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 722.878016][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.089375][T12038] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 723.112586][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.476681][ T5970] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 723.597158][ T30] audit: type=1400 audit(2000000254.531:1270): avc: denied { connect } for pid=12044 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 723.649267][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 723.667512][ T5970] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.480264][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 724.546957][ T5970] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 724.584973][T11830] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 724.603700][T11830] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 724.621419][T11830] wireguard: wg0: Could not create IPv4 socket [ 724.628791][T11830] wireguard: wg1: Could not create IPv4 socket [ 724.637771][T11830] wireguard: wg2: Could not create IPv4 socket [ 724.722608][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.774393][ T5970] usb 2-1: config 0 descriptor?? [ 724.835022][T12052] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 724.849479][T12052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.225438][T12057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.572325][ T5970] usbhid 2-1:0.0: can't add hid device: -71 [ 725.592592][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 725.652371][ T5970] usb 2-1: USB disconnect, device number 13 [ 726.702023][ T30] audit: type=1400 audit(2000000257.641:1271): avc: denied { bind } for pid=12088 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 726.793248][ T30] audit: type=1400 audit(2000000257.691:1272): avc: denied { listen } for pid=12088 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 727.039002][ T1205] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 727.554489][ T30] audit: type=1400 audit(2000000257.711:1273): avc: denied { accept } for pid=12088 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 728.178945][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 728.216430][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 728.227899][ T1205] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 728.252529][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.261854][ T1205] usb 3-1: Product: syz [ 728.266007][ T1205] usb 3-1: Manufacturer: syz [ 728.270749][ T1205] usb 3-1: SerialNumber: syz [ 728.277044][ T1205] usb 3-1: config 0 descriptor?? [ 728.345895][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.357360][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.365572][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.378655][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.459284][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.522503][T12112] Failed to initialize the IGMP autojoin socket (err -2) [ 728.697022][ T1205] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 729.174599][ T1205] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 729.241640][ T30] audit: type=1400 audit(2000000260.181:1274): avc: denied { remount } for pid=12114 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 730.751364][ T5842] Bluetooth: hci0: command tx timeout [ 730.781015][ T5908] usb 3-1: USB disconnect, device number 23 [ 731.964122][T12162] netlink: 'syz.4.1211': attribute type 10 has an invalid length. [ 732.327474][ T30] audit: type=1400 audit(2000000263.261:1275): avc: denied { create } for pid=12148 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 732.518755][T12162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 732.538873][ T5970] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 732.749685][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 732.790879][ T5970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 732.846452][ T5970] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 732.871298][ T5842] Bluetooth: hci0: command tx timeout [ 732.879448][ T5970] usb 1-1: config 0 has no interface number 0 [ 732.886348][ T5970] usb 1-1: config 0 interface 143 has no altsetting 0 [ 732.899105][ T5970] usb 1-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 732.914732][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.943131][ T5970] usb 1-1: Product: á [ 732.997795][ T5970] usb 1-1: Manufacturer: é¿„ç¤æ›Šá²¢åª˜å†ˆï¹“编ﭶ汮ᩇæ­âœ¨á¬´í†…唾졶꼫ȂìŽî™ªëŠè«Œéœ•å¼ä·…闀ྩ欭촌톜騹ê©é‹·é‘¤ì«¢ãŽ¹é£’â£ä¶†ã½æ›„æì™å±í솹赡࿚ﯢ誰 [ 733.087260][ T5970] usb 1-1: SerialNumber: 뙗瓶ê†ï£¯äŠå¢‚è·â¿¯ê§¼è­ºáª„땂쑆嚥ꔽ䨃腽榾ã‚탞詺泤綜句ߺﲤ࠙穭á¹æ¯±è½¦å»™ë¶¼å‘°ì©¯å™„䊉䲋甼îŸç™œì«‘ꎙ袻â…邦払汨塦헎쭫ᆓ왟ந胴ì롱ₙ感烰册嫰ñƒ¾¿é€ªí‡ åŒ£î¿¹á†©ä‚ [ 733.175147][T12191] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 733.220428][T12188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.274294][ T5970] r8152-cfgselector 1-1: Unknown version 0x0000 [ 733.316995][ T5970] r8152-cfgselector 1-1: config 0 descriptor?? [ 733.347457][ T5970] r8152 1-1:0.143: Expected endpoints are not found [ 733.737818][T12112] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 734.240084][T12112] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 734.327857][T12112] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 734.958568][ T5842] Bluetooth: hci0: command tx timeout [ 735.190009][T12112] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 735.310421][ T5911] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 737.040327][ T5842] Bluetooth: hci0: command tx timeout [ 737.303929][T12230] vxfs: WRONG superblock magic 00000000 at 1 [ 737.310978][T12230] vxfs: WRONG superblock magic 00000000 at 8 [ 737.317026][T12230] vxfs: can't find superblock. [ 737.521019][T12228] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 737.795964][T12238] ALSA: mixer_oss: invalid OSS volume '' [ 738.879415][T12248] SELinux: failed to load policy [ 740.776307][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 740.791106][T12269] IPVS: Error during creation of socket; terminating [ 743.055321][T12294] overlayfs: conflicting lowerdir path [ 743.776494][T12288] 9pnet: Could not find request transport: 0xffffffffffffffff [ 744.700707][T12312] input: syz0 as /devices/virtual/input/input20 [ 744.732647][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'. [ 745.160596][T12112] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 745.296119][T12112] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 745.527329][T12112] wireguard: wg0: Could not create IPv4 socket [ 746.178048][ T30] audit: type=1400 audit(2000000276.432:1276): avc: denied { watch } for pid=12316 comm="syz.2.1234" path="/263/file0" dev="tmpfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 746.369228][T12112] wireguard: wg1: Could not create IPv4 socket [ 746.972333][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.021819][T12112] wireguard: wg2: Could not create IPv4 socket [ 747.792698][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 750.225392][T12381] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 750.270948][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.297807][ T30] audit: type=1400 audit(2000000282.212:1277): avc: denied { bind } for pid=12384 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 751.691949][T12393] kernel profiling enabled (shift: 7) [ 752.556138][ T30] audit: type=1400 audit(2000000282.232:1278): avc: denied { listen } for pid=12384 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.596630][ T30] audit: type=1400 audit(2000000282.262:1279): avc: denied { accept } for pid=12384 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.716246][ T30] audit: type=1400 audit(2000000282.262:1280): avc: denied { write } for pid=12384 comm="syz.2.1245" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 756.092631][T12447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.634754][T12456] syz.2.1253: attempt to access beyond end of device [ 756.634754][T12456] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 757.727345][ T5950] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 758.326929][ T5950] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 758.360091][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 758.383415][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 758.467522][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 758.476709][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 758.485611][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.487480][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.125069][T12473] Failed to initialize the IGMP autojoin socket (err -2) [ 759.135334][ T5950] usb 2-1: Product: syz [ 759.197986][ T5950] usb 2-1: Manufacturer: syz [ 759.578626][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 760.180978][ T5950] usb 2-1: SerialNumber: syz [ 760.192670][ T5950] usb 2-1: config 0 descriptor?? [ 760.221825][ T5950] usb 2-1: can't set config #0, error -71 [ 760.229192][ T5950] usb 2-1: USB disconnect, device number 14 [ 760.606903][ T5834] Bluetooth: hci0: command tx timeout [ 762.536486][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 762.627211][ T5834] Bluetooth: hci0: command tx timeout [ 762.777559][ T5950] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 763.067371][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 763.073855][ T5950] usb 2-1: config 3 has an invalid interface number: 71 but max is 0 [ 763.120459][ T5950] usb 2-1: config 3 has no interface number 0 [ 763.126690][ T5950] usb 2-1: config 3 interface 71 has no altsetting 0 [ 763.160223][ T5950] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 763.209133][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.418771][ T5950] usb 2-1: Product: syz [ 763.423517][ T5950] usb 2-1: Manufacturer: syz [ 763.437216][ T5950] usb 2-1: SerialNumber: syz [ 763.960125][ T5950] usb 2-1: can't set config #3, error -71 [ 764.022469][ T5950] usb 2-1: USB disconnect, device number 15 [ 765.083459][ T5834] Bluetooth: hci0: command tx timeout [ 765.222599][T12539] Failed to initialize the IGMP autojoin socket (err -2) [ 766.711731][T12562] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 766.735130][T12562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.106802][ T5834] Bluetooth: hci0: command tx timeout [ 770.227516][T12557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 770.253527][T12557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 770.461033][T12557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 770.480258][T12557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 770.486255][T12557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 770.548019][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 771.078561][T12557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 771.175162][T12473] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 771.223324][T12473] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 771.330204][T12473] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 771.452749][T12599] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 771.522742][T12473] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 772.456031][T12618] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 772.480256][T12618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.556672][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 