last executing test programs: 2m33.774862873s ago: executing program 1 (id=1763): socket(0x2b, 0x80801, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) (async) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, 0x0, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x4) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 2m33.573559491s ago: executing program 1 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x10002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1ff, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2866e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f000061ac00000000000000f500", "90be8b1c55f96400", [0x8a2]}}) 2m32.702061471s ago: executing program 1 (id=1767): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsmount(r2, 0x1, 0x7d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000005) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bind$alg(r5, 0x0, 0x0) r8 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000300)="30808d9b0a0201aa68ec2bb1c95d9e70b11a55c4b4fad45aa53404821129431e55", 0x21, r4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') preadv(r9, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/110, 0x6e}, {0x0, 0x34}], 0x2, 0x0, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000040)={'', 0x32, 0x38}, 0x3) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 2m31.785932787s ago: executing program 1 (id=1774): openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1566, &(0x7f0000000040)={0x0, 0x36d, 0x8000, 0x1, 0x33b}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2215, 0x7721, 0x32, 0x0, 0x0) r3 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xb3d9, 0x8, 0x3, 0x10002f0}, &(0x7f0000000280), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000100)={0x2, 0x80}) 2m30.19381999s ago: executing program 1 (id=1776): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000880)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801e4ffffffefff0200800000000002850000006e59000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x39) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r5, 0x5}) recvfrom$rxrpc(r5, &(0x7f0000000380)=""/58, 0x3a, 0x21, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x24) recvmmsg(r3, &(0x7f0000002540)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000780)=""/253, 0xfd}, 0xfffffffd}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/1, 0x1}], 0x1, &(0x7f0000001f40)=""/213, 0xd5}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/122, 0x7a}, {&(0x7f0000002680)=""/171, 0xab}, {&(0x7f0000001c00)=""/81, 0x51}], 0x4, &(0x7f0000001cc0)=""/225, 0xe1}, 0x5}, {{&(0x7f0000001dc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000002740)=""/253, 0xfd}], 0x2, &(0x7f0000002080)=""/123, 0x7b}, 0x4}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002100)=""/102, 0x66}, {&(0x7f0000002180)=""/183, 0xb7}, {&(0x7f0000002240)=""/254, 0xfe}, {&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/251, 0xfb}], 0x5, &(0x7f0000002500)=""/60, 0x3c}, 0x3}], 0x5, 0x2100, 0x0) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r7, r6}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x891) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00', r0}, 0x18) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a28d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.807539853s ago: executing program 1 (id=1778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) close(r1) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) accept4$unix(r1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680)) sync() 2m14.482284724s ago: executing program 32 (id=1778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) close(r1) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) accept4$unix(r1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680)) sync() 15.841956876s ago: executing program 4 (id=2291): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* '], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket(0x2d, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r6, 0x28) shutdown(r6, 0x0) 13.486887745s ago: executing program 4 (id=2303): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xb8000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='/dev/kvm\x00', 0x0) r6 = socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56", 0x84}], 0x1}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) 10.073272015s ago: executing program 4 (id=2312): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe2(0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x0, 0x3}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000200)=0x5aa) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xc1, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x7, 0x0, 0x99, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe5, 0x9}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0x7, 0xa, 0x4, 0x4], 0x4d}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x9, 0x3, 0x6, 0x3], 0xc}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x8, 0x0, "eb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xcd, 0x1, 0x3, 0x5, "f5", "0ab5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1a, 0x8, 0xb, {0x7, 0x25, 0x1, 0x81, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x0, 0xd, 'S;\'', "97"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x5, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x2800, 0x2, "700018"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x4, 0xff, {0x7, 0x25, 0x1, 0x2, 0xde, 0x7a3}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x3, 0x2, 0x10, 0xd}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x2, 0x64, 0x8, 0x7}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x37f2, 0x0, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0x0, 0x8}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io$uac1(r3, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0x4, 