last executing test programs: 23m48.04052197s ago: executing program 1 (id=1619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 23m47.968780254s ago: executing program 1 (id=1620): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close(0x3) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x3, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) read$FUSE(r0, 0x0, 0x0) 23m47.876535824s ago: executing program 1 (id=1622): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)=':', 0x1, 0x24044013, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23m47.831521373s ago: executing program 1 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x262) 23m47.757668897s ago: executing program 1 (id=1624): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4001, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 23m46.794928895s ago: executing program 1 (id=1626): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f0000000280)=0x4) 23m46.594093846s ago: executing program 32 (id=1626): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f0000000280)=0x4) 7m26.105755118s ago: executing program 0 (id=4618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) 7m25.240981562s ago: executing program 0 (id=4630): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x803, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0x7, 0x5c, 0x1, 0x6, 0x10, "91396855d35693fb"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000019c0)={0x744c47b9, 0x2, 0x1, 0xfffff801, 0x2, "3dce84d1e5e79a41741e697538c69257122cd4"}) 7m25.044229987s ago: executing program 0 (id=4622): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x3fff}, {0x200000000003ff, 0x7e}, 0x5, 0x1}) 7m23.661543069s ago: executing program 0 (id=4624): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 7m23.271825087s ago: executing program 0 (id=4627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 7m22.536637065s ago: executing program 0 (id=4636): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0}) 7m21.913413229s ago: executing program 33 (id=4636): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0}) 4m34.115506549s ago: executing program 4 (id=5347): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m30.81697667s ago: executing program 4 (id=5358): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b501020301090212"], 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 4m27.538808102s ago: executing program 4 (id=5368): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2048) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 4m27.185303784s ago: executing program 4 (id=5370): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc0002009}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m27.135479833s ago: executing program 4 (id=5371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1, 0x20980}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m26.752580452s ago: executing program 4 (id=5375): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_tcp(0x2, 0x1, 0x0) 4m26.444830307s ago: executing program 34 (id=5375): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_tcp(0x2, 0x1, 0x0) 16.437282721s ago: executing program 6 (id=6007): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0x7fff, 0x5}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r6, 0xffffffffffffffff}) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x81, 0x402) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close_range(r5, r9, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 15.580916234s ago: executing program 3 (id=6008): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) socket$packet(0x11, 0x3, 0x300) open(&(0x7f00000000c0)='.\x00', 0x518282, 0x78e22799f4a46e8e) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = open(0x0, 0x400, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = io_uring_setup(0x1fb8, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, &(0x7f0000000000), 0x0) sendto$inet(r1, &(0x7f0000000040)="8c06004d4f95846d3f815de9af3735c10f427b", 0x13, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) 14.326564224s ago: executing program 3 (id=6012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = fsopen(0x0, 0x1) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000001, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0216cac30434f27c83ff5ccc9be12253d6"], 0x50}}, 0x890) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0xf) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x4, 0xb, 0x0, 0xfffffffc, 0x7e, "2b3b7596160c6981acf880594400017f00"}) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0xe808, 0x40000009, 0xfffffffd, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000280)={0x10000, 0xfffffffd, 0x8, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r7 = syz_open_pts(r5, 0x0) r8 = dup3(r7, r5, 0x0) read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) 13.15911867s ago: executing program 2 (id=6014): syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x3, 0x20000000, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=un']) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000440)={0x2, 0x1, 0xc030, 0x5d5, 0x5, 0xee9, 0x6000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5800000010000d0429bd70000000000000000000", @ANYBLOB="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"/331], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x98, 0x1d0, 0x0, 0x98, 0x138, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x310}}, {{@ip={@empty, @local, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5e, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x0, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448c9}, 0x24000080) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/user\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12.883054529s ago: executing program 6 (id=6015): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x8, 0x3, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c0d0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4e6f59598f2c89b0c00be8e175c864f14f283461938f0c2dfd5c8a2f0b450126b0b31219a484679aa7c0d11be0c988ce47f8c5c35295e274e5793", @ANYRES16=r8, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x8}, 0x8054) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb08004500003800000004000000000000b902000014bb030490781200183f2500000000680200000100007f000001ac329422e57da0bb4114140e00016337fe9b18039636fdcf6f4d0d3c821cfe8cb6c5664935198b493c320179f1fc61b333ba75e5783be2dd361e434e7132f13395b5d1e79ec3c78a38d47487dc656f0d48b7fc06ea538333f644005ea443"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11.37920829s ago: executing program 7 (id=6016): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendfile(r1, r1, &(0x7f0000000400)=0xce9c, 0x7) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000009c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) r2 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xc00080, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r9, 0x0, 0x0, 0x0) 10.858467846s ago: executing program 2 (id=6017): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) pread64(r5, &(0x7f00000002c0)=""/68, 0x44, 0xffffffffffffc76f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 9.187092198s ago: executing program 5 (id=6018): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 8.795649233s ago: executing program 7 (id=6019): r0 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r3, 0x5601, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/240, 0xf0}], 0x1, 0x0, 0xb}, 0x2}, {{0x0, 0x0, &(0x7f0000000840), 0x5, &(0x7f0000000900)=""/249, 0xf9}, 0x4}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)=""/191, 0xb2}, {&(0x7f0000000b00)=""/226, 0xe2}], 0x2, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x80}], 0x3, 0x20, 0x0) 8.116949126s ago: executing program 3 (id=6020): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) 7.920661731s ago: executing program 6 (id=6021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cf"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)={0x3bc, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x38c, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x33c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r1, &(0x7f0000000280), 0x0, 0x20000000) timer_create(0x0, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='\"', @ANYRESOCT], 0x33) close(r7) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 7.614710696s ago: executing program 2 (id=6022): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.636535973s ago: executing program 3 (id=6023): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x6, 0x2280) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040000000000fddbdf25020000000500050008000000080002000700000008000300080000000800030004000000080004000101000008"], 0x44}, 0x1, 0x0, 0x0, 0x4c051}, 0x4090) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f00000081c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) 6.571113033s ago: executing program 7 (id=6024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000004c0)={{{0xa}}, 0x93, 0x6, &(0x7f0000000380)="cb2c72b55df407f31cd05055bb9fffb27cd8bedf46a2ad46730da90008041e431a193e2a6487429cefb5c2146adfc8f9dc90f5d69a34f44abef89aa61be76eda2600e0cbcfc2745079a037f68ab35192b41439c00feeadf11694211b1e22849b1f363d07e8346df6665ee5d725ef16ed8dafe1fd9b9d551861a12b08190ee8559ee0a65fc55dfe5d8d3e5f5e9337046b0ee285"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) connect$inet(r4, &(0x7f0000000040)={0x1e, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001300), 0x4) socket$key(0xf, 0x3, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001080)=@qipcrtr, 0x80, &(0x7f0000001240), 0x2, &(0x7f0000001100)=""/87, 0xfffffffffffffd74}, 0x40000003) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) 5.340410006s ago: executing program 7 (id=6025): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r7}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, r6, 'id0\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000d00)={0x2d8, r10, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x979e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9000}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9fb}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe71}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x21}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r4, r7, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.4026952s ago: executing program 3 (id=6026): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet(0x2b, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000029500"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 4.401688582s ago: executing program 6 (id=6036): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0xba9b, 0x401, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f0000000240)=0x10, 0x80c00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r4, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 4.401358015s ago: executing program 5 (id=6027): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0xdc, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x80, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8000, 0x1, 0x40000e, 0x4}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x5, 0x8, 0x6, 0x7fffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r3, 0x560a, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000000000)="6ef1ef", 0x3, 0xf}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) 4.401299499s ago: executing program 2 (id=6028): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7) 4.284750027s ago: executing program 2 (id=6029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x9) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) socket(0x15, 0x5, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_xfrm(r0, 0x0, 0x4010) 3.329990803s ago: executing program 3 (id=6030): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) getrlimit(0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x5c, r4, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.157075247s ago: executing program 7 (id=6031): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000007c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r4, &(0x7f0000000040)={[0xff]}, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400", @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968ee3031f62673a49be5669c781fc1c8cd4a7ad3bed45bcfcc321b4d085566dfb44", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r9, r9, 0x2f, 0x0, r8, @void, @value=r9, @void, @void, r10}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) 1.858918786s ago: executing program 6 (id=6032): fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) 1.814735196s ago: executing program 2 (id=6033): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) 1.634616315s ago: executing program 6 (id=6034): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1bf40000102030109025c0002010000000904000001020d0000052406000105240000000d240f13f3de55aacf5f84000006241a0000000905810300020005000904010000020dd6b30904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) read$msr(r2, &(0x7f0000000a00)=""/102400, 0x19000) getrlimit(0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x54, r5, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.633416534s ago: executing program 5 (id=6035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000004c0)={{{0xa}}, 0x93, 0x6, &(0x7f0000000380)="cb2c72b55df407f31cd05055bb9fffb27cd8bedf46a2ad46730da90008041e431a193e2a6487429cefb5c2146adfc8f9dc90f5d69a34f44abef89aa61be76eda2600e0cbcfc2745079a037f68ab35192b41439c00feeadf11694211b1e22849b1f363d07e8346df6665ee5d725ef16ed8dafe1fd9b9d551861a12b08190ee8559ee0a65fc55dfe5d8d3e5f5e9337046b0ee285"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) connect$inet(r4, &(0x7f0000000040)={0x1e, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001300), 0x4) socket$key(0xf, 0x3, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001080)=@qipcrtr, 0x80, &(0x7f0000001240), 0x2, &(0x7f0000001100)=""/87, 0xfffffffffffffd74}, 0x40000003) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) 562.429813ms ago: executing program 5 (id=6037): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040906"], 0x9) 468.712068ms ago: executing program 7 (id=6038): syz_usb_connect(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585", @ANYBLOB="f95b"], 0x0) 316.194µs ago: executing program 5 (id=6039): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 0s ago: executing program 5 (id=6040): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r4 = syz_open_dev$vim2m(0x0, 0x10003, 0x2) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000100)}, {0x0}], 0x4, 0x5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r9 = fanotify_init(0xf00, 0x1000) fanotify_mark(r9, 0x105, 0x5000003a, r8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='7\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYBLOB="093f092fa1edc01e09b26f", @ANYRES64=r11], 0x20) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1492.076766][ T30] audit: type=1326 audit(2000000854.030:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1492.128900][T17251] usb 6-1: USB disconnect, device number 66 [ 1492.193247][ T30] audit: type=1326 audit(2000000854.030:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1492.303290][ T30] audit: type=1326 audit(2000000854.030:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1492.370913][ T30] audit: type=1326 audit(2000000854.030:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fcdf9c4ab code=0x7ffc0000 [ 1492.409719][ T30] audit: type=1326 audit(2000000854.030:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.3.