772.562861][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 772.569938][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.626410][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.949615][T12643] veth1_to_batadv: entered promiscuous mode [ 776.714983][T12663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 776.915094][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 778.171584][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 778.180867][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 778.226723][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 778.235681][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 778.250234][ T30] audit: type=1400 audit(2000000309.114:1281): avc: denied { write } for pid=12675 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 779.285613][T12473] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 779.415815][T12473] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 779.469278][T12698] bridge0: entered allmulticast mode [ 779.504491][T12473] wireguard: wg0: Could not create IPv4 socket [ 779.677395][T12473] wireguard: wg1: Could not create IPv4 socket [ 779.707441][T12473] wireguard: wg2: Could not create IPv4 socket [ 780.591661][ T30] audit: type=1400 audit(2000000311.534:1282): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 780.739328][T12715] netlink: 'syz.0.1292': attribute type 4 has an invalid length. [ 780.755620][T12715] lo: left promiscuous mode [ 780.765278][T12712] Failed to initialize the IGMP autojoin socket (err -2) [ 782.201190][T12725] autofs: Unknown parameter 'ªªª' [ 782.309674][T12725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1293'. [ 782.318816][ T5911] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 783.025119][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 783.217476][ T5911] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 783.225587][ T5911] usb 2-1: config 0 has no interface number 0 [ 783.234077][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 783.248582][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.371025][ T5911] usb 2-1: Product: syz [ 783.415269][ T5911] usb 2-1: Manufacturer: syz [ 783.420044][ T5911] usb 2-1: SerialNumber: syz [ 783.433084][ T5911] usb 2-1: config 0 descriptor?? [ 783.451694][ T5911] smsc95xx v2.0.0 [ 783.459825][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 783.486406][ T5911] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 785.155440][ T24] usb 2-1: USB disconnect, device number 16 [ 785.307198][ T5911] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 785.645846][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 785.908171][ T5911] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 786.499945][ T5911] usb 3-1: config 0 has no interface number 0 [ 786.523121][ T5911] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 786.566225][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.584896][ T5911] usb 3-1: config 0 descriptor?? [ 786.713093][ T5911] hub 3-1:0.3: bad descriptor, ignoring hub [ 786.725655][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 786.732732][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 786.737540][ T5911] hub 3-1:0.3: probe with driver hub failed with error -5 [ 787.230365][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 787.249104][ T5911] sierra 3-1:0.3: Sierra USB modem converter detected [ 787.293152][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 787.304418][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 787.312761][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 787.321940][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 787.329611][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 787.338561][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.348712][ T24] usb 2-1: Product: syz [ 787.352954][ T24] usb 2-1: Manufacturer: syz [ 787.357742][ T24] usb 2-1: SerialNumber: syz [ 787.367662][ T24] usb 2-1: config 0 descriptor?? [ 787.376502][T12802] Failed to initialize the IGMP autojoin socket (err -2) [ 787.485897][ T5911] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 788.102524][ T5911] usb 3-1: USB disconnect, device number 24 [ 788.116829][ T5834] Bluetooth: hci3: unexpected event for opcode 0x200e [ 788.118971][ T24] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 788.123756][ T5842] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 788.151306][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 788.170494][ T5911] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 788.201319][ T5911] sierra 3-1:0.3: device disconnected [ 789.436025][ T5834] Bluetooth: hci0: command tx timeout [ 790.607954][ T1205] usb 2-1: USB disconnect, device number 17 [ 791.765710][ T5834] Bluetooth: hci0: command tx timeout [ 792.145379][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 792.154322][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 792.165135][ T5842] Bluetooth: hci3: hardware error 0x00 [ 792.687190][T12867] rdma_rxe: rxe_newlink: failed to add wg0 [ 793.175612][T12870] trusted_key: syz.1.1309 sent an empty control message without MSG_MORE. [ 793.832565][ T5834] Bluetooth: hci0: command tx timeout [ 794.236968][ T5842] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 794.378982][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 794.440434][T12895] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 794.883266][T12802] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 795.323549][T12802] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 795.367487][T12802] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 795.375213][ T1205] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 795.447780][T12802] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 795.576718][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 795.597900][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 795.626616][ T1205] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 795.637112][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.655800][ T1205] usb 3-1: Product: syz [ 795.665304][ T1205] usb 3-1: Manufacturer: syz [ 795.673011][ T1205] usb 3-1: SerialNumber: syz [ 795.691061][ T1205] usb 3-1: config 0 descriptor?? [ 795.959297][ T5842] Bluetooth: hci0: command tx timeout [ 796.197992][ T1205] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 796.237044][ T1205] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 798.042869][ T1205] usb 3-1: USB disconnect, device number 25 [ 799.218692][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 799.228144][T12957] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 799.235508][T12957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.661934][T12973] rdma_rxe: rxe_newlink: failed to add wg0 [ 802.676430][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 803.126941][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 803.317181][T12992] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 803.326465][T12992] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 803.368515][T12993] netlink: 'syz.0.1329': attribute type 2 has an invalid length. [ 803.376448][T12993] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1329'. [ 803.399795][T12993] fuse: Bad value for 'fd' [ 803.447246][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 803.805695][ T30] audit: type=1400 audit(2000000334.725:1283): avc: denied { read append } for pid=12994 comm="syz.4.1330" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 804.036312][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 804.120384][ T30] audit: type=1400 audit(2000000334.725:1284): avc: denied { open } for pid=12994 comm="syz.4.1330" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 804.221570][T12972] ceph: No mds server is up or the cluster is laggy [ 804.315346][ T30] audit: type=1400 audit(2000000335.235:1285): avc: denied { block_suspend } for pid=12994 comm="syz.4.1330" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 804.513918][T12802] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 805.301203][T13012] 9pnet_virtio: no channels available for device syz [ 805.574590][T12802] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 805.592138][T13009] wireguard: wg1: Could not create IPv4 socket [ 805.600856][T12802] wireguard: wg0: Could not create IPv4 socket [ 805.609358][T12802] wireguard: wg1: Could not create IPv4 socket [ 805.617781][T12802] wireguard: wg2: Could not create IPv4 socket [ 806.814562][ T5970] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 807.054555][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 807.067382][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 807.092714][ T5970] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 807.105272][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.113507][ T5970] usb 2-1: Product: syz [ 807.122278][ T5970] usb 2-1: Manufacturer: syz [ 807.130860][ T5970] usb 2-1: SerialNumber: syz [ 807.564746][ T5970] usb 2-1: config 0 descriptor?? [ 807.676248][ T5950] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 807.854692][ T5950] usb 5-1: device descriptor read/64, error -71 [ 808.002547][ T5842] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 808.014188][ T5970] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 808.039300][ T5970] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 808.134555][ T5950] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 808.153580][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.295585][ T5950] usb 5-1: device descriptor read/64, error -71 [ 808.419539][ T5950] usb usb5-port1: attempt power cycle [ 808.764856][ T5950] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 808.797969][ T5950] usb 5-1: device descriptor read/8, error -71 [ 809.195115][ T5950] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 809.264643][ T5950] usb 5-1: device descriptor read/8, error -71 [ 809.397506][ T5950] usb usb5-port1: unable to enumerate USB device [ 810.273160][T13033] delete_channel: no stack [ 810.439458][ T9232] usb 2-1: USB disconnect, device number 18 [ 811.355821][T13090] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 811.432226][T13090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.284889][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.293622][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.391999][T13108] usb usb9: usbfs: process 13108 (syz.1.1345) did not claim interface 0 before use [ 812.785394][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.798494][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.808875][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 814.160940][T13099] Failed to initialize the IGMP autojoin socket (err -2) [ 815.845571][T13133] ceph: No mds server is up or the cluster is laggy [ 815.852628][ T9232] libceph: mon0 (1)[c::]:6789 connect error [ 816.433921][ T5842] Bluetooth: hci0: command tx timeout [ 816.856903][ T1205] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 817.033946][ T1205] usb 3-1: device descriptor read/64, error -71 [ 817.344208][ T1205] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 817.523969][ T1205] usb 3-1: device descriptor read/64, error -71 [ 817.666350][ T1205] usb usb3-port1: attempt power cycle [ 818.065168][ T1205] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 