last executing test programs: 2m49.127817579s ago: executing program 1 (id=1841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_open_dev$video(0x0, 0xa7, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setrlimit(0x7, &(0x7f0000000400)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x0, {0x10001, 0x2}, 0xffffffff, 0xff}}) close(r4) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) syz_emit_ethernet(0x138, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xd, 0x6, '\x00', 0x102, 0x0, 0xff, @mcast1, @mcast2, {[@routing={0x3b, 0x0, 0x0, 0x9}, @dstopts={0x4, 0x5, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x61c6, [0x9]}}, @jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x10, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @empty]}, @hopopts={0x87}], "ba395e2b3729f177acae8ecc0c8997c4b9c360a3e68d7e3d60189699e4273a2cbcf1e0e9fd2c73c00435cfa82f935afe8c2d"}}}}}, 0x0) statx(r4, 0x0, 0x1800, 0x400, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x1, {0xffff, 0xffff}, 0x35dc, 0x7}}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r0, r0, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r8, 0x105, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x84}]}]}, 0x28}}, 0x0) 2m47.751796853s ago: executing program 1 (id=1846): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) getpeername(0xffffffffffffffff, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) tee(r3, r0, 0x6, 0xa) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) recvmmsg(r2, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000680)=""/113, 0x6e}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f00000028c0)=""/94, 0x5e}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000002b00)=""/4105, 0x1009}], 0x8, &(0x7f0000002940)=""/172, 0xac}, 0x7}], 0x1, 0x10020, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 2m46.449374757s ago: executing program 1 (id=1849): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4}, 0x3422a61a}], 0x1, 0x10102, 0x0) 2m45.456324209s ago: executing program 1 (id=1853): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xb) 2m44.442257666s ago: executing program 1 (id=1855): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005d35b94082058d00ac7a010203010902120001000009000904"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xd0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x80, 0xff}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x8, 0x5, 0xff, 0xd5}, 0x10d, &(0x7f00000000c0)={0x5, 0xf, 0x10d, 0x2, [@generic={0xfe, 0x10, 0xa, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x20, 0x2, 0xffc9}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "ebe57f98fd81451410a42723ee0a2c5810a16b5e7583df32165822a97ca05441377f837b3b188d9541a25be361523f0505c2a28ec3c5b15e0da1dc5fd176bf9cd1cf5f868b68d334fecd4c985f653336925f0a2b8d40998620ae801ae15ff2b9627fa9b70fd7f58abc04515142016436627ee963ae99e22e5206ac023ad54bf74ed5b241faa6d6ce419b4d68c5486865fb9585d3ca1de115f1855834da6e00e8c6338f044a6d5ee3637a1fbaaa6d5854c170"}}, {0x43, &(0x7f0000000340)=@string={0x43, 0x3, "2c278ebd705ffd6c8b6d9c3e5ac6610b88d7a77d1469cd0e976cb6252bb9579ba0a5039c330c102515b2b99d59ee1e7058d5b1a84cfb28a34d0ede090a1ca437e0"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}, {0x0, 0x0}, {0x53, &(0x7f0000000480)=@string={0x53, 0x3, "9dfeb70916037fdbcd12e0f17c5ba844014e76ca0ee0e7b559e9421f727cca0f9ad2f1daa347c3d92d974a78499167526d41b28c444f0cf955f532fd9c189397b1d24447fa4e0a97f240a5c07e85d046ca"}}, {0x78, &(0x7f0000000580)=@string={0x78, 0x3, "990cb7a27c10d2333eafbec3892401a97b73cee532d2b84488f447678225bcdf9a7006bd4ede0390e1a2bf565fefa14c247e19e069b09048444ca6fd810fc7b7d663848c1c22d367d6a89ac6b9cb6f79c9053f7ddf52642dabfa6fe9f801ba8f695d2453fc73a22aaba67c39696ccb7bffa1526aa47c"}}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x4000000, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0xf0, 0xf5, 0xeb, 0x10, 0x403, 0xf850, 0xca5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x2, 0x0, 0xcd, 0x4f, 0x10}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x20000000, 0x400) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f00000007c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x1, 0x6, 0xa3, 0x8, 0x9}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x423}}]}) ioctl$EVIOCSABS3F(r1, 0x401845ff, 0x0) pread64(r0, 0x0, 0x0, 0x81) 2m43.060814579s ago: executing program 1 (id=1860): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="6801000000020102000000000000000000000000080004400000005d840003800c00028005000100110000000c000280050001003a00000006000340000000000c00028005000100840000001400018008000100ac1414bb080002000000000006000340000300000c000280050001003a0000002c00018014200300200100000000000000000000000000001400040000000000000000000000000000000000080005400000000008000540000000080800054000000af508000440fffffffca00002"], 0x168}, 0x1, 0x0, 0x0, 0x24000810}, 0x4004004) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x12ac42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffe]}}) sendfile(r0, r4, 0x0, 0xb4b) 2m42.590289494s ago: executing program 32 (id=1860): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="6801000000020102000000000000000000000000080004400000005d840003800c00028005000100110000000c000280050001003a00000006000340000000000c00028005000100840000001400018008000100ac1414bb080002000000000006000340000300000c000280050001003a0000002c00018014200300200100000000000000000000000000001400040000000000000000000000000000000000080005400000000008000540000000080800054000000af508000440fffffffca00002"], 0x168}, 0x1, 0x0, 0x0, 0x24000810}, 0x4004004) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x12ac42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffe]}}) sendfile(r0, r4, 0x0, 0xb4b) 2m29.356214523s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 2m4.338546951s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 1m35.089140443s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 1m3.755719033s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 39.89883382s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 13.265586935s ago: executing program 0 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r6, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 8.48869641s ago: executing program 5 (id=2266): socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x107000, 0x10f) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0x2, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.156828444s ago: executing program 3 (id=2268): r0 = socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) chown(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x7}) socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 6.489865055s ago: executing program 3 (id=2270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000b4000018110000", @ANYRES32=r0, @ANYBLOB="1cefcb40f39cd2f9165b134397a7cd2d447451e4d06444335230c2c6acdf72544e92c16be5bbd973967878b7c9d16fd45a1bfb20139e46cbc0cc5fec2f8dadde08df1d9082dc8f3600ff717d4341c187a8302971a3b8579f8ca53ff94c2e7739fee02b2f46363a02d27251d3e16d5643e564418535c77ec4acf36f17e55e65fa4178"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc2a88c2154cff37de56339a336a19000040", '\x00', "8891ea13f18ef0be"}, 0x38) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = accept4$alg(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x4004}], 0x1, 0x2004c8d5) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000706010400000000000000000200000005000100070000000800064000000002"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r6, &(0x7f0000000580)="226b14582065a97cfb40208c17e9a9ba6a4f5871968b4bb7744f96e362f321fc9cb05b8535bf3fb1ab2766c5877d4aa609c632f184fa01003ad4916bbe18038bf8dc0a0d2858fa63582ed75053d4ee66e249bbdcc8b66e74c74c090148e383ec1ab66b32803d057a82f65ea9fb9773c754b88424a10706fae258738db99025802fb835785821b31a4f5bf2eb6517d14cc512c5f0a6c436100b", 0x99, 0x8000, 0x0, 0x0) 6.023652399s ago: executing program 3 (id=2273): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001003e0f21"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0x1000800000]}) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f0000000440)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newpolicy={0x1a0, 0x13, 0x831, 0x70bd28, 0x25dfdbfd, {{@in6=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0x20, 0x20, 0x3c}, {0x8000000000, 0xfffffffffffffffb, 0x800, 0x8000, 0x4, 0x4, 0x6b06, 0x1000}, {0x9, 0xff6, 0x46, 0xfffffffffffffffb}, 0xfffffffa, 0x0, 0x0, 0x1, 0x3, 0x2}, [@migrate={0xe8, 0x11, [{@in=@private=0xa010100, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@empty, 0x33, 0x3, 0x0, 0x3503, 0xa, 0x2}, {@in=@rand_addr=0x64010101, @in=@private=0xa010100, @in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private2, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x5, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x32600) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000040)={0x401, 0xe, 0x10001, 0x5, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000000c0)={r9, 0x4}, &(0x7f0000000140)=0x8) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1b010000000000407e050e2000000000000109022400010000100309040000010300000009210000080122070009058103f0"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000001080)={0x24, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000001000)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xb, "a5ec"}, @global=@item_012={0x2, 0x1, 0x0, "f061"}, @global]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x80, 0x1, {0x22, 0x36b}}}}, &(0x7f00000012c0)={0x2c, &(0x7f00000010c0)={0x0, 0x15, 0x2f, "adfe5d61f2223e1edfd188954caa8bd0c60696f59a2ea933bf2bea8781bc74780203006faec4fabbf7395ef3b34b34"}, 0x0, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001180)={0x20, 0x1, 0xce, "79ae14db5c3d1adab54a2248b2b2234fe2d589e9e6eb7573fc4bc739bb5e7a3432b71844e3da0aaaa09ee78f02877a621d4db563f79f80bce75582616b9cb9656fd5c2cd7a80a440f0d1a21060bf7317cccf1c52e663bf96702ad85274a9115583fad854de4550372abc7cdee41b20955286205974801f09e1f807059197029a9b677096a69c78b051b196ff90bad84ace2987352cbdfcece0e1c6156ae76e0a1ce4d52b59d6bbc0018a2850f363b03e4748aef0c3955f22a0f8412dd699bf686da55a64cedd8ce3528f675054bf"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) 5.978481817s ago: executing program 5 (id=2274): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xd, 0x0, @void, @value}, 0x28) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r3}, 0x3, &(0x7f0000000000)=[0x1, 0xdc, 0xff], 0x5, 0xa, 0x1}) 5.892155037s ago: executing program 2 (id=2275): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000240)='./file0\x00', 0xb) 5.35619286s ago: executing program 2 (id=2277): syz_emit_ethernet(0x100, &(0x7f0000000140)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x6}, {0x8100, 0x7, 0x1, 0x1}}, {@llc={0x4, {@llc={0xd4, 0x8e, "e0", "17531e3e25dcda042cf45b678e66fc720667d55883f9cd95ca7b5f1721f334b7a7c77869492f6d74d3a5807bb700b07936d66ba63bc57d305c146436f8b70b44343a242995f48439d3c55209704908056e4b26b7c634419c4e38a9bb5ed94e4a1e29c6133d0aa3960a9679cd54d4b8b5050d429f71867a002bbb1516f4e3b15791ddec45386a81d593e818b24dda1f430b577efbcbde2e1605dc5c31e73b28b90329a3d9d032443eae45f93cfc518b3c5322a84e4e72ad7082273bb5d228bc32baf68fadcadb3ec95804a7dfe59fcdfdb628c25a5ca3c513769900124fe22465ad8d403d8187c2"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/connector\x00') setns(0xffffffffffffffff, 0x4000000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x804, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x2}) io_submit(r4, 0x0, &(0x7f0000004540)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r8, 0x5421, 0x0) connect$vsock_stream(r8, 0x0, 0x0) 4.258424129s ago: executing program 2 (id=2279): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x81, @mcast2, 0x5}}}, 0x32) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)={0x6c}, 0x8) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0xd3, 0x7, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010c4}, 0x4000) 4.135732221s ago: executing program 5 (id=2280): r0 = socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) chown(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x7}) socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 3.27647474s ago: executing program 5 (id=2281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r0, r0, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) 2.988370761s ago: executing program 4 (id=2282): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x604440, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x850, 0x50, 0x0, 0xfffffeb7) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0x2020, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r7, 0x0, 0x51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000086020000000000001a9994a77ea50f96a9e8a2bf791d003171b590d5e7edf0374b2fb485f73199d58fa8cbe05670aafbd6d7956dd33de5dd59312d454a139c26a28b50425cbfad2fc104ed4c836c1098b3a325afccee57c3c448b2f62f9194eb2bd66e7675dc429b9a415d765f4d94faf72e7095f465"], 0x18}}], 0x2, 0x0) 2.883147433s ago: executing program 3 (id=2283): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x1f1f43) syz_open_dev$MSR(0x0, 0x9, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="5727d30beaa195"], 0x7) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close(0x3) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) 2.755503096s ago: executing program 5 (id=2284): socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x107000, 0x10f) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0x2, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.667456545s ago: executing program 4 (id=2285): r0 = socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) chown(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x7}) socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 2.400323106s ago: executing program 4 (id=2286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x2) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) lseek(r5, 0x103, 0x1) getdents(r5, 0x0, 0x58) 1.983981959s ago: executing program 4 (id=2287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={r2, 0x48, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x6, @empty, 0x400}, @in6={0xa, 0x4e24, 0x6, @private1, 0x80000001}, @in={0x2, 0x4e20, @empty}]}, &(0x7f00000003c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) prlimit64(r4, 0xe, &(0x7f0000000140)={0x1000000e, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee5, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(r4, &(0x7f0000000400)) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000480)={r3, 0x4}, &(0x7f00000004c0)=0x8) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0xc66) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000440)={0xc, 0x100, 0x6, {0x2, 0x2, 0x9, 0x400}}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.553298697s ago: executing program 3 (id=2288): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) getpeername(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) tee(r4, r0, 0x6, 0xa) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) recvmmsg(r2, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000680)=""/113, 0x6e}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f00000028c0)=""/94, 0x5e}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000002b00)=""/4105, 0x1009}], 0x8, &(0x7f0000002940)=""/172, 0xac}, 0x7}], 0x1, 0x10020, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000440)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1.507642429s ago: executing program 2 (id=2289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xff0f) 1.134485548s ago: executing program 2 (id=2290): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) ustat(0x6, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 1.082331827s ago: executing program 4 (id=2291): r0 = socket(0x40000000002, 0x3, 0x80000000002) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x400003, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2203, 