0x3a, {0x3a, 0x5, "ca2b40052d9c07117a577a28a7e688a8ee0f13516aecf50e26308d6fc0179e9bf01762a1a3da4d3f579a1cc5eebc5975283e79178382b054"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x30, 0x90, "92b70be6871ac7bccba05ebcc389c969aa7856d30ec0378bd01cf45d158346487be23b0eab1791096f5ce301b30b0d7c21b4705662ebd2e83d752c4db7a73c36279d32f00f3420aae8169977c7511e43b8a1bed1a5a05e30d7056da0c40653fef1194d96d2d5f37de3710126a725ad841d7e515a8bff9c529ae6d75e2b4abb1595f5293653517e6e1e4b4009952633f1"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000700)=ANY=[@ANYBLOB="e32c0f0c8a630728ddc0bc4ffd0eaf00"], &(0x7f0000000580)={0x20, 0x82, 0x2, "f5d7"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "e90f"}, &(0x7f0000000600)={0x20, 0x84, 0x2, "933d"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "39df19"}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540), 0x60400, 0x0) write$dsp(r4, &(0x7f0000000740)="c95624ff164ad3a91a06526828c177a269e431aac709ad91739666ad308421d4650f62a9288c33a5", 0x28) 8.041279213s ago: executing program 0 (id=2319): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x8b, &(0x7f0000000140)=""/139, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x4, 0x3, 0x7, 0x5}, {0x0, 0x1, 0x7, 0x2}, {0x5, 0x2, 0x5, 0xa}], 0x10, 0x6}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="189eca7b4320cc0c07834e0e6d7c7a54b0ce2afe3a7c44e4c8808ef3667b5e0ab9711dfcbced0608b80cf9856105df027f84f720df1031ef", @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000010301040000000000000000000000000c0002100000000000000000"], 0x20}}, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x6}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, 0x0, 0x25, 0x1c, @void}, 0x10) 6.981048859s ago: executing program 0 (id=2323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0xb4}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x5, 0x7, 0x10, 0x1}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000008000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af0fff1030000b5090000000000007b9af0ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018260000aefc42ab25afc7ad173d31741e8a0e1e253cd5f10b1733cd01a04aa9e3e0a33a7d93e7b10b84e7b00ca659266ecb9f93445bf4147fba3bc5", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r10 = socket(0x11, 0x2, 0x0) setsockopt(r10, 0x107, 0x12, &(0x7f0000000000)="11106e00", 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.975399451s ago: executing program 4 (id=2324): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x6}, {}, 0x20, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setresgid(0x0, 0xffffffffffffffff, 0xee00) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone3(&(0x7f0000000380)={0x40000000, 0x0, 0x0, &(0x7f0000000140), {0x13}, 0x0, 0x0, &(0x7f00000002c0)=""/174, &(0x7f00000001c0)}, 0x58) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)="869581f6b2db9755defec34e88749df586ce32754838d60ad8eea7b92a47eb52c2eeba5803c97ff0f9f0671c7aa7476102a5f8ddf32bbd9059b085fe56c321c9b4714587987bdf818582868ec59c4fed4e577140f3c81b1b8eaa09aa8de764f3bd9a3cffa35a7e3db2116154316c9a98a82447d1e0fb73b21279f1fd6d7dde7e4de30fd41a9927dab35fc5b8cf6dd0bd3eb8024179547dfc60c2dcf10d", &(0x7f00000005c0), 0x1003, r8, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)="869581f6b2db9755defec34e88749df586ce32754838d60ad8eea7b92a47eb52c2eeba5803c97ff0f9f0671c7aa7476102a5f8ddf32bbd9059b085fe56c321c9b4714587987bdf818582868ec59c4fed4e577140f3c81b1b8eaa09aa8de764f3bd9a3cffa35a7e3db2116154316c9a98a82447d1e0fb73b21279f1fd6d7dde7e4de30fd41a9927dab35fc5b8cf6dd0bd3eb8024179547dfc60c2dcf10d", &(0x7f00000005c0), 0x1003, r8, 0x4}, 0x38) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x80) 6.949226604s ago: executing program 2 (id=2325): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r5, &(0x7f0000000300)='1\x00', 0x2) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 6.527150457s ago: executing program 0 (id=2326): syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x2400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000300)=0xc1, 0x2) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x8, 0x0, 0x3a2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x30, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 6.197242975s ago: executing program 3 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5483) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000098000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/233) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = syz_io_uring_setup(0x132, &(0x7f00000004c0)={0x0, 0x5cb1, 0x2, 0x203, 0xe4}, &(0x7f0000000540), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040)='s/', 0x2) 5.657567219s ago: executing program 2 (id=2330): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) syz_emit_ethernet(0x7a, &(0x7f0000001440)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x128, 0x0, 0x2, 0x70bd2b, 0x1, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008000) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x440000, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000003c0)=0x74) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x40, 0x1, 0x8, 0x4, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 5.469409918s ago: executing program 2 (id=2331): syz_usb_connect$uac1(0x2, 0x8a, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030188e448a81abe841f060904000000010100000a240108e3000802be"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffe, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) socket$netlink(0x10, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x8f, 0x8f, 0xb4, 0x10, 0x1eda, 0x2315, 0xceba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x35, 0xf, 0x80, 0x2, [{{0x9, 0x4, 0x6a, 0x0, 0x1, 0x1a, 0xbd, 0x34, 0x5, [], [{{0x9, 0x5, 0x5, 0x3, 0x40, 0x8, 0x7, 