818.069722][T13099] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 818.132422][T13099] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 818.154520][ T1205] usb 3-1: device descriptor read/8, error -71 [ 818.280096][T13099] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 818.355503][T13099] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 818.413904][ T5911] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 818.421616][ T1205] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 818.441041][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 818.652635][ T5842] Bluetooth: hci0: command tx timeout [ 819.114350][T13186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.162751][ T1205] usb 3-1: device descriptor read/8, error -71 [ 820.283782][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 820.303787][ T1205] usb usb3-port1: unable to enumerate USB device [ 820.317779][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 820.339941][ T5911] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 820.359266][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.373706][ T5911] usb 1-1: Product: syz [ 820.377884][ T5911] usb 1-1: Manufacturer: syz [ 820.389422][ T5911] usb 1-1: SerialNumber: syz [ 820.396569][ T5911] usb 1-1: config 0 descriptor?? [ 820.703859][ T5842] Bluetooth: hci0: command tx timeout [ 820.866866][T13200] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 820.888069][T13200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.494223][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 821.506850][ T5911] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 821.523897][ T5911] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 821.993015][T13209] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 822.017125][T13209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.703745][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 822.864145][ T5842] Bluetooth: hci0: command tx timeout [ 823.018184][ T9232] usb 1-1: USB disconnect, device number 13 [ 824.487827][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'. [ 824.875436][T13246] batadv_slave_0: entered promiscuous mode [ 825.059008][ T30] audit: type=1326 audit(2000000355.926:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.365659][ T30] audit: type=1326 audit(2000000355.936:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.424093][ T30] audit: type=1326 audit(2000000355.936:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.460455][ T30] audit: type=1326 audit(2000000355.936:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.484287][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 825.518979][ T30] audit: type=1326 audit(2000000355.936:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.617696][ T30] audit: type=1326 audit(2000000355.936:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.644831][T13099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 825.654701][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 825.696781][ T24] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 825.719888][T13099] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 825.737635][ T24] usb 5-1: config 0 has no interface number 0 [ 825.760167][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 825.770927][ T30] audit: type=1326 audit(2000000355.936:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.778561][T13099] wireguard: wg0: Could not create IPv4 socket [ 825.794415][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.839961][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.866737][ T24] usb 5-1: Product: syz [ 825.870118][T13099] wireguard: wg1: Could not create IPv4 socket [ 825.886763][ T24] usb 5-1: Manufacturer: syz [ 825.891420][ T24] usb 5-1: SerialNumber: syz [ 825.907142][T13099] wireguard: wg2: Could not create IPv4 socket [ 825.934258][ T24] usb 5-1: config 0 descriptor?? [ 825.957055][ T30] audit: type=1326 audit(2000000355.936:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 825.981207][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.074228][ T30] audit: type=1326 audit(2000000355.946:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557218e929 code=0x7ffc0000 [ 826.097718][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.273002][ T30] audit: type=1326 audit(2000000355.946:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557218d290 code=0x7ffc0000 [ 826.296565][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.470713][T13279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.653509][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 827.769825][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.155/input/input21 [ 827.923537][ T5911] usb 1-1: device descriptor read/64, error -71 [ 828.673345][ T5911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 829.103324][ T5911] usb 1-1: device descriptor read/64, error -71 [ 829.226209][ T5911] usb usb1-port1: attempt power cycle [ 829.286040][ T5186] bcm5974 5-1:0.155: could not read from device [ 829.454117][ T24] usb 5-1: USB disconnect, device number 36 [ 829.595017][T13295] can0: slcan on ttyS3. [ 830.059368][T13295] can0 (unregistered): slcan off ttyS3. [ 831.868334][T13364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 832.573912][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 833.657336][T13381] ceph: No mds server is up or the cluster is laggy [ 833.665035][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 833.879979][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 833.914537][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 833.922224][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 833.930203][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 833.937547][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.960322][T13390] Failed to initialize the IGMP autojoin socket (err -2) [ 834.352514][T13399] usb usb8: usbfs: process 13399 (syz.2.1377) did not claim interface 0 before use [ 834.724956][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 834.724972][ T30] audit: type=1400 audit(2000000365.657:1326): avc: denied { link } for pid=13409 comm="syz.1.1380" name="#2b" dev="tmpfs" ino=1698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 835.640037][ T30] audit: type=1400 audit(2000000365.657:1327): avc: denied { rename } for pid=13409 comm="syz.1.1380" name="#2c" dev="tmpfs" ino=1698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 835.662461][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.670318][ T30] audit: type=1800 audit(2000000365.707:1328): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1380" name="bus" dev="overlay" ino=1696 res=0 errno=0 [ 836.055451][ T5842] Bluetooth: hci0: command tx timeout [ 837.293980][ T1205] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 837.452863][ T1205] usb 1-1: device descriptor read/64, error -71 [ 838.102831][ T5842] Bluetooth: hci0: command tx timeout [ 838.183446][ T1205] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 838.316744][ T30] audit: type=1400 audit(2000000369.247:1329): avc: denied { recv } for pid=5201 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.130 dest=41852 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 838.358511][ T1205] usb 1-1: device descriptor read/64, error -71 [ 838.569858][T13449] Failed to initialize the IGMP autojoin socket (err -2) [ 839.025678][T13453] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 839.567136][ T1205] usb usb1-port1: attempt power cycle [ 839.593696][T13452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.645860][T13454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.142943][ T5842] Bluetooth: hci0: command tx timeout [ 840.310848][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 840.319859][T13464] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 840.327135][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.790997][T13390] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 841.065785][T13469] siw: device registration error -23 [ 841.470620][T13390] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 842.242544][ T5842] Bluetooth: hci0: command tx timeout [ 842.406829][T13390] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 842.824675][T13390] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 843.498242][T13497] Bluetooth: (null): Invalid header checksum [ 846.530115][T13527] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 846.551505][T13527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.289540][ T5970] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 847.297402][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 848.471690][ T30] audit: type=1400 audit(2000000378.537:1330): avc: denied { shutdown } for pid=13536 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 848.523643][ T24] usb 5-1: device descriptor read/64, error -71 [ 848.542175][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 848.573633][ T5970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 848.585616][ T5970] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 848.636468][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.644651][ T9232] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 848.787221][ T5970] usb 1-1: Product: syz [ 848.796752][ T5970] usb 1-1: Manufacturer: syz [ 848.801398][ T5970] usb 1-1: SerialNumber: syz [ 849.071516][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 849.300920][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 849.305725][ T5970] usb 1-1: config 0 descriptor?? [ 849.315060][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 849.352232][ T9232] usb 2-1: device descriptor read/64, error -71 [ 849.377119][ T5970] usb 1-1: can't set config #0, error -71 [ 849.542874][T13553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 849.653151][ T5970] usb 1-1: USB disconnect, device number 20 [ 849.810260][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 849.855560][ T9232] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 850.764637][T13567] hsr0: entered promiscuous mode [ 850.908375][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 850.991736][T13567] hsr_slave_0: left promiscuous mode [ 851.362046][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 851.796225][T13585] vxfs: WRONG superblock magic 00000000 at 1 [ 851.803437][T13585] vxfs: WRONG superblock magic 00000000 at 8 [ 851.809491][T13585] vxfs: can't find superblock. [ 852.160945][T13584] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 852.561416][T13567] hsr_slave_1: left promiscuous mode [ 852.717738][T13567] hsr0 (unregistering): left promiscuous mode [ 852.929446][T13390] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 852.950805][T13390] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 852.996884][T13390] wireguard: wg0: Could not create IPv4 socket [ 853.019871][T13390] wireguard: wg1: Could not create IPv4 socket [ 853.040016][T13390] wireguard: wg2: Could not create IPv4 socket [ 854.091877][ T5970] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 854.232208][ T5970] usb 5-1: device descriptor read/64, error -71 [ 854.491851][ T5970] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 854.641823][ T5970] usb 5-1: device descriptor read/64, error -71 [ 854.773451][ T5970] usb usb5-port1: attempt power cycle [ 855.135594][ T5970] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 