0x0, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newchain={0x68, 0x64, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xffff, 0xc}, {0xffe0, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xc76}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}, @TCA_RATE={0x6, 0x5, {0x81, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x68}}, 0x44080) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xf, 0xf}, {0x18, 0x1}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x886e}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x15d}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x4) 1.081463654s ago: executing program 5 (id=2292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 280.537368ms ago: executing program 3 (id=2293): socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) chown(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x7}) socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 62.977747ms ago: executing program 2 (id=2294): socket$netlink(0x10, 0x3, 0xe) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d85, 0x4000, 0x0, 0x132}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)=0x800) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, r8, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) syz_usbip_server_init(0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x1d, 0x6b, @buffer={0x0, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)="00000000000045e94cb755b692d5a5351918b4420e54b142ee861b611b", &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x25, 0x8, @val=@iter={0x0}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 4 (id=2295): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x4, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0xf4b}) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff9a030000000000004000000000000000560000000000000000000000000038000100000002000000030000000500000004000000000000000d20000000400000000004000000000000000200"/120], 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000000340)=""/28, 0x1c, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x638, 0xa8, 0x4e8, 0xffffffff, 0x0, 0x0, 0x5a0, 0x5a0, 0xffffffff, 0x5a0, 0x5a0, 0x5, &(0x7f0000000040), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffff00, 'veth1_to_team\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x16, 0x0, 0x46}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @loopback, @local, @gre_key=0x6, @gre_key=0x800}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x1}}, @common=@addrtype={{0x30}, {0x408, 0x42, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @loopback, @loopback, @icmp_id=0x66, @gre_key=0x200}}}}, {{@ip={@rand_addr=0x64010101, @local, 0xffffffff, 0xff, 'batadv0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x1d, 0x1, 0x65}, 0x0, 0x2e0, 0x318, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1\x00'}}, @common=@set={{0x40}, {{0x0, [0x6, 0x2, 0x4, 0x0, 0x1, 0x4], 0x5, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key=0x5}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@rand_addr=0x64010101, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x698) close(r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x2000000, r7, 0x80000}) kernel console output (not intermixed with test programs): 12313][T13983] ? lockdep_init_map_type+0x5c/0x280 [ 752.612346][T13983] udf_fill_super+0x791/0x1df0 [ 752.612373][T13983] ? __pfx_udf_fill_super+0x10/0x10 [ 752.612393][T13983] ? do_raw_spin_lock+0x12c/0x2b0 [ 752.612412][T13983] ? find_held_lock+0x2b/0x80 [ 752.612446][T13983] ? sb_set_blocksize+0x176/0x1d0 [ 752.612470][T13983] ? setup_bdev_super+0x369/0x730 [ 752.612494][T13983] get_tree_bdev_flags+0x389/0x620 [ 752.612518][T13983] ? __pfx_udf_fill_super+0x10/0x10 [ 752.612539][T13983] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 752.612567][T13983] ? bpf_lsm_capable+0x9/0x10 [ 752.612588][T13983] ? security_capable+0x7e/0x260 [ 752.612611][T13983] vfs_get_tree+0x8b/0x340 [ 752.612631][T13983] path_mount+0x1414/0x2020 [ 752.612662][T13983] ? kmem_cache_free+0x2d1/0x4d0 [ 752.612686][T13983] ? __pfx_path_mount+0x10/0x10 [ 752.612718][T13983] ? putname+0x154/0x1a0 [ 752.612745][T13983] __x64_sys_mount+0x28d/0x310 [ 752.612770][T13983] ? __pfx___x64_sys_mount+0x10/0x10 [ 752.612802][T13983] do_syscall_64+0xcd/0x4c0 [ 752.612830][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.612847][T13983] RIP: 0033:0x7ff6b518e929 [ 752.612861][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.612877][T13983] RSP: 002b:00007ff6b608a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.612896][T13983] RAX: ffffffffffffffda RBX: 00007ff6b53b6080 RCX: 00007ff6b518e929 [ 752.612908][T13983] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 752.612920][T13983] RBP: 00007ff6b5210b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.612932][T13983] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 752.612943][T13983] R13: 0000000000000000 R14: 00007ff6b53b6080 R15: 00007ffe8c115f88 [ 752.612974][T13983] [ 752.613002][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 752.914386][T13983] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.928107][T13983] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.947016][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 752.957777][T13983] I/O error, dev nbd2, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.971059][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 752.985518][T13983] I/O error, dev nbd2, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.209617][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 753.244072][T13983] I/O error, dev nbd2, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.272359][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 753.318161][T13983] I/O error, dev nbd2, sector 67108368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.354843][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 753.372776][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 753.385179][T13983] I/O error, dev nbd2, sector 67108878 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.406484][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 753.440251][T13983] I/O error, dev nbd2, sector 67108366 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.499959][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 753.551940][T13983] I/O error, dev nbd2, sector 67108582 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.606586][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 753.646624][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 753.733783][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 753.900802][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 753.927399][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 753.939090][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 753.951044][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 754.276387][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 754.414814][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 754.443575][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 754.490591][T14034] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 754.498787][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 754.517807][T14034] netlink: 'syz.4.1952': attribute type 4 has an invalid length. [ 754.530217][T14034] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1952'. [ 754.542210][T14035] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 754.554623][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 754.584996][T14035] netlink: 'syz.4.1952': attribute type 4 has an invalid length. [ 754.626166][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 754.642663][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 754.642680][ T30] audit: type=1400 audit(1749947186.271:2761): avc: denied { block_suspend } for pid=14037 comm="syz.3.1953" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 754.658949][T14035] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1952'. [ 754.732942][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 754.760116][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 754.779420][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 754.830223][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 754.881249][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 754.930198][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 754.972183][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 755.016565][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 755.054422][ T30] audit: type=1400 audit(1749947186.691:2762): avc: denied { read } for pid=14046 comm="syz.3.1955" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 755.075470][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 755.105367][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 755.147151][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 755.200070][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 755.218361][T13815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 755.238740][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 755.262843][T13815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 755.269664][ T30] audit: type=1400 audit(1749947186.901:2763): avc: denied { mount } for pid=14051 comm="syz.3.1956" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 755.308085][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 755.340334][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 755.510842][T13815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 755.520400][T13983] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 755.541741][T13983] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 755.552544][T13815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.712575][ T30] audit: type=1400 audit(1749947187.351:2764): avc: denied { create } for pid=14056 comm="syz.4.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 755.754447][T14064] No control pipe specified [ 755.985939][ T30] audit: type=1400 audit(1749947187.391:2765): avc: denied { mounton } for pid=14051 comm="syz.3.1956" path="/382/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 756.141476][T13784] usb 3-1: USB disconnect, device number 47 [ 756.224710][ T30] audit: type=1400 audit(1749947187.851:2766): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 756.551844][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.611297][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.635195][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.642458][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.719069][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.726255][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.750022][T13784] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 757.025985][T13784] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 757.040260][T13784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.057748][T13815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.069567][T13784] usb 3-1: Product: syz [ 757.760734][T14091] No control pipe specified [ 757.809890][T13784] usb 3-1: Manufacturer: syz [ 757.814557][T13784] usb 3-1: SerialNumber: syz [ 757.830402][T13784] usb 3-1: config 0 descriptor?? [ 757.835599][T13815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.855390][T13784] ch341 3-1:0.0: ch341-uart converter detected [ 758.532835][T14100] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 758.582171][T14100] vlan2: entered promiscuous mode [ 758.587282][T14100] erspan0: entered promiscuous mode [ 758.623916][T14108] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1963'. [ 758.831234][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.973619][T13815] veth0_vlan: entered promiscuous mode [ 758.997256][T13815] veth1_vlan: entered promiscuous mode [ 759.029470][ T30] audit: type=1400 audit(1749947190.661:2767): avc: denied { create } for pid=14125 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 759.068758][T13815] veth0_macvtap: entered promiscuous mode [ 759.098921][T13815] veth1_macvtap: entered promiscuous mode [ 759.105313][ T30] audit: type=1400 audit(1749947190.661:2768): avc: denied { bind } for pid=14125 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 759.135535][ T30] audit: type=1400 audit(1749947190.661:2769): avc: denied { write } for pid=14125 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 759.164287][T13784] ch341-uart ttyUSB0: break control not supported, using simulated break [ 759.186684][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.195378][T13784] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 759.235515][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.237121][ T30] audit: type=1400 audit(1749947190.801:2770): avc: denied { map_read map_write } for pid=14075 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 759.249979][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 759.271294][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 759.299693][T13815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.335089][T13815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.358238][T13815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.369332][T13815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.410437][ T24] usb 3-1: USB disconnect, device number 48 [ 759.420256][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 759.452854][ T24] ch341 3-1:0.0: device disconnected [ 759.471341][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 759.490772][ T9] usb 4-1: device descriptor read/64, error -71 [ 759.497416][ T5888] usb 6-1: config 3 has an invalid interface number: 13 but max is 0 [ 759.516654][ T5888] usb 6-1: config 3 has no interface number 0 [ 759.548790][ T5888] usb 6-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=8e.42 [ 759.574597][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.580846][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.599731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.609364][ T5888] usb 6-1: Product: syz [ 759.623720][ T5888] usb 6-1: Manufacturer: syz [ 759.639412][ T5888] usb 6-1: SerialNumber: syz [ 759.659407][ T6078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.680375][ T6078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.701415][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 759.701432][ T30] audit: type=1400 audit(1749947191.341:2774): avc: denied { mounton } for pid=13815 comm="syz-executor" path="/root/syzkaller.sO9Ez4/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 759.773902][ T30] audit: type=1400 audit(1749947191.381:2775): avc: denied { mount } for pid=13815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 759.788138][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 759.801386][ T30] audit: type=1400 audit(1749947191.381:2776): avc: denied { mounton } for pid=13815 comm="syz-executor" path="/root/syzkaller.sO9Ez4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 759.832467][ T30] audit: type=1400 audit(1749947191.381:2777): avc: denied { mounton } for pid=13815 comm="syz-executor" path="/root/syzkaller.sO9Ez4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 759.870334][ T30] audit: type=1400 audit(1749947191.381:2778): avc: denied { unmount } for pid=13815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 759.891155][ T30] audit: type=1400 audit(1749947191.411:2779): avc: denied { mounton } for pid=13815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 759.899234][ T5888] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 759.919735][ T30] audit: type=1400 audit(1749947191.411:2780): avc: denied { mount } for pid=13815 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 759.983477][ T9] usb 4-1: device descriptor read/64, error -71 [ 760.032149][ T30] audit: type=1400 audit(1749947191.411:2781): avc: denied { mounton } for pid=13815 