0x9}}]}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010800000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x50}}, 0x0) syz_usb_connect$uac1(0x3, 0xc9, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x1, 0xa0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x4c}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0xf, "9d9e"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x4, 0x8], 0xf5}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x80bb, 0x2, "bc990d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x40, 0x1, "cd"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0xd, 0x1, "8a30c6f9d8"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x8, 0xeb, "6a6ea90a6c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe5, 0x9, 0xe, {0x7, 0x25, 0x1, 0x3, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xf001, 0x8, 0xab, "5004"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x5, 0x6, {0x7, 0x25, 0x1, 0x83, 0xc6, 0x1000}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x3, 0x47, 0x20, 0x80}, 0x52, &(0x7f0000000180)={0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x10, 0x0, 0xe, [0xffc0c0, 0xc000, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6fb2a5c, 0xf, 0xd1b, [0x0, 0x3f00, 0xc0, 0xc000, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x6, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xe, 0x5, 0x6, 0x4}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}, {0x95, &(0x7f0000000240)=@string={0x95, 0x3, "93732691bcfb5110722370bf1a3d91b3018b77fd54f20103eb1cfb1e3f6011f55856dfa04fa14a1e89bb95aed7cd3827f510cfc721788e2840bdc82b3bf4a9b0eeec89085851e3d26e39e92e766186300892c3188f2e0d9ddc1a6bee73129dc6beb72220143fec0db6f85db801fc8b6a6a528f52effe4adebbef75fd789a3e946625fa9d10db1f90df0ae20b6c874b8c8bafa9"}}]}) 5.295010434s ago: executing program 3 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCL_BLANKSCREEN(r9, 0x4b67, &(0x7f0000000180)) io_uring_enter(r7, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@ipv6_delroute={0x40, 0x19, 0x2, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x4, 0xfe, 0x3, 0xc8, 0x1}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x4, 0x7, r3}}, @RTA_PREF={0x5, 0x14, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001}, 0x4) socket(0x8, 0x80000, 0x14b) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 4.326326175s ago: executing program 3 (id=2335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x8, 0xff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x400, 0x3, 0x0, 0x0, @msi={0x2, 0x807, 0xa, 0x7}}]}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.754079519s ago: executing program 4 (id=2338): prlimit64(0x0, 0x6, &(0x7f0000000100)={0x7, 0x1ff}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x1000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x9, @vbi={0xb5, 0x0, 0x3, 0x42474752, [0x2, 0x8000000], [0x8200, 0x1]}}, 0x4}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x3, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getroute={0x14, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x78}}, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000223e0224000100000000090400000103000000092105000001220500090581030002000007"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x1, &(0x7f00000001c0)='@') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.59280042s ago: executing program 3 (id=2339): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) close(r1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40000) fsopen(&(0x7f0000000000)='autofs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0xf) (async) close(r1) (async) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40000) (async) 3.521665977s ago: executing program 3 (id=2340): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f00090506022000020002090582"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3.469556144s ago: executing program 0 (id=2341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0xa, 0x7ffc0001}]}) nanosleep(&(0x7f0000000200), 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r7) r8 = open(0x0, 0x1298c2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000801000100000000000000"], 0xb8}}, 0x0) ftruncate(r8, 0x200004) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r9, 0x1, 0x100000000, 0x10000) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.493165649s ago: executing program 5 (id=2343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000004c0)='nfs4\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x64, 0x49, 0x101, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x0, 0x7f}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xb4e2c90aa067204c}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x64}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) 2.359292742s ago: executing program 0 (id=2344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='svc_xprt_dequeue\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x20004090) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x6}}, 0x18) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="140127bd7000fedbdf25010000000000000009410000004c00180000000073cde63000000000000000000000000000000000000000000000000000000000040000000000000000000000000080eb00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000101) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xe669, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) 2.318824086s ago: executing program 2 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCL_BLANKSCREEN(r9, 0x4b67, &(0x7f0000000180)) io_uring_enter(r7, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@ipv6_delroute={0x40, 0x19, 0x2, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x4, 0xfe, 0x3, 0xc8, 0x1}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x4, 0x7, r3}}, @RTA_PREF={0x5, 0x14, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001}, 