last executing test programs: 1m45.879380869s ago: executing program 1 (id=3192): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x400504c) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32=0x0, @ANYBLOB="040007000000000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x34, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a8302, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1m43.080250603s ago: executing program 1 (id=3198): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) eventfd(0xffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000f00004095000007000000003bc2d713118b9f2f84a50000000000000004f24bc4553ea3d7b0b2d62b12f64fb3e7cf34142135e6192811f461780ff0c8130ad24af988aa0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448c0}, 0x400504c) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0x7) fcntl$setsig(r2, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/14, 0x211000, 0x0, 0x0, 0x1}, 0x20) 1m41.854496887s ago: executing program 1 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xfff2}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='syzkaller0\x00', 0x880, &(0x7f0000000040)={@align=0x1, {0x401, 0x3, 0x4, 0xf1}}, 0x57, &(0x7f0000000080), &(0x7f0000000180)=0x7ff}) 1m41.509811042s ago: executing program 1 (id=3204): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, &(0x7f0000006240)={0x18, 0x0, 0x80000000, {0x1}}, 0xfffffffffffffffd, &(0x7f0000006280)={0x28, 0xfffffffffffffffe, 0x1, {{0x0, 0x5, 0x0, r5}}}, &(0x7f00000082c0)={0x60, 0xffffffffffffffda, 0x57a, {{0xf, 0x1840, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6952ec6d, 0x1}}}, 0x0, &(0x7f0000008380)={0x13, 0x0, 0x91, {')+\x00'}}, &(0x7f00000083c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0xc}}, &(0x7f0000008400)={0x78, 0x0, 0xd, {0x3, 0x4, 0x0, {0x6, 0x7ffffffffffffffc, 0x9, 0x6, 0x0, 0xa, 0x6, 0x1c0, 0xa, 0xc000, 0x5, r3, r4, 0x9, 0x9}}}, &(0x7f00000085c0)={0x90, 0x0, 0x1, {0x5, 0x3, 0x6, 0xffffffffffffe5ee, 0x5f2c, 0x3a, {0x5, 0xfffffffffffffeff, 0x6, 0xa, 0x1, 0x8000, 0xffff, 0x7fffffff, 0x54, 0xa000, 0x8000, r3, 0x0, 0x401, 0x9}}}, &(0x7f0000000340)={0xa0, 0x0, 0x8, [{0x1, 0x6, 0x4, 0x8, '\v\x00\f\x00'}, {0x3, 0x5, 0x1, 0xe8, '\''}, {0x1, 0x9, 0x4, 0x6ccbaff1, 'GPL\x00'}, {0x0, 0x3e2c, 0x15, 0x9eb, '\xef\v\x1e\xfd\n\x98\xf1\xa8\xf6.\x85\x87\x9d\x1d\xfa!\xd9ynW/'}]}, &(0x7f0000008900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="09000000000000800000000002000000000000000001000000010000"], 0x0, &(0x7f0000008c00)={0x20, 0x0, 0xd96, {0x98, 0x4, 0x5, 0x3778a405}}, &(0x7f0000008d00)={0x130, 0xb, 0x3, {0x1, 0x5, 0x0, '\x00', {0x4000, 0x8000, 0x3, 0xfffffff7, r3, 0x0, 0x1000, '\x00', 0x91, 0x1, 0x6, 0x900000000000000, {0x100000000, 0xfffffdba}, {0x4, 0x1}, {0x211e, 0x100}, {0xc, 0xff}, 0x80000000, 0x7, 0x7, 0x4}}}}) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="203f060000000606afeefd91eeaa8a69c02662c7f8c546c960373720c3f6a8d8f2dd5bb7702f738935caa2bcd665529aa032467eec33a6a8193da0104a543e62cde362e900c3f067934c41956c763ceb23f2a089a52d68de763aad62f9823e5172b44ce15bfad36c190a4136e70e178c9cf77c1baca146c947d8d058bf4bb06a97011c60da49a9d7ea6768f9a294881e801686676182f939e68a0a95cdcc9d03de5d596c3b2e1c93825a5387413025d9e08119770999c8d4b864f9d5678ad6"], 0x0, &(0x7f0000000280)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x3}, @global=@item_4={0x3, 0x1, 0xa, "47a29660"}, @local=@item_4={0x3, 0x2, 0x4, "448fa0d4"}, @global=@item_4={0x3, 0x1, 0x0, "1742a3be"}, @local=@item_012={0x0, 0x2, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "9b45"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xe7e}}}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002ebd70000000000014020000"], 0x14}}, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r11, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) 1m39.739697425s ago: executing program 1 (id=3213): fanotify_init(0x4000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x9, 0xf1bd, 0x6, 0x7, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x3a1840) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x2f, 0x2, @tid=r0}, &(0x7f0000000200)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1) syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00b00000000c002e00000000000000000006000600830000000c002100f9ffff"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x5, 0x1, 0x0, 0xff, r0}) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x2, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r3) capset(&(0x7f0000000280)={0x20080522, r0}, &(0x7f0000000240)={0x49e9, 0x3a, 0x4, 0x2, 0x2, 0xd21b}) 1m39.00093005s ago: executing program 1 (id=3218): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0xca800, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) 1m38.864115157s ago: executing program 32 (id=3218): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0xca800, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) 14.32776349s ago: executing program 2 (id=3451): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaa0a0535810800450800240000000000119078ac1414bbe000000100004e20001090780209000080000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000c40)=""/203, 0xcb, 0x0, 0x2, 0x4}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000004c0)=""/26, 0xfffffc26, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x200a4800) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) 11.50002739s ago: executing program 2 (id=3459): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737925ba0000000008000a"], 0x78}, 0x1, 0x0, 0x0, 0xc4854}, 0x40) r2 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001000)={0x3346e70, 0xff, {r0}, {r2}, 0x23c4, 0x7ff}) close(0xffffffffffffffff) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(0x0, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800130003140100190050000000000000000800410073697700140033006c6f0000000000000000000000001000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r3, 0xc, 0x0, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 10.885702062s ago: executing program 0 (id=3465): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9.718731456s ago: executing program 2 (id=3472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgrcv(r2, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03c6008000000000"], 0x8, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000001000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8.705315068s ago: executing program 0 (id=3473): socket$inet(0x2, 0x4000000000000001, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r5], 0x20}}, 0x2000c004) close(r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0b9547ed387dbe9abc89b1a845f", 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x4d, 0x6, 0x7f, 0x7, 0x9, 0xc775}) 7.877969317s ago: executing program 3 (id=3477): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 7.241937878s ago: executing program 0 (id=3480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffedd, 0xfffffffffffffffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x13) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000200)={0x74, 0x8, 0x9, 0x4, 0x6, 0x81}) ioprio_set$pid(0x3, 0x0, 0x4007) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x10008000) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(0xfffffffffffffffe, 0x10000000000001, 0x2) keyctl$search(0xa, 0x0, &(0x7f0000000280)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, r2) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0, 0x190}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.231748745s ago: executing program 3 (id=3481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x1000000, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 7.171738563s ago: executing program 2 (id=3482): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (fail_nth: 9) 6.179720899s ago: executing program 2 (id=3485): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x400504c) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32=0x0, @ANYBLOB="040007000000000008000600", @ANYRES32=0x0, @ANYBLOB="1000040000000000200000987ad310f0508192ad177e577be653a159e2ed3116ddd61df9efaca497106f7e1556a1a19e6849c61d968b9c35ca75fca7c890dceeb5c80337c16c70d79e96015103d86b0255bbc509aa827be32832432ce53cb442b9a020c6e82d8ea2c0a2aadc719028c7afc043da2c00f2e2970f3d1ec2a18fcc23649b13abfc62cd6e0fd276f98f363c554eb20e1b3e8b12b5efcc4e8c10698ba81eb131e6602a2496f7d7a031048392714b250a7cb407a18e488b8f387776ea0c042df0aab1c780d77e412b3cbeebfebc0f1e12241e8fb63e7a00c8c01358144cf3b8cd13551e939d97b3a17e9983638fd12a69ed8fef9209525a93a055337e4c882e99ee6446da99e8b23a03f8e41fae2a96009263a5"], 0x34, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a8302, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 5.635052348s ago: executing program 5 (id=3486): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000200)='\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001e00)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x3080000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}, 0x1c) write(r7, 0x0, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000003140), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000003180)={0x6, 0x3, 0x1, {0xd, @sdr={0x35323645}}, 0x5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x140003, 0x0, {[0xffffffffffffffff, 0x80000001, 0x3, 0x101, 0x2, 0xffffffffffffffff, 0x7, 0x400000000000000]}}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[], 0x1100}, 0x1, 0x7}, 0x4000) socket$nl_audit(0x10, 0x3, 0x9) 5.452197063s ago: executing program 4 (id=3487): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="f3ffffff140019", 0x7}], 0x1) 5.332984594s ago: executing program 4 (id=3488): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x44}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 4.867556989s ago: executing program 3 (id=3489): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x110) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a43000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/36, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x7, &(0x7f00000003c0)={r5, r6+10000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)={0x5, 0x0, [{0x200000, 0x7e, &(0x7f0000000180)=""/126}, {0xffffffff, 0xaf, &(0x7f0000000200)=""/175}, {0x7000, 0xfb, &(0x7f00000002c0)=""/251}, {0x1000, 0x0, &(0x7f00000003c0)}, {0x55000, 0x3, &(0x7f0000000400)=""/3}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r7, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r7}) 4.422040618s ago: executing program 0 (id=3490): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc141, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbff, {0x3, 0x7c}, [@nested={0xc, 0x15b, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x10f}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c094}, 0x2004c000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r3, 0x0, 0x0, 0x10022, 0x0) 3.866747242s ago: executing program 0 (id=3491): socket$nl_netfilter(0x10, 0x3, 0xc) 3.788676604s ago: executing program 3 (id=3492): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 3.785486444s ago: executing program 0 (id=3493): r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0xfdfd, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r0], 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2.743939269s ago: executing program 3 (id=3494): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x18, 0x7}]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wg2\x00', @multicast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f000004f000/0x3000)=nil, 0x3000, 0x3000005, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x10}, 0x831) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 2.584017086s ago: executing program 5 (id=3495): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xfffffffffffffeae, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002cbd7000fddbdf25030000000500050009000000050002000c0000000500020009000000050002000200000005000300af000000050002008000000005000500020000003934d064424893249e2b0449cf01ad8f8e1e822b2ebf1603423d5290fb802c8d4126612c1e5827e4b7da3250f5de96b10b73c59be2e8e2d2e929de03f1072b956589eab797469cd0c4d2fa987fa60a276c1a3e4861579d61f15e60fc5b2620fd766c1dd32095"], 0x4c}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f0000000140)=[{r5, 0x44}], 0x1, 0xe6) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.520454228s ago: executing program 4 (id=3496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.091085059s ago: executing program 4 (id=3497): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000400)={0x10201, 0x280, 0x200, &(0x7f0000000000)=[0x5, 0xf893, 0x8c, 0x7, 0x2, 0xc3, 0x5, 0x3, 0x200, 0xbb0, 0x1520e6a4, 0x4, 0x0, 0xa18, 0x67, 0xffffffffffff7fff, 0xe1f, 0x7, 0xcf58, 0x4, 0x7, 0x2, 0x600000000000, 0x80, 0x7, 0x39d, 0xa, 0x8, 0x0, 0x3, 0x658, 0x1ff, 0xffffffffffffffff, 0x9, 0x54dc, 0xfffffffff6f9302e, 0x0, 0x6, 0xe93e, 0x3, 0xf0, 0x9, 0x9, 0x4, 0xf2, 0xfffffffffffff000, 0x4, 0x8, 0xffffffffffffffff, 0x5, 0x78, 0x1, 0x7, 0x93, 0x7, 0x4, 0xffffffffffffffd6, 0x1, 0x4, 0x101, 0x1, 0x59, 0x4, 0x0, 0x0, 0x8, 0xb4f3, 0x8000000000000001, 0x2, 0x4, 0x4, 0xfffffffffffffffa, 0x404, 0x40, 0xfffffffffffffff7, 0x2, 0xe, 0x101, 0x362, 0xa6, 0x30f, 0x417, 0x6, 0x5, 0x1, 0x8, 0x101, 0x40000000, 0x4, 0x2, 0x9a5c, 0x7, 0xffffffff, 0x1ff, 0x7, 0x6, 0x400, 0x1, 0x1, 0x1, 0xfc, 0x101, 0xef, 0x21, 0x9, 0x40, 0xc, 0xadc00, 0x8, 0x2, 0x0, 0x8, 0x0, 0x3, 0x5, 0x3, 0x2, 0xfffffffffffffff4, 0x4, 0x3ff, 0x5, 0x8, 0xf, 0xab3, 0x101, 0x5, 0x7, 0xd]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f00000004c0)) ptrace$peekuser(0x3, r1, 0x8) mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x20000, &(0x7f0000000580)={[{@huge_within_size}, {@huge_always}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x25, 0x32, 0x33]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x78, 0x74]}}, {@inode64}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x2f, 0x39, 0x32, 0x37, 0x2f, 0x20de16af94e87cb9, 0x32, 0x35, 0x35, 0x32]}}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36, 0x30, 0x32, 0x0, 0x25]}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\'}}, {@appraise}, {@fsname={'fsname', 0x3d, '\x17\xa1-\x81+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*:&(-'}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ptrace$peek(0x3, r1, &(0x7f00000006c0)) r4 = syz_open_dev$vbi(&(0x7f0000000700), 0x3, 0x2) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000800)={0xf000000, 0x9, 0x1, r5, 0x0, &(0x7f00000007c0)={0x990a5f, 0x8, '\x00', @string=&(0x7f0000000780)=0x10}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/stat\x00', 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xe, &(0x7f0000000880)=0x6, 0x4) r7 = getpgrp(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r9 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000900)={{0x2, r2, r3, r2, r3, 0x11, 0x9}, 0xffffffff, 0x2, 0xc9, 0x7, r1, r7, 0x9}) sendmsg$inet(r8, &(0x7f0000000bc0)={&(0x7f0000000980)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000009c0)="b34691841d1ea6b5d6ad648d2fb7948ed9910d2d75b7a6c7bca9fd514bc137eb52843ce00f775f464c18063a622ed499455f", 0x32}, {&(0x7f0000000a00)="26c0f6b57f86f002d992aee3dab4307f2da8d3465cbfd4a5ca5b4c43059c9a0ac95c591443c79e36cfcdf0efa38db72aeb01002450fff54a913158f54457a73a915d2636e8c9279eb8e4d57f614c550f1ba83fcf3178d32356b517e77b883103d505ecec62c8b422bbd72e2ad39740d80f6530a9f8bcc4c3bc2260da2f17f9e14daa0a46681d8c209a182053ed848e61b53963c182210ce6655d974a11d1223086f7fd7751d14fd2e62801c0e614f73246ea1a4d77d00951d1904364dc3108f8799576f3effb01667681b664731ad2749003292a95c10c81e89303c6cb", 0xdd}, {&(0x7f0000000b00)="8f1a6d2ad72eee747beab7be55cc4458053b0a5922abd9142d76c9f7e9df30f2106740ea651f", 0x26}], 0x3, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000c00)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000c40)={0x0, 0x7, [0x8, 0x7, 0x101, 0x1796, 0x2, 0x1]}) fstat(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$admmidi(&(0x7f0000002e40), 0x1e2, 0x400800) r12 = inotify_init1(0x80000) r13 = getpgid(0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000041c0)={0x0, 0x0, 0x0}, &(0x7f0000004200)=0xc) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000004480)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000044c0)={0x1ff, 0xffffffff, {r7}, {r2}, 0x3ff, 0x5}) newfstatat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r18 = openat$cgroup_ro(r5, &(0x7f00000045c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r19 = getpgid(r1) sendmmsg$unix(r8, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000c80)="d14516efccdecb24412cb73d7e2a58b9b5ad8e5fba4ad85d7b592dceb426f80063bc14a1f8ce2b8dbcecb5d1993def5e40402250cee5b08014a682915cdc88d8577ab5bd3d943a892967033f8d68f346be9e9c86c707004991370717fe1f676e7cd759965a1523d9606b998a157a2f283a33beff7c5cd5e3377589b9ba5a543f2d59ec40f457b709df63bc2ab311b6dd167f5e419359c92978f728989e6a1be1748146ede27118bc2a587857cc0fe861d033866b9be5b3aa898372bd8b07549619952cdf3e78af1ddd214a5066960eca6095c7ff33c275baf7233c8904d78e13a877f6cd6868645584dfad2385eca4", 