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 760.069675][ T5888] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 760.093392][ T30] audit: type=1400 audit(1749947191.411:2782): avc: denied { mount } for pid=13815 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 760.103029][ T5888] dib0700: firmware download failed at 7 with -22 [ 760.137688][ T9] usb usb4-port1: attempt power cycle [ 760.159514][ T30] audit: type=1400 audit(1749947191.511:2783): avc: denied { setopt } for pid=14125 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 760.183651][ T5888] usb 6-1: USB disconnect, device number 2 [ 760.601684][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 760.650898][ T9] usb 4-1: device descriptor read/8, error -71 [ 760.977930][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 761.011039][ T9] usb 4-1: device descriptor read/8, error -71 [ 761.057956][T14162] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 761.130280][ T9] usb usb4-port1: unable to enumerate USB device [ 761.769286][ T6078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.821419][ T3081] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 762.010260][ T3081] usb 3-1: Using ep0 maxpacket: 8 [ 762.043519][ T3081] usb 3-1: unable to get BOS descriptor or descriptor too short [ 762.062527][ T3081] usb 3-1: config 4 interface 0 has no altsetting 0 [ 762.103221][ T3081] usb 3-1: string descriptor 0 read error: -22 [ 762.129604][ T3081] usb 3-1: New USB device found, idVendor=f68f, idProduct=6610, bcdDevice=48.05 [ 762.161358][ T3081] usb 3-1: New USB device strings: Mfr=1, Product=240, SerialNumber=2 [ 762.506112][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.543783][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.595779][ T3081] usb 3-1: USB disconnect, device number 49 [ 763.055615][ T6078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.193577][ T6078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.383907][ T6078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.910673][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 764.931618][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 764.950052][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 764.974714][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 764.983098][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.020310][T13739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 765.189997][T13739] usb 6-1: Using ep0 maxpacket: 32 [ 765.228870][ T6078] bridge_slave_1: left allmulticast mode [ 765.238779][ T6078] bridge_slave_1: left promiscuous mode [ 765.240802][T13739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 765.268138][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.343465][T13739] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 765.359904][T13739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.369573][ T6078] bridge_slave_0: left allmulticast mode [ 765.397071][T13739] usb 6-1: Product: syz [ 765.411973][T13739] usb 6-1: Manufacturer: syz [ 765.416653][T13739] usb 6-1: SerialNumber: syz [ 765.420012][ T6078] bridge_slave_0: left promiscuous mode [ 765.447856][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.464764][T13739] usb 6-1: config 0 descriptor?? [ 765.510761][T13739] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 765.697382][T13739] usb 6-1: USB disconnect, device number 3 [ 765.697556][ T1118] usb 6-1: Failed to submit usb control message: -71 [ 765.712272][ T1118] usb 6-1: unable to send the bmi data to the device: -71 [ 765.734014][ T1118] usb 6-1: unable to get target info from device [ 765.741423][ T1118] usb 6-1: could not get target info (-71) [ 765.747741][ T1118] usb 6-1: could not probe fw (-71) [ 766.756414][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 766.756442][ T30] audit: type=1400 audit(1749947198.381:2795): avc: denied { append } for pid=14258 comm="syz.5.1983" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 766.921176][ T30] audit: type=1400 audit(1749947198.541:2796): avc: denied { read write } for pid=14258 comm="syz.5.1983" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 766.956178][ T30] audit: type=1400 audit(1749947198.541:2797): avc: denied { open } for pid=14258 comm="syz.5.1983" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 766.990101][ T30] audit: type=1400 audit(1749947198.601:2798): avc: denied { ioctl } for pid=14258 comm="syz.5.1983" path="socket:[39870]" dev="sockfs" ino=39870 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 767.071526][T11226] Bluetooth: hci0: command tx timeout [ 767.260054][ T3081] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 767.307771][ T6078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.320886][ T6078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.332088][ T6078] bond0 (unregistering): Released all slaves [ 767.374270][T14257] dvmrp1: entered allmulticast mode [ 767.389997][ T3081] usb 6-1: device descriptor read/64, error -71 [ 767.803245][ T3081] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 768.092841][ T30] audit: type=1400 audit(1749947199.731:2799): avc: denied { connect } for pid=14271 comm="syz.2.1985" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 768.127332][ T30] audit: type=1400 audit(1749947199.731:2800): avc: denied { write } for pid=14271 comm="syz.2.1985" laddr=fe80::d813:7ff:fe3d:ff3f lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 768.173549][ T30] audit: type=1400 audit(1749947199.731:2801): avc: denied { listen } for pid=14271 comm="syz.2.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 768.192623][ T3081] usb 6-1: device descriptor read/64, error -71 [ 768.243820][T14229] chnl_net:caif_netlink_parms(): no params data found [ 768.774865][ T3081] usb usb6-port1: attempt power cycle [ 769.124554][ T3081] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 769.155916][ T5822] Bluetooth: hci0: command tx timeout [ 769.160191][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'. [ 769.173400][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'. [ 769.224404][ T3081] usb 6-1: device descriptor read/8, error -71 [ 769.867217][ T3081] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 769.952109][ T6078] hsr_slave_0: left promiscuous mode [ 769.962779][ T6078] hsr_slave_1: left promiscuous mode [ 769.969030][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.977989][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.978036][ T3081] usb 6-1: device descriptor read/8, error -71 [ 769.994978][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.008833][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.045295][ T6078] veth1_macvtap: left promiscuous mode [ 770.051965][ T6078] veth0_macvtap: left promiscuous mode [ 770.057667][ T6078] veth1_vlan: left promiscuous mode [ 770.066073][ T6078] veth0_vlan: left promiscuous mode [ 770.149974][ T30] audit: type=1400 audit(1749947201.711:2802): avc: denied { unmount } for pid=13543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 770.264738][ T3081] usb usb6-port1: unable to enumerate USB device [ 770.341867][ T30] audit: type=1400 audit(1749947201.961:2803): avc: denied { read } for pid=14312 comm="syz.2.1994" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 770.551116][ T30] audit: type=1400 audit(1749947201.961:2804): avc: denied { open } for pid=14312 comm="syz.2.1994" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 771.006213][T14328] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1993'. [ 771.238547][ T5822] Bluetooth: hci0: command 0x040f tx timeout [ 771.283560][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'. [ 771.861736][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 771.861770][ T30] audit: type=1400 audit(1749947203.491:2809): avc: denied { write } for pid=14336 comm="syz.2.1997" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 772.142608][ T6078] team0 (unregistering): Port device team_slave_1 removed [ 772.198754][ T6078] team0 (unregistering): Port device team_slave_0 removed [ 772.765708][T14340] : entered promiscuous mode [ 773.670534][T11226] Bluetooth: hci0: command 0x040f tx timeout [ 773.706742][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.737509][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.774528][T14229] bridge_slave_0: entered allmulticast mode [ 773.801455][T14229] bridge_slave_0: entered promiscuous mode [ 773.938922][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.971712][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.978945][T14229] bridge_slave_1: entered allmulticast mode [ 773.986529][T14229] bridge_slave_1: entered promiscuous mode [ 774.113609][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.157813][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.170667][ T30] audit: type=1400 audit(1749947205.771:2810): avc: denied { connect } for pid=14369 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 774.550279][T14229] team0: Port device team_slave_0 added [ 774.614106][T14375] : entered promiscuous mode [ 774.665646][T14229] team0: Port device team_slave_1 added [ 774.814362][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.837375][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.865596][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.888297][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.900631][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.944211][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.768667][ T5822] Bluetooth: hci0: command 0x040f tx timeout [ 776.208826][ T30] audit: type=1400 audit(1749947207.841:2811): avc: denied { write } for pid=14401 comm="syz.2.2009" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 776.251328][T14394] : entered promiscuous mode [ 776.375913][T14402] binder: BC_ACQUIRE_RESULT not supported [ 776.420049][T14402] binder: 14401:14402 ioctl c0306201 200000000640 returned -22 [ 776.464757][T14229] hsr_slave_0: entered promiscuous mode [ 776.515751][T14229] hsr_slave_1: entered promiscuous mode [ 776.540576][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.572955][T14229] Cannot create hsr debugfs directory [ 776.668099][ T30] audit: type=1400 audit(1749947208.301:2812): avc: denied { create } for pid=14401 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 776.696668][ T30] audit: type=1400 audit(1749947208.301:2813): avc: denied { ioctl } for pid=14401 comm="syz.2.2009" path="socket:[42050]" dev="sockfs" ino=42050 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 776.723991][ T30] audit: type=1400 audit(1749947208.321:2814): avc: denied { ioctl } for pid=14401 comm="syz.2.2009" path="socket:[42051]" dev="sockfs" ino=42051 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 777.184398][ T30] audit: type=1400 audit(1749947208.441:2815): avc: denied { create } for pid=14401 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 777.224833][ T30] audit: type=1400 audit(1749947208.441:2816): avc: denied { write } for pid=14401 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 777.248926][ T30] audit: type=1400 audit(1749947208.881:2817): avc: denied { unlink } for pid=14413 comm="syz.5.2011" name="#13" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 777.324499][ T30] audit: type=1400 audit(1749947208.921:2818): avc: denied { mount } for pid=14413 comm="syz.5.2011" name="/" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 777.417692][ T30] audit: type=1400 audit(1749947209.051:2819): avc: denied { write } for pid=14426 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 777.789986][T11226] Bluetooth: hci0: command 0x040f tx timeout [ 778.351438][ T5821] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 778.629977][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 778.645459][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 778.659338][ T5821] usb 6-1: config 13 has an invalid interface number: 79 but max is 0 [ 778.676114][ T5821] usb 6-1: config 13 has no interface number 0 [ 778.683331][ T5821] usb 6-1: config 13 interface 79 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 778.695336][ T5821] usb 6-1: config 13 interface 79 altsetting 7 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 778.709997][ T5821] usb 6-1: config 13 interface 79 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 778.721888][ T5821] usb 6-1: config 13 interface 79 has no altsetting 0 [ 778.734676][ T5821] usb 6-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=44.bb [ 778.744818][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.753710][ T5821] usb 6-1: Product: ꂑਟ戰癇㻛煬௢셜먨 [ 778.761814][ T5821] usb 6-1: Manufacturer: Љ [ 778.766720][ T5821] usb 6-1: SerialNumber: ф [ 779.016540][ T5821] snd-usb-caiaq 6-1:13.79: can't set alt interface. [ 779.033802][ T5821] usb 6-1: unable to init card! (ret=-5) [ 779.050715][ T5821] snd-usb-caiaq 6-1:13.79: probe with driver snd-usb-caiaq failed with error -5 [ 779.092427][ T5821] usb 6-1: USB disconnect, device number 8 [ 779.542038][ T3081] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 779.658649][T14229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 779.692513][T14229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 779.700111][ T30] audit: type=1400 audit(1749947211.321:2820): avc: denied { mount } for pid=14475 comm="syz.3.2024" name="/" dev="autofs" ino=41401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 779.704770][T14229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 779.738041][T14229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 779.783536][ T30] audit: type=1400 audit(1749947211.341:2821): avc: denied { unmount } for pid=14475 comm="syz.3.2024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 779.809262][ T3081] usb 3-1: config 0 has an invalid interface number: 192 but max is -1 [ 779.834475][ T3081] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 779.856948][ T3081] usb 3-1: config 0 has no interface number 0 [ 779.868132][ T3081] usb 3-1: config 0 interface 192 has no altsetting 0 [ 780.287800][ T5822] Bluetooth: hci0: command 0x040f tx timeout [ 780.321533][ T3081] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 780.385975][ T3081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.400679][ T30] audit: type=1400 audit(1749947212.041:2822): avc: denied { wake_alarm } for pid=14493 comm="syz.4.2027" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.504579][T14498] dlm: non-version read from control device 211 [ 780.514623][ T3081] usb 3-1: Product: syz [ 780.522666][ T3081] usb 3-1: Manufacturer: syz [ 780.527698][ T3081] usb 3-1: SerialNumber: syz [ 780.535824][ T30] audit: type=1400 audit(1749947212.131:2823): avc: denied { append } for pid=14495 comm="syz.3.2026" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.545856][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.568494][ T3081] usb 3-1: config 0 descriptor?? [ 780.575664][T14499] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 780.638918][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.474768][T14499] team0: Device ipvlan1 failed to register rx_handler [ 781.498972][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.506356][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.517545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.524805][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.839096][ T30] audit: type=1400 audit(1749947213.471:2824): avc: denied { write } for pid=14500 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 781.965679][T14515] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2030'. [ 783.126431][ T3081] usb 3-1: USB disconnect, device number 50 [ 