855.169252][ T5970] usb 5-1: device descriptor read/8, error -71 [ 855.901908][ T5970] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 855.932260][ T5970] usb 5-1: device descriptor read/8, error -71 [ 856.200723][ T5970] usb usb5-port1: unable to enumerate USB device [ 856.419838][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 856.430859][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 856.455237][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 856.478249][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 856.491239][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 856.805837][T13678] Failed to initialize the IGMP autojoin socket (err -2) [ 857.141568][ T5970] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 857.648252][ T30] audit: type=1400 audit(2000000388.588:1331): avc: denied { read } for pid=13676 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 857.724631][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 857.759703][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 857.786131][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.800038][ T1205] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 857.835376][ T5970] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 857.987844][ T1205] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 858.003455][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.134006][ T1205] usb 3-1: config 0 descriptor?? [ 858.219580][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.363921][ T5970] usb 5-1: config 0 descriptor?? [ 858.548169][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.559023][ T5834] Bluetooth: hci0: command tx timeout [ 858.567664][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.587908][T13684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 858.653571][T13717] netlink: 'syz.1.1422': attribute type 2 has an invalid length. [ 858.661420][T13717] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 858.669956][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 859.720818][T13728] Bluetooth: MGMT ver 1.23 [ 859.933855][ T1205] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 859.955786][ T1205] [drm:udl_init] *ERROR* Selecting channel failed [ 860.055464][T13727] block device autoloading is deprecated and will be removed. [ 860.065063][ T1205] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 860.085141][T13727] syz.1.1423: attempt to access beyond end of device [ 860.085141][T13727] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 860.092581][ T1205] [drm] Initialized udl on minor 2 [ 860.130548][ T1205] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 860.204427][ T1205] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 860.233920][T13456] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 860.286264][ T1205] usb 3-1: USB disconnect, device number 30 [ 860.292850][T13456] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 860.716690][T13737] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 860.743452][T13737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.802289][ T5834] Bluetooth: hci0: command tx timeout [ 861.710435][T13743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13743 comm=syz.2.1425 [ 862.416122][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 862.425720][T13757] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 862.433120][T13757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.862884][ T5834] Bluetooth: hci0: command tx timeout [ 863.022395][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 863.064082][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 863.112426][ T5970] usb 5-1: USB disconnect, device number 43 [ 863.381543][ T9232] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 863.444245][T13770] overlayfs: conflicting lowerdir path [ 863.667574][T13768] 9pnet: Could not find request transport: 0xffffffffffffffff [ 863.809639][T13678] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 863.981310][ T9232] usb 3-1: Using ep0 maxpacket: 32 [ 864.020352][T13678] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 864.037188][ T9232] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 864.071389][ T9232] usb 3-1: config 0 has no interface number 0 [ 864.095438][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 864.113033][T13678] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 864.122831][ T9232] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 864.152564][ T9232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.176549][ T9232] usb 3-1: Product: syz [ 864.181176][ T9232] usb 3-1: Manufacturer: syz [ 864.205527][ T9232] usb 3-1: SerialNumber: syz [ 864.209521][T13678] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 864.226059][ T9232] usb 3-1: config 0 descriptor?? [ 864.285609][ T9232] smsc95xx v2.0.0 [ 864.289579][ T9232] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 864.329475][ T9232] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 864.591369][ T5828] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 864.821769][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 864.932033][T13781] veth0_to_team: entered promiscuous mode [ 864.937814][T13781] veth0_to_team: entered allmulticast mode [ 864.981224][ T5834] Bluetooth: hci0: command tx timeout [ 865.340618][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 865.349269][ T5828] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 865.358966][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.378575][ T5828] usb 2-1: Product: syz [ 865.397287][ T5828] usb 2-1: Manufacturer: syz [ 865.415855][ T5828] usb 2-1: SerialNumber: syz [ 865.446337][ T5828] usb 2-1: config 0 descriptor?? [ 865.910626][T13790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.185558][T13788] siw: device registration error -23 [ 866.210448][ T5834] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 866.221029][ T5828] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 866.238880][ T5828] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 866.267879][ T5890] usb 3-1: USB disconnect, device number 31 [ 866.602062][T13800] ubi: mtd0 is already attached to ubi31 [ 866.995790][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 867.057849][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 867.736757][T12811] usb 2-1: USB disconnect, device number 21 [ 868.153277][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 868.162293][T13824] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 868.169518][T13824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.908774][T13829] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 868.952512][T13828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.478237][T13678] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 869.589551][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.630000][T13678] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 869.802984][T13839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1445'. [ 870.064383][ T9232] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 870.215422][ T30] audit: type=1400 audit(2000000401.109:1332): avc: denied { read } for pid=13819 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 870.447427][T13678] wireguard: wg0: Could not create IPv4 socket [ 870.484137][T13678] wireguard: wg1: Could not create IPv4 socket [ 870.520011][T13678] wireguard: wg2: Could not create IPv4 socket [ 870.621555][ T9232] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 870.630021][ T9232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.197718][ T9232] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 871.223057][ T9232] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 871.234931][ T9232] usb 3-1: Manufacturer: syz [ 871.247514][ T9232] usb 3-1: config 0 descriptor?? [ 871.300913][ T9232] rc_core: IR keymap rc-hauppauge not found [ 871.306884][ T9232] Registered IR keymap rc-empty [ 871.520168][ T9232] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 871.732781][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1447'. [ 871.742284][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1447'. [ 872.155250][ T30] audit: type=1400 audit(2000000402.499:1333): avc: denied { getopt } for pid=13853 comm="syz.0.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 872.183361][ T9232] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 873.683176][T13456] usb 3-1: USB disconnect, device number 32 [ 875.044488][T13931] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 875.994033][T13940] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 876.015352][T13938] netlink: 'syz.1.1451': attribute type 12 has an invalid length. [ 876.886145][T13943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1452'. [ 877.016137][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 877.386423][T13960] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 877.409114][T13960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.037323][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 878.095209][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 878.104085][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 878.117747][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 878.128036][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 878.173065][T13965] Failed to initialize the IGMP autojoin socket (err -2) [ 880.220421][ T5842] Bluetooth: hci0: command tx timeout [ 880.860564][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 880.867976][ T5842] Bluetooth: hci5: command 0x1003 tx timeout [ 881.415954][T13965] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 881.627499][T13965] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 882.310260][ T5834] Bluetooth: hci0: command tx timeout [ 882.356029][T13965] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 882.773717][T13965] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 883.497265][T14082] hub 8-0:1.0: USB hub found [ 883.504351][T14082] hub 8-0:1.0: 1 port detected [ 884.586807][T14094] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 884.608352][T14094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.639238][ T5834] Bluetooth: hci0: command tx timeout [ 884.792519][T14106] vxcan1: tx address claim with different name [ 886.730866][ T51] Bluetooth: hci0: command tx timeout [ 887.041839][T13965] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 887.120032][T13965] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 887.207139][T13965] wireguard: wg0: Could not create IPv4 socket [ 887.236112][T13965] wireguard: wg1: Could not create IPv4 socket [ 887.273604][T13965] wireguard: wg2: Could not create IPv4 socket [ 887.341572][T14162] Bluetooth: MGMT ver 1.23 [ 887.349680][ T30] audit: type=1400 audit(2000000418.290:1334): avc: denied { write } for pid=14161 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 887.378807][ T30] audit: type=1400 audit(2000000418.320:1335): avc: denied { setopt } for pid=14161 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 887.788955][T14174] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 887.802461][T14174] Error validating options; rc = [-22] [ 888.289220][T14184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14184 comm=syz.0.1482 [ 888.540035][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 888.852549][T14201] netlink: 