0xef}, {&(0x7f0000000d80)="d2df52931467da9524e7959ff3d2ebab790234a0f08e5d10b5326fafc6d54b1d891b8c67e894809a40fb051c602787a69c32ec7275c45f7b7d7dcdaa718a32bcb259f9a009bceae3229e9ac1dca74315c0849d24f5cb285376b3092fffde8e6e6231456e97108e16536608418aaf1eedc86f1e07df0fafc2e0ffd3c2e22491ddb188ad53f671846bb101a7a19bc9405a86ac840bbe8b1c9b370bdac740b99cc5a4fd1216883e00dddb0dfb03e39d05183f44568a8c10139244a069a7bbed71b7e6221eeb6a9152a04b6852ce755fe28698f9866e5943aeb2ad077f97893c2a1d5cf717f99f3f374b4b217f550b8ab418531dcb771a7af5017c5e35ddecbc89716fdfad995a75bdc4c9124268abfb0fd8af0044cdda21ff0554a4e40063564b84586d9533d85c020112be11817ccdc4b9431e1b8fb7441460a1c73e578deccbd0d12587ca970e246afa2fc0a20aa617b2e579903abaa82b52f2d08f9319d93e6b9431f5fdd9323afe0251d5151fd024a45e2e0f1193d83d4653d29060fb405dad4d83baf6655b69dc919526ccc345e0a57eaa57d8e1b35d3a3d4b3f96ffdb0a63ab5591348bd2319f2c93e763a098345182e1914da0b1a5041d6875ef49a23ca19e064c56d41e471aaa42bfd01638c4cb4d403742c5cbfdeb2a61e281f7af92a18614565b5191b9376b6862d4d7b796165e504fce037fa2f375ff3236322109125ae67795a193711e9a1ac951bf603ecf5e5151c55585ce361b95212bc97b2e96444be5f77763a472c3dfac38977deb776496e64550b57e4c517855204cdd628bb977e09049af6750eaa59ecd6a3563c19e3a8eec201bedd18e7f1c65a53e74ea91380da4a2943d4f39876f83650584b86ec9d2e68c3642ef3172019ceb6aeeadbfea95f7a514737e4259eef08782e6fadf3af630bbc4d6e65a5e3f9756f60293ff784a6095cc977fd8d70d1c3e43f0cbe748798700b425a75336c3e7422e069682c850295e2ec7f96a25aa009f68900511bd0e2c6683e1281a7e05a1f4a7157653fb942eb34937aeedd2027e4b370a184d0a2014e66e2cf0434630a28e737c3a147067d70c035c7e00710216d437394857b17103a5b425b6be03c2853e311824f27d3dbc56a725199e6e64978aac01c790cab93f3b2616527942773675c19a486f7b9085848701ca6ed1ce60aa00f6b6a984effb0b3fb1e4ae1f838b8af4a7d2a14bd3e962dedfb6e4d1e8c760b51724ead505e7c5a19a91f41e88d3d9b189dd2603fcaa438e3754ae42f47e69af2432cbdb7a4d3cba74144580b07cdd5353b81f67058d3ee02fd1161b01493e6da8e80c8fb20509c01e8950686b27f57cae85fcdd4553b93ab328f9284be3b766d364c592d9e4019b751bcbfa85a540fc15dd89ccb47387d05f72bd404ac9e7d54d9420aad475e2118374fa2d690259569bb56edf3fabe6180d58832ba9d03ac2c5ff1ca6bd0789b20779e676604cb910d9d84fa3074522edcfd0f97dd4d9be03fc666529bf03885393507a80f05c471d4d87dbe6260ad0f45d82bbdc174eed0bd8f898bf4a9305277b76caa0080081b313519c201a908e7d5e4bff787042ecc9c40524f310296e3014fb4c06fcb1438f4b5b6fd0cd7c4b6a135d71a1571f50c529ed730c484d60c2db89cd0362405bcc3bddaaac6cc3fda40a5ebae44e1bb14015f1f2ad5326a92bb1be513380a788b25839201934549946105811c0ebd12c7a351d4fcec3d289fc2ae49bfbc4364da513934f5b8a7ff87519b774baeb0d2827f6f5187ffc6f385eb7bad1fcd8a0bfe9684c0c6b0b694279915c4c0749a7454a2182fde8663f600cc0608e4712ebff415948c76ccf1c3651ab719f917700b54915eb955dcf6ec90315e94efe1fc981d3794f61f958734dc00280227dfe3b9351359b92fcfb0c78fce4a1c8eb7ea5c26a45ec680096579661a57ce8ccb7dc38bbfc6a020e24bf45b4331c4fc2fdaf7304edb68362af67d0934ab269b19d875d4557db26281009a361bc8da0e8d7cce0ea0d98680392cdd5618c495a9c630c405282e46199a77803ae88b97e3e70d8105813b63cc697b50489e1968f39fbe15c9fd6430f2501faf633d805779993c582b5575b204b790761c151d8268f792ee572d7df6ec9a9c6396c8a5f382536c8607cdf165c1d0d3a4f682fcdd5d246160e67d175dcbf70142a6103e1c5b72e3f24f4d01e60433b20791335ba89da2aca52d2a61fdaa051d0b7ab6c766c2437b8fdcb279eb749d1563e2975d22a98c8069fcf689af9356f3a84d035fdad8b7f58912e07a47ad1a7e125865568cc72bcb9688869619226071f099edb8cf3491870ec11944b0d0a5446ad14842c9a239bbbb36f6b53e0426537bb63e3c533590de4a4abcd33c24c33e0fd00e37769b737c5d7b8e2a658b29698f450d856ea639de5c054a31e057c2a36f561fa8731ef815ca2d55e37a94def05e618852d9c8ceb3e71a8fb4613dca24c640a9049a6ceb9e48aaba2cb686899d9c93d4a1edb89cfd5fa214f828bdb8da66a43cb45438741e709756dd2c4af43b666012680015679cec966a1f18f1013095a3ab915a2b1885aba59111fec2416c41ca4f7d0b54e1078706565f57a641f4946d163e13057315fdff4c03f1db4b909b4f5e346cf023987f0071b7505049fb1b4152d8104f733c5a3b3b1058ce11008eee5e6e4afdf5ebcfac2d030ce61423d71b4107a1d6a49ceba02fc2aa9dd791d4ac2fed22bb9ed1d8f2dbfcd4c39b6b2f8bee406423195a136da465f2fbd59abdde2a2ac63e85dfa2f1da54ba6ee092df99acdc123a23fd5a0bdbea62d293b70ea287e49492f9ff5618f8ce19959b4c09830caeedf3a144884c884216e23e545ae219831327e9b99ce97440bcefb356e3b5686a5bb3f9610277c05b11b33539054f2fc4a83b36051401c2caa995b6548404797b6b9fd38d66ea0aab017900a0a3d333f31af36760b1011b5316b662b77866d7c1d5f2f7cf6ea4845d4bf232a59b5d0309c07662091dbbf0a1c5d2bef0872e4c3b819151947efc17df7357619c913b7f7f339333657b973d11249c7028a1b249f70bedaa9b08ea1e1aad11f32fae9de2b7c9f54224699e1a0b4737a34b746c095286bf3c08cecf8c7b903bc733a832dbb9291c28a27cf3e7ec131d79f7e31334b6f1f1fa2c682987e3872ae0e13ccd526c00a3c132be73408ccb08170e9846f55186de5ea5364cce36c24ff9170247cf5fd48ec1fb9f451fc466da204e346929901e86a437352b13e9cbe65932abf14ac710858245664cb9b0a2d466948f24f7a2e39040f02269e53d6f889604b60c5753442a43ca97f69e6bd8db9dd6f14ce7ce6ff681a00b6b2dd1d9a0440f5b4d18c58a62f0476173acad1af4dc9959c81157323484e29074992cfcca1e2550a9864c50e92e4e2ae90b30c08497f7404cccd99a4c28ef0b1ca93be365f8c1f2e13f455becf521916f4965b0ff16878cb4dc05bd4d0b3023a5921be682d84e8ad2906642ba47bb094086dcdbda26d274fb1afc089c5872ddb81440ba341df8d631817fb4e7ddb9c8852c94d9ab4eb7fc7dc50432a530acd2de45eb1a9299ebbab824181d25a027a8024992fa6dab2892e0982382fde8d56933ab02b04c64de2c6e83ffcea46647290f8fde48bc8928dc48cd5d013482dc4132271c83469b754717098c45dd9f97192b280ed2fac49f97c2bb4546f57edc072038a55e173ff8c90acffaf649a01e998fabeab18d0737b4b3b7647973c3f2cf31debe50402dd1e8899cb9927839a8e4633f42b2a32e9229da24e1ec2476953825840ca9d1353bda744fd7cd01acd9e0266fcff2462d7128dab3054843bc63d615bc8567f3a4a1e49fce9c7c2f5628fc145767ee95736f6cd71e2207a44eb6b7211ffa243d76b80df47a4e8f3bf1c40a1ac948dd2a5ccfbb20389d6d5f82d6a3e69fd9b6cccaed55ef359ef974d99a3afce98d22bdee1e57b41abad7492e6ee7248dd9ceb1a1536b6e99b14faba065d9412fce102a3457f1511585e1c8c0ce60b0f306f9299db5f63ea4cdf0c277315f91cef214aa5523cc3c68906aa482c5e3e751fa5edc01d6e767129fd418e10e1116e4af8f7e656451e2aaee819a70d549bd6967c11acfb3290f8ac7fa0bb93a3f78e28192c6e4bd06d02c8059d3785c12d9a0aecb48b7e4ae813d691c2fef0e8bc6916ce847a82688b242afde4ea1b8351df84970364578ce31904d78389b2de772b2c78a348cfe7a05f6f0c10111f6ad953144320ccad408e3136f1b25f279afb251d08ebc34b704dace049aa82afce0b356acbed5fc4fb0ea75948a62812435fd4c50d8cd5457a221e4f2ec04b4fd4fcd08c0100afc78e0e81a6d651f0427af6e0169b3f594165e766a924d982e7e1dfd91d9f23e231a9982d0ca7dbf8299439d45cca237e19a23bb32e773316f4a1f958cd984be860febf05475b60acc3ad82d7a4c5809f4a4b77f8aa58dccee4a41cc29a4ebf45c81c2e5d27992e7d1a9e4c98ba2144a439bfbe66c8c0c7ce80a7c568575d82e3c3bc4106c726df97a81774ae883999fd84fa769c6845e9b0bf63ec47bef841830613158ad38f98e6d4b37e0f8b9d6776e0a2c75a619b14c3b5a5fb6311317a816757806cf89790ab9f659ecd7e3f7509ee4ae2dd4ff9381cb2aaf33cf0bb1b3f80f2b44b29b0647721b13407348f2dc57151a63ffbdd836d65749f272b4447d7f48f760ce5112323db1119734f765936a59400f1a1201b3d5bb48cf6835a72abda21ac8c4e9de4f6c2898d7367f044f0dde3ad2104e1a0086367fd376fc997d253779694a3c5c4cdbaa36f922bf9772ccddb3f6ab2bcee479b35f65f7490e096d50134120da412e22b79b719a39cf104c5de2d86bb44253a6425ad7c074dbb1f039caa0b46d5e83be379c3b58aa102d4208683cb0d716f0bf6e68c935475fab66cfb6c9f9aa9d4f992d0d23640b5de97c9253dc372ec36a63b6f8a158c9c4962a9719a74da0257a866ac34247c3ea0c652d55a497296ce156ccd00a8b933caf354d65db96f12f829046e13090a74359da70c17df490e9b7ffb7291b99e37f48551556baa167f66354bdda0cca0ce8d16be94eee619f622438db4652eb66f42077634c536e2548042d757daaaff6f1dbd1b28ce8dd5f91f93c5cebef83e554f09ebeb8a0669aa09b24cc23cc344fc9fdc4d7695e5c3641114a1b774fc942ba93ebbdc5de54003ad31c292160cfab3ea22fbbd67de37e727fac30a53d5b8c77e23ae5d0b392e963d4fcf9efa0a472bccd5c23e50d88279ebdcddddd2914ed58a62d3df8ccb276e1d32b979be3159d4154401e3f316f87677b99eaf926d85fffba7b4f782645da16a514487084437d040832267d76335a2d0d74f2c158b81fe22638293dc216f512d762de07c88e152314feeca73c6ff58c2b78df0b6d1024bf83cb1bc96ea6ee1f4703379821c5606aed52718b0cd462b421bdb4740b2fd1a50f46e3f01e67da9a1c2a92b82e46d2c793151581215301b7132ecca93cb651aae9eb0cf74f83d3a714045fad6f2886c1ac15a922a86e4ed176f27ebea67078bd4936cc3837bf6e788ed26bb2ac373ee614fd2bbceff065b4108e54e8899666d5ec543a749b57b1bdee984517ebac5fdb75c065b7f101bce9fa0b7cdd56ad3defe204c58d3f49e4746a6804d70fd8bc502583d13493e8815b6b967afd932c2396beb4536f601bb0b58a33355c836097704c085e17e3ea982dcce77f2041092f2f04420cc721d381ddeb35113e19f2c83", 0x1000}, {&(0x7f0000001d80)="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", 0x1000}], 0x3, &(0x7f0000002e80)=[@cred={{0x1c, 0x1, 0x2, {r7, r2, r10}}}, @rights={{0x2c, 0x1, 0x1, [r5, r0, 0xffffffffffffffff, 0xffffffffffffffff, r11, r5, r5]}}], 0x50, 0x4000}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="dec3f87ca2df5c6e80ea697c91d4c20b38eb80f6d301d9a204dde413536dc1ad3ec782a78d6ece7d246d9fd8f2933e50d2da82a2c04ba6ed235e890e114321854e6e852250a9dbe91eb37f299ff516c1d599", 0x52}, {&(0x7f0000003f80)="bb540c1598947476fd673c0a4b235b107c07512a59d2ad4180101b56ceff176019a6b575cdf35ab4dc79bd078cf44d24d83e8064a770647906fa1067fe3ba227812f0bb577034096614c7f9598368ca23a6268204614cbced06806271e5e40fd101bace04880868224548ba6d2f7a2ca586f0f94ba0ebd9680fc21861711be1ac4b78891f8c0d7780f79ec5b95dff2f9ac33689706552413c63c582c3cc3dd6b1431c4eed5554cf10baa3aaa3c60155a327e0c35b7e0f9cf7676429d04a42e2b9260b676744ce30d09fc550602dca7d5288b59", 0xd3}, {&(0x7f0000004080)="2acdc6732f8b4d4cf3dd9b70826e8e085b41d7190747645305930a0156d5dd90d1aad0c8853590a272aeaa1e456e5213b34316e12e12a403fb97ac96dec5809afec08d7ee9fab9dd30af22c307c8385f533fac767fb933e22750bb707f03552597eea949f4c9fa6854f10443a119b2be6b33772e60ac134b38762a03a5749aa29e9d8992470a22775f3afa91448be5716b0d995164ac4bc79cad165f658f6afd0e6af505ed07da37714b78c764bd512a73b6f5327a5160f10ff04f70f405b4203a1f08d4e3d4ce5442cffd061c8d43e39b97a368cf476452f4298004ad939cf1e5943d93", 0xe4}], 0x4, &(0x7f0000004240)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r12, r5, r0, r4, r8, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r8, r6, r4]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r8, r4]}}, @cred={{0x1c, 0x1, 0x2, {r13, r2, r14}}}], 0xe8, 0x20000800}}, {{&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004440)=[{&(0x7f00000043c0)="b16c00aa90eda6a54f05442ce4f614", 0xf}, {&(0x7f0000004400)="e8c93a5847868d26f724", 0xa}], 0x2, &(0x7f0000004600)=[@cred={{0x1c, 0x1, 0x2, {r15, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r7, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r6, r18]}}, @rights={{0x20, 0x1, 0x1, [r6, r4, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r19, r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x128, 0x24840}}], 0x3, 0x8010) 2.055267068s ago: executing program 5 (id=3498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000200)={0x50000014}) r3 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r8, 0x80796c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff4, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000240)=0x2, 0x4) read$FUSE(r9, &(0x7f00000034c0)={0x2020}, 0xcac) 1.995357301s ago: executing program 4 (id=3499): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) waitid(0x0, r1, &(0x7f0000000200), 0x1, &(0x7f0000000340)) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0xc0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.016992768s ago: executing program 5 (id=3500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x100, 0x1, 0x45, 0xe, 0x0, "03000000000000012000ebff0000ffffffff0e", 0x4007, 0x80005}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYBLOB="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", @ANYBLOB="10010000"], 0x2c}}, 0x4044) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4d", 0x21}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 960.912751ms ago: executing program 2 (id=3501): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x4) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000004180)={@broadcast, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x18, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @empty}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 954.678567ms ago: executing program 4 (id=3502): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01a27f845e020800450000140000000000069078ac1414030a010100"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x3) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x628200c2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0xc5}, 0xd1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x94, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x94}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {0x0, 0x0, 0xfffffffd}, {}, {0x7fffffff}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x1}, {}, {0x0, 0x0, 0x400000, 0x7, 0x0, 0x400000}, {0x0, 0x0, 0xfffffffd}, {}, {0x6}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0xffffffff}, {0x0, 0xf88}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4}, {}, {0x400, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x40000008}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x2}, {}, {0x0, 0x0, 0x76}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x9}, {}, {}, {0x4}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) setresuid(0x0, r11, r11) r13 = fsmount(r0, 0x0, 0xa) fchdir(r13) open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) 829.067272ms ago: executing program 3 (id=3503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x200040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000080)='P') sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f000090588", @ANYRES64], 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000440)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000672000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000240)="66b80500000066b90000c0fe0f01c19a00001300f0000d65d9f90f01c8c4e389cee70167673e660f6e571966b9800000c00f326635008000000f306726360f2067652666660fc67f238f", 0x4a}], 0x1, 0x4, &(0x7f0000000340), 0x0) read$FUSE(r6, 0x0, 0x0) 798.411965ms ago: executing program 5 (id=3504): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 0s ago: executing program 5 (id=3505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) r5 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89c1224934ee9299b99cfad13dd15dceef6603750355a9c458182e24cb2cd1b54370e26bd8d07c3b886b8421af4fae14fd9100bcc574ed91f109b45bc2b51b900d478bedb8cf2564b6d9675000612c77380987c2c60d7c648a5eb1871f83c0a06b", 0x61}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x58, 0x4000000}, 0x40) recvmsg(r2, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): eased all slaves [ 755.506020][T14121] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 755.524520][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.542982][T13636] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 755.555124][ T7073] libceph: connect (1)[c::]:6789 error -101 [ 755.567434][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.582700][T14121] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 755.597266][ T7073] libceph: mon0 (1)[c::]:6789 connect error [ 755.630519][T13636] usb 4-1: device descriptor read/8, error -71 [ 755.630532][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.650489][T14121] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 755.660894][T16368] ceph: No mds server is up or the cluster is laggy [ 755.669847][T14121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.687096][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 755.707757][T14121] usb 3-1: Product: syz [ 755.728590][T13056] tipc: Left network mode [ 755.728680][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.755918][T14121] usb 3-1: Manufacturer: syz [ 755.756341][T13636] usb usb4-port1: unable to enumerate USB device [ 755.769397][T14121] usb 3-1: SerialNumber: syz [ 755.792615][T16208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.824215][T16208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.944618][T16208] team0: Port device team_slave_0 added [ 755.982203][T16208] team0: Port device team_slave_1 added [ 756.034934][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.205272][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.228004][T16208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.236708][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.264218][T16208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.380629][T16208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.397297][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.445024][ T29] audit: type=1400 audit(1778570435.085:398901): avc: denied { write } for pid=16380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.490496][T16208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.146791][ T5630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 757.150048][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.164076][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 757.168551][T16208] hsr_slave_0: entered promiscuous mode [ 757.228407][T16208] hsr_slave_1: entered promiscuous mode [ 757.244222][ T29] audit: type=1400 audit(1778570435.852:398902): avc: denied { write } for pid=16398 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.272016][T16208] debugfs: 'hsr0' already exists in 'hsr' [ 757.295806][T16208] Cannot create hsr debugfs directory [ 757.941362][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 757.951178][T16401] binder: 16400:16401 ioctl c018620c 200000000240 returned -1 [ 758.275645][ T5711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.357400][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3126'. [ 758.565102][T14121] usb 3-1: Unsupported UAC3 BADD profile [ 758.683310][ T48] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 758.696055][T13056] hsr_slave_0: left promiscuous mode [ 759.004218][ T48] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 759.623649][T14121] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 759.655782][T14121] usb 3-1: USB disconnect, device number 95 [ 759.687623][T13403] udevd[13403]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.713168][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.729994][T13056] hsr_slave_1: left promiscuous mode [ 760.162692][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3131'. [ 760.832207][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 760.843601][ T5630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 760.986411][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.105761][T16435] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3135'. [ 761.691402][T12962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.119942][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.200830][ T29] audit: type=1400 audit(1778570440.466:398903): avc: denied { append } for pid=16445 comm="syz.3.3138" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 762.371693][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.418009][T13056] IPVS: stop unused estimator thread 0... [ 762.496552][T16455] syzkaller0: entered promiscuous mode [ 762.543051][T16455] syzkaller0: entered allmulticast mode [ 762.569530][ T29] audit: type=1400 audit(1778570440.831:398904): avc: denied { write } for pid=16424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.500364][ T5711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.548021][ T29] audit: type=1400 audit(1778570441.729:398905): avc: denied { write } for pid=16469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.575829][T16478] binder: 16473:16478 ioctl 6406 0 returned -22 [ 764.663815][ T5711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.784981][ T5711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.141697][ T29] audit: type=1400 audit(1778570444.153:398906): avc: denied { ioctl } for pid=16481 comm="syz.4.3144" path="socket:[58588]" dev="sockfs" ino=58588 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 766.317409][ T29] audit: type=1400 audit(1778570444.340:398907): avc: denied { write } for pid=16488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.624490][T16208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.677730][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.706695][T16208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 766.734081][ T29] audit: type=1400 audit(1778570444.724:398908): avc: denied { write } for pid=16507 