0x4) socket(0x8, 0x80000, 0x14b) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 1.031770311s ago: executing program 0 (id=2346): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3220cdd, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x0) 1.026683697s ago: executing program 5 (id=2347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pipe2(0x0, 0x0) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), 0x0}}, &(0x7f0000bbdffc)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) getpid() (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, 0x0, &(0x7f0000000100)) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102380, 0x18fec) (async) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 1.02492598s ago: executing program 2 (id=2348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000004, 0xffffffffffffffff}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5d0027c895b7352b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000305, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 885.816604ms ago: executing program 5 (id=2349): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') 866.839168ms ago: executing program 5 (id=2350): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r4], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r4], 0x38}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) (async) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) (async) 324.521994ms ago: executing program 5 (id=2351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="181000000000000000000000fcffff0118110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300008000000091d57a9e830b04f6be09000000000000551f0000001811000044e6bdd126af96e7b339", @ANYRES32, @ANYBLOB="0008000000000000b7080008e2d0e4747b020000f8ffffffb703000008000000b70400000200000085000000820000001811000000000000000000000000000000000000192e746a65d7fb94b0d4b6c9d8ae904c02f15493a27d17474a863d22645621ae8b5283eacd7c257552bd8a7500"/124, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './cgroup.net/devices.allow\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x80) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) stat(&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000380)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 307.161183ms ago: executing program 3 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x737222) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) (async) timer_create(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3000000010000100000000000000000000000100", @ANYRES32=r1, @ANYBLOB="000000000000000010001a800c000a800500080002000000"], 0x30}}, 0x0) 301.030193ms ago: executing program 4 (id=2353): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x6, 0x2003) syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3}) add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) r4 = userfaultfd(0x80801) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0x20f0f002, 0x5}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@delqdisc={0x110, 0x25, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xfff7, 0x4}, {0x6, 0xffe0}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcdf}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc370}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}]}, 0x110}}, 0x0) recvmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4096, 0xe078}], 0x1}, 0x21) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a01700000000b3"], 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) 1.241746ms ago: executing program 2 (id=2354): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc2d, 0x20182) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x19, 0x2000a, 0x7ff0bdc1, 0x0, 0x0, 0x6, 0x0}) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "2be9192e134934371f20fc664918e3e09c78f7ab3012e2397d43a41dd59111f2", "4d208a0bf892aceff916fc5c2655406702f03088c42eb5b2adb7719df8cf4d1e", "aacae6fe743cd3b8a6f6e21161ca85731e264f6655fec2dfff30f06c2458c26c", "f8a5a6d6884854e17058000d6d05ff1190ee094164d94a036c653ff3ec76f16d", "3d358b4fbb139e74d533b3ee1c5d0a8394e27d9eee171fe899dbd36a499335d1", "238d42bf6be2711c19d25cfc", 0x0, 0x0, 0x8, 0x9, 0x7}}) fadvise64(0xffffffffffffffff, 0x19, 0xfffffffffffffffe, 0x4) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000180)=""/28) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x406, r6) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)={0x40000012}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000080)={0x40000010}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) copy_file_range(r2, &(0x7f0000000200)=0x7fff, r2, &(0x7f0000000300)=0x1, 0x1, 0x0) 0s ago: executing program 5 (id=2355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x1000000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xe, 0x9}}, 0x0) pread64(r6, &(0x7f0000000040)=""/152, 0x98, 0x7) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)=@ng={0x4, 0x12}, 0x2, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x1, 0x401, 0x3, 0x9, 0x1003, 0x1c82, 0x5, 0x3bb, 0x802, 0x1600, 0x5, 0x20000001, 0x2, 0xe1cb, 0x13352f60, 0x0, 0x400, 0x8, 0x6, 0x5, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) kernel console output (not intermixed with test programs): mber 7 [ 538.752526][ T5879] libceph: connect (1)[c::]:6789 error -13 [ 539.178544][ T5895] dvb-usb: bulk message failed: -22 (4/0) [ 539.287308][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 539.294910][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 539.302345][ T5938] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.331232][ T5938] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.342956][T13625] ceph: No mds server is up or the cluster is laggy [ 539.359950][ T5895] dvb-usb: error -22 while querying for an remote control event. [ 539.365833][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 