784.071213][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.126883][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.156865][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.329533][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.339263][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.347722][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.356718][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.364754][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.375000][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.386427][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 784.386442][ T30] audit: type=1400 audit(1749947216.021:2826): avc: denied { bind } for pid=14551 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.870290][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.877755][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.893589][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 784.925120][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.950403][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 784.958708][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 784.967051][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 784.968523][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.975263][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 784.990841][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 784.998508][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.006604][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.042917][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.060407][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.064286][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.086001][T14229] veth0_vlan: entered promiscuous mode [ 785.096073][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.115618][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.116241][T14229] veth1_vlan: entered promiscuous mode [ 785.141438][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.142199][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.161900][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.198214][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.201962][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.215067][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.246490][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.249883][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.272618][T14229] veth0_macvtap: entered promiscuous mode [ 785.284358][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.290202][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.305993][T14229] veth1_macvtap: entered promiscuous mode [ 785.311461][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.313328][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.325107][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.349986][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.359110][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.474773][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.515008][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.852929][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.881229][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.899424][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.916700][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.924251][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924280][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924297][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924323][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924342][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924361][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924380][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924399][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924418][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924437][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924456][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924475][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924493][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.924512][ T5821] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 785.931605][T14229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.937927][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 785.947712][ T5821] hid-generic 0001:0000:0000.000A: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 786.002437][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 786.005293][T14229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.039331][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 786.054468][T14229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.113380][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 786.227545][T14571] fido_id[14571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 786.241368][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 786.248785][T13739] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 786.296084][T14229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.315772][T13739] hid-generic 0001:0000:0000.0009: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 787.005211][T14579] fido_id[14579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 787.118245][ T30] audit: type=1400 audit(1749947218.751:2827): avc: denied { read } for pid=14588 comm="syz.5.2041" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 787.289224][ T30] audit: type=1400 audit(1749947218.751:2828): avc: denied { open } for pid=14588 comm="syz.5.2041" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 787.370607][ T30] audit: type=1400 audit(1749947218.961:2829): avc: denied { mount } for pid=14592 comm="syz.4.2042" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 787.416533][ T30] audit: type=1400 audit(1749947218.991:2830): avc: denied { mount } for pid=14592 comm="syz.4.2042" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 787.439069][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.472585][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.618381][ T6955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.634086][ T6955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.774530][ T30] audit: type=1400 audit(1749947220.411:2831): avc: denied { create } for pid=14623 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 788.845970][ T30] audit: type=1400 audit(1749947220.461:2832): avc: denied { name_bind } for pid=14621 comm="syz.4.2050" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 788.984800][T14635] loop2: detected capacity change from 0 to 7 [ 789.701821][T14635] Dev loop2: unable to read RDB block 7 [ 789.707959][T14635] loop2: AHDI p1 p2 [ 789.712341][T14635] loop2: partition table partially beyond EOD, truncated [ 789.723630][T14635] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 789.776542][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 789.892599][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 789.994495][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.073904][T14640] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 790.080485][T14640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 790.091309][T14640] vhci_hcd vhci_hcd.0: Device attached [ 790.121141][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.184718][T14642] vhci_hcd: connection closed [ 790.244728][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.267634][ T36] vhci_hcd: stop threads [ 790.321947][ T36] vhci_hcd: release socket [ 790.386213][ T36] vhci_hcd: disconnect device [ 790.434783][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.545865][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.662851][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.685073][ T30] audit: type=1400 audit(1749947220.461:2833): avc: denied { read append } for pid=14623 comm="syz.3.2049" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 790.718214][ T30] audit: type=1400 audit(1749947220.461:2834): avc: denied { open } for pid=14623 comm="syz.3.2049" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 790.742781][ T30] audit: type=1400 audit(1749947221.391:2835): avc: denied { ioctl } for pid=14623 comm="syz.3.2049" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 790.744075][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.768658][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.858442][T13369] udevd[13369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 790.920019][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.933294][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.942790][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.950806][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.958739][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.967329][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.975451][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.983860][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 790.997921][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.154068][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.590037][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.594496][T14649] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 791.598334][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.614543][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.623311][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.631672][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.639548][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.647868][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.655994][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.656529][T14649] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 791.664315][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.673790][T14644] bridge0: entered promiscuous mode [ 791.680625][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.692822][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.700911][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.709737][ T5821] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 791.721554][ T5821] hid-generic 0001:0000:0000.000B: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 791.743343][T14649] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2052'. [ 791.820278][T14654] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 791.869307][T14654] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 791.917254][T14654] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2052'. [ 791.995977][ T6955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.041860][T14656] fido_id[14656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 792.188005][ T6955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.297795][ T6955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.437755][ T6955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.636266][ T6955] bridge_slave_1: left allmulticast mode [ 792.643319][ T6955] bridge_slave_1: left promiscuous mode [ 792.649083][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.658624][ T6955] bridge_slave_0: left allmulticast mode [ 792.664654][ T6955] bridge_slave_0: left promiscuous mode [ 792.677431][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.906098][T14703] overlayfs: missing 'workdir' [ 794.789984][ T30] audit: type=1400 audit(1749947226.341:2836): avc: denied { ioctl } for pid=14694 comm="syz.3.2056" path="socket:[42552]" dev="sockfs" ino=42552 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 794.885655][ T30] audit: type=1400 audit(1749947226.501:2837): avc: denied { create } for pid=14709 comm="syz.2.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 795.456070][T14710] xt_NFQUEUE: number of total queues is 0 [ 795.585716][ T6955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.625114][ T6955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.641668][T11226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.657293][T11226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.666926][T11226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.668302][ T6955] bond0 (unregistering): Released all slaves [ 795.682633][T11226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.695048][T11226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.940171][ T30] audit: type=1400 audit(1749947227.531:2838): avc: denied { create } for pid=14721 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 796.151839][ T30] audit: type=1400 audit(1749947227.701:2839): avc: denied { bind } for pid=14721 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 796.272028][ T30] audit: type=1400 audit(1749947227.911:2840): avc: denied { create } for pid=14729 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 796.345876][ T30] audit: type=1400 audit(1749947227.971:2841): avc: denied { sys_admin } for pid=14729 comm="syz.2.2061" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 797.801163][ T5822] Bluetooth: hci0: command tx timeout [ 798.061475][ T30] audit: type=1400 audit(1749947228.741:2842): avc: denied { shutdown } for pid=14740 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 799.260952][ T30] audit: type=1400 audit(1749947230.901:2843): avc: denied { create } for pid=14760 comm="syz.5.2068" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 799.325313][ T30] audit: type=1400 audit(1749947230.921:2844): avc: denied { write } for pid=14760 comm="syz.5.2068" name="file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 799.387675][ T30] audit: type=1400 audit(1749947230.921:2845): avc: denied { open } for pid=14760 comm="syz.5.2068" path="/37/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 799.969908][ T5822] Bluetooth: hci0: command tx timeout [ 799.976013][ T30] audit: type=1400 audit(1749947231.211:2846): avc: denied { connect } for pid=14760 comm="syz.5.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 800.173021][ T30] audit: type=1400 audit(1749947231.811:2847): avc: denied { unlink } for pid=13543 comm="syz-executor" name="file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 800.220082][ T6955] hsr_slave_0: left promiscuous mode [ 800.240540][ T6955] hsr_slave_1: left promiscuous mode [ 800.255318][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.279070][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.310821][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.318615][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.452236][ T6955] veth1_macvtap: left promiscuous mode [ 800.457983][ T6955] veth0_macvtap: left promiscuous mode [ 800.472248][ T6955] veth1_vlan: left promiscuous mode [ 800.477882][ T6955] veth0_vlan: left promiscuous mode [ 801.420345][T11226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.436075][T11226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.449600][T11226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.464529][T11226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.472406][T11226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.558531][ T30] audit: type=1400 audit(1749947233.191:2848): avc: denied { write } for pid=14799 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.639458][ T30] audit: type=1400 audit(1749947233.271:2849): avc: denied { create } for pid=14801 comm="syz.5.2075" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 801.663760][ T30] audit: type=1400 audit(1749947233.281:2850): avc: denied { mounton } for pid=14801 comm="syz.5.2075" path="/39/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 801.680439][T14804] overlayfs: failed to clone lowerpath [ 801.827088][ T30] audit: type=1400 audit(1749947233.441:2851): avc: denied { create } for pid=14809 comm="syz.5.