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.821893][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.843915][T16208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 766.880705][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.894659][T13636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.921554][T16512] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3150'. [ 766.933432][T16208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 767.323343][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.602870][T16208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.657611][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3151'. [ 767.831744][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.850198][T16208] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.908131][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.915290][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.010299][ T5711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.080090][T16536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16536 comm=syz.4.3152 [ 768.179327][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.188934][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.419225][ T5731] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 768.550616][T14121] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 768.757876][ T29] audit: type=1400 audit(1778570446.623:398909): avc: denied { write } for pid=16514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.814466][T14121] usb 3-1: Using ep0 maxpacket: 32 [ 768.824076][T14121] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 768.846442][ T5731] usb 5-1: device descriptor read/64, error -71 [ 768.873481][T14121] usb 3-1: config 0 has no interface number 0 [ 768.910011][T16532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.943324][T14121] usb 3-1: config 0 interface 12 has no altsetting 0 [ 768.949628][T16532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.038672][T14121] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 769.067332][T14121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.122166][ T5731] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 769.156655][T16552] binder: 16549:16552 ioctl 6406 0 returned -22 [ 769.327396][ T5731] usb 5-1: device descriptor read/64, error -71 [ 769.334384][T14121] usb 3-1: Product: syz [ 769.355992][T14121] usb 3-1: Manufacturer: syz [ 769.363922][T14121] usb 3-1: SerialNumber: syz [ 769.382935][T14121] usb 3-1: config 0 descriptor?? [ 769.400819][ T29] audit: type=1400 audit(1778570447.222:398910): avc: denied { write } for pid=16551 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.478654][ T5731] usb usb5-port1: attempt power cycle [ 769.656934][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.664100][T13056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.685168][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.694195][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.743509][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.771549][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.840348][ T5731] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 770.172226][ T5731] usb 5-1: device descriptor read/8, error -71 [ 770.267718][T16208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.355185][T16569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3156'. [ 770.460134][ T5731] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 770.709814][T14121] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 90 failed: -71 [ 770.730390][T14121] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 770.738470][T14121] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 770.747484][T14121] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 770.781078][T14121] usb 3-1: USB disconnect, device number 96 [ 770.792070][ T29] audit: type=1400 audit(1778570448.532:398911): avc: denied { write } for pid=16556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.838907][ T5731] usb 5-1: device descriptor read/8, error -71 [ 770.994669][ T5731] usb usb5-port1: unable to enumerate USB device [ 771.010678][T16580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3158'. [ 771.023500][ T5630] block nbd1: Receive control failed (result -32) [ 771.076353][ T29] audit: type=1400 audit(1778570448.776:398912): avc: denied { write } for pid=16577 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.076367][T12604] block nbd1: shutting down sockets [ 772.521654][T16607] hpfs: Bad magic ... probably not HPFS [ 772.721231][T16613] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3164'. [ 773.168281][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3165'. [ 773.211120][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3165'. [ 773.296071][ T29] audit: type=1400 audit(1778570450.872:398913): avc: denied { write } for pid=16590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.128591][T16208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.191169][T16208] veth0_vlan: entered promiscuous mode [ 774.209245][T16208] veth1_vlan: entered promiscuous mode [ 774.269460][ T29] audit: type=1400 audit(1778570451.780:398914): avc: denied { write } for pid=16629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.389072][T16208] veth0_macvtap: entered promiscuous mode [ 774.411306][T16208] veth1_macvtap: entered promiscuous mode [ 774.440499][T16636] batadv0: left allmulticast mode [ 774.445783][T16636] batadv0: left promiscuous mode [ 774.494143][T16208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.522210][T16208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.534767][T16636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16636 comm=syz.2.3168 [ 774.572264][T13056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.608850][T13056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.696397][T13056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.713355][T13056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.017294][ T7073] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 776.111397][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.136896][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.157588][ T7073] usb 3-1: device descriptor read/64, error -71 [ 776.185284][ T29] audit: type=1400 audit(1778570453.567:398915): avc: denied { read write } for pid=16648 comm="syz.1.3171" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 776.213583][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.256370][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.293268][ T29] audit: type=1400 audit(1778570453.567:398916): avc: denied { open } for pid=16648 comm="syz.1.3171" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 776.422843][ T7073] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 776.597642][ T7073] usb 3-1: device descriptor read/64, error -71 [ 776.768596][ T7073] usb usb3-port1: attempt power cycle [ 778.021627][ T7073] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 778.158821][ T7073] usb 3-1: device descriptor read/8, error -71 [ 778.293805][ T29] audit: type=1400 audit(1778570453.567:398917): avc: denied { ioctl } for pid=16648 comm="syz.1.3171" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 778.429404][ T29] audit: type=1400 audit(1778570455.673:398918): avc: denied { unmount } for pid=14770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 778.496235][ T7073] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 778.532270][ T7073] usb 3-1: device descriptor read/8, error -71 [ 778.598501][T14121] libceph: connect (1)[c::]:6789 error -101 [ 778.607208][T14121] libceph: mon0 (1)[c::]:6789 connect error [ 778.624543][T14121] libceph: connect (1)[c::]:6789 error -101 [ 778.648367][T14121] libceph: mon0 (1)[c::]:6789 connect error [ 778.667434][ T7073] usb usb3-port1: unable to enumerate USB device [ 778.774328][ T5731] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 778.945394][ T7073] libceph: connect (1)[c::]:6789 error -101 [ 779.048861][ T7073] libceph: mon0 (1)[c::]:6789 connect error [ 779.951789][ T7073] libceph: connect (1)[c::]:6789 error -101 [ 779.957896][ T7073] libceph: mon0 (1)[c::]:6789 connect error [ 779.980666][T16669] ceph: No mds server is up or the cluster is laggy [ 780.305846][ T29] audit: type=1400 audit(1778570457.432:398919): avc: denied { ioctl } for pid=16687 comm="syz.4.3181" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 780.443930][T16691] futex_wake_op: syz.4.3181 tries to shift op by -1; fix this program [ 780.740193][ T42] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 780.849381][T16696] binder: 16694:16696 ioctl 6406 0 returned -22 [ 780.910983][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 780.944545][ T42] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 780.953927][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.964659][ T42] usb 1-1: config 0 has no interface number 0 [ 780.973554][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 780.983066][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.991357][ T42] usb 1-1: Product: syz [ 780.995788][ T42] usb 1-1: Manufacturer: syz [ 781.000727][ T42] usb 1-1: SerialNumber: syz [ 781.019264][ T42] usb 1-1: config 0 descriptor?? [ 781.037272][ T42] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 781.044893][ T42] uvcvideo 1-1:0.105: No valid video chain found. [ 781.322614][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.359158][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.369645][T14121] usb 1-1: USB disconnect, device number 55 [ 781.380360][T16700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3183'. [ 781.786016][ T29] audit: type=1400 audit(1778570458.592:398920): avc: denied { mount } for pid=16699 comm="syz.2.3183" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 781.848024][ T5731] usb 4-1: unable to get BOS descriptor or descriptor too short [ 781.914815][ T5731] usb 4-1: no configurations [ 781.934740][ T5731] usb 4-1: can't read configurations, error -22 [ 782.391948][ T29] audit: type=1400 audit(1778570459.200:398921): avc: denied { write } for pid=16707 comm="syz.1.3185" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 785.583611][ T29] audit: type=1400 audit(1778570462.373:398922): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 785.901418][T14120] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 786.298843][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.305656][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.328091][T16737] ceph: No mds server is up or the cluster is laggy [ 787.654224][T14121] libceph: connect (1)[c::]:6789 error -101 [ 787.660395][T14121] libceph: mon0 (1)[c::]:6789 connect error [ 787.803541][T14120] usb 4-1: Using ep0 maxpacket: 8 [ 787.812545][T14120] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 787.848160][T14120] usb 4-1: config 0 has no interface number 0 [ 787.856078][T14120] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 787.908969][T14120] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 787.927104][T14120] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 787.942961][T14120] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.971633][T14120] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 788.000414][T14120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.015146][T14120] usb 4-1: config 0 descriptor?? [ 788.016531][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 788.047889][T16755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.073717][T16755] ipt_ECN: cannot use operation on non-tcp rule [ 788.096039][T14120] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 788.102676][ T5731] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 788.443138][ T804] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 789.493078][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 789.586590][T14120] usb 4-1: USB disconnect, device number 63 [ 789.601027][T14120] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 789.610966][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 789.656280][ T804] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 789.691902][ T804] usb 3-1: string descriptor 0 read error: -22 [ 789.700895][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 789.710684][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.892802][ T804] snd-ua101 3-1:1.0: invalid num_altsetting [ 789.980990][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 790.021021][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 790.055297][T16780] netlink: 'syz.2.3197': attribute type 10 has an invalid length. [ 790.071671][T16755] bond1: (slave bond0): making interface the new active one [ 790.084894][T16755] bond1: (slave bond0): Enslaving as an active interface with an up link [ 790.136896][T14121] usb 3-1: USB disconnect, device number 101 [ 791.320889][ T5731] usb 1-1: unable to get BOS descriptor or descriptor too short [ 791.362263][ T5731] usb 1-1: no configurations [ 791.390847][ T5731] usb 1-1: can't read configurations, error -22 [ 791.539469][T16799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3209'. [ 792.261302][T14121] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 792.286691][T16813] netlink: 'syz.4.3215': attribute type 10 has an invalid length. [ 792.287735][T16814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.432492][T14121] usb 4-1: not running at top speed; connect to a high speed hub [ 792.466480][T14121] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 792.492451][T14121] usb 4-1: can't read configurations, error -61 [ 792.655943][T14121] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 792.762047][ T5731] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 792.819935][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 792.831092][T14121] usb 4-1: not running at top speed; connect to a high speed hub [ 792.841168][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 792.851382][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 792.861757][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 792.870062][T14121] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 792.877958][T14121] usb 4-1: can't read configurations, error -61 [ 792.884542][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 792.892102][T14121] usb usb4-port1: attempt power cycle [ 792.932914][ T5731] usb 5-1: device descriptor read/64, error -71 [ 793.106276][ T13] bridge_slave_1: left allmulticast mode [ 793.116264][ T13] bridge_slave_1: left promiscuous mode [ 793.128343][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.146142][ T13] bridge_slave_0: left allmulticast mode [ 793.152112][ T13] bridge_slave_0: left promiscuous mode [ 793.161295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.212336][ T5731] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 793.264285][T14121] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 793.297392][T14121] usb 4-1: not running at top speed; connect to a high speed hub [ 793.313033][T14121] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 793.334279][T14121] usb 4-1: can't read configurations, error -61 [ 793.371159][ T5731] usb 5-1: device descriptor read/64, error -71 [ 793.452969][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.475388][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.485563][T14121] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 793.499373][ T5731] usb usb5-port1: attempt power cycle [ 793.505479][ T29] audit: type=1400 audit(1778570469.775:398923): avc: denied { write } for pid=16829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.531490][ T804] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 793.534693][ T13] bond0 (unregistering): Released all slaves [ 793.556653][T14121] usb 4-1: not running at top speed; connect to a high speed hub [ 793.585049][T14121] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 793.611484][T14121] usb 4-1: can't read configurations, error -61 [ 793.640788][T14121] usb usb4-port1: unable to enumerate USB device [ 793.769376][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 793.798122][ T804] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 793.849461][ T804] usb 3-1: config 0 has no interface number 0 [ 793.857796][ T29] audit: type=1400 audit(1778570470.112:398924): avc: denied { write } for pid=16849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.863160][ T804] usb 3-1: config 0 interface 184 has no altsetting 0 [ 793.888910][ T5731] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 793.942674][ T5731] usb 5-1: device descriptor read/8, error -71 [ 793.997321][ T804] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 794.018262][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.068221][ T13] hsr_slave_0: left promiscuous mode [ 794.080843][ T804] usb 3-1: Product: syz [ 794.096680][ T804] usb 3-1: Manufacturer: syz [ 794.114984][ T804] usb 3-1: SerialNumber: syz [ 794.121102][ T13] hsr_slave_1: left promiscuous mode [ 794.144721][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.155906][ T804] usb 3-1: config 0 descriptor?? [ 794.172558][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.239873][ T5731] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 794.269942][ T5731] usb 5-1: device descriptor read/8, error -71 [ 794.388932][ T5731] usb usb5-port1: unable to enumerate USB device [ 794.654835][ T13] team0 (unregistering): Port device team_slave_1 removed [ 794.688016][ T13] team0 (unregistering): Port device team_slave_0 removed [ 795.011709][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 795.051181][T16836] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 795.089208][ T804] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 795.118581][ T5630] Bluetooth: hci0: command tx timeout [ 795.127170][ T804] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 795.201287][ T804] usb 3-1: USB disconnect, device number 102 [ 795.221384][T14120] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 795.425912][T14120] usb 4-1: Using ep0 maxpacket: 32 [ 795.482668][T14120] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 795.536143][T14120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.591048][T14120] usb 4-1: Product: syz [ 795.609549][T14120] usb 4-1: Manufacturer: syz [ 795.660132][T14120] usb 4-1: SerialNumber: syz [ 795.740634][T14120] usb 4-1: config 0 descriptor?? [ 795.811761][T14120] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 796.211469][T14120] dvb-usb: bulk message failed: -22 (4/0) [ 796.230149][T16859] 9pnet_fd: Insufficient options for proto=fd [ 