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fcdf9c4ab code=0x7ffc0000 [ 1492.530913][T24857] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1492.539387][T24857] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1492.548013][T24857] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1493.002446][T11985] kernel read not supported for file /file0 (pid: 11985 comm: kworker/0:8) [ 1493.028539][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1493.395030][T11985] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1493.529894][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1493.591098][T11985] usb 6-1: Using ep0 maxpacket: 8 [ 1493.651932][T11985] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1493.661392][T11985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1493.681745][T11985] usb 6-1: Product: syz [ 1493.697341][T11985] usb 6-1: Manufacturer: syz [ 1493.701965][T11985] usb 6-1: SerialNumber: syz [ 1493.725400][T11985] usb 6-1: config 0 descriptor?? [ 1493.756440][T11985] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1493.834985][T17251] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1494.016501][T17251] usb 4-1: Using ep0 maxpacket: 16 [ 1494.054565][T17251] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1494.099784][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5377'. [ 1494.113313][T17251] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1494.184866][T17251] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.220190][T17251] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1494.337584][T11985] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1494.358750][T17251] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1494.372928][T17251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.384853][T17251] usb 4-1: Product: syz [ 1494.389970][T24441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1494.395225][T11985] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 1494.403903][T17251] usb 4-1: Manufacturer: syz [ 1494.416438][T17251] usb 4-1: SerialNumber: syz [ 1494.422457][T24441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1494.436005][T24441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1494.443711][T24441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1494.453419][T24441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1494.839663][ T792] usb 6-1: USB disconnect, device number 67 [ 1494.927204][T17251] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1495.201874][T24889] lo speed is unknown, defaulting to 1000 [ 1495.226003][T24889] vlan1 speed is unknown, defaulting to 1000 [ 1495.557764][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1495.920709][T24898] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1495.942373][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5379'. [ 1496.202769][ T792] usb 4-1: USB disconnect, device number 105 [ 1496.217244][ T792] usblp0: removed [ 1496.248004][T24889] chnl_net:caif_netlink_parms(): no params data found [ 1496.321720][T24889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.330205][T24889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.340021][T24889] bridge_slave_0: entered allmulticast mode [ 1496.347169][T24889] bridge_slave_0: entered promiscuous mode [ 1496.355978][T24889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.363706][T24889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.370923][T24889] bridge_slave_1: entered allmulticast mode [ 1496.382110][T24889] bridge_slave_1: entered promiscuous mode [ 1496.412694][T24889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.429113][T24889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.467472][T24889] team0: Port device team_slave_0 added [ 1496.476885][T24889] team0: Port device team_slave_1 added [ 1496.508714][T24889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.515854][T24889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.524929][T24441] Bluetooth: hci0: command tx timeout [ 1496.542370][T24889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.561950][T24889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.597734][T24889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.645585][T24889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.701288][T24889] hsr_slave_0: entered promiscuous mode [ 1496.708617][T24889] hsr_slave_1: entered promiscuous mode [ 1496.724899][T24889] debugfs: 'hsr0' already exists in 'hsr' [ 1496.732291][T24889] Cannot create hsr debugfs directory [ 1497.126101][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5383'. [ 1497.214598][T24926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5385'. [ 1497.633188][T17251] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1497.829267][T17251] usb 3-1: Using ep0 maxpacket: 16 [ 1497.845025][T17251] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1497.863946][T17251] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1497.904412][T17251] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.955622][T17251] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1497.983783][T11993] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1497.989643][T17251] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1498.000924][T17251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.016532][T17251] usb 3-1: Product: syz [ 1498.025740][T17251] usb 3-1: Manufacturer: syz [ 1498.070158][T17251] usb 3-1: SerialNumber: syz [ 1498.176138][T11993] usb 7-1: Using ep0 maxpacket: 8 [ 1498.181248][T24889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1498.209177][T11993] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1498.242581][T11993] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1498.303727][T11993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1498.321981][T24889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1498.340359][T11993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1498.355103][T17251] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 127 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1498.382101][T24889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1498.414301][T11993] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.465254][T24943] Cannot find add_set index 0 as target [ 1498.468213][T24889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1498.506086][T11993] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1498.533211][T11993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.610309][T24441] Bluetooth: hci0: command tx timeout [ 1498.991438][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5390'. [ 1499.166323][T11993] usb 7-1: usb_control_msg returned -32 [ 1499.192272][T11993] usbtmc 7-1:16.0: can't read capabilities [ 1499.334095][T24889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.354346][T24889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.372551][T14795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.379649][T14795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.421271][T14795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.428382][T14795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.562422][T17251] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1499.726680][T17251] usb 6-1: Using ep0 maxpacket: 16 [ 1499.743154][T17251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.786377][T17251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1499.796265][T11993] usb 3-1: USB disconnect, device number 127 [ 1499.816591][T17251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1499.827958][T24958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.852604][T24958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.854878][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1499.854892][ T30] audit: type=1400 audit(2000000862.134:3555): avc: denied { ioctl } for pid=24938 comm="syz.6.5388" path="/dev/usb/lp0" dev="devtmpfs" ino=4755 ioctlcmd=0x5b08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1499.860487][T17251] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1499.916930][T24958] usblp0: removed [ 1499.963960][T17251] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1500.003006][T17251] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1500.033278][T17251] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1500.062053][T24889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.079077][T17251] usb 6-1: Manufacturer: syz [ 1500.101715][T17251] usb 6-1: config 0 descriptor?? [ 1500.125783][T24958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.144606][T24958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.503992][T24954] Process accounting resumed [ 1500.534336][T17251] rc_core: IR keymap rc-hauppauge not found [ 1500.547166][T17251] Registered IR keymap rc-empty [ 1500.568783][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.631723][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.657447][T24889] veth0_vlan: entered promiscuous mode [ 1500.681715][T24441] Bluetooth: hci0: command tx timeout [ 1500.688998][T17251] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1500.723639][T24889] veth1_vlan: entered promiscuous mode [ 1500.737669][T17251] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input76 [ 1500.787655][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.800512][T24889] veth0_macvtap: entered promiscuous mode [ 1500.820375][T24889] veth1_macvtap: entered promiscuous mode [ 1500.828273][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.850309][T24889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.862638][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.875142][T24889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.891819][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1500.905159][T14792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.911776][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.081636][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.092552][T14792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.113462][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.141271][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.283103][T24980] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1501.422238][T11993] usb 7-1: USB disconnect, device number 24 [ 1501.491649][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.516238][T14792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.529411][T17251] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1501.539532][T14792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.572345][T17251] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1501.603478][T17251] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1501.748499][T17251] usb 6-1: USB disconnect, device number 68 [ 1502.311551][ T30] audit: type=1400 audit(2000000864.625:3556): avc: denied { getopt } for pid=24991 comm="syz.6.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1502.644431][T15701] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1502.765162][T24441] Bluetooth: hci0: command tx timeout [ 1502.806190][T16794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.837012][T16794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.052710][T16794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.088107][T16794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.364760][T25039] ufs: You didn't specify the type of your ufs filesystem [ 1506.364760][T25039] [ 1506.364760][T25039] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1506.364760][T25039] [ 1506.364760][T25039] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1506.436269][T25039] ufs: ufstype=old is supported read-only [ 1506.453867][T25039] ufs: ufs_fill_super(): bad magic number [ 1506.607682][T25041] md: md2 stopped. [ 1507.676067][T25064] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1507.684528][T25064] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1507.693314][T25064] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1508.397222][T25074] syzkaller0: entered promiscuous mode [ 1508.408238][T25074] syzkaller0: entered allmulticast mode [ 1508.644683][ T30] audit: type=1400 audit(2000000870.969:3557): avc: denied { mounton } for pid=25077 comm="syz.3.5422" path="/319/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1508.727559][T11935] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1508.887358][T11935] usb 7-1: Using ep0 maxpacket: 32 [ 1508.895943][T11935] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1508.904462][T11935] usb 7-1: config 0 has no interface number 0 [ 1508.910672][T11935] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1508.922623][T11935] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1508.931768][T11935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.939839][T11935] usb 7-1: Product: syz [ 1508.943997][T11935] usb 7-1: Manufacturer: syz [ 1508.948728][T11935] usb 7-1: SerialNumber: syz [ 1508.954885][T11935] usb 7-1: config 0 descriptor?? [ 1509.391427][T25086] Cannot find add_set index 0 as target [ 1509.582181][T11935] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1509.593322][T11935] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1510.484885][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5426'. [ 1511.260842][T11935] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1511.274381][T11935] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1511.284311][T11935] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1511.294115][T11935] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1511.356638][T11935] usb 7-1: USB disconnect, device number 25 [ 1511.658430][T25108] Cannot find add_set index 0 as target [ 1512.430371][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5431'. [ 1512.796078][T11996] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1513.032465][T11996] usb 7-1: Using ep0 maxpacket: 16 [ 1513.063771][ T30] audit: type=1400 audit(2000000875.391:3558): avc: denied { listen } for pid=25126 comm="syz.7.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1513.371427][T25132] Cannot find add_set index 0 as target [ 1513.545301][T11996] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1513.595044][T11996] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1513.682027][T11996] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1513.975580][T11996] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1514.097697][T11996] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1514.128608][T11996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.153649][T11996] usb 7-1: Product: syz [ 1514.166257][T11996] usb 7-1: Manufacturer: syz [ 1514.243716][T11996] usb 7-1: SerialNumber: syz [ 1514.488566][T11996] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1514.949578][T13811] lec:lec_start_xmit: lec0:No lecd attached [ 1515.236880][T16794] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1516.452813][T11996] usb 7-1: USB disconnect, device number 26 [ 1516.461053][T11996] usblp0: removed [ 1516.569275][T25160] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1516.577682][T25160] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1516.586370][T25160] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1517.110665][T25168] Cannot find add_set index 0 as target [ 1517.531330][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5445'. [ 1519.864903][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5454'. [ 1520.271482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1520.279590][ C0] lec:lec_tx_timeout: lec0 [ 1520.851858][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5458'. [ 1522.406308][T25239] Cannot find add_set index 0 as target [ 1522.651400][ T30] audit: type=1400 audit(2000000884.986:3559): avc: denied { listen } for pid=25240 comm="syz.5.5463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1522.862447][T25249] Cannot find add_set index 0 as target [ 1523.542810][T25254] syzkaller0: entered promiscuous mode [ 1523.558548][T25254] syzkaller0: entered allmulticast mode [ 1526.477039][ T30] audit: type=1400 audit(2000000888.758:3560): avc: denied { getopt } for pid=25283 comm="syz.5.