'syz.1.1483': attribute type 33 has an invalid length. [ 888.860491][T14201] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1483'. [ 889.245505][T14204] usb usb8: usbfs: process 14204 (syz.4.1479) did not claim interface 0 before use [ 890.717127][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1484'. [ 891.313861][T14247] Failed to initialize the IGMP autojoin socket (err -2) [ 893.836096][T14142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.845578][T14142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.853287][T14142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.862764][T14142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.870520][T14142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.920360][T14279] Failed to initialize the IGMP autojoin socket (err -2) [ 895.069146][T14294] bpq0: left promiscuous mode [ 895.620287][T12811] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 895.899567][ T5834] Bluetooth: hci0: command tx timeout [ 895.917815][T12811] usb 3-1: device descriptor read/64, error -71 [ 895.961514][T14303] bridge0: port 3(dummy0) entered disabled state [ 895.968066][T14303] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.975353][T14303] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.445854][T14303] bridge0: entered allmulticast mode [ 896.584031][T12811] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 896.707106][T14313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1498'. [ 896.781604][T12811] usb 3-1: device descriptor read/64, error -71 [ 896.891135][T12811] usb usb3-port1: attempt power cycle [ 897.851442][T14327] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 897.875846][T14327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.074011][ T5834] Bluetooth: hci0: command tx timeout [ 899.474466][T14345] Device name cannot be null; rc = [-22] [ 899.771877][T14343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14343 comm=syz.0.1506 [ 899.859369][T14349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1506'. [ 899.886204][T14349] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 899.894153][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 899.903333][T14349] dummy0: entered promiscuous mode [ 899.911852][T14349] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 900.154695][ T5834] Bluetooth: hci0: command tx timeout [ 900.343737][T14279] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 900.394911][T14351] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 900.973435][T14279] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 901.038178][T14279] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 901.064813][T14333] syz.4.1502 (14333): drop_caches: 2 [ 901.110879][T14279] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 901.213447][ T30] audit: type=1326 audit(2000000432.151:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e2f8e929 code=0x7fc00000 [ 901.839419][T13456] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 902.170355][T13456] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 902.229451][ T5834] Bluetooth: hci0: command tx timeout [ 902.409139][T13456] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 902.418623][T13456] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.450335][T13456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.382992][ T30] audit: type=1400 audit(2000000434.331:1337): avc: denied { read } for pid=14362 comm="syz.0.1509" path="socket:[45252]" dev="sockfs" ino=45252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 903.810532][T14279] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 903.872596][T14279] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 904.029716][T14279] wireguard: wg0: Could not create IPv4 socket [ 904.042503][T14279] wireguard: wg1: Could not create IPv4 socket [ 904.051937][T14279] wireguard: wg2: Could not create IPv4 socket [ 906.423910][ T24] usb 5-1: USB disconnect, device number 44 [ 906.832931][ T30] audit: type=1400 audit(2000000437.781:1338): avc: denied { create } for pid=14448 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 907.822688][T14481] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 907.837828][T14481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.853976][ T5828] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 907.872250][T14477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14477 comm=syz.0.1525 [ 908.248474][T14484] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 908.256712][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1525'. [ 908.376106][T14485] netlink: 'syz.1.1526': attribute type 10 has an invalid length. [ 908.392693][ T5828] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 908.412406][T14484] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 908.428489][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.462529][ T5828] usb 3-1: Product: syz [ 908.466718][ T5828] usb 3-1: Manufacturer: syz [ 908.513095][ T5828] usb 3-1: SerialNumber: syz [ 908.533251][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 908.543753][ T5828] usb 3-1: config 0 descriptor?? [ 908.560548][ T5828] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 908.572966][T14489] dummy0: left allmulticast mode [ 908.589771][ T5828] usb 3-1: setting power ON [ 908.593021][T14489] bridge0: port 3(dummy0) entered disabled state [ 908.601881][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 908.651113][ T5828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 908.672303][T14489] bridge_slave_1: left allmulticast mode [ 908.690193][T14489] bridge_slave_1: left promiscuous mode [ 908.700044][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.731328][T14489] bridge_slave_0: left allmulticast mode [ 908.740860][T14489] bridge_slave_0: left promiscuous mode [ 908.797337][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 908.808249][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.854310][ T5828] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 910.087637][T14535] option changes via remount are deprecated (pid=14529 comm=syz.4.1529) [ 910.508662][ T5828] usb 3-1: USB disconnect, device number 36 [ 910.784497][T14544] syzkaller0: entered promiscuous mode [ 910.790135][T14544] syzkaller0: entered allmulticast mode [ 911.790223][T14554] dummy0: left promiscuous mode [ 911.811589][T14554] batadv_slave_0: left promiscuous mode [ 911.842926][T14554] bond1: left promiscuous mode [ 911.851276][T14554] veth3: left promiscuous mode [ 912.146776][T14142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.157514][T14142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.165185][T14142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.184863][T14142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.193252][T14142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.243205][T14553] Failed to initialize the IGMP autojoin socket (err -2) [ 912.527250][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 912.926075][T14579] JFS: discard option not supported on device [ 912.933393][T14579] Mount JFS Failure: -22 [ 912.937708][T14579] jfs_mount failed w/return code = -22 [ 913.064786][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 913.132567][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.387070][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 913.442334][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.532440][T14586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14586 comm=syz.1.1538 [ 913.560301][ T24] usb 1-1: config 0 descriptor?? [ 913.574635][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 913.595546][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 913.642938][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 914.509219][T14142] Bluetooth: hci0: command tx timeout [ 914.939322][ T9232] usb 1-1: USB disconnect, device number 21 [ 915.121804][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 916.293826][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 916.523481][T14650] ip6erspan0: entered allmulticast mode [ 916.853014][T14142] Bluetooth: hci0: command tx timeout [ 916.895497][T14651] vxfs: WRONG superblock magic 00000000 at 1 [ 916.902400][T14651] vxfs: WRONG superblock magic 00000000 at 8 [ 916.908478][T14651] vxfs: can't find superblock. [ 917.261341][T14649] ceph: No mds server is up or the cluster is laggy [ 917.261533][T14654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14654 comm=syz.2.1543 [ 917.272813][ T9232] libceph: mon0 (1)[c::]:6789 connect error [ 917.554409][T14553] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 917.661225][T14553] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 917.744436][ T30] audit: type=1400 audit(2000000448.691:1339): avc: denied { append } for pid=14663 comm="syz.1.1549" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 917.755679][T14553] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 917.869979][T14553] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 918.211535][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1548'. [ 918.221044][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1548'. [ 918.344796][T13456] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 918.561296][T13456] usb 2-1: Using ep0 maxpacket: 8 [ 918.604116][T13456] usb 2-1: unable to get BOS descriptor or descriptor too short [ 918.613244][T13456] usb 2-1: config 1 has an invalid interface number: 65 but max is 0 [ 918.628809][T13456] usb 2-1: config 1 has no interface number 0 [ 918.715147][T13456] usb 2-1: config 1 interface 65 has no altsetting 0 [ 918.744095][T13456] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 918.771005][T13456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.847806][T13456] usb 2-1: Product: syz [ 918.857349][T13456] usb 2-1: Manufacturer: syz [ 918.870408][T13456] usb 2-1: SerialNumber: syz [ 919.395463][T14142] Bluetooth: hci0: command tx timeout [ 919.432116][T14695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14695 comm=syz.0.1552 [ 919.477632][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 921.419298][T14142] Bluetooth: hci0: command tx timeout [ 921.523754][T14553] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 921.591595][T14553] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 922.309602][T14553] wireguard: wg0: Could not create IPv4 socket [ 922.490961][T14553] wireguard: wg1: Could not create IPv4 socket [ 922.509405][T14553] wireguard: wg2: Could not create IPv4 socket [ 922.581716][T13456] kalmia 2-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 922.630015][T13456] kalmia 2-1:1.65: probe with driver kalmia failed with error -22 [ 922.733832][T13456] usb 2-1: USB disconnect, device number 22 [ 923.137923][T14744] option changes via remount are deprecated (pid=14738 comm=syz.0.1558) [ 923.844967][T14740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1559'. [ 924.048340][ T30] audit: type=1400 audit(2000000454.952:1340): avc: denied { execstack } for pid=14743 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 924.233141][ T30] audit: type=1400 audit(2000000455.182:1341): avc: denied { getopt } for pid=14752 comm="syz.1.