796.269596][T14120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.336482][T14120] dvb-usb: bulk message failed: -22 (5/0) [ 796.378231][T14120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.422601][T16879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 796.438527][T14120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.470926][T16881] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 796.495202][T14120] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 796.522406][T14120] usb 4-1: media controller created [ 796.557886][T16881] team0: Port device dummy0 added [ 796.565535][T14120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.603851][T14120] usb 4-1: selecting invalid altsetting 3 [ 796.611680][T14120] ttusb2: set interface to alts=3 failed [ 796.713398][T14120] DVB: Unable to find symbol tda10086_attach() [ 796.738295][T14120] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 796.764546][ T29] audit: type=1400 audit(1778570472.826:398925): avc: denied { write } for pid=16862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.809694][T14120] dvb-usb: bulk message failed: -22 (4/0) [ 796.821556][T14120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.836868][T16824] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.843095][T14120] dvb-usb: bulk message failed: -22 (5/0) [ 796.866558][T14121] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 796.877012][T16824] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.880049][T14120] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.903054][T16824] bridge_slave_0: entered allmulticast mode [ 796.909710][T14120] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 796.921424][T16824] bridge_slave_0: entered promiscuous mode [ 796.931286][T16824] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.949309][T14120] usb 4-1: USB disconnect, device number 68 [ 796.963290][T16824] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.976677][T16824] bridge_slave_1: entered allmulticast mode [ 797.007998][T16824] bridge_slave_1: entered promiscuous mode [ 797.017055][T14120] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 797.039806][T14121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 797.053559][T14121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.070470][T14121] usb 1-1: Product: syz [ 797.074901][T14121] usb 1-1: Manufacturer: syz [ 797.081976][T14121] usb 1-1: SerialNumber: syz [ 797.097887][ T29] audit: type=1400 audit(1778570473.144:398926): avc: denied { write } for pid=16898 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.131339][T14121] usb 1-1: config 0 descriptor?? [ 797.155234][T16824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.195636][T16824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.326634][ T5630] Bluetooth: hci0: command tx timeout [ 797.752227][T14121] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 798.119105][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 798.219481][ T148] bridge_slave_1: left allmulticast mode [ 798.241143][ T148] bridge_slave_1: left promiscuous mode [ 798.258096][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.294628][ T148] bridge_slave_0: left allmulticast mode [ 798.306764][T13056] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 798.315497][T13056] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 798.326788][ T148] bridge_slave_0: left promiscuous mode [ 798.358323][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.375482][T16915] FAULT_INJECTION: forcing a failure. [ 799.375482][T16915] name failslab, interval 1, probability 0, space 0, times 0 [ 799.414629][T16915] CPU: 1 UID: 0 PID: 16915 Comm: syz.2.3235 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.414659][T16915] Tainted: [L]=SOFTLOCKUP [ 799.414665][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.414676][T16915] Call Trace: [ 799.414682][T16915] [ 799.414689][T16915] dump_stack_lvl+0x100/0x190 [ 799.414716][T16915] should_fail_ex.cold+0x5/0xa [ 799.414741][T16915] ? tomoyo_realpath_from_path+0xb6/0x690 [ 799.414767][T16915] should_failslab+0xc2/0x120 [ 799.414787][T16915] __kmalloc_noprof+0xe0/0x850 [ 799.414813][T16915] ? kfree+0x1dd/0x6c0 [ 799.414841][T16915] tomoyo_realpath_from_path+0xb6/0x690 [ 799.414870][T16915] tomoyo_mount_acl+0x1b6/0x8b0 [ 799.414892][T16915] ? is_bpf_text_address+0x8a/0x1a0 [ 799.414917][T16915] ? bpf_ksym_find+0x128/0x1c0 [ 799.414944][T16915] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 799.414966][T16915] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 799.414988][T16915] ? kernel_text_address+0x8d/0x100 [ 799.415011][T16915] ? unwind_get_return_address+0x59/0xa0 [ 799.415060][T16915] ? tomoyo_domain+0xb2/0x150 [ 799.415086][T16915] ? tomoyo_profile+0x47/0x60 [ 799.415115][T16915] tomoyo_mount_permission+0x214/0x460 [ 799.415137][T16915] ? tomoyo_mount_permission+0x1f6/0x460 [ 799.415159][T16915] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 799.415197][T16915] security_sb_mount+0xdd/0x270 [ 799.415220][T16915] path_mount+0x158/0x23d0 [ 799.415251][T16915] ? __pfx_path_mount+0x10/0x10 [ 799.415280][T16915] ? lockdep_hardirqs_on+0x78/0x100 [ 799.415306][T16915] ? putname+0xb1/0x110 [ 799.415327][T16915] ? kmem_cache_free+0x127/0x6c0 [ 799.415360][T16915] ? __x64_sys_mount+0x293/0x310 [ 799.415385][T16915] __x64_sys_mount+0x293/0x310 [ 799.415411][T16915] ? __pfx___x64_sys_mount+0x10/0x10 [ 799.415440][T16915] ? rcu_is_watching+0x12/0xc0 [ 799.415469][T16915] do_syscall_64+0x10b/0xf80 [ 799.415493][T16915] ? clear_bhb_loop+0x40/0x90 [ 799.415515][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.415533][T16915] RIP: 0033:0x7fbac5b9cdd9 [ 799.415549][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.415566][T16915] RSP: 002b:00007fbac6a4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 799.415583][T16915] RAX: ffffffffffffffda RBX: 00007fbac5e15fa0 RCX: 00007fbac5b9cdd9 [ 799.415595][T16915] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 799.415606][T16915] RBP: 00007fbac6a4f090 R08: 0000200000000480 R09: 0000000000000000 [ 799.415617][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.415627][T16915] R13: 00007fbac5e16038 R14: 00007fbac5e15fa0 R15: 00007ffff759a258 [ 799.415651][T16915] [ 799.415660][T16915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 799.561142][ T5629] Bluetooth: hci0: command tx timeout [ 799.724689][ T148] bond1 (unregistering): (slave gretap1): Releasing active interface [ 799.784839][ T148] bond3 (unregistering): (slave geneve3): Releasing active interface [ 799.818907][ T148] bond0 (unregistering): (slave geneve2): Releasing active interface [ 799.852094][ T148] geneve2 (unregistering): left promiscuous mode [ 799.962838][ T148] .` (unregistering): (slave bridge0): Releasing backup interface [ 799.973951][T14121] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 799.990512][T14121] usb 1-1: USB disconnect, device number 58 [ 800.089287][ T148] bond2 (unregistering): (slave .`): Releasing backup interface [ 800.123173][ T148] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.141767][ T148] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.162901][ T148] .` (unregistering): Released all slaves [ 800.179591][ T148] bond1 (unregistering): Released all slaves [ 800.204862][ T148] bond2 (unregistering): Released all slaves [ 800.226546][ T148] bond0 (unregistering): left promiscuous mode [ 800.243668][ T148] bond0 (unregistering): Released all slaves [ 800.267600][ T148] bond3 (unregistering): Released all slaves [ 800.290142][ T148] bond4 (unregistering): Released all slaves [ 800.314415][ T148] bond5 (unregistering): Released all slaves [ 800.338268][T14124] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 800.364682][T16824] team0: Port device team_slave_0 added [ 800.384765][T16824] team0: Port device team_slave_1 added [ 800.481411][T16824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.488676][ T5629] Bluetooth: hci2: command 0x1003 tx timeout [ 800.500587][T14124] usb 4-1: Using ep0 maxpacket: 32 [ 800.502550][ T5630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 800.506746][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.598499][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3238'. [ 800.600928][T14124] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 800.600956][T14124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.600975][T14124] usb 4-1: Product: syz [ 800.600988][T14124] usb 4-1: Manufacturer: syz [ 800.601002][T14124] usb 4-1: SerialNumber: syz [ 800.628757][T14124] usb 4-1: config 0 descriptor?? [ 800.635749][T14124] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 800.635826][T14124] dvb-usb: bulk message failed: -22 (4/0) [ 800.635842][T14124] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 800.635931][T14124] dvb-usb: bulk message failed: -22 (5/0) [ 800.635944][T14124] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 800.683017][T14124] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 800.683939][T14124] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 800.683983][T14124] usb 4-1: media controller created [ 800.718240][T16824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.731826][T16824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.731843][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.731866][T16824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.756720][T14124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.867819][T14124] usb 4-1: selecting invalid altsetting 3 [ 800.867842][T14124] ttusb2: set interface to alts=3 failed [ 800.919327][T16931] Bluetooth: MGMT ver 1.23 [ 800.933157][T16920] 9pnet_fd: Insufficient options for proto=fd [ 801.076190][T16824] hsr_slave_0: entered promiscuous mode [ 801.115495][T16824] hsr_slave_1: entered promiscuous mode [ 801.145807][T14124] DVB: Unable to find symbol tda10086_attach() [ 801.145822][T14124] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 801.149287][T14124] dvb-usb: bulk message failed: -22 (4/0) [ 801.149307][T14124] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 801.149388][T14124] dvb-usb: bulk message failed: -22 (5/0) [ 801.149402][T14124] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 801.149446][T14124] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 801.151891][T14124] usb 4-1: USB disconnect, device number 69 [ 801.434126][T14124] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 801.649323][ T29] audit: type=1400 audit(1778570477.392:398927): avc: denied { connect } for pid=16937 comm="syz.4.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 801.855992][ T5630] Bluetooth: hci0: command tx timeout [ 802.089872][ T29] audit: type=1400 audit(1778570477.814:398928): avc: denied { write } for pid=16932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.367574][ T29] audit: type=1400 audit(1778570478.066:398929): avc: denied { write } for pid=16959 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.821877][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 802.899062][ T148] batadv0: left promiscuous mode [ 802.928549][ T148] hsr_slave_0: left promiscuous mode [ 802.938516][ T148] hsr_slave_1: left promiscuous mode [ 802.954156][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.973949][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.112414][ T29] audit: type=1400 audit(1778570478.768:398930): avc: denied { watch } for pid=16966 comm="syz.0.3245" path="/12" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 803.922558][ T148] team0 (unregistering): Port device team_slave_1 removed [ 803.945104][ T148] team0 (unregistering): Port device team_slave_0 removed [ 804.435169][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 804.460419][ T48] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 804.496899][ T48] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 804.523679][T16824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.556917][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.569424][T16824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.590962][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.606970][T16824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 804.655645][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.664518][T16824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 804.686810][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.834025][ T148] IPVS: stop unused estimator thread 0... [ 804.913759][ T29] audit: type=1400 audit(1778570480.462:398931): avc: denied { write } for pid=16975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.996054][T16824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.015628][T16824] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.029233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.036425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.064643][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 805.112119][T16824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 805.123599][T16824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.186883][ T76] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 805.205187][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.212378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.238202][ T76] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 805.424440][T17001] serio: Serial port ttyprintk [ 806.340207][ T29] audit: type=1400 audit(1778570481.791:398932): avc: denied { write } for pid=16999 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.664496][ T5630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 806.664767][ T5622] Bluetooth: hci2: command 0x1003 tx timeout [ 807.098442][T17008] syzkaller0: entered promiscuous mode [ 807.119170][T17008] syzkaller0: entered allmulticast mode [ 807.157657][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 807.243014][ T5630] Bluetooth: hci4: command 0x1003 tx timeout [ 807.249516][ T5629] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 808.343274][ T29] audit: type=1400 audit(1778570483.662:398933): avc: denied { create } for pid=17034 comm="syz.3.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 808.409479][ T29] audit: type=1400 audit(1778570483.709:398934): avc: denied { sys_admin } for pid=17034 comm="syz.3.3256" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 808.664025][T17047] binder: 17044:17047 ioctl 6406 0 returned -22 [ 808.899120][T16824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.914454][T16928] Set syz1 is full, maxelem 65536 reached [ 808.966258][ T29] audit: type=1400 audit(1778570484.252:398935): avc: denied { write } for pid=17015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.538215][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 809.573027][ T76] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 809.600178][ T76] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 810.336617][ T29] audit: type=1400 audit(1778570485.506:398936): avc: denied { write } for pid=17064 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.846038][T16824] veth0_vlan: entered promiscuous mode [ 810.927131][T16824] veth1_vlan: entered promiscuous mode [ 811.020006][ T29] audit: type=1400 audit(1778570486.170:398937): avc: denied { write } for pid=17085 comm="syz.2.3265" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 811.076204][T16824] veth0_macvtap: entered promiscuous mode [ 811.098781][T16824] veth1_macvtap: entered promiscuous mode [ 811.173530][T16824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.219111][T16824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.267370][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.319749][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.788785][ T5630] Bluetooth: hci2: command 0x1003 tx timeout [ 811.860758][ T5629] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 812.626637][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.631866][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3267'. [ 812.635529][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.125862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.168950][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.290933][ T29] audit: type=1400 audit(1778570488.266:398938): avc: denied { write } for pid=17080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.356570][T13056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.376702][T13056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.654468][ T29] audit: type=1400 audit(1778570488.622:398939): avc: denied { write } for pid=17114 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.017112][T17121] binder: 17118:17121 ioctl 6406 0 returned -22 [ 814.846267][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 814.860854][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 814.872936][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 814.886222][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 814.897692][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 814.986660][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3272'. [ 815.111206][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 815.152144][ T12] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 815.166529][ T29] audit: type=1400 audit(1778570490.054:398940): avc: denied { write } for pid=17117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.203271][ T12] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 815.555406][T17165] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3279'. [ 815.939950][T13636] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 816.985425][ T29] audit: type=1400 audit(1778570491.748:398941): avc: denied { write } for pid=17161 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.073496][ T5622] Bluetooth: hci2: command tx timeout [ 817.102112][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3281'. [ 817.330107][ T5629] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 817.524803][ T7073] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 817.774518][T17136] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.989021][T17136] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.302129][T17136] bridge_slave_0: entered allmulticast mode [ 818.395058][T17136] bridge_slave_0: entered promiscuous mode [ 818.548882][T17136] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.583165][T17136] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.614824][T17136] bridge_slave_1: entered allmulticast mode [ 818.639628][T17136] bridge_slave_1: entered promiscuous mode [ 818.800403][T13636] usb 4-1: unable