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 801.848859][ T30] audit: type=1400 audit(1749947233.441:2852): avc: denied { ioctl } for pid=14809 comm="syz.5.2077" path="socket:[43187]" dev="sockfs" ino=43187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 801.889755][ T30] audit: type=1400 audit(1749947233.461:2853): avc: denied { append } for pid=14809 comm="syz.5.2077" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.040174][T11226] Bluetooth: hci0: command tx timeout [ 802.322334][ T6955] team0 (unregistering): Port device team_slave_1 removed [ 802.396844][ T6955] team0 (unregistering): Port device team_slave_0 removed [ 802.470307][T13739] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 802.660037][T13739] usb 6-1: Using ep0 maxpacket: 32 [ 802.683185][T13739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.988622][T13739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.082577][T13739] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 803.119484][T13739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.152763][T13739] usb 6-1: config 0 descriptor?? [ 803.563673][T11226] Bluetooth: hci4: command tx timeout [ 803.845860][T14719] chnl_net:caif_netlink_parms(): no params data found [ 804.110226][T11226] Bluetooth: hci0: command tx timeout [ 804.175787][T14719] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.192434][T14719] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.213288][T14719] bridge_slave_0: entered allmulticast mode [ 804.228474][T14719] bridge_slave_0: entered promiscuous mode [ 804.259714][T14719] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.279731][T14719] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.305499][T14719] bridge_slave_1: entered allmulticast mode [ 804.324777][T14719] bridge_slave_1: entered promiscuous mode [ 804.524010][T14719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.574330][T14719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.685880][T14796] chnl_net:caif_netlink_parms(): no params data found [ 804.722762][T14719] team0: Port device team_slave_0 added [ 804.773843][ T6955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.823602][T14719] team0: Port device team_slave_1 added [ 804.859519][T14827] SELinux: failed to load policy [ 804.859988][ T30] audit: type=1400 audit(1749947236.491:2854): avc: denied { load_policy } for pid=14826 comm="syz.3.2082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 804.909683][T13739] usbhid 6-1:0.0: can't add hid device: -71 [ 804.920864][T13739] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 804.933078][ T30] audit: type=1400 audit(1749947236.501:2855): avc: denied { setopt } for pid=14826 comm="syz.3.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 804.947804][T13739] usb 6-1: USB disconnect, device number 9 [ 805.095928][ T6955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.918900][T11226] Bluetooth: hci4: command tx timeout [ 805.961788][T14861] uprobe: syz.5.2085:14861 failed to unregister, leaking uprobe [ 805.999667][T14719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.007365][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.043467][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 806.063618][T14719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.101797][ T6955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.206103][T14867] erspan0: entered promiscuous mode [ 806.222624][T14867] macvtap1: entered promiscuous mode [ 806.228359][T14867] macvtap1: entered allmulticast mode [ 806.239715][T14867] erspan0: entered allmulticast mode [ 806.253585][T14719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.261475][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.294476][T14719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.375098][ T6955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.417216][T14870] erspan0: left allmulticast mode [ 806.424894][T14870] erspan0: left promiscuous mode [ 806.445661][T14796] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.458272][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.466676][T14796] bridge_slave_0: entered allmulticast mode [ 807.021746][T14796] bridge_slave_0: entered promiscuous mode [ 807.483548][T14796] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.515354][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.525762][ T30] audit: type=1400 audit(1749947239.161:2856): avc: denied { ioctl } for pid=14892 comm="syz.5.2093" path="socket:[42797]" dev="sockfs" ino=42797 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.570728][T14796] bridge_slave_1: entered allmulticast mode [ 807.587821][T14796] bridge_slave_1: entered promiscuous mode [ 807.638189][T14719] hsr_slave_0: entered promiscuous mode [ 807.659429][T14719] hsr_slave_1: entered promiscuous mode [ 807.673668][T14719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.685400][T14719] Cannot create hsr debugfs directory [ 807.702443][ T3081] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 807.758749][T14796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.776210][T14796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.030344][ T5822] Bluetooth: hci4: command tx timeout [ 808.243296][ T3081] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.252778][ T3081] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 808.264235][ T3081] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.274025][ T3081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 808.285804][ T3081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 808.307430][ T3081] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.317237][ T3081] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 808.325710][ T3081] usb 4-1: Product: syz [ 808.330285][ T3081] usb 4-1: Manufacturer: syz [ 808.349243][ T3081] cdc_wdm 4-1:1.0: skipping garbage [ 808.356114][ T3081] cdc_wdm 4-1:1.0: skipping garbage [ 808.368329][ T3081] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 808.375648][ T3081] cdc_wdm 4-1:1.0: Unknown control protocol [ 808.448020][T14796] team0: Port device team_slave_0 added [ 808.475744][T14796] team0: Port device team_slave_1 added [ 808.650929][ T6955] bridge_slave_1: left allmulticast mode [ 808.671893][ T6955] bridge_slave_1: left promiscuous mode [ 808.673827][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.684715][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.700168][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.717860][ T6955] bridge_slave_0: left allmulticast mode [ 808.723913][ T6955] bridge_slave_0: left promiscuous mode [ 808.730236][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.774528][ T54] usb 4-1: USB disconnect, device number 46 [ 809.120058][ T5937] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 809.270106][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 809.290997][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 809.304543][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 809.366083][ T30] audit: type=1400 audit(1749947241.001:2857): avc: denied { create } for pid=14925 comm="syz.3.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 809.366418][ T5937] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 809.387498][ T30] audit: type=1400 audit(1749947241.021:2858): avc: denied { ioctl } for pid=14925 comm="syz.3.2099" path="socket:[42865]" dev="sockfs" ino=42865 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 809.409721][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.435313][ T5937] usb 6-1: Product: syz [ 809.439996][ T5937] usb 6-1: Manufacturer: syz [ 809.466453][ T5937] usb 6-1: SerialNumber: syz [ 809.490467][ T5937] usb 6-1: config 0 descriptor?? [ 809.505774][ T5937] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 809.515472][ T5937] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 809.530243][ T6955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.543791][ T6955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.554183][ T6955] bond0 (unregistering): Released all slaves [ 809.571292][ T6955] bond1 (unregistering): Released all slaves [ 809.588891][T14796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.596654][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.624026][T14796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.678838][T14796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.714318][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.753923][T14796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.778606][ T6955] : left promiscuous mode [ 809.897307][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 809.970050][T14930] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 810.047931][T14796] hsr_slave_0: entered promiscuous mode [ 810.066854][T14796] hsr_slave_1: entered promiscuous mode [ 810.074563][T14796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.086652][T14796] Cannot create hsr debugfs directory [ 810.110060][ T5833] Bluetooth: hci4: command 0x0419 tx timeout [ 810.129960][ T5937] em28xx 6-1:0.0: unknown em28xx chip ID (86) [ 810.335832][ T5937] em28xx 6-1:0.0: Config register raw data: 0x56 [ 810.761070][ T30] audit: type=1400 audit(1749947242.381:2859): avc: denied { mount } for pid=14919 comm="syz.5.2098" name="/" dev="ramfs" ino=43528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 810.863981][ T30] audit: type=1400 audit(1749947242.451:2860): avc: denied { execute } for pid=14919 comm="syz.5.2098" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=43531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 810.893237][ T6955] hsr_slave_0: left promiscuous mode [ 810.901629][ T6955] hsr_slave_1: left promiscuous mode [ 810.914774][ T5937] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 810.922477][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.930395][ T5937] em28xx 6-1:0.0: No AC97 audio processor [ 810.957411][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.958516][ T5937] usb 6-1: USB disconnect, device number 10 [ 810.978228][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.010916][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.015951][ T5937] em28xx 6-1:0.0: Disconnecting em28xx [ 811.075701][ T5937] em28xx 6-1:0.0: Freeing device [ 811.464043][ T6955] veth1_macvtap: left promiscuous mode [ 811.475984][ T6955] veth0_macvtap: left promiscuous mode [ 811.486772][ T6955] veth1_vlan: left promiscuous mode [ 811.492394][ T6955] veth0_vlan: left promiscuous mode [ 812.233812][T11226] Bluetooth: hci4: command 0x0419 tx timeout [ 812.666524][ T6955] team0 (unregistering): Port device team_slave_1 removed [ 812.762715][ T6955] team0 (unregistering): Port device team_slave_0 removed [ 815.535638][ T6955] IPVS: stop unused estimator thread 0... [ 816.554346][T15014] SELinux: failed to load policy [ 816.628609][T14719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 816.716318][T14719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 816.769579][T14719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 816.808644][T14719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 816.838361][ T30] audit: type=1400 audit(1749947248.471:2861): avc: denied { read } for pid=15025 comm="syz.4.2116" laddr=fe80::12 lport=58 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 817.014680][T14796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.048963][T14796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.072458][T14796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.086963][T14796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.284076][T14719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.514860][T14719] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.529539][T14796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.005079][T14719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 818.095061][T14719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.114126][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.121730][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.195770][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.203319][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.319779][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.361599][ T30] audit: type=1400 audit(1749947250.001:2862): avc: denied { bind } for pid=15069 comm="syz.5.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 818.383765][T15071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 818.391200][T15071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 818.414112][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.421346][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.473193][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.480424][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.508886][T14719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.715172][ T5888] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 819.929399][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 819.974713][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.988967][T14719] veth0_vlan: entered promiscuous mode [ 820.019308][ T5888] usb 4-1: Product: syz [ 820.028686][ T5888] usb 4-1: Manufacturer: syz [ 820.038476][T14719] veth1_vlan: entered promiscuous mode [ 820.054263][ T5888] usb 4-1: SerialNumber: syz [ 820.073942][ T5888] usb 4-1: config 0 descriptor?? [ 820.103240][ T5888] usb 4-1: interface 1 not found [ 820.175643][T14796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.198675][T14719] veth0_macvtap: entered promiscuous mode [ 820.237279][T14719] veth1_macvtap: entered promiscuous mode [ 820.307421][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.308001][T14719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.343009][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.364203][T14719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.377674][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.396573][T14719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.407951][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.421221][T14719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.438730][T14719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.449472][ T30] audit: type=1400 audit(1749947252.071:2863): avc: denied { append } for pid=15093 comm="syz.3.2126" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 820.477580][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.482898][T14719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.507307][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.545646][ T54] usb 4-1: USB disconnect, device number 47 [ 820.563581][T14796] veth0_vlan: entered promiscuous mode [ 820.673841][T14796] veth1_vlan: entered promiscuous mode [ 820.727703][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.747793][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.807596][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.823886][T14796] veth0_macvtap: entered promiscuous mode [ 820.839335][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.855499][T14796] veth1_macvtap: entered promiscuous mode [ 820.924101][T14796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.959616][T14796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.005797][T14796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.031694][T14796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.050392][T14796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.069327][T14796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.564357][T15114] SELinux: failed to load policy [ 822.091073][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.099619][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.297250][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.313374][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.557225][ T6955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.271618][ T6955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.419265][ T6955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.507889][ T6955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.680853][ T6955] bridge_slave_1: left allmulticast mode [ 823.686841][ T6955] bridge_slave_1: left promiscuous mode [ 823.694210][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.704336][ T6955] bridge_slave_0: left allmulticast mode [ 823.711457][ T6955] bridge_slave_0: left promiscuous mode [ 823.717529][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.162931][ T6955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.174936][ T6955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.184898][ T6955] bond0 (unregistering): Released all slaves [ 824.548323][T15198] netlink: 'syz.5.2135': attribute type 2 has an invalid length. [ 824.571861][T15198] netlink: 'syz.5.2135': attribute type 5 has an invalid length. [ 825.076547][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 825.186567][ T6955] hsr_slave_0: left promiscuous mode [ 825.220473][ T6955] hsr_slave_1: left promiscuous mode [ 825.244309][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.262021][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 825.302458][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.311166][ T9] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 825.335751][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.348548][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.380870][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.388147][ T9] usb 3-1: config 0 has no interface number 0 [ 825.409949][ T9] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 825.458692][ T6955] veth1_macvtap: left promiscuous mode [ 825.534288][ T30] audit: type=1400 audit(1749947257.161:2864): avc: denied { sqpoll } for pid=15207 comm="syz.5.