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1526.951511][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5475'. [ 1527.258049][T11996] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1527.558186][T11996] usb 4-1: Using ep0 maxpacket: 16 [ 1527.566315][T11996] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1527.577845][T11996] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1527.599874][T11996] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.629535][T11996] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1527.643336][T25301] syzkaller0: entered promiscuous mode [ 1527.649185][T25301] syzkaller0: entered allmulticast mode [ 1527.710233][T11996] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1527.720341][T11996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.729026][T11996] usb 4-1: Product: syz [ 1527.845116][T11996] usb 4-1: Manufacturer: syz [ 1527.851123][T11996] usb 4-1: SerialNumber: syz [ 1528.207367][T11996] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1529.405527][T25319] binder: 25318:25319 ioctl c0306201 2000000001c0 returned -14 [ 1529.761892][T25327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5483'. [ 1529.771562][ T792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1529.835938][T11935] usb 4-1: USB disconnect, device number 106 [ 1529.881157][T11935] usblp0: removed [ 1529.987178][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 1530.081334][ T792] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.257436][ T792] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1530.409144][ T792] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1530.508839][ T792] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1530.882268][ T792] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1530.979944][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.004073][ T792] usb 3-1: Product: syz [ 1531.033848][ T792] usb 3-1: Manufacturer: syz [ 1531.071183][ T792] usb 3-1: SerialNumber: syz [ 1531.142456][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1531.171857][ T792] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input77 [ 1531.582317][T25345] netlink: 'syz.5.5490': attribute type 1 has an invalid length. [ 1531.590415][ T792] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1531.598781][ T792] (id 0x00) [ 1531.737304][T25345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1531.760898][T25350] bond3: (slave dummy0): making interface the new active one [ 1531.828372][T25350] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1531.839385][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5491'. [ 1531.856197][ T792] rc_core: IR keymap rc-imon-pad not found [ 1531.865873][ T792] Registered IR keymap rc-empty [ 1531.918915][ T792] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1531.929325][ T792] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1531.966536][ T792] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1532.019645][ T792] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input78 [ 1532.102850][ T792] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:2> initialized [ 1532.350097][T25359] ufs: You didn't specify the type of your ufs filesystem [ 1532.350097][T25359] [ 1532.350097][T25359] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1532.350097][T25359] [ 1532.350097][T25359] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1532.417610][T25359] ufs: ufstype=old is supported read-only [ 1532.449496][T25359] ufs: ufs_fill_super(): bad magic number [ 1533.946232][ T792] usb 3-1: USB disconnect, device number 2 [ 1534.102384][T25335] Process accounting paused [ 1534.208807][T25374] Cannot find add_set index 0 as target [ 1534.425697][T15701] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1534.743785][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5499'. [ 1536.718202][T25398] xt_hashlimit: size too large, truncated to 1048576 [ 1536.844107][T25398] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1537.074584][T25400] syzkaller0: entered promiscuous mode [ 1537.080166][T25400] syzkaller0: entered allmulticast mode [ 1537.188458][T25408] Cannot find add_set index 0 as target [ 1539.297099][T25435] input: syz0 as /devices/virtual/input/input79 [ 1540.210489][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5514'. [ 1540.243139][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1540.254085][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1540.334041][T25446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.745625][T22339] IPVS: starting estimator thread 0... [ 1540.851319][T25453] IPVS: using max 45 ests per chain, 108000 per kthread [ 1541.129410][T25461] Set syz1 is full, maxelem 0 reached [ 1541.200639][T25462] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5517'. [ 1541.780531][ T30] audit: type=1400 audit(2000000904.115:3561): avc: denied { unmount } for pid=24889 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1542.402690][T25475] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1542.413735][T25475] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1542.422775][T25475] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1542.774196][T25484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5523'. [ 1543.954569][T25495] overlayfs: overlapping lowerdir path [ 1544.578483][T11996] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1545.239343][T11996] usb 3-1: Using ep0 maxpacket: 8 [ 1545.246071][T11996] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1545.268984][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1545.276999][ C0] lec:lec_tx_timeout: lec0 [ 1545.611235][T11996] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1545.639394][T11996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.652620][T11996] usb 3-1: Product: syz [ 1545.656817][T11996] usb 3-1: Manufacturer: syz [ 1545.691297][T11996] usb 3-1: SerialNumber: syz [ 1545.713181][T11996] usb 3-1: config 0 descriptor?? [ 1545.737714][T11996] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1546.558243][T11996] gspca_zc3xx: reg_w_i err -110 [ 1547.158133][T11996] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1547.180202][T11996] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1547.226024][T15701] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1547.367809][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5535'. [ 1547.633313][T11935] usb 3-1: USB disconnect, device number 3 [ 1548.892889][ T30] audit: type=1400 audit(2000000911.239:3562): avc: denied { getopt } for pid=25551 comm="syz.7.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1550.324724][ T792] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1550.325130][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1550.446513][ T792] usb 7-1: device descriptor read/64, error -32 [ 1550.686365][ T792] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1550.686553][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1550.866493][ T792] usb 7-1: device descriptor read/64, error -32 [ 1550.988183][ T792] usb usb7-port1: attempt power cycle [ 1551.143207][T25581] syzkaller0: entered promiscuous mode [ 1551.148851][T25581] syzkaller0: entered allmulticast mode [ 1551.326101][ T792] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1551.356492][ T792] usb 7-1: Using ep0 maxpacket: 8 [ 1551.378884][ T792] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1552.055725][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.120505][ T792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1552.148173][ T792] pvrusb2: ********** [ 1552.162334][ T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1552.193866][ T792] pvrusb2: Important functionality might not be entirely working. [ 1552.212621][ T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1552.265507][ T792] pvrusb2: ********** [ 1552.359926][ T2337] pvrusb2: Invalid write control endpoint [ 1552.724032][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5548'. [ 1552.798328][ T2337] pvrusb2: Invalid write control endpoint [ 1552.811687][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1552.825537][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1552.841450][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1553.094643][ T2337] pvrusb2: Device being rendered inoperable [ 1553.102082][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1553.245340][T25599] Cannot find add_set index 0 as target [ 1553.594900][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1553.657688][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1553.685211][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1553.714769][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1553.772615][T22339] usb 7-1: USB disconnect, device number 29 [ 1554.233058][T25612] SET target dimension over the limit! [ 1555.639046][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5559'. [ 1555.899251][T25633] tipc: Started in network mode [ 1555.914745][T25633] tipc: Node identity bbbbbb01, cluster identity 4711 [ 1555.936342][T25633] tipc: Enabled bearer , priority 10 [ 1556.623435][T11975] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1556.837093][T11975] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1556.847589][T11975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.857789][T11975] usb 6-1: Product: syz [ 1556.862096][T11975] usb 6-1: Manufacturer: syz [ 1556.868219][T11975] usb 6-1: SerialNumber: syz [ 1557.056314][T11996] tipc: Node number set to 3149642497 [ 1557.200107][T25664] sd 0:0:1:0: device reset [ 1557.299187][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1557.570666][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1558.162746][ T29] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1558.440248][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1558.486358][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.498535][ T29] usb 4-1: Product: syz [ 1558.504841][ T29] usb 4-1: Manufacturer: syz [ 1558.516757][ T29] usb 4-1: SerialNumber: syz [ 1559.105368][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1559.139145][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1559.573507][T25690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1559.780806][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 1559.801586][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1559.821854][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1559.824688][T11975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1559.841349][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1559.923101][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1560.276255][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1560.304296][T11975] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1560.358946][T25697] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1560.368024][T25697] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1560.376694][T25697] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1560.423532][ T29] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1560.496123][T11975] usb 6-1: USB disconnect, device number 69 [ 1560.671498][ T29] usb 4-1: USB disconnect, device number 107 [ 1561.801636][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1564.348063][T25711] Process accounting resumed [ 1565.737179][ T30] audit: type=1800 audit(2000000928.077:3563): pid=25767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5596" name="bus" dev="ramfs" ino=112735 res=0 errno=0 [ 1566.410449][T16783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1566.616405][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1570.686369][T22339] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1571.334645][T22339] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.380590][T22339] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1571.484354][T22339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.498190][T22339] usb 7-1: config 0 descriptor?? [ 1572.506379][T22339] pwc: Askey VC010 type 2 USB webcam detected. [ 1572.795330][T22339] pwc: send_video_command error -71 [ 1572.800585][T22339] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1572.808735][T22339] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1572.825462][T22339] usb 7-1: USB disconnect, device number 30 [ 1572.957790][T25845] syzkaller0: entered promiscuous mode [ 1572.965189][T25845] syzkaller0: entered allmulticast mode [ 1574.004745][T22339] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1574.153054][T25861] syzkaller0: entered promiscuous mode [ 1574.158883][T25861] syzkaller0: entered allmulticast mode [ 1574.180523][T25861] tipc: Enabled bearer , priority 0 [ 1574.189030][T22339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.199614][T22339] usb 4-1: config 0 has no interfaces? [ 1574.207364][T22339] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1574.217889][T25857] tipc: Resetting bearer [ 1574.242677][T22339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.257599][T22339] usb 4-1: config 0 descriptor?? [ 1574.477266][T25866] binder: 25862:25866 ioctl c0306201 200000000640 returned -22 [ 1574.983111][T25857] tipc: Disabling bearer [ 1576.436364][T11996] usb 4-1: USB disconnect, device number 108 [ 1577.693382][T25897] syzkaller0: entered promiscuous mode [ 1577.708935][T25897] syzkaller0: entered allmulticast mode [ 1577.961845][ T30] audit: type=1800 audit(2000000940.313:3564): pid=25899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5637" name="bus" dev="overlay" ino=5853 res=0 errno=0 [ 1578.039457][T25910] syzkaller0: entered promiscuous mode [ 1578.079397][T25910] syzkaller0: entered allmulticast mode [ 1578.819397][T25919] syzkaller0: entered promiscuous mode [ 1578.825143][T25919] syzkaller0: entered allmulticast mode [ 1579.582513][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5644'. [ 1579.594815][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1579.657708][T13811] lec:lec_start_xmit: lec0:No lecd attached [ 1579.750104][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1580.141622][T11996] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1580.422342][T11996] usb 3-1: Using ep0 maxpacket: 16 [ 1580.432262][T11996] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1580.442342][T11996] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1580.461656][T11996] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1580.520166][T11996] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1580.564561][T11996] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1580.574994][T11996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.583472][T11996] usb 3-1: Product: syz [ 1580.650714][T11996] usb 3-1: Manufacturer: syz [ 1580.662566][T11996] usb 3-1: SerialNumber: syz [ 1580.947496][T11996] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1584.141672][ T29] usb 3-1: USB disconnect, device number 4 [ 1584.172328][ T29] usblp0: removed [ 1585.199130][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 1585.207186][ C0] lec:lec_tx_timeout: lec0 [ 1586.974577][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1588.199838][T26018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26018 comm=syz.6.5661 [ 1588.507463][ T29] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1588.704450][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1588.717606][ T29] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.729411][ T29] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.739749][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1588.749272][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.210947][ T29] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1589.455835][ T29] usb 7-1: USB disconnect, device number 31 [ 1590.266551][T22339] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1590.434062][T22339] usb 7-1: Using ep0 maxpacket: 16 [ 1590.465007][T22339] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.483310][T22339] usb 7-1: config 0 has no interfaces? [ 1590.527071][T22339] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1590.536126][T22339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.561457][T22339] usb 7-1: Product: syz [ 1590.565669][T22339] usb 7-1: Manufacturer: syz [ 1590.578671][T22339] usb 7-1: SerialNumber: syz [ 1590.598013][T22339] usb 7-1: config 0 descriptor?? [ 1590.698618][T26005] syz_tun: entered allmulticast mode [ 1590.704087][T26005] syz_tun: left allmulticast mode [ 1591.856940][ T29] usb 7-1: USB disconnect, device number 32 [ 1592.002531][T26048] mkiss: ax0: crc mode is auto. [ 1592.459802][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5663'. [ 1592.517730][T26050] tipc: Started in network mode [ 1592.522757][T26050] tipc: Node identity 3, cluster identity 129 [ 1592.528964][T26050] tipc: Node number set to 3 [ 1592.603698][T26056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1595.086107][T26076] usb usb7: usbfs: process 26076 (syz.6.5666) did not claim interface 0 before use [ 1595.310868][T26071] Process accounting paused [ 1595.663837][ T792] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1595.818104][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1596.170127][ T792] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1596.181785][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.224183][ T792] usb 4-1: config 0 descriptor?? [ 1596.299430][T26081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1596.568685][T26094] Bluetooth: MGMT ver 1.23 [ 1596.731409][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.743718][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.750603][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.758258][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.765707][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.776888][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.784103][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.790984][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.801908][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.809203][ T792] wacom 0003:056A:0084.0037: unknown main item tag 0x0 [ 1596.986386][ T792] wacom 0003:056A:0084.0037: reserved main item tag 0xd [ 1597.040024][ T792] wacom 0003:056A:0084.0037: hidraw0: USB HID v7f.fd Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 1597.201166][ T792] usb 4-1: USB disconnect, device number 109 [ 1597.231574][T26113] fido_id[26113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1598.587291][T26128] syzkaller0: entered promiscuous mode [ 1598.625921][T26128] syzkaller0: entered allmulticast mode [ 1599.041865][T26146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.516714][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5688'. [ 1599.643232][T26151] fuse: Bad value for 'fd' [ 1599.684933][T16783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1600.806006][ T30] audit: type=1400 audit(2000000014.947:3565): avc: denied { getopt } for pid=26153 comm="syz.5.5690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1601.254469][T26164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1601.611769][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1601.621864][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1602.252699][T26180] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1602.261216][T26180] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1602.269735][T26180] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1602.477334][T26172] lo speed is unknown, defaulting to 1000 [ 1602.493073][T26172] vlan1 speed is unknown, defaulting to 1000 [ 1603.550287][T11996] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1603.733139][T11996] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1603.744729][T11996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.253285][T11996] usb 7-1: Product: syz [ 1604.257571][T11996] usb 7-1: Manufacturer: syz [ 1604.263426][T11996] usb 7-1: SerialNumber: syz [ 1604.527621][T11996] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1604.554930][T11996] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1604.609443][T11996] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1604.642274][T11996] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1604.685405][T11996] usb 7-1: USB disconnect, device number 33 [ 1605.637250][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5707'. [ 1605.759052][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5708'. [ 1606.953295][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5711'. [ 1607.188045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 1607.196087][ C0] lec:lec_tx_timeout: lec0 [ 1607.383416][T26254] SET target dimension over the limit! [ 1608.452870][T26263] netlink: 'syz.5.5716': attribute type 12 has an invalid length. [ 1609.326333][ T30] audit: type=1400 audit(2000000023.461:3566): avc: denied { getopt } for pid=26272 comm="syz.5.5721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1611.126103][T11996] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1611.186744][T16794] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1611.368463][T11996] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1611.441179][T11996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.612565][T11996] usb 4-1: Product: syz [ 1611.641622][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1611.671078][T11996] usb 4-1: Manufacturer: syz [ 1611.720445][T11996] usb 4-1: SerialNumber: syz [ 1611.727920][T11996] usb 4-1: config 0 descriptor?? [ 1611.956038][T11996] usb 4-1: USB disconnect, device number 110 [ 1612.459762][T26311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.260877][T26315] Cannot find add_set index 0 as target [ 1613.810566][T26323] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1613.820450][T26323] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1613.829648][T26323] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1613.929747][T26326] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5728'. [ 1614.370713][T11996] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1614.541164][T11996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.593957][T11996] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1614.676305][T11996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.006294][T11996] usb 3-1: config 0 descriptor?? [ 1615.117764][T11996] pwc: Askey VC010 type 2 USB webcam detected. [ 1615.310558][T11996] pwc: send_video_command error -71 [ 1615.316011][T11996] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1615.323589][T11996] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1615.672441][T11996] usb 3-1: USB disconnect, device number 5 [ 1615.712616][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5734'. [ 1616.006023][T26356] kvm: pic: non byte read [ 1616.022540][T26356] kvm: pic: non byte read [ 1616.038306][T26356] kvm: pic: non byte read [ 1616.043970][T11996] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1616.061766][T26356] kvm: pic: non byte read [ 1616.070138][T26356] kvm: pic: non byte read [ 1616.075325][T26356] kvm: pic: non byte read [ 1616.086605][T24441] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 1616.095366][T26356] kvm: pic: non byte read [ 1616.102650][T26356] kvm: pic: non byte read [ 1616.113110][T26356] kvm: pic: non byte read [ 1616.125398][T26356] kvm: pic: non byte read [ 1616.195319][T11996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.226130][T11996] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1616.248090][T11996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.509668][T11996] usb 3-1: config 0 descriptor?? [ 1616.527149][T11996] pwc: Askey VC010 type 2 USB webcam detected. [ 1617.325623][T11996] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1617.335136][T11996] pwc: recv_control_msg error -32 req 02 val 2700 [ 1617.344174][T11996] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1617.351288][T11996] pwc: recv_control_msg error -32 req 04 val 1000 [ 1617.391075][ T792] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1617.393812][T11996] pwc: recv_control_msg error -71 req 04 val 1300 [ 1617.407481][T11996] pwc: recv_control_msg error -71 req 04 val 1400 [ 1617.432810][T11996] pwc: recv_control_msg error -71 req 02 val 2000 [ 1617.556243][T11996] pwc: recv_control_msg error -71 req 02 val 2100 [ 1617.675390][T11996] pwc: recv_control_msg error -71 req 04 val 1500 [ 1617.743703][T11996] pwc: recv_control_msg error -71 req 02 val 2500 [ 1617.750447][T11996] pwc: recv_control_msg error -71 req 02 val 2400 [ 1617.757249][T11996] pwc: recv_control_msg error -71 req 02 val 2600 [ 1617.764031][T11996] pwc: recv_control_msg error -71 req 02 val 2900 [ 1617.770723][T11996] pwc: recv_control_msg error -71 req 02 val 2800 [ 1617.777674][T11996] pwc: recv_control_msg error -71 req 04 val 1100 [ 1617.787263][T11996] pwc: recv_control_msg error -71 req 04 val 1200 [ 1617.812925][T11996] pwc: Registered as video103. [ 1617.833469][T11996] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 1617.836730][ T792] usb 4-1: config 7 has an invalid interface number: 92 but max is 1 [ 1617.881690][ T792] usb 4-1: config 7 has an invalid interface number: 189 but max is 1 [ 1617.885522][T11996] usb 3-1: USB disconnect, device number 6 [ 1617.946513][ T792] usb 4-1: config 7 has no interface number 0 [ 1617.962673][ T792] usb 4-1: config 7 has no interface number 1 [ 1618.017550][ T792] usb 4-1: config 7 interface 92 has no altsetting 0 [ 1618.036998][ T792] usb 4-1: config 7 interface 189 has no altsetting 0 [ 1618.071439][ T792] usb 4-1: New USB device found, idVendor=05a9, idProduct=a511, bcdDevice=49.6f [ 1618.124952][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.133523][ T792] usb 4-1: Product: syz [ 1618.150368][ T792] usb 4-1: Manufacturer: syz [ 1618.158112][ T792] usb 4-1: SerialNumber: syz [ 1618.463449][T26380] blktrace: Concurrent blktraces are not allowed on sg0 [ 1618.487291][T26368] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1618.639201][ T792] usb 4-1: USB disconnect, device number 111 [ 1618.707707][T26387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5742'. [ 1618.823123][T26391] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1618.831488][T26391] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1618.840253][T26391] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1618.992190][T11975] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1619.102492][T24441] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.914356][T11975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1619.960500][T11975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1619.981301][T11975] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1620.000986][T11975] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1620.059136][T11975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.142080][T19015] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1620.151277][T19015] Bluetooth: hci4: Injecting HCI hardware error event [ 1620.162875][T24441] Bluetooth: hci4: hardware error 0x00 [ 1620.167618][T26406] openvswitch: netlink: Key 26 has unexpected len 12 expected 16 [ 1620.322793][T11975] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1620.331307][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1620.548155][T26384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.558125][T26384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.761010][T11975] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1621.754796][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 1622.231381][T24441] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1622.652631][T11996] usb 7-1: USB disconnect, device number 34 [ 1623.447397][T26454] Cannot find add_set index 0 as target [ 1623.755356][T26457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1623.764458][T26457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1624.017543][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 1624.927446][T26464] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1624.992572][T26464] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1625.324813][T26474] sd 0:0:1:0: PR command failed: 1026 [ 1625.330495][T26474] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1625.337386][T26474] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1625.553335][T26464] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1625.990084][T26471] Process accounting resumed [ 1626.372135][T26489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5762'. [ 1626.716484][T26491] syzkaller0: entered promiscuous mode [ 1626.722132][T26491] syzkaller0: entered allmulticast mode [ 1626.838279][T22339] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1627.164136][T22339] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1627.188876][T22339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1627.271965][T22339] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.287679][T22339] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.303885][T22339] usb 7-1: Product: syz [ 1627.312242][T22339] usb 7-1: Manufacturer: syz [ 1627.316876][T22339] usb 7-1: SerialNumber: syz [ 1627.339867][T22339] usb 7-1: config 0 descriptor?? [ 1627.375811][T26494] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1627.387567][T22339] usb 7-1: selecting invalid altsetting 0 [ 1627.602742][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.735452][T26501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5765'. [ 1627.748266][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.360226][T24441] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 1628.371386][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.578108][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.365733][T22339] usb 7-1: USB disconnect, device number 35 [ 1629.470667][T26515] netlink: 'syz.5.5768': attribute type 1 has an invalid length. [ 1629.540035][T26515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1629.668458][T26529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.495713][T26543] exFAT-fs (nbd6): unable to read boot sector [ 1630.501908][T26543] exFAT-fs (nbd6): failed to read boot sector [ 1630.508347][T26543] exFAT-fs (nbd6): failed to recognize exfat type [ 1631.568585][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5773'. [ 1631.652595][T26542] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5775'. [ 1631.658807][T26548] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 1631.669629][T26548] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1632.298768][T16794] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1634.402979][ T30] audit: type=1400 audit(2000000048.544:3567): avc: denied { watch_mount } for pid=26568 comm="syz.3.5781" path="/383" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1634.857643][T26575] random: crng reseeded on system resumption [ 1636.284304][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5782'. [ 1636.716401][ T30] audit: type=1400 audit(2000000050.635:3568): avc: denied { create } for pid=26595 comm="syz.6.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1636.980820][ T30] audit: type=1400 audit(2000000050.635:3569): avc: denied { write } for pid=26595 comm="syz.6.