to get BOS descriptor or descriptor too short [ 818.856796][T13636] usb 4-1: no configurations [ 818.882811][T13636] usb 4-1: can't read configurations, error -22 [ 818.943672][T17211] binder: 17209:17211 ioctl 6406 0 returned -22 [ 819.140220][ T29] audit: type=1400 audit(1778570493.769:398942): avc: denied { write } for pid=17185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.147334][T17136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.295261][ T5629] Bluetooth: hci2: command tx timeout [ 819.315859][T17136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.328426][T17217] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3288'. [ 820.755619][T17136] team0: Port device team_slave_0 added [ 821.038918][ T29] audit: type=1400 audit(1778570495.547:398943): avc: denied { write } for pid=17224 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.095304][T17136] team0: Port device team_slave_1 added [ 821.274616][T17136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.942824][ T5629] Bluetooth: hci2: command tx timeout [ 821.956828][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.000573][T17136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.054992][T17136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.102273][ T1020] Bluetooth: hci4: Frame reassembly failed (-84) [ 822.112813][ T13] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 822.113775][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.186681][T17136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.248426][ T1020] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 822.337892][T17136] hsr_slave_0: entered promiscuous mode [ 822.349848][T17136] hsr_slave_1: entered promiscuous mode [ 822.360381][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 822.382778][T17136] debugfs: 'hsr0' already exists in 'hsr' [ 822.393874][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 822.412315][T17136] Cannot create hsr debugfs directory [ 822.517225][T17257] openvswitch: netlink: Missing key (keys=40, expected=80) [ 822.537426][ T29] audit: type=1400 audit(1778570496.941:398944): avc: denied { execute } for pid=17251 comm="syz.3.3295" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=61814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 822.604801][ T29] audit: type=1400 audit(1778570496.997:398945): avc: denied { write } for pid=17229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.786369][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 822.808877][ T29] audit: type=1400 audit(1778570497.203:398946): avc: denied { write } for pid=17272 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.316035][T17279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17279 comm=syz.3.3299 [ 823.569647][ T29] audit: type=1400 audit(1778570497.905:398947): avc: denied { write } for pid=17280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.601711][T14124] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 823.675450][ T29] audit: type=1400 audit(1778570498.008:398948): avc: denied { write } for pid=17291 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.751345][T14124] usb 4-1: device descriptor read/64, error -71 [ 824.045965][T14124] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 824.192223][ T5622] Bluetooth: hci2: command tx timeout [ 824.198894][T14124] usb 4-1: device descriptor read/64, error -71 [ 824.254160][ T5622] Bluetooth: hci4: command 0x1003 tx timeout [ 824.286293][ T5629] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 824.329524][T14124] usb usb4-port1: attempt power cycle [ 824.478297][T17136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 824.478712][T17312] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3304'. [ 824.496220][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.506025][T17136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 824.781012][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.788313][T14124] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 824.828702][T17136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 824.853427][T14124] usb 4-1: device descriptor read/8, error -71 [ 824.866813][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.874847][T17136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 824.931709][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.096403][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3305'. [ 825.134921][T14124] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 825.231062][T14124] usb 4-1: device descriptor read/8, error -71 [ 825.447803][T14124] usb usb4-port1: unable to enumerate USB device [ 825.821125][T17328] tipc: Started in network mode [ 825.851994][T17328] tipc: Node identity 2, cluster identity 4711 [ 825.868646][T17328] tipc: Node number set to 2 [ 826.131218][T17136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.155903][T17335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3308'. [ 826.465365][T17136] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.480437][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.487573][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.560359][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.567492][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.341654][T17360] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3314'. [ 827.388819][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 827.624131][T13056] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 827.756208][T13056] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 829.546282][T17136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.554031][ T5622] Bluetooth: hci4: command 0x1003 tx timeout [ 829.559470][ T5629] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 829.616609][T17136] veth0_vlan: entered promiscuous mode [ 829.630064][T17391] ipt_REJECT: ECHOREPLY no longer supported. [ 829.645464][T17136] veth1_vlan: entered promiscuous mode [ 829.671403][ T804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 829.713427][T17136] veth0_macvtap: entered promiscuous mode [ 829.724622][T17136] veth1_macvtap: entered promiscuous mode [ 829.743712][T17136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.755472][T17136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.782536][ T1020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.176416][ T804] usb 6-1: device descriptor read/64, error -71 [ 830.194328][ T1020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.240922][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.261351][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.294726][T17397] binder: 17396:17397 ioctl 6406 0 returned -22 [ 830.363545][T17400] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3325'. [ 830.483615][ T804] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 830.637877][ T804] usb 6-1: device descriptor read/64, error -71 [ 830.772801][ T804] usb usb6-port1: attempt power cycle [ 831.069420][T13056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.122345][T13056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.189872][ T804] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 831.256412][ T804] usb 6-1: device descriptor read/8, error -71 [ 831.379160][ T29] audit: type=1400 audit(1778570505.223:398949): avc: denied { create } for pid=17405 comm="syz.4.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 831.450652][ T29] audit: type=1400 audit(1778570505.261:398950): avc: denied { map } for pid=17405 comm="syz.4.3324" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 831.573701][ T804] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 831.609453][ T804] usb 6-1: device descriptor read/8, error -71 [ 831.725397][ T804] usb usb6-port1: unable to enumerate USB device [ 831.838007][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.881911][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.607097][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3273'. [ 833.459793][ T1020] Bluetooth: hci4: Frame reassembly failed (-84) [ 833.828536][ T29] audit: type=1400 audit(1778570507.516:398951): avc: denied { bind } for pid=17438 comm="syz.3.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 835.547145][T17450] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3335'. [ 836.040962][ T5629] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 836.048716][ T5622] Bluetooth: hci4: command 0x1003 tx timeout [ 836.063581][T17451] binder: 17449:17451 ioctl 6406 0 returned -22 [ 837.796792][ T5622] Bluetooth: hci6: command 0x0406 tx timeout [ 838.206945][T17481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input36 [ 838.669783][ T5731] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 838.765590][ T42] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 838.846656][ T29] audit: type=1400 audit(1778570512.214:398952): avc: denied { write } for pid=17459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.991871][ T42] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 839.013233][ T5731] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 839.051841][ T42] usb 3-1: config 8 has no interface number 0 [ 839.069400][ T5731] usb 5-1: config 0 has no interface number 0 [ 839.080091][ T29] audit: type=1400 audit(1778570512.410:398953): avc: denied { write } for pid=17502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.220185][ T42] usb 3-1: string descriptor 0 read error: -22 [ 839.227200][ T5731] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 839.238730][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 839.251751][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.263094][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.277735][ T29] audit: type=1400 audit(1778570512.438:398954): avc: denied { ioctl } for pid=17503 comm="syz.0.3346" path="socket:[62429]" dev="sockfs" ino=62429 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 839.302796][ T5731] usb 5-1: Product: syz [ 839.308453][ T5731] usb 5-1: Manufacturer: syz [ 839.313577][ T5731] usb 5-1: SerialNumber: syz [ 839.323202][ T42] ttusb_dec_send_command: command bulk message failed: error -22 [ 839.334508][ T5731] usb 5-1: config 0 descriptor?? [ 839.339971][ T42] ttusb-dec 3-1:8.137: probe with driver ttusb-dec failed with error -22 [ 839.593002][T17492] netlink: 'syz.2.3344': attribute type 1 has an invalid length. [ 839.755531][ T5731] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 839.781254][ T5731] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 839.810929][ T5731] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 839.847171][ T5731] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 839.894803][ T5731] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 841.636600][ T42] usb 3-1: USB disconnect, device number 103 [ 842.332176][ T804] usb 5-1: USB disconnect, device number 24 [ 842.409228][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 842.418790][ T804] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 842.459651][ T12] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 842.676539][ T12] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 842.779045][ T804] keyspan 5-1:0.133: device disconnected [ 842.785363][T17535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3350'. [ 843.572196][ T29] audit: type=1400 audit(1778570516.631:398955): avc: denied { write } for pid=17515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.721816][ T29] audit: type=1400 audit(1778570516.771:398956): avc: denied { write } for pid=17553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.916187][T13561] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 844.155125][ T29] audit: type=1400 audit(1778570517.173:398957): avc: denied { mount } for pid=17550 comm="syz.0.3355" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 844.197433][T17563] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 844.205719][T13561] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 844.207371][ T29] audit: type=1400 audit(1778570517.220:398958): avc: denied { write } for pid=17556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.262408][T13561] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 844.277307][T13561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 844.287867][T13561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 844.309532][T13561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 844.312091][T13561] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 844.312121][T13561] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 844.312139][T13561] usb 4-1: Product: syz [ 844.312154][T13561] usb 4-1: Manufacturer: syz [ 844.326518][ T29] audit: type=1400 audit(1778570517.342:398959): avc: denied { write } for pid=17574 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.343478][T13561] cdc_wdm 4-1:1.0: skipping garbage [ 844.343498][T13561] cdc_wdm 4-1:1.0: skipping garbage [ 844.352098][T13561] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 844.352120][T13561] cdc_wdm 4-1:1.0: Unknown control protocol [ 844.417004][ T29] audit: type=1804 audit(1778570517.398:398960): pid=17576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.3357" name="/newroot/140/file1" dev="fuse" ino=1 res=1 errno=0 [ 844.499746][ T29] audit: type=1800 audit(1778570517.482:398961): pid=17576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3357" name="/" dev="fuse" ino=1 res=0 errno=0 [ 844.602644][ T5622] Bluetooth: hci4: command 0x1003 tx timeout [ 844.602748][ T5630] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 844.785779][T14120] usb 4-1: USB disconnect, device number 76 [ 845.100317][ T29] audit: type=1400 audit(1778570518.062:398962): avc: denied { open } for pid=17596 comm="syz.5.3360" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 845.265892][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.267313][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.278380][T17601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17601 comm=syz.2.3358 [ 845.366207][ T29] audit: type=1400 audit(1778570518.315:398963): avc: denied { write } for pid=17579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.639671][ T804] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 845.646379][ T29] audit: type=1400 audit(1778570518.568:398964): avc: denied { write } for pid=17609 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.679420][T17588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.690630][T17588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.809707][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 846.821164][ T804] usb 3-1: device descriptor read/64, error -71 [ 847.260770][ T804] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 847.315405][ T42] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 847.315434][ T42] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 847.315453][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 847.315489][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 847.315503][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 847.317259][ T42] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.317285][ T42] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.317300][ T42] usb 6-1: Product: syz [ 847.317309][ T42] usb 6-1: Manufacturer: syz [ 847.333272][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 847.416881][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 847.420152][ T42] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 847.420172][ T42] cdc_wdm 6-1:1.0: Unknown control protocol [ 847.474639][ T804] usb 3-1: device descriptor read/64, error -71 [ 847.527888][ T1020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.529264][ T1020] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.529312][ T1020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.529344][ T1020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.592608][ T804] usb usb3-port1: attempt power cycle [ 847.940117][ T48] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 847.955681][ T804] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 847.970939][ T29] audit: type=1400 audit(1778570520.739:398965): avc: denied { read write } for pid=17606 comm="syz.5.3361" name="cdc-wdm0" dev="devtmpfs" ino=3736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 848.023687][ T48] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 848.566805][ T29] audit: type=1400 audit(1778570520.739:398966): avc: denied { open } for pid=17606 comm="syz.5.3361" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 848.698290][ T804] usb 3-1: device descriptor read/8, error -71 [ 848.959527][T17629] pimreg3: entered allmulticast mode [ 849.168171][ T7073] libceph: connect (1)[c::]:6789 error -101 [ 850.233989][ T5622] Bluetooth: hci4: command 0x1003 tx timeout [ 850.247081][ T5630] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 850.638780][ T7073] libceph: mon0 (1)[c::]:6789 connect error [ 850.869648][ T7073] libceph: connect (1)[c::]:6789 error -101 [ 850.908516][T17643] ceph: No mds server is up or the cluster is laggy [ 850.947624][ T7073] libceph: mon0 (1)[c::]:6789 connect error [ 851.224063][T13561] usb 6-1: USB disconnect, device number 6 [ 851.268067][ T7073] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 851.337142][ T29] audit: type=1400 audit(1778570523.902:398967): avc: denied { bind } for pid=17648 comm="syz.3.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 851.456716][T17656] fuse: Unknown parameter '2Z|!