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 825.565549][ T9] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 825.873601][ T6955] veth0_macvtap: left promiscuous mode [ 825.881019][ T9] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 825.893073][ T6955] veth1_vlan: left promiscuous mode [ 825.898439][ T6955] veth0_vlan: left promiscuous mode [ 825.903909][ T9] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 825.914493][ T9] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 825.969580][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 825.987712][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.996728][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 826.011640][ T9] usb 3-1: config 0 descriptor?? [ 826.022269][T15195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.031224][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 826.048222][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 826.065252][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.072425][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 826.089248][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 826.287328][T15195] cgroup: Invalid name [ 826.420303][ T9] usb 3-1: USB disconnect, device number 51 [ 826.719924][T13739] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 827.001484][ T30] audit: type=1400 audit(1749947258.641:2865): avc: denied { getopt } for pid=15238 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 827.337701][T13739] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 827.347193][T13739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.369728][T13739] usb 6-1: Product: syz [ 827.382128][T13739] usb 6-1: Manufacturer: syz [ 827.386789][T13739] usb 6-1: SerialNumber: syz [ 827.445524][T13739] usb 6-1: config 0 descriptor?? [ 827.476488][T13739] usb 6-1: interface 1 not found [ 828.113765][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.151920][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.191103][T11226] Bluetooth: hci0: command tx timeout [ 828.293018][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.317934][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.348294][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.375614][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.396111][ T6955] team0 (unregistering): Port device team_slave_1 removed [ 828.407706][ T5972] usb 6-1: USB disconnect, device number 11 [ 828.527740][ T6955] team0 (unregistering): Port device team_slave_0 removed [ 830.148829][ T30] audit: type=1400 audit(1749947261.781:2866): avc: denied { ioctl } for pid=15262 comm="syz.4.2148" path="socket:[44956]" dev="sockfs" ino=44956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 830.272881][T11226] Bluetooth: hci0: command tx timeout [ 831.175939][T15222] chnl_net:caif_netlink_parms(): no params data found [ 831.186191][T15258] SELinux: failed to load policy [ 831.495645][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.520729][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.528720][T15222] bridge_slave_0: entered allmulticast mode [ 831.541822][T15222] bridge_slave_0: entered promiscuous mode [ 831.595019][T15305] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 831.672749][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.680869][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.688706][T15222] bridge_slave_1: entered allmulticast mode [ 831.696633][T15222] bridge_slave_1: entered promiscuous mode [ 831.864782][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.998996][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.458794][ T5833] Bluetooth: hci0: command tx timeout [ 832.635952][T15222] team0: Port device team_slave_0 added [ 832.669200][T15222] team0: Port device team_slave_1 added [ 832.870867][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.878222][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.052476][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.641590][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.749589][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.809728][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.218561][T15337] unsupported nlmsg_type 40 [ 834.253755][T15222] hsr_slave_0: entered promiscuous mode [ 834.262649][T15222] hsr_slave_1: entered promiscuous mode [ 834.281394][T15222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.289468][T15222] Cannot create hsr debugfs directory [ 834.522990][ T5833] Bluetooth: hci0: command tx timeout [ 838.247280][ T5972] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 838.347837][T15222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.362959][T15222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.377825][T15222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.396296][T15222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 838.410009][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 838.424811][ T5972] usb 3-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 838.448079][ T5972] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 838.478748][ T5972] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 838.510449][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.541972][ T5972] usb 3-1: Product: syz [ 838.557902][ T5972] usb 3-1: Manufacturer: syz [ 838.575593][ T5972] usb 3-1: SerialNumber: syz [ 838.600694][ T5972] usb 3-1: config 0 descriptor?? [ 838.643913][T15222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.669404][T15222] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.696391][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.703591][T15220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.721813][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.728968][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.870581][ T30] audit: type=1400 audit(1749947270.481:2867): avc: denied { read } for pid=15378 comm="syz.2.2168" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 838.947642][ T30] audit: type=1400 audit(1749947270.481:2868): avc: denied { open } for pid=15378 comm="syz.2.2168" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 839.058606][ T30] audit: type=1400 audit(1749947270.481:2869): avc: denied { ioctl } for pid=15378 comm="syz.2.2168" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 839.811421][ T5972] usb 3-1: USB disconnect, device number 52 [ 840.633847][T15222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.668210][ T30] audit: type=1400 audit(1749947272.281:2870): avc: denied { setopt } for pid=15434 comm="syz.5.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 840.737568][ T30] audit: type=1400 audit(1749947272.281:2871): avc: denied { append } for pid=15434 comm="syz.5.2175" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 840.739490][T15222] veth0_vlan: entered promiscuous mode [ 840.774326][T15222] veth1_vlan: entered promiscuous mode [ 841.536327][T15222] veth0_macvtap: entered promiscuous mode [ 842.084869][T15222] veth1_macvtap: entered promiscuous mode [ 842.204527][T15222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.268127][ T30] audit: type=1400 audit(1749947273.901:2872): avc: denied { ioctl } for pid=15458 comm="syz.2.2179" path="socket:[46481]" dev="sockfs" ino=46481 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 842.272664][T15222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.491380][T15222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.603273][T15222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.688675][T15222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.795814][T15222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.999156][T15473] FAULT_INJECTION: forcing a failure. [ 842.999156][T15473] name failslab, interval 1, probability 0, space 0, times 0 [ 843.123751][T15473] CPU: 0 UID: 0 PID: 15473 Comm: syz.5.2182 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 843.123783][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 843.123794][T15473] Call Trace: [ 843.123801][T15473] [ 843.123809][T15473] dump_stack_lvl+0x16c/0x1f0 [ 843.123844][T15473] should_fail_ex+0x512/0x640 [ 843.123868][T15473] ? fs_reclaim_acquire+0xae/0x150 [ 843.123890][T15473] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 843.123916][T15473] should_failslab+0xc2/0x120 [ 843.123943][T15473] __kmalloc_noprof+0xd2/0x510 [ 843.123973][T15473] tomoyo_realpath_from_path+0xc2/0x6e0 [ 843.124004][T15473] ? tomoyo_profile+0x47/0x60 [ 843.124034][T15473] tomoyo_path_number_perm+0x245/0x580 [ 843.124056][T15473] ? tomoyo_path_number_perm+0x237/0x580 [ 843.124080][T15473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 843.124103][T15473] ? find_held_lock+0x2b/0x80 [ 843.124149][T15473] ? find_held_lock+0x2b/0x80 [ 843.124169][T15473] ? hook_file_ioctl_common+0x145/0x410 [ 843.124192][T15473] ? __fget_files+0x20e/0x3c0 [ 843.124221][T15473] security_file_ioctl+0x9b/0x240 [ 843.124254][T15473] __x64_sys_ioctl+0xb7/0x210 [ 843.124276][T15473] do_syscall_64+0xcd/0x4c0 [ 843.124305][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.124324][T15473] RIP: 0033:0x7f113658e929 [ 843.124340][T15473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.124356][T15473] RSP: 002b:00007f1137358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.124375][T15473] RAX: ffffffffffffffda RBX: 00007f11367b5fa0 RCX: 00007f113658e929 [ 843.124387][T15473] RDX: 0000000000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 843.124399][T15473] RBP: 00007f1137358090 R08: 0000000000000000 R09: 0000000000000000 [ 843.124410][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.124421][T15473] R13: 0000000000000000 R14: 00007f11367b5fa0 R15: 00007ffd443ff028 [ 843.124447][T15473] [ 843.551931][ T30] audit: type=1400 audit(1749947274.291:2873): avc: denied { create } for pid=15469 comm="syz.4.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 843.580033][T15473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 843.884662][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.903783][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.001980][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.013975][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.135465][ T30] audit: type=1400 audit(1749947275.661:2874): avc: denied { write } for pid=15489 comm="syz.3.2188" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 844.160436][ T30] audit: type=1400 audit(1749947275.671:2875): avc: denied { ioctl } for pid=15489 comm="syz.3.2188" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46504 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 844.185080][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 844.700542][ T5888] usb 6-1: device descriptor read/64, error -71 [ 845.010163][ T5888] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 845.759077][ T5888] usb 6-1: device descriptor read/64, error -71 [ 845.891515][ T5888] usb usb6-port1: attempt power cycle [ 846.249896][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 847.452067][ T5888] usb 6-1: device descriptor read/8, error -71 [ 847.844569][T15221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.975853][T15221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.000387][T13739] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 848.097929][T15221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.151285][T13739] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.165366][T13739] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 848.182153][T13739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.198412][T13739] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 848.207076][T15221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.220428][T13739] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 848.232918][T13739] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.243515][T13739] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.251974][T13739] usb 3-1: Product: syz [ 848.256148][T13739] usb 3-1: Manufacturer: syz [ 848.269276][T13739] cdc_wdm 3-1:1.0: skipping garbage [ 848.274743][T13739] cdc_wdm 3-1:1.0: skipping garbage [ 848.284084][T13739] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 848.290645][T13739] cdc_wdm 3-1:1.0: Unknown control protocol [ 848.401293][T15221] bridge_slave_1: left allmulticast mode [ 848.407021][T15221] bridge_slave_1: left promiscuous mode [ 848.417449][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.426961][T15221] bridge_slave_0: left allmulticast mode [ 848.433769][T15221] bridge_slave_0: left promiscuous mode [ 848.439964][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.567309][ T30] audit: type=1400 audit(1749947280.201:2876): avc: denied { read write } for pid=15513 comm="syz.2.2195" name="cdc-wdm0" dev="devtmpfs" ino=3281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 848.609709][T13784] usb 3-1: USB disconnect, device number 53 [ 848.621879][ T30] audit: type=1400 audit(1749947280.201:2877): avc: denied { open } for pid=15513 comm="syz.2.2195" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 849.050706][T15221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.062620][T15221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.072602][T15221] bond0 (unregistering): Released all slaves [ 850.274029][T11226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 850.285284][T11226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 850.293841][T11226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 850.301644][T11226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 850.310828][T11226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 850.366738][T15221] hsr_slave_0: left promiscuous mode [ 850.409425][T15221] hsr_slave_1: left promiscuous mode [ 850.409941][ T5972] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 850.433952][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.463074][T15221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.695519][ T5972] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 850.710210][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 850.755350][ T5972] usb 3-1: config 0 has no interface number 0 [ 850.792172][T15577] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 850.800964][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.802272][ T5972] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.831348][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.835795][ T5972] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 850.861530][T15577] overlayfs: failed to clone upperpath [ 