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1637.342360][ T30] audit: type=1400 audit(2000000050.635:3570): avc: denied { read } for pid=26595 comm="syz.6.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1637.466874][ T30] audit: type=1400 audit(2000000050.705:3571): avc: denied { allowed } for pid=26595 comm="syz.6.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1638.502428][ T30] audit: type=1400 audit(2000000050.715:3572): avc: denied { read write } for pid=26595 comm="syz.6.5785" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1638.532877][ T30] audit: type=1400 audit(2000000050.715:3573): avc: denied { open } for pid=26595 comm="syz.6.5785" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1638.560899][ T30] audit: type=1400 audit(2000000050.975:3574): avc: denied { read write } for pid=19013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1638.591682][ T30] audit: type=1400 audit(2000000050.975:3575): avc: denied { open } for pid=19013 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1638.621759][ T30] audit: type=1400 audit(2000000050.975:3576): avc: denied { ioctl } for pid=19013 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1638.703002][T26615] syzkaller0: entered promiscuous mode [ 1638.712328][T26615] syzkaller0: entered allmulticast mode [ 1638.984798][T26623] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1640.808294][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1640.808315][ T30] audit: type=1400 audit(2000000053.376:3609): avc: denied { map_create } for pid=26627 comm="syz.6.5792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1640.853656][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5793'. [ 1640.864907][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 1640.961614][ T29] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1641.045669][ T30] audit: type=1400 audit(2000000053.566:3610): avc: denied { read } for pid=26627 comm="syz.6.5792" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1641.178230][ T30] audit: type=1400 audit(2000000053.566:3611): avc: denied { open } for pid=26627 comm="syz.6.5792" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1641.181052][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1641.221826][T22339] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1641.249789][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.258730][ T30] audit: type=1400 audit(2000000055.007:3612): avc: denied { read } for pid=26626 comm="syz.5.5793" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1641.321612][ T29] usb 4-1: Product: syz [ 1641.326090][ T29] usb 4-1: Manufacturer: syz [ 1641.391028][ T29] usb 4-1: SerialNumber: syz [ 1641.401838][ T29] usb 4-1: config 0 descriptor?? [ 1641.466773][T22339] usb 6-1: Using ep0 maxpacket: 16 [ 1641.502701][T22339] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1641.513313][ T30] audit: type=1400 audit(2000000055.007:3613): avc: denied { open } for pid=26626 comm="syz.5.5793" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1641.550680][T22339] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1641.568502][T22339] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1641.588378][ T30] audit: type=1400 audit(2000000055.007:3614): avc: denied { create } for pid=26626 comm="syz.5.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1641.615728][T22339] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1641.625603][ T29] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1641.642938][T22339] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1641.655622][T22339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.668585][ T30] audit: type=1400 audit(2000000055.017:3615): avc: denied { ioctl } for pid=26626 comm="syz.5.5793" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1641.694078][T22339] usb 6-1: Product: syz [ 1641.705773][T22339] usb 6-1: Manufacturer: syz [ 1641.717011][T22339] usb 6-1: SerialNumber: syz [ 1641.756141][ T30] audit: type=1400 audit(2000000055.317:3616): avc: denied { create } for pid=26636 comm="syz.7.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1641.876857][ T30] audit: type=1400 audit(2000000055.327:3617): avc: denied { create } for pid=26636 comm="syz.7.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1641.973581][T22339] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1642.005309][ T30] audit: type=1400 audit(2000000055.507:3618): avc: denied { bind } for pid=26636 comm="syz.7.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1642.532287][T16783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1642.841692][T13811] lec:lec_start_xmit: lec0:No lecd attached [ 1643.267713][ T792] usb 6-1: USB disconnect, device number 70 [ 1643.357301][ T792] usblp0: removed [ 1643.410325][T26655] 9p: Could not find request transport: fd0x00000000000000060x0000000000000007 [ 1643.451064][ T29] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1643.540476][ T29] usb 4-1: USB disconnect, device number 112 [ 1645.446954][T26693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5803'. [ 1645.679600][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1645.986319][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1645.986334][ T30] audit: type=1400 audit(2000000060.140:3657): avc: denied { create } for pid=26691 comm="syz.7.5804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1646.065023][ T29] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1646.084798][T26704] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1646.093918][T26704] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1646.107131][T26704] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1646.158857][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.169316][ T30] audit: type=1400 audit(2000000060.170:3658): avc: denied { create } for pid=26699 comm="syz.6.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1646.198634][ T30] audit: type=1400 audit(2000000060.180:3659): avc: denied { setopt } for pid=26699 comm="syz.6.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1646.219417][ T30] audit: type=1400 audit(2000000060.270:3660): avc: denied { firmware_load } for pid=26699 comm="syz.6.5806" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1646.244107][ T29] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1646.254299][ T29] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1646.265489][ T29] usb 3-1: Manufacturer: syz [ 1646.279843][ T29] usb 3-1: config 0 descriptor?? [ 1646.301238][ T30] audit: type=1400 audit(2000000060.450:3661): avc: denied { bind } for pid=26699 comm="syz.6.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1646.497389][ T30] audit: type=1400 audit(2000000060.490:3662): avc: denied { listen } for pid=26699 comm="syz.6.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1646.656680][ T30] audit: type=1400 audit(2000000060.500:3663): avc: denied { write } for pid=26691 comm="syz.7.5804" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1646.898038][ T30] audit: type=1400 audit(2000000061.050:3664): avc: denied { create } for pid=26708 comm="syz.3.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1646.968292][ T29] rc_core: IR keymap rc-hauppauge not found [ 1646.974264][ T29] Registered IR keymap rc-empty [ 1647.004450][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1647.289671][T26716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1647.321284][ T30] audit: type=1400 audit(2000000061.450:3665): avc: denied { connect } for pid=26708 comm="syz.3.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1647.355306][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input84 [ 1647.382450][T26688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.402064][T26688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.420286][ T30] audit: type=1400 audit(2000000061.570:3666): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=4890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1648.211254][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 1648.219301][ C0] lec:lec_tx_timeout: lec0 [ 1648.621950][ T29] usb 3-1: USB disconnect, device number 7 [ 1651.890643][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1651.890662][ T30] audit: type=1400 audit(2000000066.053:3678): avc: denied { write } for pid=26758 comm="syz.7.5817" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1652.567912][ T30] audit: type=1400 audit(2000000066.273:3679): avc: denied { create } for pid=26764 comm="syz.2.5820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1652.814014][ T30] audit: type=1400 audit(2000000066.283:3680): avc: denied { connect } for pid=26764 comm="syz.2.5820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1653.045552][T26776] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1653.115218][T26779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5819'. [ 1653.135710][T26776] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1653.146393][T26776] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1653.159159][ T30] audit: type=1400 audit(2000000066.283:3681): avc: denied { write } for pid=26764 comm="syz.2.5820" path="socket:[119251]" dev="sockfs" ino=119251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1653.242216][ T30] audit: type=1400 audit(2000000066.663:3682): avc: denied { ioctl } for pid=26758 comm="syz.7.5817" path="socket:[118342]" dev="sockfs" ino=118342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1653.345121][ T792] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1653.575252][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 1653.609097][ T792] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1653.630880][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.643044][ T792] usb 3-1: Product: syz [ 1653.647647][ T792] usb 3-1: Manufacturer: syz [ 1653.663260][ T792] usb 3-1: SerialNumber: syz [ 1653.698463][ T792] usb 3-1: config 0 descriptor?? [ 1653.733820][ T792] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1654.288235][ T792] gspca_sonixj: reg_w1 err -110 [ 1654.293922][ T792] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1654.353485][ T30] audit: type=1400 audit(2000000068.514:3683): avc: denied { mounton } for pid=26795 comm="syz.7.5825" path="/82" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1654.564215][ T30] audit: type=1400 audit(2000000068.514:3684): avc: denied { connect } for pid=26795 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1654.721928][ T30] audit: type=1400 audit(2000000068.514:3685): avc: denied { setopt } for pid=26795 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1654.855659][ T30] audit: type=1400 audit(2000000068.514:3686): avc: denied { create } for pid=26795 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1655.346343][T26810] program syz.5.5828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1655.364242][ T30] audit: type=1400 audit(2000000069.514:3687): avc: denied { ioctl } for pid=26809 comm="syz.5.5828" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1656.169153][T22339] usb 3-1: USB disconnect, device number 8 [ 1657.243981][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1657.244000][ T30] audit: type=1400 audit(2000000071.405:3693): avc: denied { unlink } for pid=22074 comm="syz-executor" name="file5" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1658.481685][ T30] audit: type=1400 audit(2000000071.865:3694): avc: denied { write } for pid=26822 comm="syz.6.5831" name="unix" dev="proc" ino=4026534464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1658.887487][T26834] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1658.898030][T26834] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1658.907015][T26834] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1659.063500][ T30] audit: type=1400 audit(2000000072.126:3695): avc: denied { ioctl } for pid=26825 comm="syz.7.5826" path="socket:[119422]" dev="sockfs" ino=119422 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1659.150870][T26806] Process accounting paused [ 1659.342470][T11975] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1660.391743][T11975] usb 7-1: Using ep0 maxpacket: 16 [ 1660.641685][ T30] audit: type=1400 audit(2000000073.616:3696): avc: denied { unlink } for pid=26840 comm="syz.3.5835" name="#10a" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1660.730892][T26844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.775439][ T30] audit: type=1400 audit(2000000073.626:3697): avc: denied { mount } for pid=26840 comm="syz.3.5835" name="/" dev="overlay" ino=2103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1660.829588][T26844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.602412][ T30] audit: type=1400 audit(2000000074.807:3698): avc: denied { unmount } for pid=19013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1661.701247][ T30] audit: type=1400 audit(2000000074.897:3699): avc: denied { bind } for pid=26837 comm="syz.6.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1661.799758][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5838'. [ 1661.963651][ T30] audit: type=1400 audit(2000000074.987:3700): avc: denied { unmount } for pid=19013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1661.984558][ T30] audit: type=1400 audit(2000000075.917:3701): avc: denied { create } for pid=26845 comm="syz.7.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1662.005369][ T30] audit: type=1400 audit(2000000075.917:3702): avc: denied { connect } for pid=26845 comm="syz.7.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1662.262247][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1662.262261][ T30] audit: type=1400 audit(2000000076.358:3709): avc: denied { read write } for pid=26845 comm="syz.7.5838" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1662.509116][ T30] audit: type=1400 audit(2000000076.358:3710): avc: denied { open } for pid=26845 comm="syz.7.5838" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1663.003864][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1663.031761][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1663.064084][ T30] audit: type=1400 audit(2000000076.768:3711): avc: denied { append } for pid=26860 comm="syz.2.5832" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1663.090232][ T30] audit: type=1400 audit(2000000076.778:3712): avc: denied { mount } for pid=26860 comm="syz.2.5832" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1663.112975][ T30] audit: type=1400 audit(2000000076.778:3713): avc: denied { remount } for pid=26860 comm="syz.2.5832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1664.245776][T11975] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1664.267010][T11975] usb 7-1: no configurations [ 1664.280369][T16787] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1664.291727][T11975] usb 7-1: can't read configurations, error -22 [ 1664.461173][ T30] audit: type=1400 audit(2000000078.629:3714): avc: denied { write } for pid=26870 comm="syz.6.5841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1664.580756][ T30] audit: type=1400 audit(2000000078.629:3715): avc: denied { mount } for pid=26870 comm="syz.6.5841" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1664.746187][ T30] audit: type=1400 audit(2000000078.629:3716): avc: denied { mounton } for pid=26870 comm="syz.6.5841" path="/234/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1664.787997][ T30] audit: type=1400 audit(2000000078.699:3717): avc: denied { read write } for pid=26879 comm="syz.5.5843" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1664.822946][ T30] audit: type=1400 audit(2000000078.699:3718): avc: denied { open } for pid=26879 comm="syz.5.5843" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1666.445703][T26903] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1666.454231][T26903] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1666.462843][T26903] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1666.598999][T11985] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1666.758263][T11985] usb 3-1: Using ep0 maxpacket: 16 [ 1666.777688][T11985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1666.816703][T11985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1666.855596][T11985] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1666.888287][T11985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.901814][T11985] usb 3-1: Product: syz [ 1666.918374][T11985] usb 3-1: Manufacturer: syz [ 1666.928290][T11985] usb 3-1: SerialNumber: syz [ 1666.939242][T11985] usb 3-1: config 0 descriptor?? [ 1666.960035][T11985] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1666.993769][T11985] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1667.232567][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5848'. [ 1667.514283][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1667.514302][ T30] audit: type=1400 audit(2000000081.630:3722): avc: denied { create } for pid=26911 comm="syz.3.