~YN8' [ 851.466143][ T7073] usb 5-1: unable to get BOS descriptor or descriptor too short [ 851.482508][ T7073] usb 5-1: config 246 has an invalid interface number: 89 but max is 0 [ 851.501599][ T7073] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 851.522813][ T7073] usb 5-1: config 246 has no interface number 0 [ 851.533544][ T7073] usb 5-1: config 246 interface 89 has no altsetting 0 [ 851.552086][ T7073] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3001, bcdDevice=af.ac [ 851.570732][ T7073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.594391][ T7073] usb 5-1: Product: syz [ 851.602876][ T7073] usb 5-1: Manufacturer: syz [ 851.614119][ T7073] usb 5-1: SerialNumber: syz [ 851.622427][ T29] audit: type=1400 audit(1778570524.173:398968): avc: denied { read } for pid=17658 comm="syz.3.3374" dev="sockfs" ino=63889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 851.878418][ T7073] usb 5-1: USB disconnect, device number 25 [ 851.908305][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 852.021381][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.028797][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.987122][T17681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3378'. [ 853.794707][T17689] audit: audit_lost=7986 audit_rate_limit=0 audit_backlog_limit=64 [ 853.802807][T17689] audit: out of memory in audit_log_start [ 854.428400][T17700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input37 [ 854.625793][T17702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17702 comm=syz.5.3383 [ 854.839667][T17698] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.846976][T17698] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.855887][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 854.879750][T14120] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 854.965346][ T7073] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 855.286009][T16189] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 855.520916][ T7073] usb 6-1: device descriptor read/64, error -71 [ 855.527250][T14120] usb 5-1: device descriptor read/64, error -71 [ 855.629370][T17698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.650179][T16189] usb 1-1: Using ep0 maxpacket: 8 [ 855.651466][T17698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.671731][T16189] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 855.688658][T16189] usb 1-1: config 179 has no interface number 0 [ 855.704051][T16189] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 855.747598][T16189] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 855.777841][T16189] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 855.798829][ T7073] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 855.802160][T16189] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 855.806409][T14120] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 855.817803][T16189] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 855.840851][T16189] usb 1-1: config 179 interface 65 has no altsetting 0 [ 855.882355][T16189] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 855.894707][T16189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.960545][T16189] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 856.023860][ T4965] input input38: unable to receive magic message: -110 [ 856.025065][ T7073] usb 6-1: device descriptor read/64, error -71 [ 856.037226][T14120] usb 5-1: device descriptor read/64, error -71 [ 856.049098][ T4965] input input38: unable to receive magic message: -32 [ 856.060284][ T4965] input input38: unable to receive magic message: -32 [ 856.147959][ T1020] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.162565][ T1020] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.164430][T14120] usb usb5-port1: attempt power cycle [ 856.171949][ T1020] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.179888][ T7073] usb usb6-port1: attempt power cycle [ 856.200166][ T1020] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.209642][ T4965] input input38: unable to receive magic message: -32 [ 856.224439][T17717] binder: 17716:17717 ioctl 6406 0 returned -22 [ 856.255400][ T4965] input input38: unable to receive magic message: -32 [ 856.385848][T13561] libceph: connect (1)[c::]:6789 error -99 [ 856.394627][T13561] libceph: mon0 (1)[c::]:6789 connect error [ 856.402474][T13561] libceph: connect (1)[c::]:6789 error -99 [ 856.412094][T13561] libceph: mon0 (1)[c::]:6789 connect error [ 856.569435][ T29] audit: type=1400 audit(1778570528.787:398969): avc: denied { mount } for pid=17712 comm="syz.0.3388" name="/" dev="hugetlbfs" ino=64902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 856.601040][T17713] tipc: Enabling of bearer rejected, failed to enable media [ 856.611614][T14120] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 856.625858][T13561] usb 1-1: USB disconnect, device number 60 [ 856.625903][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 856.636457][ T7073] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 856.665623][T14120] usb 5-1: device descriptor read/8, error -71 [ 856.673389][ T7073] usb 6-1: device descriptor read/8, error -71 [ 856.716702][T14124] libceph: connect (1)[c::]:6789 error -99 [ 856.722746][T14124] libceph: mon0 (1)[c::]:6789 connect error [ 856.942194][ T7073] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 856.950585][T14120] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 856.988484][T14120] usb 5-1: device descriptor read/8, error -71 [ 856.994819][ T7073] usb 6-1: device descriptor read/8, error -71 [ 857.113344][T14120] usb usb5-port1: unable to enumerate USB device [ 857.120068][ T7073] usb usb6-port1: unable to enumerate USB device [ 857.141368][T17721] ceph: No mds server is up or the cluster is laggy [ 857.192702][ T29] audit: type=1400 audit(1778570529.376:398970): avc: denied { setopt } for pid=17726 comm="syz.2.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 857.356401][T17735] FAULT_INJECTION: forcing a failure. [ 857.356401][T17735] name failslab, interval 1, probability 0, space 0, times 0 [ 857.375957][T17735] CPU: 0 UID: 0 PID: 17735 Comm: syz.2.3394 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.375985][T17735] Tainted: [L]=SOFTLOCKUP [ 857.375991][T17735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.376002][T17735] Call Trace: [ 857.376008][T17735] [ 857.376015][T17735] dump_stack_lvl+0x100/0x190 [ 857.376040][T17735] should_fail_ex.cold+0x5/0xa [ 857.376071][T17735] should_failslab+0xc2/0x120 [ 857.376092][T17735] __kvmalloc_node_noprof+0xfa/0xa00 [ 857.376116][T17735] ? proc_sys_call_handler+0x2c7/0x5a0 [ 857.376146][T17735] proc_sys_call_handler+0x2c7/0x5a0 [ 857.376173][T17735] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 857.376203][T17735] vfs_write+0x6ac/0x1070 [ 857.376223][T17735] ? __pfx_proc_sys_write+0x10/0x10 [ 857.376248][T17735] ? __pfx_vfs_write+0x10/0x10 [ 857.376282][T17735] ksys_write+0x12a/0x250 [ 857.376301][T17735] ? __pfx_ksys_write+0x10/0x10 [ 857.376322][T17735] ? rcu_is_watching+0x12/0xc0 [ 857.376352][T17735] do_syscall_64+0x10b/0xf80 [ 857.376376][T17735] ? clear_bhb_loop+0x40/0x90 [ 857.376398][T17735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.376415][T17735] RIP: 0033:0x7fcad359cdd9 [ 857.376431][T17735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.376447][T17735] RSP: 002b:00007fcad17ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.376465][T17735] RAX: ffffffffffffffda RBX: 00007fcad3815fa0 RCX: 00007fcad359cdd9 [ 857.376477][T17735] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 857.376488][T17735] RBP: 00007fcad17ee090 R08: 0000000000000000 R09: 0000000000000000 [ 857.376498][T17735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.376508][T17735] R13: 00007fcad3816038 R14: 00007fcad3815fa0 R15: 00007fff54868788 [ 857.376530][T17735] [ 857.612267][ T1020] bridge_slave_1: left allmulticast mode [ 857.618435][ T1020] bridge_slave_1: left promiscuous mode [ 857.624579][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.626069][ T42] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 857.711617][ T804] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 859.248409][ T1020] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 859.283739][T17759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3398'. [ 859.393615][ T1020] bond1 (unregistering): (slave bond0): Releasing active interface [ 859.405663][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.418549][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.427259][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 859.438588][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.449801][ T804] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 859.461547][ T42] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 859.473958][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 859.485045][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.493469][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.502969][ T1020] bond0 (unregistering): Released all slaves [ 859.511291][ T42] usb 4-1: config 0 descriptor?? [ 859.518196][ T804] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 859.529790][ T1020] bond1 (unregistering): Released all slaves [ 859.539032][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.553297][ T804] usb 1-1: Product: syz [ 859.557568][ T804] usb 1-1: Manufacturer: syz [ 859.567780][ T804] usb 1-1: SerialNumber: syz [ 859.578925][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 859.604865][ T1020] tipc: Left network mode [ 859.612038][ T804] usb 1-1: config 0 descriptor?? [ 859.638636][T17733] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 859.663437][T17733] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 859.674659][ T804] usb 1-1: ucan: probing device on interface #0 [ 859.805205][T13056] Bluetooth: hci1: Frame reassembly failed (-84) [ 859.914830][T13056] Bluetooth: hci4: Frame reassembly failed (-84) [ 859.937627][ T12] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 859.982526][ T1121] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 860.318742][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.346740][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.368591][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.407696][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.434714][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.454993][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.483631][ T42] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 860.571564][ T42] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 860.597729][ T804] ucan 1-1:0.0 can0: registered device [ 860.680378][ T42] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 860.729738][ T29] audit: type=1400 audit(1778570532.689:398971): avc: denied { listen } for pid=17771 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 860.748517][ T804] ucan 1-1:0.0 can0: firmware string: HɼPީwc= [ 860.757922][ T42] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 860.758860][T17772] netlink: 'syz.4.3402': attribute type 2 has an invalid length. [ 860.803102][ T42] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -5 [ 860.816400][ T1020] hsr_slave_0: left promiscuous mode [ 860.829854][ T29] audit: type=1400 audit(1778570532.782:398972): avc: denied { connect } for pid=17771 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 860.873672][ T29] audit: type=1400 audit(1778570532.782:398973): avc: denied { accept } for pid=17771 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 860.895439][ T1020] hsr_slave_1: left promiscuous mode [ 860.909344][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.004738][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3393'. [ 861.032088][ T42] usb 1-1: USB disconnect, device number 61 [ 861.216787][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 861.703786][ T1020] IPVS: stop unused estimator thread 0... [ 861.815834][ T29] audit: type=1400 audit(1778570533.700:398974): avc: denied { getopt } for pid=17777 comm="syz.0.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 861.953967][ T5630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 862.043716][ T5622] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 862.280010][T17787] can: request_module (can-proto-3) failed. [ 862.402829][ T29] audit: type=1400 audit(1778570534.252:398975): avc: denied { write } for pid=17785 comm="syz.2.3404" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 862.549901][ T29] audit: type=1400 audit(1778570534.252:398976): avc: denied { open } for pid=17785 comm="syz.2.3404" path="/17/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 862.661369][ T42] usb 4-1: USB disconnect, device number 77 [ 862.754568][T17795] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3407'. [ 864.152887][T17805] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 864.948544][T17814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3412'. [ 866.465028][T17822] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3411'. [ 866.552623][T17824] overlayfs: failed to resolve './file2': -2 [ 866.825112][T17829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17829 comm=syz.3.3415 [ 866.856544][T13056] Bluetooth: hci1: Frame reassembly failed (-84) [ 866.896908][ T12] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 866.898617][ T29] audit: type=1400 audit(1778570538.463:398977): avc: denied { map } for pid=17827 comm="syz.3.3415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 867.150799][T16189] IPVS: starting estimator thread 0... [ 867.341586][T17835] IPVS: using max 81 ests per chain, 194400 per kthread [ 867.880832][ T29] audit: type=1400 audit(1778570539.380:398978): avc: denied { nlmsg_read } for pid=17840 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 868.034372][ T42] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 868.240815][ T42] usb 3-1: config 118 interface 0 has no altsetting 0 [ 868.251223][ T42] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 868.261993][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.270926][ T42] usb 3-1: Product: syz [ 868.275232][ T42] usb 3-1: Manufacturer: syz [ 868.280263][ T42] usb 3-1: SerialNumber: syz [ 868.555135][ T42] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 868.599385][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.627753][ T42] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 868.645607][ T42] usb 3-1: media controller created [ 868.665043][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.731478][ T42] DVB: Unable to find symbol mt352_attach() [ 868.751257][ T42] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 868.763674][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 868.778738][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 868.794105][ T42] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 868.889446][T13561] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 869.022424][T17836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.031529][T17836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.050173][ T5629] Bluetooth: hci1: command 0x1003 tx timeout [ 869.058748][ T5622] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 869.078742][T17852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3420'. [ 869.098623][T13561] usb 6-1: unable to get BOS descriptor or descriptor too short [ 869.128720][T13561] usb 6-1: config 246 has an invalid interface number: 89 but max is 0 [ 869.152726][T13561] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 869.190758][T13561] usb 6-1: config 246 has no interface number 0 [ 869.206360][T13561] usb 6-1: config 246 interface 89 has no altsetting 0 [ 869.223653][T13561] usb 6-1: New USB device found, idVendor=1bc7, idProduct=3001, bcdDevice=af.ac [ 869.242602][T13561] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.252061][T13561] usb 6-1: Product: syz [ 869.256912][T13561] usb 6-1: Manufacturer: syz [ 869.262165][T13561] usb 6-1: SerialNumber: syz [ 869.295233][ T804] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 869.311403][T17859] macvtap1: entered promiscuous mode [ 869.317534][T17859] syz_tun: entered promiscuous mode [ 869.390633][ T29] audit: type=1400 audit(1778570540.793:398979): avc: denied { read write } for pid=17861 comm="syz.3.3424" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 869.421444][ T29] audit: type=1400 audit(1778570540.793:398980): avc: denied { open } for pid=17861 comm="syz.3.3424" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 869.447017][T17862] netdevsim netdevsim3 : renamed from netdevsim0 [ 869.468700][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 869.478220][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 869.495865][ T804] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 869.513329][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.621958][ T804] usb 5-1: Product: syz [ 869.629605][ T804] usb 5-1: Manufacturer: syz [ 869.634679][ T804] usb 5-1: SerialNumber: syz [ 869.641718][T13561] usb 6-1: USB disconnect, device number 11 [ 871.188159][T16189] m920x_read = error: -71 [ 871.194514][ T42] dvb_usb_m920x 3-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 871.209700][ T804] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.218811][T16189] dvb-usb: error while querying for an remote control event. [ 871.234798][ T42] usb 3-1: USB disconnect, device number 108 [ 871.317509][ T804] usb 5-1: USB disconnect, device number 30 [ 871.362586][T13636] m920x_read = error: -19 [ 871.374132][T13636] dvb-usb: error while querying for an remote control event. [ 871.658219][ T42] m920x_read = error: -19 [ 871.703085][ T42] dvb-usb: error while querying for an remote control event. [ 871.892318][ T42] m920x_read = error: -19 [ 871.915253][ T42] dvb-usb: error while querying for an remote control event. [ 872.063852][ T42] m920x_read = error: -19 [ 872.090242][ T42] dvb-usb: error while querying for an remote control event. [ 872.294627][ T42] m920x_read = error: -19 [ 872.326419][ T42] dvb-usb: error while querying for an remote control event. [ 872.464828][ T148] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 872.492518][ T42] m920x_read = error: -19 [ 872.500071][ T42] dvb-usb: error while querying for an remote control event. [ 872.512634][ T148] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 872.531363][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.549978][ T1020] Bluetooth: hci1: Frame reassembly failed (-84) [ 872.585106][ T29] audit: type=1400 audit(1778570543.769:398981): avc: denied { append } for pid=17883 comm="syz.4.3433" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 872.620975][T17888] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3434'. [ 872.631826][ T42] m920x_read = error: -19 [ 872.636551][ T42] dvb-usb: error while querying for an remote control event. [ 872.759971][ T804] m920x_read = error: -19 [ 872.761390][T17890] overlayfs: failed to resolve './file2': -2 [ 872.764526][ T804] dvb-usb: error while querying for an remote control event. [ 873.700014][T17898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input41 [ 873.787487][T13636] m920x_read = error: -19 [ 873.792874][T13636] dvb-usb: error while querying for an remote control event. [ 873.922352][T13636] m920x_read = error: -19 [ 873.927113][T13636] dvb-usb: error while querying for an remote control event. [ 874.044015][T17908] binder: 17906:17908 ioctl 6406 0 returned -22 [ 874.088647][ T29] audit: type=1400 audit(1778570545.191:398982): avc: denied { accept } for pid=17909 comm="syz.2.