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.271306][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 924.309443][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 924.322627][T14755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'. [ 924.335011][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 924.359633][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 925.035735][T14767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'. [ 925.045245][T14767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'. [ 925.457834][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 925.621581][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 925.636996][ T24] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 925.675841][ T24] usb 1-1: config 3 has no interface number 0 [ 925.697934][ T24] usb 1-1: config 3 interface 71 has no altsetting 0 [ 925.731539][ T24] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 925.750998][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.778074][ T24] usb 1-1: Product: syz [ 925.782291][ T24] usb 1-1: Manufacturer: syz [ 925.807323][ T24] usb 1-1: SerialNumber: syz [ 926.526107][ T24] go7007 1-1:3.71: Sensoray 2250 found [ 926.775909][ T24] go7007 1-1:3.71: probe with driver go7007 failed with error -12 [ 926.807055][ T24] usb 1-1: USB disconnect, device number 22 [ 927.275816][T14813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14813 comm=syz.1.1565 [ 927.790617][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 928.471371][T14834] ceph: No mds server is up or the cluster is laggy [ 928.480298][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 928.957723][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 928.968647][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.976588][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.987107][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.001430][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 929.043773][T14841] Failed to initialize the IGMP autojoin socket (err -2) [ 929.498990][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 929.764277][T14862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14862 comm=syz.2.1571 [ 930.091675][T14857] mkiss: ax0: crc mode is auto. [ 930.234211][T14871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1572'. [ 930.731659][T14879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14879 comm=syz.4.1574 [ 930.856449][T14882] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 930.864706][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'. [ 930.877437][T14882] dummy0: entered promiscuous mode [ 930.889703][T14882] bridge0: port 3(dummy0) entered blocking state [ 930.898109][T14882] bridge0: port 3(dummy0) entered disabled state [ 930.906185][T14882] dummy0: entered allmulticast mode [ 930.919298][T14882] bridge0: port 3(dummy0) entered blocking state [ 930.925968][T14882] bridge0: port 3(dummy0) entered forwarding state [ 930.938493][ T9232] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 931.026183][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.160051][ T5834] Bluetooth: hci0: command tx timeout [ 931.288993][ T9232] usb 3-1: Using ep0 maxpacket: 16 [ 931.370731][ T9232] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 931.426561][ T9232] usb 3-1: config 3 has no interface number 0 [ 931.448421][ T9232] usb 3-1: config 3 interface 71 has no altsetting 0 [ 931.473723][ T9232] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 931.563245][ T9232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.564462][T14894] syz.4.1577: attempt to access beyond end of device [ 931.564462][T14894] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 931.702867][T14894] Bluetooth: MGMT ver 1.23 [ 931.879265][ T9232] usb 3-1: Product: syz [ 931.883458][ T9232] usb 3-1: Manufacturer: syz [ 931.927506][ T9232] usb 3-1: SerialNumber: syz [ 932.089691][T14841] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 932.298860][T14841] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 932.345405][T14841] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 932.516765][T14906] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 932.653632][ T9232] go7007 3-1:3.71: Sensoray 2250 found [ 932.696222][ T9232] go7007 3-1:3.71: probe with driver go7007 failed with error -12 [ 932.789022][ T9232] usb 3-1: USB disconnect, device number 37 [ 932.965444][ T1205] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 932.987738][T14841] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 933.127502][ T1205] usb 2-1: Using ep0 maxpacket: 32 [ 933.163330][ T1205] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 933.187548][ T5834] Bluetooth: hci0: command tx timeout [ 933.516649][ T9232] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 933.560898][ T1205] usb 2-1: config 0 has no interface number 0 [ 933.570054][ T1205] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 933.583594][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.598089][ T1205] usb 2-1: Product: syz [ 933.609317][ T1205] usb 2-1: Manufacturer: syz [ 933.613931][ T1205] usb 2-1: SerialNumber: syz [ 933.641854][ T1205] usb 2-1: config 0 descriptor?? [ 933.659584][ T1205] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 933.720503][ T9232] usb 1-1: Using ep0 maxpacket: 16 [ 933.731691][ T9232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.758919][ T9232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.782581][ T9232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 933.802050][ T9232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.823957][ T9232] usb 1-1: Product: syz [ 933.834623][ T9232] usb 1-1: Manufacturer: syz [ 933.846710][ T9232] usb 1-1: SerialNumber: syz [ 933.874477][ T1205] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 933.907341][ T1205] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 934.143986][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 934.333003][T14934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14934 comm=syz.2.1582 [ 935.261680][T14841] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 935.320475][ T30] audit: type=1400 audit(2000000466.262:1342): avc: denied { setopt } for pid=14901 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 935.337421][ T5834] Bluetooth: hci0: command tx timeout [ 935.347101][T14902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1580'. [ 935.368308][T14841] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 935.408147][T14841] wireguard: wg0: Could not create IPv4 socket [ 935.429172][T14841] wireguard: wg1: Could not create IPv4 socket [ 935.439937][T14841] wireguard: wg2: Could not create IPv4 socket [ 935.459699][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 935.460045][ T5828] usb 2-1: USB disconnect, device number 23 [ 935.484388][T14948] fuse: Bad value for 'fd' [ 935.672309][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 935.686845][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 935.698806][ T5828] quatech2 2-1:0.51: device disconnected [ 935.879853][T14956] siw: device registration error -23 [ 936.252179][ T9232] usb 1-1: USB disconnect, device number 23 [ 936.311874][T10081] udevd[10081]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.438800][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 936.721738][ T30] audit: type=1400 audit(2000000467.672:1343): avc: denied { setopt } for pid=14964 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 936.741307][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.431153][T14985] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 937.445851][T14985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.137304][T12811] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 938.241782][ T30] audit: type=1326 audit(2000000468.823:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 938.304562][T12811] usb 1-1: Using ep0 maxpacket: 32 [ 938.335186][T12811] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 938.407841][T12811] usb 1-1: config 0 has no interface number 0 [ 938.421537][ T30] audit: type=1326 audit(2000000468.823:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 938.483141][T12811] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 938.543789][T12811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.593744][T12811] usb 1-1: Product: syz [ 938.601463][ T30] audit: type=1326 audit(2000000468.823:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 938.627278][T12811] usb 1-1: Manufacturer: syz [ 938.631921][T12811] usb 1-1: SerialNumber: syz [ 938.682505][T12811] usb 1-1: config 0 descriptor?? [ 938.761635][ T30] audit: type=1326 audit(2000000468.823:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 938.947129][ T30] audit: type=1326 audit(2000000468.823:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 939.035914][ T30] audit: type=1326 audit(2000000468.823:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 939.080658][ T30] audit: type=1326 audit(2000000468.823:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 939.112391][ T30] audit: type=1326 audit(2000000468.823:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14980 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f122d58e929 code=0x7ffc0000 [ 940.394173][T12811] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.155/input/input24 [ 940.425547][ T5186] bcm5974 1-1:0.155: could not read from device [ 940.454820][ T5186] bcm5974 1-1:0.155: could not read from device [ 940.457297][T12811] usb 1-1: USB disconnect, device number 24 [ 940.468199][ T5186] bcm5974 1-1:0.155: could not read from device [ 940.475043][ T5186] bcm5974 1-1:0.155: could not read from device [ 940.977015][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 941.000577][T15062] rdma_rxe: rxe_newlink: failed to add lo [ 941.395651][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 941.676212][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 941.716565][T14142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 941.730492][T14142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 941.739210][T14142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 941.749162][T14142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 941.757803][T14142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.805791][T15071] Failed to initialize the IGMP autojoin socket (err -2) [ 942.934744][T15103] netlink: 'syz.1.1601': attribute type 27 has an invalid length. [ 942.948583][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 943.197979][T15103] dummy0: left promiscuous mode [ 943.695322][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 943.933159][T14142] Bluetooth: hci0: command tx timeout [ 943.952483][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.964215][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.166225][T15103] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.191760][T15103] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.325939][T15103] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.345164][T15103] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.996328][T15139] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 945.011044][T15139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.098499][T15103] vlan0: left promiscuous mode [ 945.103503][T15103] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 945.209333][T15103] vlan0: left allmulticast mode [ 945.257031][T15103] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 945.285322][T15103] syzkaller0: left promiscuous mode [ 