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1667.628702][ T30] audit: type=1400 audit(2000000081.630:3723): avc: denied { setopt } for pid=26911 comm="syz.3.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1667.653580][ T30] audit: type=1400 audit(2000000081.630:3724): avc: denied { getopt } for pid=26911 comm="syz.3.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1668.197560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 1668.205596][ C0] lec:lec_tx_timeout: lec0 [ 1668.997362][T11985] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1669.264165][T26900] Set syz1 is full, maxelem 65536 reached [ 1669.304994][T11985] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1669.339164][T11985] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1669.356783][T11985] em28xx 3-1:0.0: No AC97 audio processor [ 1669.396265][T11985] usb 3-1: USB disconnect, device number 9 [ 1669.416685][T11985] em28xx 3-1:0.0: Disconnecting em28xx [ 1669.425999][T11985] em28xx 3-1:0.0: Freeing device [ 1670.139312][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5853'. [ 1671.731573][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1671.806076][ T30] audit: type=1400 audit(2000000085.942:3725): avc: denied { mount } for pid=26953 comm="syz.5.5859" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1672.525694][ T30] audit: type=1400 audit(2000000086.603:3726): avc: denied { accept } for pid=26967 comm="syz.3.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1672.753037][ T30] audit: type=1400 audit(2000000086.923:3727): avc: denied { open } for pid=26973 comm="syz.7.5863" path="/dev/ptyr2" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1672.802720][ T30] audit: type=1400 audit(2000000086.973:3728): avc: denied { ioctl } for pid=26973 comm="syz.7.5863" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1673.190933][T26983] netlink: 179640 bytes leftover after parsing attributes in process `syz.2.5864'. [ 1673.501019][ T30] audit: type=1400 audit(2000000087.513:3729): avc: denied { read } for pid=26973 comm="syz.7.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1674.575371][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5866'. [ 1675.263971][T16783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1675.304024][ T30] audit: type=1400 audit(2000000089.474:3730): avc: denied { unmount } for pid=10288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1675.637374][T16783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1675.651900][T16783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1675.664004][T11993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1676.433823][T22339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1676.513599][T22339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1677.179425][T27011] isofs_fill_super: bread failed, dev=nbd7, iso_blknum=16, block=32 [ 1677.233218][ T30] audit: type=1400 audit(2000000091.345:3731): avc: denied { mounton } for pid=27006 comm="syz.7.5873" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1677.848558][ T30] audit: type=1400 audit(2000000091.725:3732): avc: denied { create } for pid=27009 comm="syz.5.5874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1678.070012][T27019] random: crng reseeded on system resumption [ 1678.126366][T27019] openvswitch: netlink: Flow key attr not present in new flow. [ 1678.407907][ T30] audit: type=1400 audit(2000000092.246:3733): avc: denied { write } for pid=27016 comm="syz.7.5875" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1678.413946][T27012] overlayfs: missing 'lowerdir' [ 1678.431321][ T30] audit: type=1400 audit(2000000092.246:3734): avc: denied { open } for pid=27016 comm="syz.7.5875" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1678.528549][ T30] audit: type=1400 audit(2000000092.316:3735): avc: denied { ioctl } for pid=27016 comm="syz.7.5875" path="socket:[120015]" dev="sockfs" ino=120015 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1679.295170][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1679.711869][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1681.118509][ T30] audit: type=1400 audit(2000000094.897:3736): avc: denied { setopt } for pid=27033 comm="syz.7.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1681.160694][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1681.509391][ T30] audit: type=1400 audit(2000000095.607:3737): avc: denied { create } for pid=27046 comm="syz.5.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1681.791697][ T30] audit: type=1400 audit(2000000095.637:3738): avc: denied { mount } for pid=27046 comm="syz.5.5880" name="/" dev="autofs" ino=120103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1682.153957][ T30] audit: type=1400 audit(2000000096.338:3739): avc: denied { unmount } for pid=10288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1682.432799][ T30] audit: type=1400 audit(2000000096.618:3740): avc: denied { write } for pid=27054 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1683.226202][ T30] audit: type=1400 audit(2000000097.398:3741): avc: denied { setopt } for pid=27059 comm="syz.7.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1683.569081][ T30] audit: type=1400 audit(2000000097.398:3742): avc: denied { connect } for pid=27059 comm="syz.7.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1683.601717][ T30] audit: type=1400 audit(2000000097.458:3743): avc: denied { create } for pid=27059 comm="syz.7.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1683.622254][ T30] audit: type=1400 audit(2000000097.728:3744): avc: denied { getopt } for pid=27055 comm="syz.5.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1683.724785][ T30] audit: type=1400 audit(2000000097.898:3745): avc: denied { read write } for pid=27065 comm="syz.3.5885" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1683.743023][T27067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27067 comm=syz.5.5881 [ 1683.890050][ T30] audit: type=1400 audit(2000000097.898:3746): avc: denied { open } for pid=27065 comm="syz.3.5885" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1683.933495][T27068] usb usb7: usbfs: process 27068 (syz.3.5885) did not claim interface 0 before use [ 1683.953458][ T30] audit: type=1400 audit(2000000097.988:3747): avc: denied { ioctl } for pid=27065 comm="syz.3.5885" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1684.143499][ T30] audit: type=1400 audit(2000000098.309:3748): avc: denied { ioctl } for pid=27069 comm="syz.2.5886" path="socket:[120149]" dev="sockfs" ino=120149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1684.538402][ T30] audit: type=1326 audit(2000000098.699:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27071 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08039c819 code=0x7ffc0000 [ 1684.643749][ T30] audit: type=1326 audit(2000000098.699:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27071 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08039c819 code=0x7ffc0000 [ 1686.735148][T27085] netlink: 'syz.7.5884': attribute type 10 has an invalid length. [ 1686.918873][T27085] team0: Device xfrm0 is of different type [ 1687.777085][T27088] input: syz1 as /devices/virtual/input/input85 [ 1687.957746][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.132461][T27100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.084402][T27123] Process accounting resumed [ 1690.450510][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1690.450547][ T30] audit: type=1400 audit(2000000104.622:3795): avc: denied { connect } for pid=27128 comm="syz.3.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1691.858537][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5897'. [ 1692.157211][ T30] audit: type=1326 audit(2000000106.333:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.022047][ T30] audit: type=1326 audit(2000000106.343:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.105101][ T30] audit: type=1326 audit(2000000106.343:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.172566][ T30] audit: type=1326 audit(2000000106.343:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.286315][ T30] audit: type=1326 audit(2000000106.343:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.665024][ T30] audit: type=1326 audit(2000000106.343:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.850283][ T30] audit: type=1326 audit(2000000106.343:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1693.874803][ T30] audit: type=1326 audit(2000000106.343:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1694.537825][ T30] audit: type=1326 audit(2000000106.343:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27140 comm="syz.3.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9fcdf9c819 code=0x7ffc0000 [ 1694.934795][T27164] SET target dimension over the limit! [ 1695.514935][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1695.514982][ T30] audit: type=1400 audit(2000000109.574:3809): avc: denied { write } for pid=27163 comm="syz.6.5906" name="file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1695.570615][ T30] audit: type=1400 audit(2000000109.574:3810): avc: denied { open } for pid=27163 comm="syz.6.5906" path="/245/file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1695.714306][T27176] Cannot find add_set index 0 as target [ 1696.025436][ T30] audit: type=1400 audit(2000000109.584:3811): avc: denied { ioctl } for pid=27163 comm="syz.6.5906" path="/245/file0" dev="tmpfs" ino=1293 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1696.063843][ T30] audit: type=1400 audit(2000000109.704:3812): avc: denied { connect } for pid=27162 comm="syz.3.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1696.264471][T15701] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1696.296805][ T30] audit: type=1400 audit(2000000110.485:3813): avc: denied { bind } for pid=27179 comm="syz.3.5909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1696.736852][ T30] audit: type=1400 audit(2000000110.925:3814): avc: denied { append } for pid=27188 comm="syz.5.5911" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1696.865738][T27184] binder: BINDER_SET_CONTEXT_MGR already set [ 1696.871745][T27184] binder: 27181:27184 ioctl 4018620d 200000000040 returned -16 [ 1696.968224][ T30] audit: type=1400 audit(2000000111.055:3815): avc: denied { ioctl } for pid=27181 comm="syz.7.5910" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1697.117300][T27195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1697.458669][ T30] audit: type=1400 audit(2000000111.055:3816): avc: denied { set_context_mgr } for pid=27181 comm="syz.7.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1697.772906][ T30] audit: type=1400 audit(2000000111.665:3817): avc: denied { write } for pid=27192 comm="syz.6.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1698.384526][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5908'. [ 1698.440221][ T30] audit: type=1400 audit(2000000112.526:3818): avc: denied { ioctl } for pid=27202 comm="syz.2.5908" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1698.753654][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5915'. [ 1698.906203][T27212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.081679][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1700.518745][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5920'. [ 1700.880232][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1700.880249][ T30] audit: type=1400 audit(2000000115.067:3820): avc: denied { ioctl } for pid=27232 comm="syz.5.5921" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1701.205969][T27244] input: syz0 as /devices/virtual/input/input87 [ 1701.852576][T27243] tap0: tun_chr_ioctl cmd 1074025678 [ 1701.857986][T27243] tap0: group set to 0 [ 1703.473784][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1703.482738][T27262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1703.498456][ T30] audit: type=1400 audit(2000000117.658:3821): avc: denied { ioctl } for pid=27255 comm="syz.3.5926" path="socket:[120580]" dev="sockfs" ino=120580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1703.889821][T27267] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1704.137006][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1704.146934][T27262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5926'. [ 1704.293801][ T30] audit: type=1400 audit(2000000117.658:3822): avc: denied { bind } for pid=27255 comm="syz.3.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1704.476414][ T30] audit: type=1400 audit(2000000118.659:3823): avc: denied { map } for pid=27269 comm="syz.3.5928" path="socket:[120596]" dev="sockfs" ino=120596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1704.579452][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1704.665791][ T30] audit: type=1400 audit(2000000118.659:3824): avc: denied { read accept } for pid=27269 comm="syz.3.5928" path="socket:[120596]" dev="sockfs" ino=120596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1705.122093][ T30] audit: type=1400 audit(2000000118.719:3825): avc: denied { write } for pid=27271 comm="syz.6.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1705.152574][ T30] audit: type=1400 audit(2000000118.919:3826): avc: denied { setopt } for pid=27271 comm="syz.6.