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 874.196712][T13636] m920x_read = error: -19 [ 874.693362][ T5622] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 874.810289][T13636] dvb-usb: error while querying for an remote control event. [ 875.344584][ T804] m920x_read = error: -19 [ 875.369435][ T804] dvb-usb: error while querying for an remote control event. [ 875.432734][T17919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.475423][T17923] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3441'. [ 875.568170][T13636] m920x_read = error: -19 [ 875.626338][T17919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3439'. [ 875.644642][T17928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17928 comm=syz.3.3440 [ 875.728406][T17921] syz_tun: left promiscuous mode [ 875.844083][T13636] dvb-usb: error while querying for an remote control event. [ 875.881044][T17938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3444'. [ 875.941928][T13561] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 876.006092][T13636] m920x_read = error: -19 [ 876.102417][T13636] dvb-usb: error while querying for an remote control event. [ 876.145044][T13561] usb 4-1: device descriptor read/64, error -71 [ 876.284497][T13636] m920x_read = error: -19 [ 876.294585][T13636] dvb-usb: error while querying for an remote control event. [ 876.412181][T13636] m920x_read = error: -19 [ 876.416730][T13636] dvb-usb: error while querying for an remote control event. [ 876.424140][T13561] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 876.443493][T17944] binder: 17943:17944 ioctl 6406 0 returned -22 [ 876.540556][T13636] m920x_read = error: -19 [ 876.544975][T13636] dvb-usb: error while querying for an remote control event. [ 876.561762][T13561] usb 4-1: device descriptor read/64, error -71 [ 876.583100][ T7073] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 876.672509][T13636] m920x_read = error: -19 [ 876.676979][T13636] dvb-usb: error while querying for an remote control event. [ 876.696868][T13561] usb usb4-port1: attempt power cycle [ 876.762458][ T7073] usb 1-1: unable to get BOS descriptor or descriptor too short [ 876.801023][T13636] m920x_read = error: -19 [ 876.819295][T13636] dvb-usb: error while querying for an remote control event. [ 876.860077][ T7073] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.924617][ T7073] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.979104][T13636] m920x_read = error: -19 [ 877.005276][ T7073] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 877.006329][T13636] dvb-usb: error while querying for an remote control event. [ 877.043935][ T7073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.065075][ T7073] usb 1-1: Product: syz [ 877.074668][T13561] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 877.083145][ T7073] usb 1-1: Manufacturer: syz [ 877.101678][ T7073] usb 1-1: SerialNumber: syz [ 877.119394][T13561] usb 4-1: device descriptor read/8, error -71 [ 877.135699][ T7073] usb 1-1: selecting invalid altsetting 1 [ 877.159282][ T7073] usb 1-1: unit 6 not found! [ 877.172208][T13636] m920x_read = error: -19 [ 877.182801][T13636] dvb-usb: error while querying for an remote control event. [ 877.320814][T13636] m920x_read = error: -19 [ 877.332455][T13636] dvb-usb: error while querying for an remote control event. [ 877.427187][T13561] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 877.612981][T13561] usb 4-1: device descriptor read/8, error -71 [ 877.649719][T13237] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 877.662421][T13237] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 877.720059][ T1020] Bluetooth: hci1: Frame reassembly failed (-84) [ 877.737464][T13561] usb usb4-port1: unable to enumerate USB device [ 877.771888][ T1020] Bluetooth: hci1: Frame reassembly failed (-84) [ 877.812488][T13636] m920x_read = error: -19 [ 877.817342][T13636] dvb-usb: error while querying for an remote control event. [ 877.961676][T13636] m920x_read = error: -19 [ 877.978208][T13636] dvb-usb: error while querying for an remote control event. [ 878.002341][T17965] binder: 17964:17965 ioctl 6406 0 returned -22 [ 878.069189][T17942] IPv6: NLM_F_CREATE should be specified when creating new route [ 878.081910][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3445'. [ 878.109814][ T7073] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 878.124470][T13636] m920x_read = error: -19 [ 878.133518][T13636] dvb-usb: error while querying for an remote control event. [ 878.206850][ T7073] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 878.230478][ T7073] usb 1-1: USB disconnect, device number 62 [ 878.282635][T13636] m920x_read = error: -19 [ 878.287112][T13636] dvb-usb: error while querying for an remote control event. [ 878.376221][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3453'. [ 878.421413][T13636] m920x_read = error: -19 [ 878.426279][T13636] dvb-usb: error while querying for an remote control event. [ 878.511523][T13403] udevd[13403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.560931][T13636] m920x_read = error: -19 [ 878.565858][T13636] dvb-usb: error while querying for an remote control event. [ 878.746675][T13636] m920x_read = error: -19 [ 878.789250][T13636] dvb-usb: error while querying for an remote control event. [ 878.998551][T13636] m920x_read = error: -19 [ 879.042169][T13636] dvb-usb: error while querying for an remote control event. [ 879.265629][T13636] m920x_read = error: -19 [ 879.301406][T13636] dvb-usb: error while querying for an remote control event. [ 879.351210][T17974] FAULT_INJECTION: forcing a failure. [ 879.351210][T17974] name failslab, interval 1, probability 0, space 0, times 0 [ 879.364789][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.3.3455 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.364812][T17974] Tainted: [L]=SOFTLOCKUP [ 879.364816][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.364822][T17974] Call Trace: [ 879.364826][T17974] [ 879.364831][T17974] dump_stack_lvl+0x100/0x190 [ 879.364848][T17974] should_fail_ex.cold+0x5/0xa [ 879.364863][T17974] should_failslab+0xc2/0x120 [ 879.364876][T17974] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 879.364892][T17974] ? security_inode_alloc+0x3b/0x2c0 [ 879.364905][T17974] ? lockdep_init_map_type+0x5c/0x250 [ 879.364924][T17974] security_inode_alloc+0x3b/0x2c0 [ 879.364937][T17974] inode_init_always_gfp+0xcc0/0x1000 [ 879.364954][T17974] alloc_inode+0x8e/0x250 [ 879.364966][T17974] new_inode+0x22/0x1c0 [ 879.364977][T17974] __debugfs_create_file+0x105/0x4f0 [ 879.364992][T17974] debugfs_create_file_full+0x41/0x60 [ 879.365005][T17974] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 879.365018][T17974] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 879.365039][T17974] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 879.365055][T17974] ? alloc_netdev_mqs+0xd7/0x1560 [ 879.365067][T17974] ? lockdep_init_map_type+0x5c/0x250 [ 879.365083][T17974] ? __pfx_vlan_setup+0x10/0x10 [ 879.365097][T17974] alloc_netdev_mqs+0x314/0x1560 [ 879.365110][T17974] rtnl_create_link+0xc13/0xf80 [ 879.365123][T17974] rtnl_newlink+0x13bd/0x2380 [ 879.365139][T17974] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.365148][T17974] ? find_held_lock+0x2b/0x80 [ 879.365158][T17974] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 879.365175][T17974] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 879.365194][T17974] ? avc_has_perm_noaudit+0x145/0x3b0 [ 879.365222][T17974] ? find_held_lock+0x2b/0x80 [ 879.365231][T17974] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 879.365242][T17974] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 879.365253][T17974] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.365264][T17974] rtnetlink_rcv_msg+0x95e/0xe90 [ 879.365276][T17974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.365290][T17974] ? __lock_acquire+0x4a5/0x2630 [ 879.365306][T17974] netlink_rcv_skb+0x159/0x420 [ 879.365320][T17974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.365332][T17974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.365351][T17974] ? netlink_deliver_tap+0x1ae/0xcc0 [ 879.365367][T17974] netlink_unicast+0x585/0x850 [ 879.365382][T17974] ? __pfx_netlink_unicast+0x10/0x10 [ 879.365400][T17974] netlink_sendmsg+0x8b0/0xda0 [ 879.365415][T17974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.365429][T17974] ? __might_fault+0x50/0x140 [ 879.365449][T17974] ____sys_sendmsg+0x9e1/0xb70 [ 879.365461][T17974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.365476][T17974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.365495][T17974] ___sys_sendmsg+0x190/0x1e0 [ 879.365510][T17974] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.365540][T17974] __sys_sendmsg+0x170/0x220 [ 879.365551][T17974] ? __pfx___sys_sendmsg+0x10/0x10 [ 879.365567][T17974] ? rcu_is_watching+0x12/0xc0 [ 879.365585][T17974] do_syscall_64+0x10b/0xf80 [ 879.365600][T17974] ? clear_bhb_loop+0x40/0x90 [ 879.365613][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.365624][T17974] RIP: 0033:0x7ff2da19cdd9 [ 879.365634][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.365645][T17974] RSP: 002b:00007ff2d83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.365656][T17974] RAX: ffffffffffffffda RBX: 00007ff2da415fa0 RCX: 00007ff2da19cdd9 [ 879.365662][T17974] RDX: 0000000008000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 879.365674][T17974] RBP: 00007ff2d83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 879.365680][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.365687][T17974] R13: 00007ff2da416038 R14: 00007ff2da415fa0 R15: 00007ffc11fb0168 [ 879.365701][T17974] [ 879.365721][T17974] debugfs: out of free dentries, can not create file 'netdev@ffff88802b18e658' [ 879.751202][ T42] m920x_read = error: -19 [ 879.755532][ T42] dvb-usb: error while querying for an remote control event. [ 879.821021][ T5630] Bluetooth: hci1: command 0x1003 tx timeout [ 879.825221][ T5629] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 879.874519][T13636] m920x_read = error: -19 [ 879.879048][T13636] dvb-usb: error while querying for an remote control event. [ 879.972096][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3456'. [ 880.003880][T13636] m920x_read = error: -19 [ 880.034494][T13636] dvb-usb: error while querying for an remote control event. [ 880.242645][T17982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.250389][T13636] m920x_read = error: -19 [ 880.257545][T13636] dvb-usb: error while querying for an remote control event. [ 880.359871][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 880.373545][T17989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3459'. [ 880.471813][T13636] m920x_read = error: -19 [ 880.477981][T13636] dvb-usb: error while querying for an remote control event. [ 880.601845][T13636] m920x_read = error: -19 [ 880.625623][T13636] dvb-usb: error while querying for an remote control event. [ 880.710683][T18003] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3463'. [ 880.783234][T13636] m920x_read = error: -19 [ 881.031204][T13636] dvb-usb: error while querying for an remote control event. [ 881.081909][T18006] binder: 18002:18006 ioctl 6406 0 returned -22 [ 881.274452][T13636] m920x_read = error: -19 [ 881.283469][T13636] dvb-usb: error while querying for an remote control event. [ 881.413232][T13636] m920x_read = error: -19 [ 881.425975][T13636] dvb-usb: error while querying for an remote control event. [ 881.534851][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 881.573684][T13636] m920x_read = error: -19 [ 881.584193][T13636] dvb-usb: error while querying for an remote control event. [ 881.755387][ T29] audit: type=1400 audit(1778570552.359:398983): avc: denied { listen } for pid=18007 comm="syz.5.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 881.797073][T13636] m920x_read = error: -19 [ 881.802101][T13636] dvb-usb: error while querying for an remote control event. [ 881.846227][T18026] FAULT_INJECTION: forcing a failure. [ 881.846227][T18026] name failslab, interval 1, probability 0, space 0, times 0 [ 882.262208][T13636] m920x_read = error: -19 [ 882.278606][T13636] dvb-usb: error while querying for an remote control event. [ 882.809470][T13636] m920x_read = error: -19 [ 882.822287][T13636] dvb-usb: error while querying for an remote control event. [ 882.882163][T18026] CPU: 0 UID: 0 PID: 18026 Comm: syz.3.3471 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.882190][T18026] Tainted: [L]=SOFTLOCKUP [ 882.882196][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 882.882206][T18026] Call Trace: [ 882.882211][T18026] [ 882.882217][T18026] dump_stack_lvl+0x100/0x190 [ 882.882243][T18026] should_fail_ex.cold+0x5/0xa [ 882.882267][T18026] should_failslab+0xc2/0x120 [ 882.882285][T18026] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 882.882309][T18026] ? proc_alloc_inode+0x25/0x200 [ 882.882334][T18026] ? __pfx_proc_alloc_inode+0x10/0x10 [ 882.882358][T18026] proc_alloc_inode+0x25/0x200 [ 882.882380][T18026] alloc_inode+0x68/0x250 [ 882.882398][T18026] new_inode+0x22/0x1c0 [ 882.882418][T18026] proc_get_inode+0x1d/0x780 [ 882.882442][T18026] proc_lookup_de+0x236/0x360 [ 882.882469][T18026] proc_lookup+0xcf/0x110 [ 882.882496][T18026] proc_root_lookup+0x3b/0x70 [ 882.882521][T18026] __lookup_slow+0x251/0x460 [ 882.882547][T18026] ? __pfx___lookup_slow+0x10/0x10 [ 882.882592][T18026] lookup_slow+0x50/0x70 [ 882.882618][T18026] link_path_walk+0x1377/0x1cc0 [ 882.882643][T18026] path_openat+0x1be/0x31a0 [ 882.882673][T18026] ? kasan_save_stack+0x3f/0x50 [ 882.882687][T18026] ? kasan_save_stack+0x30/0x50 [ 882.882701][T18026] ? kasan_save_track+0x14/0x30 [ 882.882716][T18026] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 882.882746][T18026] ? __pfx_path_openat+0x10/0x10 [ 882.882776][T18026] do_file_open+0x20e/0x430 [ 882.882801][T18026] ? __pfx_do_file_open+0x10/0x10 [ 882.882840][T18026] ? alloc_fd+0x476/0x790 [ 882.882865][T18026] ? do_getname+0x191/0x390 [ 882.882892][T18026] do_sys_openat2+0x10d/0x1e0 [ 882.882916][T18026] ? __pfx_do_sys_openat2+0x10/0x10 [ 882.882939][T18026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 882.882968][T18026] ? __fget_files+0x21f/0x3d0 [ 882.882993][T18026] __x64_sys_openat+0x12d/0x210 [ 882.883018][T18026] ? __pfx___x64_sys_openat+0x10/0x10 [ 882.883042][T18026] ? ksys_write+0x1ac/0x250 [ 882.883064][T18026] ? rcu_is_watching+0x12/0xc0 [ 882.883093][T18026] do_syscall_64+0x10b/0xf80 [ 882.883116][T18026] ? clear_bhb_loop+0x40/0x90 [ 882.883137][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.883155][T18026] RIP: 0033:0x7ff2da19cdd9 [ 882.883171][T18026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.883187][T18026] RSP: 002b:00007ff2d83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 882.883205][T18026] RAX: ffffffffffffffda RBX: 00007ff2da415fa0 RCX: 00007ff2da19cdd9 [ 882.883216][T18026] RDX: 0000000000000242 RSI: 0000200000000a40 RDI: ffffffffffffff9c [ 882.883228][T18026] RBP: 00007ff2d83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 882.883238][T18026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.883247][T18026] R13: 00007ff2da416038 R14: 00007ff2da415fa0 R15: 00007ffc11fb0168 [ 882.883270][T18026] [ 883.180427][T13636] m920x_read = error: -19 [ 883.184815][T13636] dvb-usb: error while querying for an remote control event. [ 883.304615][T13636] m920x_read = error: -19 [ 883.309109][T13636] dvb-usb: error while querying for an remote control event. [ 883.467097][T16189] m920x_read = error: -19 [ 883.474889][T16189] dvb-usb: error while querying for an remote control event. [ 883.635985][T16189] m920x_read = error: -19 [ 883.640545][T16189] dvb-usb: error while querying for an remote control event. [ 883.853121][T18054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=18054 comm=syz.5.3478 [ 884.035040][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3479'. [ 884.312611][T16189] m920x_read = error: -19 [ 884.316973][T16189] dvb-usb: error while querying for an remote control event. [ 884.620094][T18063] FAULT_INJECTION: forcing a failure. [ 884.620094][T18063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.633243][T18063] CPU: 0 UID: 0 PID: 18063 Comm: syz.2.3482 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.633261][T18063] Tainted: [L]=SOFTLOCKUP [ 884.633265][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.633272][T18063] Call Trace: [ 884.633276][T18063] [ 884.633280][T18063] dump_stack_lvl+0x100/0x190 [ 884.633297][T18063] should_fail_ex.cold+0x5/0xa [ 884.633312][T18063] _copy_from_user+0x2e/0xd0 [ 884.633328][T18063] copy_msghdr_from_user+0x9f/0x4f0 [ 884.633343][T18063] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 884.633359][T18063] ? rcu_is_watching+0x12/0xc0 [ 884.633375][T18063] ? ___sys_sendmsg+0x19d/0x1e0 [ 884.633388][T18063] ? kfree+0x1dd/0x6c0 [ 884.633405][T18063] ___sys_sendmsg+0x106/0x1e0 [ 884.633419][T18063] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.633445][T18063] ? __pfx___might_resched+0x10/0x10 [ 884.633464][T18063] __sys_sendmmsg+0x205/0x430 [ 884.633476][T18063] ? __pfx___sys_sendmmsg+0x10/0x10 [ 884.633491][T18063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 884.633512][T18063] ? fput+0x79/0x100 [ 884.633527][T18063] ? ksys_write+0x1ac/0x250 [ 884.633538][T18063] ? __pfx_ksys_write+0x10/0x10 [ 884.633552][T18063] __x64_sys_sendmmsg+0x9c/0x100 [ 884.633563][T18063] ? lockdep_hardirqs_on+0x78/0x100 [ 884.633577][T18063] do_syscall_64+0x10b/0xf80 [ 884.633591][T18063] ? clear_bhb_loop+0x40/0x90 [ 884.633604][T18063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.633615][T18063] RIP: 0033:0x7fcad359cdd9 [ 884.633624][T18063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.633635][T18063] RSP: 002b:00007fcad17ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 884.633651][T18063] RAX: ffffffffffffffda RBX: 00007fcad3815fa0 RCX: 00007fcad359cdd9 [ 884.633657][T18063] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004 [ 884.633664][T18063] RBP: 00007fcad17ee090 R08: 0000000000000000 R09: 0000000000000000 [ 884.633670][T18063] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001 [ 884.633676][T18063] R13: 00007fcad3816038 R14: 00007fcad3815fa0 R15: 00007fff54868788 [ 884.633689][T18063] [ 885.091611][T16189] m920x_read = error: -19 [ 885.103379][T16189] dvb-usb: error while querying for an remote control event. [ 885.366425][T16189] m920x_read = error: -19 [ 885.374419][T16189] dvb-usb: error while querying for an remote control event. [ 885.743520][T18071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 885.770077][T16189] m920x_read = error: -19 [ 885.893783][T16189] dvb-usb: error while querying for an remote control event. [ 886.040677][T16189] m920x_read = error: -19 [ 886.049499][T16189] dvb-usb: error while querying for an remote control event. [ 886.254187][T16189] m920x_read = error: -19 [ 886.275931][T16189] dvb-usb: error while querying for an remote control event. [ 886.275949][T14124] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 886.425057][T16189] m920x_read = error: -19 [ 886.440287][T16189] dvb-usb: error while querying for an remote control event. [ 886.513557][T14124] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 886.544452][T14124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.585256][T13636] m920x_read = error: -19 [ 886.588480][T14124] pwc: Logitech/Cisco VT Camera webcam detected. [ 886.604812][T13636] dvb-usb: error while querying for an remote control event. [ 886.756756][T13636] m920x_read = error: -19 [ 886.765667][T13636] dvb-usb: error while querying for an remote control event. [ 886.916576][T13636] m920x_read = error: -19 [ 886.921086][T13636] dvb-usb: error while querying for an remote control event. [ 887.076947][T13636] m920x_read = error: -19 [ 887.081381][T13636] dvb-usb: error while querying for an remote control event. [ 887.226426][T13636] m920x_read = error: -19 [ 887.244730][T13636] dvb-usb: error while querying for an remote control event. [ 887.403597][T13561] libceph: connect (1)[c::]:6789 error -101 [ 887.408175][T13636] m920x_read = error: -19 [ 887.437791][T13636] dvb-usb: error while querying for an remote control event. [ 887.456850][T13561] libceph: mon0 (1)[c::]:6789 connect error [ 887.600215][T14124] pwc: recv_control_msg error -71 req 02 val 2b00 [ 887.609031][T13636] m920x_read = error: -19 [ 887.609979][T14124] pwc: recv_control_msg error -71 req 02 val 2700 [ 887.620831][T14124] pwc: recv_control_msg error -71 req 04 val 1600 [ 887.628534][T14124] pwc: recv_control_msg error -71 req 02 val 2c00 [ 887.637418][T14124] pwc: recv_control_msg error -71 req 04 val 1000 [ 887.646481][T13636] dvb-usb: error while querying for an remote control event. [ 887.647696][T14124] pwc: recv_control_msg error -71 req 04 val 1300 [ 887.661104][T14124] pwc: recv_control_msg error -71 req 04 val 1400 [ 887.669901][T14124] pwc: recv_control_msg error -71 req 02 val 2000 [ 887.677996][T14124] pwc: recv_control_msg error -71 req 02 val 2100 [ 887.686736][T14124] pwc: recv_control_msg error -71 req 06 val 0600 [ 887.697998][T14124] pwc: recv_control_msg error -71 req 04 val 1500 [ 887.705268][T14124] pwc: recv_control_msg error -71 req 02 val 2500 [ 887.733740][T14124] pwc: recv_control_msg error -71 req 02 val 2400 [ 887.749437][T14124] pwc: recv_control_msg error -71 req 02 val 2600 [ 887.762620][T13561] libceph: connect (1)[c::]:6789 error -101 [ 887.772864][T13561] libceph: mon0 (1)[c::]:6789 connect error [ 887.780824][T14124] pwc: recv_control_msg error -71 req 02 val 2900 [ 887.796734][T14124] pwc: recv_control_msg error -71 req 02 val 2800 [ 887.814228][T13636] m920x_read = error: -19 [ 887.821457][T14124] pwc: recv_control_msg error -71 req 04 val 1100 [ 887.825440][T13636] dvb-usb: error while querying for an remote control event. [ 887.837381][T14124] pwc: recv_control_msg error -71 req 04 val 1200 [ 887.954112][T13636] m920x_read = error: -19 [ 888.333653][T13636] dvb-usb: error while querying for an remote control event. [ 888.337960][T13561] libceph: connect (1)[c::]:6789 error -101 [ 888.569901][T13636] m920x_read = error: -19 [ 888.605999][T13636] dvb-usb: error while querying for an remote control event. [ 888.706149][T14124] pwc: Registered as video103. [ 888.713396][T13561] libceph: mon0 (1)[c::]:6789 connect error [ 888.752928][T14124] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 888.830896][T16189] m920x_read = error: -19 [ 888.854001][T16189] dvb-usb: error while querying for an remote control event. [ 888.990799][T14124] usb 6-1: USB disconnect, device number 12 [ 889.012450][T16189] m920x_read = error: -19 [ 889.023944][T16189] dvb-usb: error while querying for an remote control event. [ 889.196701][T16189] m920x_read = error: -19 [ 889.209094][T16189] dvb-usb: error while querying for an remote control event. [ 889.352954][T16189] m920x_read = error: -19 [ 889.362176][T16189] dvb-usb: error while querying for an remote control event. [ 889.502691][T16189] m920x_read = error: -19 [ 889.517749][T16189] dvb-usb: error while querying for an remote control event. [ 889.585589][ T29] audit: type=1400 audit(1778570559.687:398984): avc: denied { execute } for pid=18128 comm="syz.5.3498" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=66765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 889.711535][T16189] m920x_read = error: -19 [ 889.721393][T18129] binder: 18128:18129 ioctl c0306201 2000000004c0 returned -14 [ 889.721791][T16189] dvb-usb: error while querying for an remote control event. [ 889.740308][T18129] binder: 18128:18129 ioctl c0306201 2000000001c0 returned -14 [ 889.767614][ T29] audit: type=1400 audit(1778570559.808:398985): avc: denied { map } for pid=18128 comm="syz.5.3498" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 889.909501][T16189] m920x_read = error: -19 [ 889.914558][T16189] dvb-usb: error while querying for an remote control event. [ 890.271929][T16189] m920x_read = error: -19 [ 890.276423][T16189] dvb-usb: error while querying for an remote control event. [ 890.400309][T16189] m920x_read = error: -19 [ 890.404756][T16189] dvb-usb: error while querying for an remote control event. [ 890.489217][T18097] ceph: No mds server is up or the cluster is laggy [ 890.528750][T16189] m920x_read = error: -19 [ 890.533764][T16189] dvb-usb: error while querying for an remote control event. [ 890.688755][T16189] m920x_read = error: -19 [ 890.719466][T16189] dvb-usb: error while querying for an remote control event. [ 890.726871][T18141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3500'. [ 891.373038][T16189] m920x_read = error: -19 [ 891.430282][T16189] dvb-usb: error while querying for an remote control event. [ 891.472946][T14124] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 891.597079][T13636] m920x_read = error: -19 [ 891.605545][T13636] dvb-usb: error while querying for an remote control event. [ 891.746661][T13636] m920x_read = error: -19 [ 891.751083][T16189] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 891.759931][T13636] dvb-usb: error while querying for an remote control event. [ 891.778126][T14124] usb 5-1: Using ep0 maxpacket: 8 [ 891.806531][T14124] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 891.827533][T14124] usb 5-1: config 179 has no interface number 0 [ 891.852182][T14124] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 891.885698][T13636] m920x_read = error: -19 [ 891.888144][T14124] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 891.922810][T13636] dvb-usb: error while querying for an remote control event. [ 891.930585][T14124] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 891.930646][T16189] usb 4-1: Using ep0 maxpacket: 16 [ 891.973386][T14124] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 892.014687][T14124] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 892.016099][T16189] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.079610][T14124] usb 5-1: config 179 interface 65 has no altsetting 0 [ 892.088579][T13636] m920x_read = error: -19 [ 892.093200][T13636] dvb-usb: error while querying for an remote control event. [ 892.100232][T14124] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 892.114570][T16189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 892.131287][T16189] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 892.152669][T16189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.154062][T14124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.191484][T16189] usb 4-1: config 0 descriptor?? [ 892.238474][T13636] m920x_read = error: -19 [ 892.244002][T13636] dvb-usb: error while querying for an remote control event. [ 892.272384][T14124] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input44 [ 892.356021][ T4965] input input44: unable to receive magic message: -110 [ 892.377114][T13636] m920x_read = error: -19 [ 892.386912][T13636] dvb-usb: error while querying for an remote control event. [ 892.548092][T13636] m920x_read = error: -19 [ 892.561532][T13636] dvb-usb: error while querying for an remote control event. [ 892.660449][T16189] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 892.725078][T13636] m920x_read = error: -19 [ 892.747297][T13636] dvb-usb: error while querying for an remote control event. [ 892.813568][T18144] tipc: Enabling of bearer rejected, failed to enable media [ 892.856712][ C1] ================================================================== [ 892.864802][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x103c/0x10a0 [ 892.872433][ C1] Read of size 1 at addr ffff88802c4bbfff by task swapper/1/0 [ 892.879865][ C1] [ 892.882180][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.882198][ C1] Tainted: [L]=SOFTLOCKUP [ 892.882203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 892.882211][ C1] Call Trace: [ 892.882217][ C1] [ 892.882222][ C1] dump_stack_lvl+0x100/0x190 [ 892.882238][ C1] print_report+0x13d/0x4b0 [ 892.882267][ C1] ? __virt_addr_valid+0x239/0x430 [ 892.882291][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 892.882319][ C1] kasan_report+0xdf/0x1d0 [ 892.882333][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 892.882352][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 892.882369][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 892.882384][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 892.882408][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 892.882435][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 892.882458][ C1] hid_irq_in+0x52e/0x6b0 [ 892.882474][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 892.882486][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 892.882498][ C1] dummy_timer+0xda1/0x36c0 [ 892.882514][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 892.882530][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 892.882550][ C1] ? rcu_is_watching+0x12/0xc0 [ 892.882578][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 892.882602][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 892.882619][ C1] __hrtimer_run_queues+0x470/0xa00 [ 892.882644][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 892.882661][ C1] handle_softirqs+0x1ea/0xa00 [ 892.882681][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 892.882710][ C1] ? _raw_spin_unlock+0x28/0x50 [ 892.882730][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 892.882749][ C1] __irq_exit_rcu+0x162/0x210 [ 892.882770][ C1] irq_exit_rcu+0x9/0x30 [ 892.882786][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 892.882801][ C1] [ 892.882805][ C1] [ 892.882810][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 892.882823][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 892.882849][ C1] Code: d6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 00 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 892.882867][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 892.882884][ C1] RAX: 00000000038300dd RBX: ffff88801e2ba500 RCX: ffffffff8b8a9095 [ 892.882897][ C1] RDX: 0000000000000000 RSI: ffffffff8df21135 RDI: ffffffff8c1c3800 [ 892.882907][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 892.882914][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 892.882921][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d7ae50 [ 892.882930][ C1] ? ct_kernel_exit+0x125/0x180 [ 892.882946][ C1] default_idle+0x9/0x10 [ 892.882961][ C1] default_idle_call+0x6c/0xb0 [ 892.882985][ C1] do_idle+0x464/0x590 [ 892.883003][ C1] ? __pfx_do_idle+0x10/0x10 [ 892.883019][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 892.883042][ C1] cpu_startup_entry+0x4f/0x60 [ 892.883056][ C1] start_secondary+0x21d/0x2d0 [ 892.883069][ C1] ? __pfx_start_secondary+0x10/0x10 [ 892.883083][ C1] common_startup_64+0x13e/0x148 [ 892.883102][ C1] [ 892.883106][ C1] [ 893.198107][ C1] The buggy address belongs to the physical page: [ 893.204509][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c4bb [ 893.213262][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 893.220369][ C1] raw: 00fff00000000000 0000000000000000 ffffea0000b12ec8 0000000000000000 [ 893.228931][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 893.237495][ C1] page dumped because: kasan: bad access detected [ 893.243890][ C1] page_owner tracks the page as freed [ 893.249240][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12298, tgid 12296 (syz.1.2013), ts 453105506718, free_ts 464738501227 [ 893.270136][ C1] post_alloc_hook+0x153/0x170 [ 893.274892][ C1] get_page_from_freelist+0x11a6/0x33b0 [ 893.280432][ C1] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 893.286314][ C1] new_slab+0xa6/0x6c0 [ 893.290389][ C1] refill_objects+0x277/0x420 [ 893.295082][ C1] __pcs_replace_empty_main+0x375/0x650 [ 893.300628][ C1] kmem_cache_alloc_node_noprof+0x569/0x6f0 [ 893.306517][ C1] kmalloc_reserve+0x148/0x350 [ 893.311272][ C1] __alloc_skb+0x185/0x710 [ 893.315683][ C1] fdb_notify+0xa2/0x190 [ 893.319900][ C1] fdb_add_local+0x184/0x1c0 [ 893.324473][ C1] br_fdb_add_local+0x39/0x60 [ 893.329124][ C1] __vlan_add+0x17f3/0x2e10 [ 893.333623][ C1] br_vlan_add+0x2dc/0xa00 [ 893.338032][ C1] __vlan_add+0xf7c/0x2e10 [ 893.342432][ C1] nbp_vlan_add+0x258/0x3e0 [ 893.346933][ C1] page last free pid 5275 tgid 5275 stack trace: [ 893.353243][ C1] __free_frozen_pages+0x747/0x1040 [ 893.358439][ C1] qlist_free_all+0x47/0xf0 [ 893.362938][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 893.368389][ C1] __kasan_slab_alloc+0x69/0x90 [ 893.373221][ C1] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 893.379107][ C1] __alloc_skb+0x140/0x710 [ 893.383506][ C1] alloc_skb_with_frags+0xdd/0x760 [ 893.388621][ C1] sock_alloc_send_pskb+0x801/0x980 [ 893.393801][ C1] unix_dgram_sendmsg+0x3c7/0x1810 [ 893.398935][ C1] __sys_sendto+0x468/0x4b0 [ 893.403425][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 893.408168][ C1] do_syscall_64+0x10b/0xf80 [ 893.412738][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.418619][ C1] [ 893.420927][ C1] Memory state around the buggy address: [ 893.426545][ C1] ffff88802c4bbe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.434591][ C1] ffff88802c4bbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.442635][ C1] >ffff88802c4bbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 893.450676][ C1] ^ [ 893.458633][ C1] ffff88802c4bc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 893.466665][ C1] ffff88802c4bc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 893.474706][ C1] ================================================================== [ 893.482737][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 893.490258][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.500759][ C1] Tainted: [L]=SOFTLOCKUP [ 893.505078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 893.515153][ C1] Call Trace: [ 893.518426][ C1] [ 893.521255][ C1] dump_stack_lvl+0x100/0x190 [ 893.525927][ C1] vpanic+0x552/0x970 [ 893.529889][ C1] ? __pfx_vpanic+0x10/0x10 [ 893.534382][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 893.539386][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 893.544660][ C1] panic+0xd1/0xe0 [ 893.548366][ C1] ? __pfx_panic+0x10/0x10 [ 893.552771][ C1] ? end_report.part.0+0x23/0x90 [ 893.557689][ C1] ? rcu_is_watching+0x12/0xc0 [ 893.562447][ C1] ? end_report.part.0+0x23/0x90 [ 893.567376][ C1] check_panic_on_warn.cold+0x19/0x34 [ 893.572734][ C1] end_report.part.0+0x3a/0x90 [ 893.577482][ C1] kasan_report.cold+0xe/0x18 [ 893.582152][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 893.587454][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 893.592583][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 893.598375][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 893.604438][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 893.609897][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 893.615436][ C1] hid_irq_in+0x52e/0x6b0 [ 893.619745][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 893.625108][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 893.630299][ C1] dummy_timer+0xda1/0x36c0 [ 893.634782][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 893.640574][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 893.645505][ C1] ? rcu_is_watching+0x12/0xc0 [ 893.650250][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 893.656035][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 893.660977][ C1] __hrtimer_run_queues+0x470/0xa00 [ 893.666184][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 893.671284][ C1] handle_softirqs+0x1ea/0xa00 [ 893.676049][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 893.681318][ C1] ? _raw_spin_unlock+0x28/0x50 [ 893.686150][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 893.691766][ C1] __irq_exit_rcu+0x162/0x210 [ 893.696427][ C1] irq_exit_rcu+0x9/0x30 [ 893.700675][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 893.706309][ C1] [ 893.709229][ C1] [ 893.712150][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.718107][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 893.723744][ C1] Code: d6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 00 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 893.743358][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 893.749430][ C1] RAX: 00000000038300dd RBX: ffff88801e2ba500 RCX: ffffffff8b8a9095 [ 893.757418][ C1] RDX: 0000000000000000 RSI: ffffffff8df21135 RDI: ffffffff8c1c3800 [ 893.765392][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 893.773358][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 893.781316][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d7ae50 [ 893.789278][ C1] ? ct_kernel_exit+0x125/0x180 [ 893.794132][ C1] default_idle+0x9/0x10 [ 893.798362][ C1] default_idle_call+0x6c/0xb0 [ 893.803123][ C1] do_idle+0x464/0x590 [ 893.807186][ C1] ? __pfx_do_idle+0x10/0x10 [ 893.811780][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 893.817675][ C1] cpu_startup_entry+0x4f/0x60 [ 893.822440][ C1] start_secondary+0x21d/0x2d0 [ 893.827221][ C1] ? __pfx_start_secondary+0x10/0x10 [ 893.832512][ C1] common_startup_64+0x13e/0x148 [ 893.837455][ C1] [ 893.840830][ C1] Kernel Offset: disabled [ 893.845134][ C1] Rebooting in 86400 seconds..