945.297907][T15103] syzkaller0: left allmulticast mode [ 945.428830][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.474028][T15107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 945.537196][ T1205] lo speed is unknown, defaulting to 1000 [ 945.853996][ T5890] lo speed is unknown, defaulting to 1000 [ 945.976814][T14142] Bluetooth: hci0: command tx timeout [ 946.497210][T13456] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 946.793729][T13456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.920443][T13456] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 946.936678][T13456] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 946.986623][T13456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.039555][T13456] usb 1-1: config 0 descriptor?? [ 947.074513][T13456] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 947.098425][T13456] dvb-usb: bulk message failed: -22 (3/0) [ 947.125669][T13456] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 947.190973][T13456] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 947.219417][T13456] usb 1-1: media controller created [ 947.350619][T13456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.576306][T13456] dvb-usb: bulk message failed: -22 (6/0) [ 947.682738][T13456] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 947.704624][T13456] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 947.735964][T13456] dvb-usb: schedule remote query interval to 150 msecs. [ 947.798425][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.807214][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.818576][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.827288][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.906541][T13456] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 947.935584][T15071] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 948.048839][T15071] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 948.056776][T14142] Bluetooth: hci0: command tx timeout [ 948.069118][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 948.075007][T13456] dvb-usb: error while querying for an remote control event. [ 948.254815][T15071] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 948.343702][T15071] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 948.377550][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 948.393900][T13456] dvb-usb: error while querying for an remote control event. [ 948.535258][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 948.587796][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 948.608038][T13456] dvb-usb: error while querying for an remote control event. [ 948.807171][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 948.826340][T13456] dvb-usb: error while querying for an remote control event. [ 948.999761][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 949.022419][T13456] dvb-usb: error while querying for an remote control event. [ 949.247516][T13456] dvb-usb: bulk message failed: -22 (1/0) [ 949.264445][T13456] dvb-usb: error while querying for an remote control event. [ 949.276618][ T1205] usb 1-1: USB disconnect, device number 25 [ 949.847614][ T1205] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 949.929122][T15071] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 950.166725][T14142] Bluetooth: hci0: command tx timeout [ 950.205499][T15071] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 950.424039][T15244] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 950.445873][T15244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.794818][T15071] wireguard: wg0: Could not create IPv4 socket [ 950.804807][T15071] wireguard: wg1: Could not create IPv4 socket [ 951.056900][T15071] wireguard: wg2: Could not create IPv4 socket [ 952.172382][T15256] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 952.267452][T15256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.742346][T15262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1622'. [ 954.695961][T15296] sz1: rxe_newlink: already configured on lo [ 955.365207][T15302] hfsplus: unable to find HFS+ superblock [ 956.276116][T13456] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 956.445497][T13456] usb 1-1: Using ep0 maxpacket: 32 [ 956.480852][T13456] usb 1-1: config 0 interface 0 has no altsetting 0 [ 956.493476][T13456] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 956.512047][T13456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.541648][T13456] usb 1-1: Product: syz [ 956.551724][T13456] usb 1-1: Manufacturer: syz [ 956.565584][T13456] usb 1-1: SerialNumber: syz [ 956.596488][T13456] usb 1-1: config 0 descriptor?? [ 956.607733][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 956.607745][ T30] audit: type=1400 audit(2000000487.564:1385): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=47948 daddr=10.128.1.130 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 956.703392][T15316] lo: entered promiscuous mode [ 956.744599][T15316] tunl0: entered promiscuous mode [ 956.779307][T15316] gre0: entered promiscuous mode [ 956.803915][T15316] gretap0: entered promiscuous mode [ 956.825968][T15316] erspan0: entered promiscuous mode [ 956.838595][T15316] ip_vti0: entered promiscuous mode [ 956.951865][T15316] ip6_vti0: entered promiscuous mode [ 957.002926][T15316] sit0: entered promiscuous mode [ 957.067836][T15316] ip6tnl0: entered promiscuous mode [ 957.106542][T15316] ip6gre0: entered promiscuous mode [ 957.164699][T14142] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 957.174451][T13456] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 957.181592][T13456] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 957.203892][T15316] syz_tun: entered promiscuous mode [ 957.230817][T15316] ip6gretap0: entered promiscuous mode [ 957.273090][T15316] vcan0: entered promiscuous mode [ 957.279562][T15316] bond0: entered promiscuous mode [ 957.285090][T15316] dummy0: entered promiscuous mode [ 957.295485][T15316] nlmon0: entered promiscuous mode [ 957.322564][T15316] caif0: entered promiscuous mode [ 957.329806][T15316] vxcan0: entered promiscuous mode [ 957.350387][T15316] vxcan1: entered promiscuous mode [ 957.360656][T15316] veth0: entered promiscuous mode [ 957.398728][T15316] veth1: entered promiscuous mode [ 957.432427][T15316] wg0: entered promiscuous mode [ 957.453324][T15316] wg1: entered promiscuous mode [ 957.467634][T15316] veth0_to_bridge: entered promiscuous mode [ 957.477118][T15316] bridge_slave_0: entered promiscuous mode [ 957.495088][T15316] veth1_to_bridge: entered promiscuous mode [ 957.519470][T15316] bridge_slave_1: entered promiscuous mode [ 957.535029][T15316] veth0_to_bond: entered promiscuous mode [ 957.552441][T15316] bond_slave_0: entered promiscuous mode [ 957.561403][T15316] veth1_to_bond: entered promiscuous mode [ 957.578884][T15316] bond_slave_1: entered promiscuous mode [ 957.584927][T15316] veth0_to_team: entered promiscuous mode [ 957.602541][T15316] team_slave_0: entered promiscuous mode [ 957.610056][T15316] veth1_to_team: entered promiscuous mode [ 957.627381][T15316] team_slave_1: entered promiscuous mode [ 957.633497][T15316] veth0_to_batadv: entered promiscuous mode [ 957.665243][T15316] veth1_to_batadv: entered promiscuous mode [ 957.678947][T15316] batadv_slave_1: entered promiscuous mode [ 957.693696][T15316] xfrm0: entered promiscuous mode [ 957.703232][T15316] veth0_to_hsr: entered promiscuous mode [ 957.721498][T15316] hsr_slave_0: entered promiscuous mode [ 957.734712][T15316] veth1_to_hsr: entered promiscuous mode [ 957.744538][T15316] hsr_slave_1: entered promiscuous mode [ 957.755887][T15316] veth1_virt_wifi: entered promiscuous mode [ 957.767842][T15316] veth0_virt_wifi: entered promiscuous mode [ 957.782615][T15316] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 957.810183][T15316] macvtap0: entered promiscuous mode [ 957.825501][T15316] macsec0: entered promiscuous mode [ 957.850182][T15316] geneve0: entered promiscuous mode [ 957.863052][T15316] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.872018][T15316] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.881007][T15316] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.897144][T15316] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.917571][T15316] geneve1: entered promiscuous mode [ 957.940263][T15316] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 957.958648][T15316] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 957.975710][T15316] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 957.992148][T15316] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 958.004327][T15316] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 958.017688][T15316] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 958.034584][T15316] bridge1: entered promiscuous mode [ 958.043908][T15316] vxlan0: entered promiscuous mode [ 958.058536][T15316] bridge2: entered promiscuous mode [ 958.068029][T15316] vxcan2: entered promiscuous mode [ 958.078315][T15316] vxcan3: entered promiscuous mode [ 958.091041][T15316] bond1: entered promiscuous mode [ 958.101121][T15316] macvtap1: entered promiscuous mode [ 958.112699][T15316] gretap1: entered promiscuous mode [ 958.121879][T15316] gretap2: entered promiscuous mode [ 958.200253][T15316] sit1: entered promiscuous mode [ 958.233511][T15316] syzkaller0: entered promiscuous mode [ 958.240693][T15316] syztnl0: entered promiscuous mode [ 958.246063][T15316] syztnl1: entered promiscuous mode [ 958.267178][ T1205] wg0 speed is unknown, defaulting to 1000 [ 958.272986][ T1205] syz2: Port: 1 Link DOWN [ 958.279267][ T5890] wg0 speed is unknown, defaulting to 1000 [ 959.301200][T15408] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 959.315749][T15408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.334708][T15409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.454746][T13456] usb 1-1: USB disconnect, device number 26 [ 959.853732][T15412] Failed to initialize the IGMP autojoin socket (err -2) [ 960.042330][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.058816][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.069627][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.073501][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.074357][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.087364][T15421] Failed to initialize the IGMP autojoin socket (err -2) [ 960.263443][T15432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1636'. [ 961.135865][ T5828] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 961.699128][ T5828] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 961.761556][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.893140][ T5828] usb 3-1: Product: syz [ 961.903107][ T5828] usb 3-1: Manufacturer: syz [ 961.921142][ T5828] usb 3-1: SerialNumber: syz [ 961.944926][ T5828] usb 3-1: config 0 descriptor?? [ 961.989833][ T5828] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 962.017433][ T5828] usb 3-1: setting power ON [ 962.032338][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 962.060797][T15437] usb usb8: usbfs: process 15437 (syz.0.1633) did not claim interface 0 before use [ 962.077719][ T5828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 962.139442][T14142] Bluetooth: hci0: command tx timeout [ 962.140752][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 962.228985][ T5828] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 962.237662][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 962.739724][T15421] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 962.787953][T15421] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 962.884823][T15421] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 962.941597][T15421] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 963.564725][ T9232] usb 3-1: USB disconnect, device number 38 [ 964.215749][T14142] Bluetooth: hci0: command tx timeout [ 964.791180][T15421] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 964.836895][T15421] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 964.867413][T15421] wireguard: wg0: Could not create IPv4 socket [ 964.886820][T15421] wireguard: wg1: Could not create IPv4 socket [ 964.896589][T15421] wireguard: wg2: Could not create IPv4 socket [ 964.915647][ T9232] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 965.147660][ T9232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 965.156130][ T9232] usb 5-1: not running at top speed; connect to a high speed hub [ 965.165819][ T9232] usb 5-1: config 253 has an invalid interface number: 140 but max is 0 [ 965.174242][ T9232] usb 5-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 965.284639][T15506] siw: device registration error -23 [ 965.891356][ T9232] usb 5-1: config 253 has no interface number 0 [ 965.913851][ T9232] usb 5-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 965.932723][ T9232] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 965.950944][ T9232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.968087][ T9232] usb 5-1: Product: syz [ 965.973635][ T9232] usb 5-1: Manufacturer: syz [ 965.982977][ T9232] usb 5-1: SerialNumber: syz [ 966.214539][ T30] audit: type=1400 audit(2000000497.154:1386): avc: denied { setopt } for pid=15488 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 966.250607][T15488] delete_channel: no stack [ 966.261296][ T9232] usbtest 5-1:253.140: couldn't get endpoints, -22 [ 966.441462][ T9232] usbtest 5-1:253.140: probe with driver usbtest failed with error -22 [ 966.632626][T15523] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 966.651647][T15523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.690313][T15522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.967442][ T9232] usb 5-1: USB disconnect, device number 45 [ 967.314870][T15532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1648'. [ 968.973436][T15547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.232482][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 970.331486][T15561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.377491][T15561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1654'. [ 970.388769][T15561] siw: device registration error -23 [ 970.395471][T15561] smc: removing ib device syz2 [ 971.100692][T15561] ------------[ cut here ]------------ [ 971.106204][T15561] WARNING: CPU: 0 PID: 15561 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 971.117035][T15561] Modules linked in: [ 971.121126][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.2.1654 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 971.133216][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.143285][T15561] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 971.148794][T15561] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 5d 0a f9 e8 c0 5d 0a f9 90 <0f> 0b 90 5b e9 b6 5d 0a f9 e8 b1 39 71 f9 eb da 66 66 2e 0f 1f 84 [ 971.168434][T15561] RSP: 0018:ffffc900037b71f0 EFLAGS: 00010246 [ 971.174504][T15561] RAX: 0000000000080000 RBX: ffff888075f91320 RCX: ffffc9000c849000 [ 971.182555][T15561] RDX: 0000000000080000 RSI: ffffffff88b1c2c0 RDI: ffff888075f913a0 [ 971.190551][T15561] RBP: ffffffff88b02770 R08: 0000000000000005 R09: 0000000000000001 [ 971.198552][T15561] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888075f90668 [ 971.206552][T15561] R13: ffff888075f8ffe0 R14: ffff888075f8ffe0 R15: ffff888075f91080 [ 971.214520][T15561] FS: 00007ff0337906c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 971.223467][T15561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.230078][T15561] CR2: 00007f39e31b7bac CR3: 0000000032a03000 CR4: 00000000003526f0 [ 971.238088][T15561] Call Trace: [ 971.241373][T15561] [ 971.244302][T15561] rxe_dealloc+0x25/0xc0 [ 971.248579][T15561] ib_dealloc_device+0x49/0x230 [ 971.253446][T15561] __ib_unregister_device+0x396/0x480 [ 971.258866][T15561] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 971.264776][T15561] ib_unregister_device_and_put+0x5a/0x80 [ 971.270542][T15561] nldev_dellink+0x21f/0x320 [ 971.275139][T15561] ? __pfx_nldev_dellink+0x10/0x10 [ 971.280355][T15561] ? cap_capable+0xb3/0x250 [ 971.284871][T15561] ? bpf_lsm_capable+0x9/0x10 [ 971.289602][T15561] ? security_capable+0x7e/0x260 [ 971.294553][T15561] ? ns_capable+0xd7/0x110 [ 971.299025][T15561] ? __pfx_nldev_dellink+0x10/0x10 [ 971.304149][T15561] rdma_nl_rcv_msg+0x387/0x6e0 [ 971.308955][T15561] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 971.314250][T15561] ? __lock_acquire+0x622/0x1c90 [ 971.319214][T15561] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 971.325672][T15561] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 971.332623][T15561] ? netlink_deliver_tap+0x1ae/0xd30 [ 971.338059][T15561] ? is_vmalloc_addr+0x86/0xa0 [ 971.342836][T15561] netlink_unicast+0x53a/0x7f0 [ 971.347654][T15561] ? __pfx_netlink_unicast+0x10/0x10 [ 971.352949][T15561] netlink_sendmsg+0x8d1/0xdd0 [ 971.357746][T15561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.363047][T15561] ____sys_sendmsg+0xa95/0xc70 [ 971.367878][T15561] ? copy_msghdr_from_user+0x10a/0x160 [ 971.373349][T15561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.378674][T15561] ? __pfx_futex_wake_mark+0x10/0x10 [ 971.383971][T15561] ___sys_sendmsg+0x134/0x1d0 [ 971.388704][T15561] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.393916][T15561] ? __lock_acquire+0x622/0x1c90 [ 971.398920][T15561] __sys_sendmsg+0x16d/0x220 [ 971.403519][T15561] ? __pfx___sys_sendmsg+0x10/0x10 [ 971.408661][T15561] ? __x64_sys_futex+0x1e0/0x4c0 [ 971.413629][T15561] do_syscall_64+0xcd/0x4c0 [ 971.418377][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.424271][T15561] RIP: 0033:0x7ff03298e929 [ 971.428736][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.448416][T15561] RSP: 002b:00007ff033790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.456860][T15561] RAX: ffffffffffffffda RBX: 00007ff032bb5fa0 RCX: 00007ff03298e929 [ 971.464828][T15561] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 971.472824][T15561] RBP: 00007ff032a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 971.480826][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.488854][T15561] R13: 0000000000000000 R14: 00007ff032bb5fa0 R15: 00007ffe3240e808 [ 971.496997][T15561] [ 971.500024][T15561] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 971.507303][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.2.1654 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 971.519356][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.529385][T15561] Call Trace: [ 971.532645][T15561] [ 971.535553][T15561] dump_stack_lvl+0x3d/0x1f0 [ 971.540139][T15561] panic+0x71c/0x800 [ 971.544038][T15561] ? __pfx_panic+0x10/0x10 [ 971.548459][T15561] ? show_trace_log_lvl+0x29b/0x3e0 [ 971.553666][T15561] ? rxe_pool_cleanup+0x41/0x60 [ 971.558527][T15561] check_panic_on_warn+0xab/0xb0 [ 971.563467][T15561] __warn+0xf6/0x3c0 [ 971.567368][T15561] ? rxe_pool_cleanup+0x41/0x60 [ 971.572228][T15561] report_bug+0x3c3/0x580 [ 971.576563][T15561] ? rxe_pool_cleanup+0x41/0x60 [ 971.581421][T15561] handle_bug+0x184/0x210 [ 971.585750][T15561] exc_invalid_op+0x17/0x50 [ 971.590254][T15561] asm_exc_invalid_op+0x1a/0x20 [ 971.595102][T15561] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 971.600564][T15561] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 5d 0a f9 e8 c0 5d 0a f9 90 <0f> 0b 90 5b e9 b6 5d 0a f9 e8 b1 39 71 f9 eb da 66 66 2e 0f 1f 84 [ 971.620178][T15561] RSP: 0018:ffffc900037b71f0 EFLAGS: 00010246 [ 971.626245][T15561] RAX: 0000000000080000 RBX: ffff888075f91320 RCX: ffffc9000c849000 [ 971.634213][T15561] RDX: 0000000000080000 RSI: ffffffff88b1c2c0 RDI: ffff888075f913a0 [ 971.642180][T15561] RBP: ffffffff88b02770 R08: 0000000000000005 R09: 0000000000000001 [ 971.650152][T15561] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888075f90668 [ 971.658120][T15561] R13: ffff888075f8ffe0 R14: ffff888075f8ffe0 R15: ffff888075f91080 [ 971.666092][T15561] ? __pfx_rxe_dealloc+0x10/0x10 [ 971.671047][T15561] ? rxe_pool_cleanup+0x40/0x60 [ 971.675909][T15561] rxe_dealloc+0x25/0xc0 [ 971.680151][T15561] ib_dealloc_device+0x49/0x230 [ 971.685010][T15561] __ib_unregister_device+0x396/0x480 [ 971.690380][T15561] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 971.696283][T15561] ib_unregister_device_and_put+0x5a/0x80 [ 971.702004][T15561] nldev_dellink+0x21f/0x320 [ 971.706605][T15561] ? __pfx_nldev_dellink+0x10/0x10 [ 971.711790][T15561] ? cap_capable+0xb3/0x250 [ 971.716301][T15561] ? bpf_lsm_capable+0x9/0x10 [ 971.720976][T15561] ? security_capable+0x7e/0x260 [ 971.725916][T15561] ? ns_capable+0xd7/0x110 [ 971.730333][T15561] ? __pfx_nldev_dellink+0x10/0x10 [ 971.735479][T15561] rdma_nl_rcv_msg+0x387/0x6e0 [ 971.740254][T15561] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 971.745546][T15561] ? __lock_acquire+0x622/0x1c90 [ 971.750483][T15561] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 971.756909][T15561] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 971.763858][T15561] ? netlink_deliver_tap+0x1ae/0xd30 [ 971.769151][T15561] ? is_vmalloc_addr+0x86/0xa0 [ 971.773921][T15561] netlink_unicast+0x53a/0x7f0 [ 971.778688][T15561] ? __pfx_netlink_unicast+0x10/0x10 [ 971.783980][T15561] netlink_sendmsg+0x8d1/0xdd0 [ 971.788746][T15561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.794038][T15561] ____sys_sendmsg+0xa95/0xc70 [ 971.798805][T15561] ? copy_msghdr_from_user+0x10a/0x160 [ 971.804270][T15561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.809562][T15561] ? __pfx_futex_wake_mark+0x10/0x10 [ 971.814853][T15561] ___sys_sendmsg+0x134/0x1d0 [ 971.819538][T15561] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.824738][T15561] ? __lock_acquire+0x622/0x1c90 [ 971.829710][T15561] __sys_sendmsg+0x16d/0x220 [ 971.834311][T15561] ? __pfx___sys_sendmsg+0x10/0x10 [ 971.839427][T15561] ? __x64_sys_futex+0x1e0/0x4c0 [ 971.844388][T15561] do_syscall_64+0xcd/0x4c0 [ 971.848902][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.854793][T15561] RIP: 0033:0x7ff03298e929 [ 971.859205][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.878813][T15561] RSP: 002b:00007ff033790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.887222][T15561] RAX: ffffffffffffffda RBX: 00007ff032bb5fa0 RCX: 00007ff03298e929 [ 971.895184][T15561] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 971.903148][T15561] RBP: 00007ff032a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 971.911116][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.919081][T15561] R13: 0000000000000000 R14: 00007ff032bb5fa0 R15: 00007ffe3240e808 [ 971.927060][T15561] [ 971.930265][T15561] Kernel Offset: disabled [ 971.934567][T15561] Rebooting in 86400 seconds..