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1705.847175][T27283] SET target dimension over the limit! [ 1707.251198][T16787] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1707.505541][T13811] lec:lec_start_xmit: lec0:No lecd attached [ 1707.602931][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5933'. [ 1708.092032][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5936'. [ 1710.183662][T27290] lo speed is unknown, defaulting to 1000 [ 1710.239650][T27290] vlan1 speed is unknown, defaulting to 1000 [ 1710.627137][T27334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1710.646554][ T30] audit: type=1400 audit(2000000124.812:3827): avc: denied { write } for pid=27333 comm="syz.2.5940" path="socket:[120722]" dev="sockfs" ino=120722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1710.763031][ T30] audit: type=1400 audit(2000000124.812:3828): avc: denied { read } for pid=27333 comm="syz.2.5940" path="socket:[120722]" dev="sockfs" ino=120722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1710.881987][ T30] audit: type=1400 audit(2000000125.062:3829): avc: denied { read } for pid=27336 comm="syz.6.5941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1710.907276][T22339] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 1710.920072][ T30] audit: type=1400 audit(2000000125.062:3830): avc: denied { read } for pid=27336 comm="syz.6.5941" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1710.946192][ T30] audit: type=1400 audit(2000000125.062:3831): avc: denied { open } for pid=27336 comm="syz.6.5941" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1710.984545][ T30] audit: type=1400 audit(2000000125.062:3832): avc: denied { ioctl } for pid=27336 comm="syz.6.5941" path="/newroot/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1711.088930][T27341] SET target dimension over the limit! [ 1711.246046][T22339] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 1711.402234][T22339] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1711.411296][T22339] usb 4-1: can't read configurations, error -61 [ 1711.547000][T27347] SET target dimension over the limit! [ 1711.591692][T27332] lo speed is unknown, defaulting to 1000 [ 1711.628682][T27332] vlan1 speed is unknown, defaulting to 1000 [ 1711.842481][T22339] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 1712.322925][T22339] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 1712.363976][T22339] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1712.372376][T22339] usb 4-1: can't read configurations, error -61 [ 1712.412461][T22339] usb usb4-port1: attempt power cycle [ 1713.135096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 1713.143395][ C0] lec:lec_tx_timeout: lec0 [ 1714.337998][ T30] audit: type=1400 audit(2000000128.534:3833): avc: denied { getopt } for pid=27331 comm="syz.3.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1714.364972][T22339] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 1714.417162][T22339] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 1715.086613][ T30] audit: type=1400 audit(2000000128.964:3834): avc: denied { setopt } for pid=27353 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1715.456817][T22339] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1715.464971][T22339] usb 4-1: can't read configurations, error -61 [ 1715.623853][T22339] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1715.669443][T22339] usb 4-1: device descriptor read/8, error -71 [ 1715.980189][ T30] audit: type=1400 audit(2000000130.095:3835): avc: denied { bind } for pid=27370 comm="syz.6.5947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1716.032689][T22339] usb usb4-port1: unable to enumerate USB device [ 1716.154702][ T30] audit: type=1400 audit(2000000130.165:3836): avc: denied { append } for pid=27370 comm="syz.6.5947" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1716.363546][T11985] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1716.404169][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1716.640342][T11985] usb 7-1: device descriptor read/64, error -32 [ 1716.741009][ T30] audit: type=1400 audit(2000000130.935:3837): avc: denied { write } for pid=27378 comm="syz.7.5946" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1716.906188][T11985] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1717.025153][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'. [ 1717.137422][T11985] usb 7-1: device descriptor read/64, error -71 [ 1717.239143][T27389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5950'. [ 1717.255892][T11985] usb usb7-port1: attempt power cycle [ 1717.693434][T11985] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1717.747414][T11985] usb 7-1: device descriptor read/8, error -71 [ 1717.993251][T11985] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1718.072605][T11985] usb 7-1: device descriptor read/8, error -71 [ 1718.116203][ T30] audit: type=1400 audit(2000000132.316:3838): avc: denied { getopt } for pid=27394 comm="syz.2.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1718.322858][T11985] usb usb7-port1: unable to enumerate USB device [ 1718.585257][ T792] kernel read not supported for file /dsp1 (pid: 792 comm: kworker/1:2) [ 1720.201074][T27414] : entered promiscuous mode [ 1720.211900][ T30] audit: type=1400 audit(2000000134.347:3839): avc: denied { mount } for pid=27410 comm="syz.2.5957" name="/" dev="rpc_pipefs" ino=122988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1720.823200][T27383] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1721.205382][T27383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1721.238616][T27383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.274391][T27383] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1721.283851][T27383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.294938][T27383] usb 6-1: config 0 descriptor?? [ 1721.436535][T27402] Process accounting paused [ 1722.732306][T27383] usbhid 6-1:0.0: can't add hid device: -71 [ 1722.785943][T27383] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1722.933559][T27383] usb 6-1: USB disconnect, device number 71 [ 1723.585977][ T30] audit: type=1400 audit(2000000137.778:3840): avc: denied { read } for pid=27438 comm="syz.7.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1724.694144][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1724.705133][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1725.261306][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1725.401415][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5969'. [ 1725.538875][ T792] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1725.693159][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 1725.717140][ T792] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1725.727505][ T792] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1725.742798][ T792] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.802931][ T792] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1725.837986][ T792] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1725.857704][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.985690][ T792] usb 3-1: Product: syz [ 1725.990577][ T792] usb 3-1: Manufacturer: syz [ 1725.995388][ T792] usb 3-1: SerialNumber: syz [ 1726.495931][ T792] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1727.628023][ T30] audit: type=1400 audit(2000000141.450:3841): avc: denied { setopt } for pid=27468 comm="syz.7.5971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1727.651932][ T30] audit: type=1400 audit(2000000141.450:3842): avc: denied { connect } for pid=27468 comm="syz.7.5971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1727.683210][T27470] picdev_read: 77 callbacks suppressed [ 1727.683224][T27470] kvm: pic: non byte read [ 1727.695419][T27470] kvm: pic: non byte read [ 1727.700612][T27470] kvm: pic: non byte read [ 1727.706669][T27470] kvm: pic: non byte read [ 1727.711744][T27470] kvm: pic: non byte read [ 1727.718303][T27470] kvm: pic: non byte read [ 1727.723064][T27470] kvm: pic: non byte read [ 1728.329883][T27470] kvm: pic: non byte read [ 1728.334423][T27470] kvm: pic: non byte read [ 1728.352301][T15701] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1728.369177][T27470] kvm: pic: non byte read [ 1728.416211][ T30] audit: type=1400 audit(2000000142.611:3843): avc: denied { name_connect } for pid=27479 comm="syz.7.5974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1728.508513][T24441] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 1728.763044][ T30] audit: type=1400 audit(2000000142.691:3844): avc: denied { ioctl } for pid=27479 comm="syz.7.5974" path="socket:[123324]" dev="sockfs" ino=123324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1729.404482][T11993] usb 3-1: USB disconnect, device number 10 [ 1729.488896][T11993] usblp0: removed [ 1729.802095][ T30] audit: type=1400 audit(2000000144.001:3845): avc: denied { create } for pid=27488 comm="syz.2.5977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1729.884428][T27492] nfs: Unknown parameter 'ÿÿÿÿ' [ 1729.896646][T27492] comedi comedi1: comedi_config --init_data is deprecated [ 1730.176641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 1730.184963][ C0] lec:lec_tx_timeout: lec0 [ 1730.657012][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5978'. [ 1730.666025][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5978'. [ 1730.719321][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5978'. [ 1730.728891][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5978'. [ 1730.770872][T16787] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1732.130976][T16787] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.843980][T24441] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1733.855642][T24441] Bluetooth: hci1: Injecting HCI hardware error event [ 1733.864359][T24441] Bluetooth: hci1: hardware error 0x00 [ 1733.968160][T27505] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1733.977734][T27505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1733.987496][T27505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1734.054616][ T30] audit: type=1400 audit(2000000148.174:3846): avc: denied { firmware_load } for pid=27500 comm="syz.2.5981" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1734.063790][T16787] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.152070][T16787] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.536696][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1736.213650][T24441] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1736.786029][ T30] audit: type=1400 audit(2000000150.985:3847): avc: denied { bind } for pid=27546 comm="syz.3.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1736.859013][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'. [ 1737.119491][T27553] blktrace: Concurrent blktraces are not allowed on loop12 [ 1737.718718][T27555] sp0: Synchronizing with TNC [ 1737.792202][ T30] audit: type=1400 audit(2000000151.995:3848): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1738.158166][ T30] audit: type=1400 audit(2000000152.326:3849): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.182203][ T30] audit: type=1400 audit(2000000152.326:3850): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.215846][ T30] audit: type=1400 audit(2000000152.326:3851): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.239421][ T30] audit: type=1400 audit(2000000152.326:3852): avc: denied { read } for pid=5474 comm="dhcpcd" name="n130" dev="tmpfs" ino=22785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.421272][ T30] audit: type=1400 audit(2000000152.326:3853): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=22785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.482989][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1738.587111][ T30] audit: type=1400 audit(2000000152.326:3854): avc: denied { getattr } for pid=5474 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=22785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.612712][ T30] audit: type=1400 audit(2000000152.476:3855): avc: denied { ioctl } for pid=27567 comm="syz.2.5994" path="socket:[122647]" dev="sockfs" ino=122647 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1739.170253][T27582] netlink: 'syz.3.5997': attribute type 9 has an invalid length. [ 1739.187188][T27582] netlink: 'syz.3.5997': attribute type 11 has an invalid length. [ 1739.241839][T27582] netlink: 'syz.3.5997': attribute type 12 has an invalid length. [ 1739.272174][T27582] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1739.346007][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1740.012374][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1740.012392][ T30] audit: type=1400 audit(2000000153.806:3857): avc: denied { name_bind } for pid=27587 comm="syz.2.5998" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1740.381646][T17251] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1740.402302][T27597] SET target dimension over the limit! [ 1740.599444][T17251] usb 4-1: Using ep0 maxpacket: 16 [ 1741.247007][T17251] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1741.262235][T17251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.673331][T27605] x_tables: duplicate underflow at hook 3 [ 1741.710424][T27605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1741.717070][T27605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1741.732245][T17251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.743827][T17251] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1741.836376][T17251] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1741.846139][T17251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.868411][T17251] usb 4-1: config 0 descriptor?? [ 1742.379053][T27616] lo speed is unknown, defaulting to 1000 [ 1742.385844][T27616] vlan1 speed is unknown, defaulting to 1000 [ 1742.574560][T27605] vhci_hcd vhci_hcd.0: Device attached [ 1742.670434][ T30] audit: type=1326 audit(2000000156.848:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.5.6005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f317dd9c819 code=0x0 [ 1743.357158][T11995] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1743.410773][T17251] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0038/input/input88 [ 1743.502965][T27629] Cannot find add_set index 0 as target [ 1743.523117][T27629] netdevsim netdevsim5: Direct firmware load for / [ 1743.523117][T27629] failed with error -2 [ 1743.595134][T27629] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1743.595134][T27629] [ 1743.730891][T17251] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0038/input/input89 [ 1744.156629][T17251] kye 0003:0458:5013.0038: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 1744.655055][T27609] vhci_hcd: connection reset by peer [ 1744.682543][T17251] usb 4-1: USB disconnect, device number 117 [ 1744.690867][T16787] vhci_hcd vhci_hcd.2: stop threads [ 1744.696426][T16787] vhci_hcd vhci_hcd.2: release socket [ 1744.794980][T16787] vhci_hcd vhci_hcd.2: disconnect device [ 1744.819939][T27640] fido_id[27640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1744.975588][ T30] audit: type=1400 audit(2000000159.179:3859): avc: denied { name_bind } for pid=27638 comm="syz.3.6008" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1745.772864][ T30] audit: type=1400 audit(2000000159.209:3860): avc: denied { node_bind } for pid=27638 comm="syz.3.6008" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1745.913707][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6010'. [ 1745.967208][ T30] audit: type=1400 audit(2000000159.439:3861): avc: denied { write } for pid=27638 comm="syz.3.6008" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1747.294479][ T30] audit: type=1400 audit(2000000161.490:3862): avc: denied { connect } for pid=27659 comm="syz.3.