539.402372][ T5938] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 539.431973][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.647972][ T5879] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 539.723787][ T5938] usb 4-1: config 0 descriptor?? [ 539.874852][ T6883] net_ratelimit: 25 callbacks suppressed [ 539.890090][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 539.995261][ T5879] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.014301][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.030526][ T49] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 540.041241][ T5879] usb 3-1: Product: syz [ 540.048365][ T5879] usb 3-1: Manufacturer: syz [ 540.053085][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 540.069349][ T5879] usb 3-1: SerialNumber: syz [ 540.088614][ T5879] usb 3-1: config 0 descriptor?? [ 540.162258][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 540.272501][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 540.297226][ T5879] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.332804][ T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 540.360135][ T5938] hid_parser_main: 8 callbacks suppressed [ 540.360148][ T5938] nzxt-smart2 0003:1E71:2009.002A: unknown main item tag 0x0 [ 540.374843][ T5938] nzxt-smart2 0003:1E71:2009.002A: unknown main item tag 0x0 [ 540.382814][ T5938] nzxt-smart2 0003:1E71:2009.002A: unknown main item tag 0x0 [ 540.382832][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 540.390296][ T5938] nzxt-smart2 0003:1E71:2009.002A: unknown main item tag 0x0 [ 540.405165][ T5938] nzxt-smart2 0003:1E71:2009.002A: unknown main item tag 0x0 [ 540.415895][ T5938] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 540.483066][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 540.506456][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.525996][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 540.547034][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.562821][T13645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.567183][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.574309][T13645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.628815][T13635] netlink: 'syz.2.1943': attribute type 13 has an invalid length. [ 540.629461][ T49] usb 6-1: Product: syz [ 540.664936][ T49] usb 6-1: Manufacturer: syz [ 540.674869][ T49] usb 6-1: SerialNumber: syz [ 540.680164][T13635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.688842][ T49] usb 6-1: config 0 descriptor?? [ 540.736783][ T49] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.739072][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 540.750188][ T49] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 540.762671][ T5879] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 540.794359][ T5879] usb 3-1: USB disconnect, device number 103 [ 540.840299][ T5935] usb 4-1: USB disconnect, device number 84 [ 540.894265][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 541.002698][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 541.338010][ T49] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 541.414758][T13650] vivid-007: disconnect [ 541.835209][T13655] l2tp_ppp: sess 2/0: no socket in recv [ 541.948369][T13655] exFAT-fs (loop3): unable to read boot sector [ 541.956320][T13655] exFAT-fs (loop3): failed to read boot sector [ 541.962756][T13655] exFAT-fs (loop3): failed to recognize exfat type [ 542.050024][ T49] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 542.062132][ T49] em28xx 6-1:0.0: board has no eeprom [ 542.140994][T13647] vivid-007: reconnect [ 542.167713][ T49] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 542.177603][ T49] em28xx 6-1:0.0: dvb set to bulk mode. [ 542.186498][ T5935] em28xx 6-1:0.0: Binding DVB extension [ 542.232101][ T49] usb 6-1: USB disconnect, device number 8 [ 542.281131][ T49] em28xx 6-1:0.0: Disconnecting em28xx [ 542.306629][ T5935] em28xx 6-1:0.0: Registering input extension [ 542.320804][ T49] em28xx 6-1:0.0: Closing input extension [ 542.345788][ T49] em28xx 6-1:0.0: Freeing device [ 542.573858][ T96] block nbd1: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 270 seconds [ 542.586738][ T96] block nbd1: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 270 seconds [ 542.597769][ T96] block nbd1: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 270 seconds [ 542.608809][ T96] block nbd1: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 270 seconds [ 542.627763][T13661] kAFS: unable to lookup cell 'Þ({^ú@' [ 542.672691][ T5879] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 542.857990][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 542.873060][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.900451][ T5879] usb 3-1: not running at top speed; connect to a high speed hub [ 542.926835][ T5879] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 542.947549][ T5879] usb 3-1: config 129 has no interface number 0 [ 542.955248][ T5879] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 542.967436][ T5879] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 542.979380][ T5879] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 542.993026][ T5879] usb 3-1: config 129 interface 28 has no altsetting 0 [ 543.001451][ T5879] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 543.010736][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.018955][ T5879] usb 3-1: Product: syz [ 543.024075][ T5879] usb 3-1: Manufacturer: syz [ 543.028759][ T5879] usb 3-1: SerialNumber: syz [ 543.037691][T13659] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.292286][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.355129][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.453439][ T5879] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 543.465802][ T5879] etas_es58x 3-1:129.28: could not retrieve the product info string [ 543.503562][ T5879] usb 3-1: USB disconnect, device number 104 [ 543.511122][ T5879] etas_es58x 3-1:129.28: Disconnecting syz syz [ 543.527975][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'. [ 544.900633][T13696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59146 sclass=netlink_route_socket pid=13696 comm=syz.5.1959 [ 544.987420][ T6883] net_ratelimit: 28 callbacks suppressed [ 544.987434][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 545.035615][ T30] audit: type=1400 audit(1766715258.831:1048): avc: denied { mount } for pid=13693 comm="syz.5.1959" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 545.550638][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 545.568291][ T30] audit: type=1400 audit(1766715259.361:1049): avc: denied { mounton } for pid=13693 comm="syz.5.1959" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 545.595411][T13694] overlay: filesystem on ./bus is read-only [ 545.690482][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 545.822375][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 546.062302][ T5895] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 546.162339][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 546.232823][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 546.240247][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.254898][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.272910][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.280989][ T5895] usb 4-1: Product: syz [ 546.287739][ T5895] usb 4-1: Manufacturer: syz [ 546.293032][ T5895] usb 4-1: SerialNumber: syz [ 546.352973][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 546.385595][ T5938] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 546.416410][ T5895] usb 4-1: config 0 descriptor?? [ 546.423902][ T5895] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.433728][ T5895] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 546.452549][ T5900] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 546.462655][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 546.583062][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 546.828447][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 546.914450][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 546.921826][ T5938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 546.931001][ T5900] usb 6-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 546.940414][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.948850][ T5938] usb 3-1: config 11 has an invalid interface number: 4 but max is 0 [ 546.950540][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 546.957021][ T5900] usb 6-1: Product: syz [ 546.957038][ T5900] usb 6-1: Manufacturer: syz [ 546.957053][ T5900] usb 6-1: SerialNumber: syz [ 546.980357][ T5938] usb 3-1: config 11 has no interface number 0 [ 546.987472][ T5938] usb 3-1: config 11 interface 4 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 546.997695][ T5938] usb 3-1: config 11 interface 4 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 547.008531][ T5938] usb 3-1: config 11 interface 4 has no altsetting 0 [ 547.017139][ T5938] usb 3-1: New USB device found, idVendor=19d2, idProduct=1255, bcdDevice=a8.66 [ 547.026301][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.034416][ T5938] usb 3-1: Product: syz [ 547.038650][ T5938] usb 3-1: Manufacturer: syz [ 547.043302][ T5938] usb 3-1: SerialNumber: syz [ 547.215250][T13707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1962'. [ 547.227889][ T5900] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 547.244280][ T5900] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 547.267414][ T5900] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 547.278452][ T5938] usb 3-1: USB disconnect, device number 105 [ 547.292964][ T5895] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 547.304095][ T5900] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 547.323604][ T5900] usb 6-1: USB disconnect, device number 9 [ 547.339154][ T5900] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 547.362403][ T5900] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 547.374818][ T5900] visor 6-1:1.0: device disconnected [ 547.896873][T13719] fuse: Bad value for 'fd' [ 548.141703][ T5895] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 548.161445][ T5895] em28xx 4-1:0.0: board has no eeprom [ 548.253034][ T5895] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 548.353019][ T5895] em28xx 4-1:0.0: dvb set to bulk mode. [ 548.363817][ T5935] em28xx 4-1:0.0: Binding DVB extension [ 548.378558][ T5895] usb 4-1: USB disconnect, device number 85 [ 548.410171][ T5895] em28xx 4-1:0.0: Disconnecting em28xx [ 548.464948][ T5935] em28xx 4-1:0.0: Registering input extension [ 548.484641][ T5895] em28xx 4-1:0.0: Closing input extension [ 548.505952][ T5895] em28xx 4-1:0.0: Freeing device [ 548.706889][T13736] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 549.679229][T13749] netlink: 'syz.5.1969': attribute type 1 has an invalid length. [ 549.798405][T13746] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1969'. [ 549.827147][T13746] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1969'. [ 549.854990][T13749] binder: BINDER_SET_CONTEXT_MGR already set [ 549.874226][T13749] binder: 13726:13749 ioctl 4018620d 200000004a80 returned -16 [ 549.893987][T13746] binder: 13726:13746 ioctl c0306201 2000000004c0 returned -22 [ 550.322978][ T6883] net_ratelimit: 17 callbacks suppressed [ 550.323012][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 550.602708][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 550.712752][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 550.923383][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 