850.915270][T15221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.979927][ T5972] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 851.008350][ T5972] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 851.035164][ T5972] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.081881][ T5972] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 851.092782][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.111649][ T5972] usb 3-1: Product: syz [ 851.117820][T15221] veth1_macvtap: left promiscuous mode [ 851.123778][T15221] veth0_macvtap: left promiscuous mode [ 851.133551][ T5972] usb 3-1: Manufacturer: syz [ 851.138802][T15221] veth1_vlan: left promiscuous mode [ 851.144611][T15221] veth0_vlan: left promiscuous mode [ 851.147631][ T5972] usb 3-1: SerialNumber: syz [ 851.168861][ T5972] usb 3-1: config 0 descriptor?? [ 851.185378][T15560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 851.204405][ T5972] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 851.227840][ T5972] scsi host1: usb-storage 3-1:0.189 [ 851.414661][ T5972] usb 3-1: USB disconnect, device number 54 [ 852.157106][T15221] team0 (unregistering): Port device team_slave_1 removed [ 852.214458][T15221] team0 (unregistering): Port device team_slave_0 removed [ 852.430006][ T5833] Bluetooth: hci0: command tx timeout [ 854.511816][ T5833] Bluetooth: hci0: command tx timeout [ 855.208105][T15618] loop2: detected capacity change from 0 to 7 [ 855.271821][T15618] Dev loop2: unable to read RDB block 7 [ 855.277474][T15618] loop2: AHDI p1 p2 [ 855.281478][T15618] loop2: partition table partially beyond EOD, truncated [ 855.288622][T15618] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 855.410340][T15623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 855.416998][T15623] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 855.472450][T15623] vhci_hcd vhci_hcd.0: Device attached [ 855.500321][T15558] chnl_net:caif_netlink_parms(): no params data found [ 855.634487][T15626] vhci_hcd: connection closed [ 855.635917][ T36] vhci_hcd: stop threads [ 855.659683][ T36] vhci_hcd: release socket [ 855.676382][ T36] vhci_hcd: disconnect device [ 855.850270][T15558] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.877783][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.907666][T15558] bridge_slave_0: entered allmulticast mode [ 855.944698][T15558] bridge_slave_0: entered promiscuous mode [ 855.988703][T15558] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.020150][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.043373][T15558] bridge_slave_1: entered allmulticast mode [ 856.071366][T15558] bridge_slave_1: entered promiscuous mode [ 856.589907][ T5833] Bluetooth: hci0: command tx timeout [ 856.675915][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.695657][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.607730][T15558] team0: Port device team_slave_0 added [ 857.627071][T15610] SELinux: failed to load policy [ 857.784807][T15558] team0: Port device team_slave_1 added [ 858.602660][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.610071][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.660546][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.684319][T11226] Bluetooth: hci0: command tx timeout [ 858.778922][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.826113][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.866947][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.981446][ T30] audit: type=1400 audit(1749947290.601:2878): avc: denied { bind } for pid=15678 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 858.984502][T15558] hsr_slave_0: entered promiscuous mode [ 859.044781][ T30] audit: type=1400 audit(1749947290.601:2879): avc: denied { name_bind } for pid=15678 comm="syz.5.2218" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 859.050875][T15558] hsr_slave_1: entered promiscuous mode [ 859.081760][T15558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.093520][T15558] Cannot create hsr debugfs directory [ 859.106417][T15683] FAULT_INJECTION: forcing a failure. [ 859.106417][T15683] name failslab, interval 1, probability 0, space 0, times 0 [ 859.175240][ T30] audit: type=1400 audit(1749947290.601:2880): avc: denied { node_bind } for pid=15678 comm="syz.5.2218" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 859.207173][ T30] audit: type=1400 audit(1749947290.601:2881): avc: denied { write } for pid=15678 comm="syz.5.2218" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 859.222888][T15683] CPU: 1 UID: 0 PID: 15683 Comm: syz.2.2220 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 859.222914][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 859.222924][T15683] Call Trace: [ 859.222931][T15683] [ 859.222938][T15683] dump_stack_lvl+0x16c/0x1f0 [ 859.222970][T15683] should_fail_ex+0x512/0x640 [ 859.222991][T15683] ? fs_reclaim_acquire+0xae/0x150 [ 859.223009][T15683] should_failslab+0xc2/0x120 [ 859.223032][T15683] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 859.223053][T15683] ? security_inode_alloc+0x3b/0x2b0 [ 859.223077][T15683] security_inode_alloc+0x3b/0x2b0 [ 859.223096][T15683] inode_init_always_gfp+0xce4/0x1030 [ 859.223127][T15683] alloc_inode+0x86/0x240 [ 859.223150][T15683] sock_alloc+0x40/0x280 [ 859.223167][T15683] __sock_create+0xc1/0x8d0 [ 859.223185][T15683] ? crng_fast_key_erasure+0x1ce/0x250 [ 859.223213][T15683] udp_sock_create6+0xc7/0x6a0 [ 859.223232][T15683] ? __pfx_udp_sock_create6+0x10/0x10 [ 859.223252][T15683] ? crng_make_state+0x46e/0x6d0 [ 859.223266][T15683] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.223288][T15683] ? crng_make_state+0x48e/0x6d0 [ 859.223307][T15683] rxrpc_open_socket+0x20c/0x6b0 [ 859.223328][T15683] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 859.223358][T15683] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 859.223379][T15683] ? rcu_is_watching+0x12/0xc0 [ 859.223402][T15683] rxrpc_lookup_local+0xa01/0x1220 [ 859.223427][T15683] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 859.223448][T15683] ? __local_bh_enable_ip+0xa4/0x120 [ 859.223471][T15683] rxrpc_bind+0x369/0x5a0 [ 859.223494][T15683] __sys_bind+0x1a4/0x260 [ 859.223513][T15683] ? __pfx___sys_bind+0x10/0x10 [ 859.223530][T15683] ? __fget_files+0x20e/0x3c0 [ 859.223560][T15683] ? __pfx_ksys_write+0x10/0x10 [ 859.223587][T15683] __x64_sys_bind+0x72/0xb0 [ 859.223603][T15683] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.223624][T15683] do_syscall_64+0xcd/0x4c0 [ 859.223650][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.223666][T15683] RIP: 0033:0x7f5edbd8e929 [ 859.223679][T15683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.223694][T15683] RSP: 002b:00007f5edcbaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 859.223710][T15683] RAX: ffffffffffffffda RBX: 00007f5edbfb5fa0 RCX: 00007f5edbd8e929 [ 859.223720][T15683] RDX: 0000000000000024 RSI: 0000200000000100 RDI: 0000000000000003 [ 859.223730][T15683] RBP: 00007f5edcbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 859.223739][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.223748][T15683] R13: 0000000000000000 R14: 00007f5edbfb5fa0 R15: 00007ffe781ba3a8 [ 859.223772][T15683] [ 859.223852][T15683] socket: no more sockets [ 859.231357][ T30] audit: type=1400 audit(1749947290.601:2882): avc: denied { name_connect } for pid=15678 comm="syz.5.2218" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 859.534341][ T30] audit: type=1400 audit(1749947290.701:2883): avc: denied { shutdown } for pid=15678 comm="syz.5.2218" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 859.534389][ T30] audit: type=1400 audit(1749947290.741:2884): avc: denied { bind } for pid=15682 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 859.567027][ T30] audit: type=1400 audit(1749947291.201:2885): avc: denied { name_bind } for pid=15684 comm="syz.4.2221" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 860.751281][ T5822] Bluetooth: hci0: command 0x0405 tx timeout [ 861.950324][ T5833] Bluetooth: hci3: command 0x041b tx timeout [ 863.766841][T15720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15720 comm=syz.2.2230 [ 863.869966][ T30] audit: type=1400 audit(1749947295.491:2886): avc: denied { write } for pid=15719 comm="syz.3.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 863.900413][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 866.419417][ T30] audit: type=1400 audit(1749947298.051:2887): avc: denied { setopt } for pid=15756 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 866.624572][ T30] audit: type=1400 audit(1749947298.121:2888): avc: denied { bind } for pid=15756 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 866.899413][T15558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 866.922669][T15558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.943671][T15558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 866.961277][T15558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.502954][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.557244][T15558] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.598570][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.605784][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.694263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.701491][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.212926][ T5821] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 868.370034][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 868.441704][ T5821] usb 6-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=69.34 [ 868.711006][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.719543][ T5821] usb 6-1: Product: syz [ 868.742476][ T5888] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 868.744607][ T5821] usb 6-1: Manufacturer: syz [ 868.779322][ T5821] usb 6-1: SerialNumber: syz [ 868.781484][ T30] audit: type=1400 audit(1749947300.411:2889): avc: denied { bind } for pid=15800 comm="syz.2.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 868.824580][ T5821] usb 6-1: config 0 descriptor?? [ 868.847054][ T5821] mct_u232 6-1:0.0: MCT U232 converter detected [ 868.873555][ T5821] mct_u232 ttyUSB0: expected endpoint missing [ 868.924114][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 868.954197][ T5888] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 868.971750][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 869.010662][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 869.073863][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 869.509729][T13739] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 869.542395][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.552114][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.560299][ T5888] usb 4-1: Product: syz [ 869.564460][ T5888] usb 4-1: Manufacturer: syz [ 869.571931][ T30] audit: type=1400 audit(1749947300.771:2890): avc: denied { create } for pid=15779 comm="syz.5.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 869.572380][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 869.597489][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 869.610089][ T5888] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 869.616970][ T5888] cdc_wdm 4-1:1.0: Unknown control protocol [ 869.682395][ T30] audit: type=1400 audit(1749947300.781:2891): avc: denied { write } for pid=15779 comm="syz.5.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 869.708317][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.728714][T13739] usb 3-1: device descriptor read/64, error -71 [ 869.819488][T15558] veth0_vlan: entered promiscuous mode [ 869.894000][ T5972] usb 4-1: USB disconnect, device number 48 [ 869.954880][T15558] veth1_vlan: entered promiscuous mode [ 869.976208][ T30] audit: type=1400 audit(1749947301.601:2892): avc: denied { setopt } for pid=15816 comm="syz.4.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 870.000200][T13739] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 870.085477][T15558] veth0_macvtap: entered promiscuous mode [ 870.102535][T15558] veth1_macvtap: entered promiscuous mode [ 870.127657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.134222][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.134293][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.159944][T13739] usb 3-1: device descriptor read/64, error -71 [ 870.198590][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.216119][T15558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.227910][T15558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.237354][T15558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.248191][T15558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.289232][T13739] usb usb3-port1: attempt power cycle [ 870.862485][ T5821] usb 6-1: USB disconnect, device number 16 [ 870.900305][ T5821] mct_u232 6-1:0.0: device disconnected [ 870.920254][T13739] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 870.957736][T13739] usb 3-1: device descriptor read/8, error -71 [ 870.974739][T15220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.018175][T15220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.116624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.126303][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.210705][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 871.220199][ T30] audit: type=1400 audit(1749947302.851:2893): avc: denied { create } for pid=15833 comm="syz.5.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 871.254148][T13739] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 871.259910][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2250'. [ 871.293104][T13739] usb 3-1: device descriptor read/8, error -71 [ 871.400878][T13739] usb usb3-port1: unable to enumerate USB device [ 871.460007][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 871.634907][ T9] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 871.655388][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.684213][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 871.706996][ T9] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 871.725885][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.757303][ T9] usb 6-1: Product: syz [ 871.772857][ T9] usb 6-1: Manufacturer: syz [ 871.784843][ T9] usb 6-1: SerialNumber: syz [ 871.805573][ T9] usb 6-1: config 0 descriptor?? [ 871.854466][ T9] usb-storage 6-1:0.0: USB Mass Storage device detected [ 871.896464][ T9] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 872.731475][ T9] usb 6-1: USB disconnect, device number 17 [ 873.446546][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.560894][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.648243][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.716096][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.886772][ T12] bridge_slave_1: left allmulticast mode [ 873.893742][ T12] bridge_slave_1: left promiscuous mode [ 873.899834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.913529][ T12] bridge_slave_0: left allmulticast mode [ 873.919499][ T12] bridge_slave_0: left promiscuous mode [ 873.926721][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.433092][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.444746][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.454572][ T12] bond0 (unregistering): Released all slaves [ 875.060936][T15932] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 875.085062][ T12] hsr_slave_0: left promiscuous mode [ 875.242240][ T30] audit: type=1400 audit(1749947306.831:2894): avc: denied { setopt } for pid=15918 comm="syz.5.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 875.353581][ T12] hsr_slave_1: left promiscuous mode [ 875.485520][ T30] audit: type=1400 audit(1749947306.841:2895): avc: denied { getopt } for pid=15918 comm="syz.5.