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1748.306025][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1748.316678][T27663] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1748.415537][T27663] lo speed is unknown, defaulting to 1000 [ 1748.422433][T27663] vlan1 speed is unknown, defaulting to 1000 [ 1748.682349][T11995] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1748.712759][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6015'. [ 1748.725680][T27672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6015'. [ 1749.152276][T17251] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1749.306943][T17251] usb 7-1: Using ep0 maxpacket: 16 [ 1749.498662][T17251] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1749.564680][T17251] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1749.574867][T17251] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1749.588314][T17251] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1749.603789][T17251] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1749.613182][T17251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.623599][T17251] usb 7-1: Product: syz [ 1749.627840][T17251] usb 7-1: Manufacturer: syz [ 1749.637074][T17251] usb 7-1: SerialNumber: syz [ 1749.673759][ T30] audit: type=1400 audit(2000000163.871:3863): avc: denied { map } for pid=27678 comm="syz.5.6013" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1750.905033][T17251] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1752.050111][T27660] Process accounting resumed [ 1752.224482][T17251] usb 7-1: USB disconnect, device number 42 [ 1752.297704][T17251] usblp0: removed [ 1752.445396][T11995] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1752.487695][T27696] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1752.685538][T11995] usb 4-1: Using ep0 maxpacket: 16 [ 1752.709851][T11995] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1752.722425][T11995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1752.735489][T11995] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1752.744684][T11995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.763817][T11995] usb 4-1: Product: syz [ 1752.769335][T11995] usb 4-1: Manufacturer: syz [ 1752.775209][T11995] usb 4-1: SerialNumber: syz [ 1752.792952][T11995] usb 4-1: config 0 descriptor?? [ 1752.805264][T11995] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1752.815899][T11995] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1752.905771][T26801] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1753.004061][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6020'. [ 1753.055531][T26801] usb 3-1: Using ep0 maxpacket: 16 [ 1753.062443][T26801] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1753.074449][T26801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1753.150721][T26801] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1753.218802][T11995] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1753.235108][T11995] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1753.243310][T26801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.243622][T11995] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1753.259116][T11995] em28xx 4-1:0.0: No AC97 audio processor [ 1753.289360][T11995] usb 4-1: USB disconnect, device number 118 [ 1753.301245][T11995] em28xx 4-1:0.0: Disconnecting em28xx [ 1753.317402][T11995] em28xx 4-1:0.0: Freeing device [ 1753.345271][T26801] usb 3-1: Product: syz [ 1753.362023][T26801] usb 3-1: Manufacturer: syz [ 1753.385243][T26801] usb 3-1: SerialNumber: syz [ 1753.497826][T26801] usb 3-1: config 0 descriptor?? [ 1753.526086][T26801] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1753.554988][T26801] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1754.874960][T27698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6022'. [ 1754.905384][T26801] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1754.912112][T26801] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1754.925134][T26801] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1754.934164][T26801] em28xx 3-1:0.0: No AC97 audio processor [ 1755.212503][T27698] Set syz1 is full, maxelem 65536 reached [ 1755.233545][T26801] usb 3-1: USB disconnect, device number 11 [ 1755.284578][T26801] em28xx 3-1:0.0: Disconnecting em28xx [ 1755.529095][T26801] em28xx 3-1:0.0: Freeing device [ 1755.977134][T27722] x_tables: unsorted underflow at hook 3 [ 1757.382575][T27742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1758.206710][T27746] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1758.215295][T27746] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1758.224112][T27746] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1758.277743][T27741] tipc: Enabled bearer , priority 10 [ 1758.426693][T27741] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1759.762120][T11995] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1759.802126][T22339] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1759.942356][T11995] usb 3-1: Using ep0 maxpacket: 16 [ 1759.953932][T11995] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1759.967481][T22339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1759.981563][T11995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1759.999166][T22339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1760.019791][T22339] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1760.039990][T11995] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1760.051582][T22339] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1760.063341][T11995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.080285][T11995] usb 3-1: Product: syz [ 1760.090551][T11995] usb 3-1: Manufacturer: syz [ 1760.095695][T11995] usb 3-1: SerialNumber: syz [ 1760.101804][T22339] usb 7-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 1760.114106][T11995] usb 3-1: config 0 descriptor?? [ 1760.119762][T22339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.128736][T22339] usb 7-1: Product: syz [ 1760.133226][T22339] usb 7-1: Manufacturer: syz [ 1760.140699][T11995] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1760.153034][T22339] usb 7-1: SerialNumber: syz [ 1760.165302][T27755] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1760.173352][T11995] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1760.245654][ T30] audit: type=1400 audit(2000000174.467:3864): avc: denied { write } for pid=27767 comm="syz.5.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1760.390042][T27755] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1760.397878][T27755] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1760.409018][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1760.483110][T11995] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1760.490561][T11995] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1760.499542][T11995] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1760.549824][T27770] smc: removing ib device syz1 [ 1760.781802][ T30] audit: type=1400 audit(2000000174.737:3865): avc: denied { setopt } for pid=27767 comm="syz.5.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1760.805310][T11995] em28xx 3-1:0.0: No AC97 audio processor [ 1760.837814][T11995] usb 3-1: USB disconnect, device number 12 [ 1761.586226][T27770] ------------[ cut here ]------------ [ 1761.591794][T27770] !xa_empty(&pool->xa) [ 1761.591802][T27770] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.5.6040/27770 [ 1761.607568][T27770] Modules linked in: [ 1761.611839][T27770] CPU: 0 UID: 0 PID: 27770 Comm: syz.5.6040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1761.623113][T27770] Tainted: [L]=SOFTLOCKUP [ 1761.627427][T27770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1761.637779][T27770] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1761.643274][T27770] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 d6 4e f9 5b e9 10 4b da 02 e8 cb d6 4e f9 90 <0f> 0b 90 e8 c2 d6 4e f9 5b e9 fc 4a da 02 e8 f7 6a bb f9 eb d0 0f [ 1761.663078][T27770] RSP: 0018:ffffc900129871a0 EFLAGS: 00010246 [ 1761.669135][T27770] RAX: 0000000000080000 RBX: ffff888077b593b8 RCX: ffffc90016496000 [ 1761.677496][T27770] RDX: 0000000000080000 RSI: ffffffff88ba20d5 RDI: ffff888077b59438 [ 1761.686035][T27770] RBP: ffffffff88b88360 R08: 0000000000000005 R09: 0000000000000001 [ 1761.694213][T27770] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888077b586b0 [ 1761.702343][T27770] R13: ffff888077b57fe0 R14: ffff888077b57fe0 R15: ffff888077b59118 [ 1761.710309][T27770] FS: 00007f317eb7a6c0(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 1761.719245][T27770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1761.726134][T27770] CR2: 0000001b2fcf0ff8 CR3: 0000000062cf0000 CR4: 00000000003526f0 [ 1761.734134][T27770] Call Trace: [ 1761.737489][T27770] [ 1761.740417][T27770] rxe_dealloc+0x25/0xc0 [ 1761.744681][T27770] ib_dealloc_device+0x49/0x230 [ 1761.749521][T27770] __ib_unregister_device+0x396/0x480 [ 1761.755142][T27770] ib_unregister_device_and_put+0x5a/0x80 [ 1761.761007][T27770] nldev_dellink+0x226/0x320 [ 1761.765588][T27770] ? __pfx_nldev_dellink+0x10/0x10 [ 1761.770720][T27770] ? finish_task_switch.isra.0+0x205/0xb80 [ 1761.776551][T27770] ? rcu_is_watching+0x12/0xc0 [ 1761.781500][T27770] ? cap_capable+0x107/0x460 [ 1761.786081][T27770] ? bpf_lsm_capable+0x9/0x10 [ 1761.791223][T27770] ? security_capable+0x80/0x260 [ 1761.796157][T27770] ? ns_capable+0xd2/0xf0 [ 1761.800581][T27770] ? __pfx_nldev_dellink+0x10/0x10 [ 1761.805725][T27770] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1761.810477][T27770] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1761.815956][T27770] ? __lock_acquire+0x4a5/0x2630 [ 1761.820901][T27770] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1761.827316][T27770] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1761.834459][T27770] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1761.839739][T27770] ? netlink_skb_set_owner_r+0x3e/0x1b0 [ 1761.845527][T27770] ? netlink_skb_set_owner_r+0x100/0x1b0 [ 1761.851197][T27770] netlink_unicast+0x5aa/0x870 [ 1761.855975][T27770] ? __pfx_netlink_unicast+0x10/0x10 [ 1761.861289][T27770] netlink_sendmsg+0x8b0/0xda0 [ 1761.866053][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.871524][T27770] ____sys_sendmsg+0x9e1/0xb70 [ 1761.876278][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.881567][T27770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.886851][T27770] ? try_to_wake_up+0x644/0x1a80 [ 1761.892198][T27770] ___sys_sendmsg+0x190/0x1e0 [ 1761.896873][T27770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.902406][T27770] ? futex_private_hash_put+0x107/0x1c0 [ 1761.907978][T27770] __sys_sendmsg+0x170/0x220 [ 1761.912607][T27770] ? __pfx___sys_sendmsg+0x10/0x10 [ 1761.917736][T27770] ? __x64_sys_futex+0x34f/0x4d0 [ 1761.922693][T27770] do_syscall_64+0x106/0xf80 [ 1761.927300][T27770] ? clear_bhb_loop+0x40/0x90 [ 1761.932214][T27770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.938113][T27770] RIP: 0033:0x7f317dd9c819 [ 1761.942534][T27770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.962384][T27770] RSP: 002b:00007f317eb7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.970836][T27770] RAX: ffffffffffffffda RBX: 00007f317e016180 RCX: 00007f317dd9c819 [ 1761.978799][T27770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1761.986775][T27770] RBP: 00007f317de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1761.995495][T27770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.003633][T27770] R13: 00007f317e016218 R14: 00007f317e016180 R15: 00007ffe2ab8fea8 [ 1762.011627][T27770] [ 1762.014640][T27770] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1762.021896][T27770] CPU: 0 UID: 0 PID: 27770 Comm: syz.5.6040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.032802][T27770] Tainted: [L]=SOFTLOCKUP [ 1762.037101][T27770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1762.047229][T27770] Call Trace: [ 1762.050505][T27770] [ 1762.053441][T27770] dump_stack_lvl+0x100/0x190 [ 1762.058113][T27770] vpanic+0x552/0x970 [ 1762.062083][T27770] ? __pfx_vpanic+0x10/0x10 [ 1762.066574][T27770] panic+0xd1/0xe0 [ 1762.070276][T27770] ? __pfx_panic+0x10/0x10 [ 1762.074678][T27770] check_panic_on_warn.cold+0x19/0x34 [ 1762.080041][T27770] ? rxe_pool_cleanup+0x46/0x60 [ 1762.084872][T27770] __warn.cold+0x191/0x348 [ 1762.089266][T27770] __report_bug+0x296/0x3d0 [ 1762.093753][T27770] ? rxe_pool_cleanup+0x46/0x60 [ 1762.098583][T27770] ? __pfx___report_bug+0x10/0x10 [ 1762.103589][T27770] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1762.109377][T27770] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1762.115165][T27770] ? __flush_workqueue+0x426/0x1200 [ 1762.120346][T27770] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1762.125956][T27770] ? rxe_pool_cleanup+0x46/0x60 [ 1762.130799][T27770] report_bug+0xb2/0x220 [ 1762.135031][T27770] ? rxe_pool_cleanup+0x46/0x60 [ 1762.139944][T27770] handle_bug+0x16a/0x2a0 [ 1762.144261][T27770] exc_invalid_op+0x17/0x50 [ 1762.148762][T27770] asm_exc_invalid_op+0x1a/0x20 [ 1762.153607][T27770] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1762.159060][T27770] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 d6 4e f9 5b e9 10 4b da 02 e8 cb d6 4e f9 90 <0f> 0b 90 e8 c2 d6 4e f9 5b e9 fc 4a da 02 e8 f7 6a bb f9 eb d0 0f [ 1762.178672][T27770] RSP: 0018:ffffc900129871a0 EFLAGS: 00010246 [ 1762.184722][T27770] RAX: 0000000000080000 RBX: ffff888077b593b8 RCX: ffffc90016496000 [ 1762.192678][T27770] RDX: 0000000000080000 RSI: ffffffff88ba20d5 RDI: ffff888077b59438 [ 1762.200622][T27770] RBP: ffffffff88b88360 R08: 0000000000000005 R09: 0000000000000001 [ 1762.208577][T27770] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888077b586b0 [ 1762.216537][T27770] R13: ffff888077b57fe0 R14: ffff888077b57fe0 R15: ffff888077b59118 [ 1762.224487][T27770] ? __pfx_rxe_dealloc+0x10/0x10 [ 1762.229406][T27770] ? rxe_pool_cleanup+0x45/0x60 [ 1762.234235][T27770] rxe_dealloc+0x25/0xc0 [ 1762.238456][T27770] ib_dealloc_device+0x49/0x230 [ 1762.243284][T27770] __ib_unregister_device+0x396/0x480 [ 1762.248734][T27770] ib_unregister_device_and_put+0x5a/0x80 [ 1762.254430][T27770] nldev_dellink+0x226/0x320 [ 1762.259009][T27770] ? __pfx_nldev_dellink+0x10/0x10 [ 1762.264102][T27770] ? finish_task_switch.isra.0+0x205/0xb80 [ 1762.269919][T27770] ? rcu_is_watching+0x12/0xc0 [ 1762.274716][T27770] ? cap_capable+0x107/0x460 [ 1762.279328][T27770] ? bpf_lsm_capable+0x9/0x10 [ 1762.284024][T27770] ? security_capable+0x80/0x260 [ 1762.288946][T27770] ? ns_capable+0xd2/0xf0 [ 1762.293249][T27770] ? __pfx_nldev_dellink+0x10/0x10 [ 1762.298338][T27770] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1762.303083][T27770] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1762.308361][T27770] ? __lock_acquire+0x4a5/0x2630 [ 1762.313285][T27770] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1762.319689][T27770] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1762.326607][T27770] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1762.331872][T27770] ? netlink_skb_set_owner_r+0x3e/0x1b0 [ 1762.337397][T27770] ? netlink_skb_set_owner_r+0x100/0x1b0 [ 1762.343010][T27770] netlink_unicast+0x5aa/0x870 [ 1762.347768][T27770] ? __pfx_netlink_unicast+0x10/0x10 [ 1762.353054][T27770] netlink_sendmsg+0x8b0/0xda0 [ 1762.357820][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.363086][T27770] ____sys_sendmsg+0x9e1/0xb70 [ 1762.367826][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.373086][T27770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1762.378349][T27770] ? try_to_wake_up+0x644/0x1a80 [ 1762.383272][T27770] ___sys_sendmsg+0x190/0x1e0 [ 1762.387924][T27770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1762.393096][T27770] ? futex_private_hash_put+0x107/0x1c0 [ 1762.398641][T27770] __sys_sendmsg+0x170/0x220 [ 1762.403212][T27770] ? __pfx___sys_sendmsg+0x10/0x10 [ 1762.408301][T27770] ? __x64_sys_futex+0x34f/0x4d0 [ 1762.413238][T27770] do_syscall_64+0x106/0xf80 [ 1762.417830][T27770] ? clear_bhb_loop+0x40/0x90 [ 1762.422510][T27770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.428381][T27770] RIP: 0033:0x7f317dd9c819 [ 1762.432771][T27770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.452364][T27770] RSP: 002b:00007f317eb7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.460771][T27770] RAX: ffffffffffffffda RBX: 00007f317e016180 RCX: 00007f317dd9c819 [ 1762.468740][T27770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1762.476707][T27770] RBP: 00007f317de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1762.484672][T27770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.492630][T27770] R13: 00007f317e016218 R14: 00007f317e016180 R15: 00007ffe2ab8fea8 [ 1762.500596][T27770] [ 1762.503865][T27770] Kernel Offset: disabled [ 1762.508166][T27770] Rebooting in 86400 seconds..