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 875.521170][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.547879][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.555226][ T30] audit: type=1400 audit(1749947306.851:2896): avc: denied { ioctl } for pid=15918 comm="syz.5.2255" path="socket:[49254]" dev="sockfs" ino=49254 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 876.045560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.193669][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.358518][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2262'. [ 876.482892][ T12] veth1_macvtap: left promiscuous mode [ 876.488469][ T12] veth0_macvtap: left promiscuous mode [ 876.535875][ T12] veth1_vlan: left promiscuous mode [ 876.563076][ T12] veth0_vlan: left promiscuous mode [ 876.665244][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.681393][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.714299][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.724257][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.793710][T15959] loop2: detected capacity change from 0 to 7 [ 876.817458][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.829570][T15959] Dev loop2: unable to read RDB block 7 [ 876.835264][T15959] loop2: AHDI p1 p2 [ 876.839164][T15959] loop2: partition table partially beyond EOD, truncated [ 876.846324][T15959] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 876.860012][T13784] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 877.193849][T15963] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 877.200496][T15963] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 877.227353][T15963] vhci_hcd vhci_hcd.0: Device attached [ 877.259551][T15965] vhci_hcd: connection closed [ 877.262589][T15220] vhci_hcd: stop threads [ 877.279211][T15220] vhci_hcd: release socket [ 877.294392][T15220] vhci_hcd: disconnect device [ 877.300744][T13784] usb 3-1: Using ep0 maxpacket: 32 [ 877.319394][T13784] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 877.341413][T13784] usb 3-1: config 0 has no interface number 0 [ 877.360665][T13784] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 877.385613][T13784] usb 3-1: config 0 interface 1 has no altsetting 0 [ 877.408226][T13784] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 877.418884][T13784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.441542][T13784] usb 3-1: Product: syz [ 877.456242][T13784] usb 3-1: Manufacturer: syz [ 877.462455][T13784] usb 3-1: SerialNumber: syz [ 877.500770][T13784] usb 3-1: config 0 descriptor?? [ 877.792243][ T5937] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 877.973711][ T5937] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 877.996338][ T12] team0 (unregistering): Port device team_slave_1 removed [ 878.006442][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.036300][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 878.053950][ T5937] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 878.074080][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.082629][ T5937] usb 6-1: Product: syz [ 878.087050][ T5937] usb 6-1: Manufacturer: syz [ 878.113972][ T5937] usb 6-1: SerialNumber: syz [ 878.143957][ T5937] usb 6-1: config 0 descriptor?? [ 878.151395][ T12] team0 (unregistering): Port device team_slave_0 removed [ 878.164891][ T5937] usb-storage 6-1:0.0: USB Mass Storage device detected [ 878.192474][ T5937] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 878.995138][ T5833] Bluetooth: hci0: command tx timeout [ 879.301653][T15957] netlink: 'syz.2.2263': attribute type 9 has an invalid length. [ 879.409993][ T5937] usb 6-1: USB disconnect, device number 18 [ 879.429482][T13784] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 879.466488][T13784] cx231xx 3-1:0.1: Not found matching IAD interface [ 879.502565][T13784] usb 3-1: USB disconnect, device number 59 [ 880.170343][T16004] cgroup: fork rejected by pids controller in /syz4 [ 880.263023][T15961] chnl_net:caif_netlink_parms(): no params data found [ 880.574323][T16116] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2273'. [ 880.611694][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.619975][T13739] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 880.634877][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.656221][T15961] bridge_slave_0: entered allmulticast mode [ 880.681974][T15961] bridge_slave_0: entered promiscuous mode [ 880.700931][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.708645][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.724605][T15961] bridge_slave_1: entered allmulticast mode [ 880.736014][T15961] bridge_slave_1: entered promiscuous mode [ 880.802379][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.819013][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.892017][T13739] usb 6-1: Using ep0 maxpacket: 16 [ 880.902031][T13739] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 880.912257][T13739] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 880.922670][T13739] usb 6-1: Product: syz [ 880.926945][T13739] usb 6-1: Manufacturer: syz [ 880.931899][T13739] usb 6-1: SerialNumber: syz [ 880.937730][T15961] team0: Port device team_slave_0 added [ 880.949980][T13739] usb 6-1: config 0 descriptor?? [ 880.960588][T15961] team0: Port device team_slave_1 added [ 881.010013][T13784] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 881.081561][ T5833] Bluetooth: hci0: command tx timeout [ 881.209304][ T30] audit: type=1400 audit(1749947312.841:2897): avc: denied { ioctl } for pid=16106 comm="syz.5.2274" path="socket:[49557]" dev="sockfs" ino=49557 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.257013][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.269994][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.273019][T13739] usb 6-1: USB disconnect, device number 19 [ 881.335385][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.366924][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.377679][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.422401][T13587] udevd[13587]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.442613][T13784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.455824][T13784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 240, setting to 64 [ 881.474906][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.478635][T13784] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 881.503837][T13784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.516773][T13784] usb 4-1: config 0 descriptor?? [ 881.523488][T16108] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 881.683109][T15961] hsr_slave_0: entered promiscuous mode [ 881.700852][T15961] hsr_slave_1: entered promiscuous mode [ 881.707407][T15961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.797192][T15961] Cannot create hsr debugfs directory [ 882.006946][T13784] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 882.105155][T13784] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 882.123111][T13784] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 882.335112][T13784] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 882.386949][T13784] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 882.473831][T13784] usb 4-1: USB disconnect, device number 49 [ 882.485256][T16210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.857380][T16210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.090801][T16210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.156771][ T5833] Bluetooth: hci0: command tx timeout [ 883.491649][T16210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.613031][T13784] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 883.682981][ T30] audit: type=1400 audit(1749947315.321:2898): avc: denied { write } for pid=16277 comm="syz.4.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 883.834793][T13784] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 883.844082][T16210] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.849061][T13784] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.899301][T16210] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.912465][T13784] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 883.976183][T13784] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 883.991663][T13784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.030034][T13784] usb 6-1: Product: syz [ 884.034448][T13784] usb 6-1: Manufacturer: syz [ 884.051688][T13784] usb 6-1: SerialNumber: syz [ 884.068864][T13784] usb 6-1: config 0 descriptor?? [ 884.097448][T13784] usb-storage 6-1:0.0: USB Mass Storage device detected [ 884.174807][T13784] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 884.191680][T16210] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.347194][T13784] usb 6-1: USB disconnect, device number 20 [ 884.373768][T16210] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.737695][T15961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 884.768571][T15961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 884.795531][T15961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 884.826933][T15961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 885.168512][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.230668][ T5833] Bluetooth: hci0: command tx timeout [ 885.681773][T15961] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.783210][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.790463][T15221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.947267][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.954511][T15221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.359743][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 991.366735][ C1] rcu: (detected by 1, t=10502 jiffies, g=72545, q=492 ncpus=2) [ 991.374445][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295036253-4295025751), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 991.387803][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g72545 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200 [ 991.400117][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=41452 [ 991.407996][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g72545 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200 ->cpu=0 [ 991.419352][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 991.429310][ C1] rcu: RCU grace-period kthread stack dump: [ 991.435710][ C1] task:rcu_preempt state:R stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 991.447630][ C1] Call Trace: [ 991.450902][ C1] [ 991.453832][ C1] __schedule+0x116a/0x5de0 [ 991.458369][ C1] ? __lock_acquire+0x622/0x1c90 [ 991.463351][ C1] ? __pfx___schedule+0x10/0x10 [ 991.468220][ C1] ? find_held_lock+0x2b/0x80 [ 991.472897][ C1] ? schedule+0x2d7/0x3a0 [ 991.477229][ C1] schedule+0xe7/0x3a0 [ 991.481301][ C1] schedule_timeout+0x123/0x290 [ 991.486150][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 991.491523][ C1] ? __pfx_process_timeout+0x10/0x10 [ 991.496813][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 991.502620][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 991.508087][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 991.512858][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 991.518146][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 991.523345][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 991.528285][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 991.533154][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 991.538962][ C1] rcu_gp_kthread+0x270/0x380 [ 991.543643][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 991.548843][ C1] ? rcu_is_watching+0x12/0xc0 [ 991.553607][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 991.558808][ C1] ? __kthread_parkme+0x19e/0x250 [ 991.563834][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 991.569040][ C1] kthread+0x3c2/0x780 [ 991.573110][ C1] ? __pfx_kthread+0x10/0x10 [ 991.577697][ C1] ? rcu_is_watching+0x12/0xc0 [ 991.582469][ C1] ? __pfx_kthread+0x10/0x10 [ 991.587088][ C1] ret_from_fork+0x5d7/0x6f0 [ 991.591707][ C1] ? __pfx_kthread+0x10/0x10 [ 991.596317][ C1] ret_from_fork_asm+0x1a/0x30 [ 991.601095][ C1] [ 991.604107][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 991.610418][ C1] Sending NMI from CPU 1 to CPUs 0: [ 991.615619][ C0] NMI backtrace for cpu 0 [ 991.615634][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 991.615651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 991.615660][ C0] RIP: 0010:__lock_acquire+0x28e/0x1c90 [ 991.615683][ C0] Code: 04 00 00 8b b5 e8 0a 00 00 45 84 ff 45 0f 44 fe 41 89 f6 41 83 ee 01 0f 88 db 0d 00 00 49 63 c6 48 8d 04 80 49 8d 04 c4 eb 12 <41> 83 ee 01 48 83 e8 28 41 83 fe ff 0f 84 8f 04 00 00 0f b6 50 21 [ 991.615697][ C0] RSP: 0018:ffffc90000007bf8 EFLAGS: 00000046 [ 991.615709][ C0] RAX: ffffffff8e298270 RBX: 0000000000000001 RCX: 0000000000000040 [ 991.615719][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8e298298 [ 991.615727][ C0] RBP: ffffffff8e297780 R08: 0000000000080000 R09: 0000000000000001 [ 991.615736][ C0] R10: 0000000000000028 R11: 0000000000000001 R12: ffffffff8e298270 [ 991.615744][ C0] R13: ffffffff8e298298 R14: 0000000000000000 R15: 0000000000000002 [ 991.615753][ C0] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 991.615768][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.615777][ C0] CR2: 00007f0d8cd5dd58 CR3: 0000000064086000 CR4: 00000000003526f0 [ 991.615786][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 991.615794][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 991.615802][ C0] Call Trace: [ 991.615807][ C0] [ 991.615817][ C0] lock_acquire+0x179/0x350 [ 991.615836][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 991.615860][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 991.615876][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 991.615894][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 991.615914][ C0] debug_object_deactivate+0x135/0x3a0 [ 991.615934][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 991.615947][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 991.615969][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 991.615985][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 991.616004][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 991.616018][ C0] ? read_tsc+0x9/0x20 [ 991.616035][ C0] hrtimer_interrupt+0x397/0x8e0 [ 991.616055][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 991.616077][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 991.616096][ C0] [ 991.616101][ C0] [ 991.616107][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.616122][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 991.616140][ C0] Code: 7b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 00 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 991.616152][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 991.616163][ C0] RAX: 00000000029e0063 RBX: 0000000000000000 RCX: ffffffff8b800c19 [ 991.616171][ C0] RDX: 0000000000000000 RSI: ffffffff8de1993c RDI: ffffffff8c1575a0 [ 991.616180][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 991.616189][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 991.616198][ C0] R13: ffffffff8e297780 R14: ffffffff90a81050 R15: 0000000000000000 [ 991.616210][ C0] ? ct_kernel_exit+0x139/0x190 [ 991.616236][ C0] default_idle+0x13/0x20 [ 991.616249][ C0] default_idle_call+0x6d/0xb0 [ 991.616262][ C0] do_idle+0x391/0x510 [ 991.616279][ C0] ? __pfx_do_idle+0x10/0x10 [ 991.616294][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 991.616315][ C0] cpu_startup_entry+0x4f/0x60 [ 991.616331][ C0] rest_init+0x16b/0x2b0 [ 991.616344][ C0] ? acpi_subsystem_init+0x133/0x180 [ 991.616361][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 991.616382][ C0] start_kernel+0x3ee/0x4d0 [ 991.616400][ C0] x86_64_start_reservations+0x18/0x30 [ 991.616418][ C0] x86_64_start_kernel+0x130/0x190 [ 991.616435][ C0] common_startup_64+0x13e/0x148 [ 991.616453][ C0]