550.986881][T13769] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1979'. [ 551.088998][T13772] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 551.109825][T13772] bond1 (unregistering): Released all slaves [ 551.152243][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 551.264722][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 551.357732][ C1] sd 0:0:1:0: [sda] tag#7448 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.368206][ C1] sd 0:0:1:0: [sda] tag#7448 CDB: Read(6) 08 00 bc b2 00 00 [ 551.382837][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 551.459993][ T30] audit: type=1400 audit(1766715265.251:1050): avc: denied { write } for pid=13782 comm="syz.5.1984" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.498581][ T30] audit: type=1400 audit(1766715265.251:1051): avc: denied { ioctl } for pid=13782 comm="syz.5.1984" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.504133][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 551.689773][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 551.818451][ T30] audit: type=1400 audit(1766715265.591:1052): avc: denied { shutdown } for pid=13784 comm="syz.5.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.845225][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 551.898067][T13787] ceph: No mds server is up or the cluster is laggy [ 551.918470][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 551.935490][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 552.890822][T13804] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1989'. [ 552.981786][T13804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.992972][T13804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.003044][T13804] bond0 (unregistering): Released all slaves [ 553.393077][ T5895] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 553.552763][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 553.557264][T13820] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 553.568972][ T5895] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.587920][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 553.598215][ T5895] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 553.631430][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.663612][ T5895] usb 3-1: config 0 descriptor?? [ 553.757151][ T30] audit: type=1400 audit(1766715267.551:1053): avc: denied { open } for pid=13829 comm="syz.3.1997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 553.839470][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 553.850262][T13831] 9p: Bad value for 'rfdno' [ 553.972271][ T5938] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 554.133319][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 554.137525][ T5895] nzxt-smart2 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 554.175159][ T5938] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.233049][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 554.239688][ T5938] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 554.286136][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.322469][ T5938] usb 6-1: config 0 descriptor?? [ 554.746879][ T792] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 555.277436][ T5938] nzxt-smart2 0003:1E71:2009.002C: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 555.352276][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 555.374927][ T792] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.397825][ T38] net_ratelimit: 20 callbacks suppressed [ 555.397841][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 555.424428][ T792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 555.457049][ T792] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 555.476601][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.495032][ T792] usb 4-1: config 0 descriptor?? [ 555.628964][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1996'. [ 555.687954][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 555.746843][T13854] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1996'. [ 555.756218][T13849] wireguard0: entered promiscuous mode [ 555.766147][T13849] wireguard0: entered allmulticast mode [ 555.784061][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 555.991615][ T6521] usb 3-1: USB disconnect, device number 106 [ 556.013661][ T792] nzxt-smart2 0003:1E71:2009.002D: hidraw2: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 556.143586][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 556.173294][T13838] : renamed from bond_slave_0 [ 556.262838][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 556.274467][ T792] usb 6-1: USB disconnect, device number 10 [ 556.392792][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 556.523260][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 556.703034][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 556.832914][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 556.857541][T13865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 556.955481][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 557.696542][T13876] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2010'. [ 557.709041][ T30] audit: type=1400 audit(1766715271.491:1054): avc: denied { setopt } for pid=13875 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 557.803198][ T5895] usb 4-1: USB disconnect, device number 86 [ 557.997896][T13876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.010609][T13876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.020295][T13876] bond0 (unregistering): Released all slaves [ 558.035850][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 558.180686][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 558.191667][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2012'. [ 558.202961][T13882] netlink: 'syz.3.2011': attribute type 2 has an invalid length. [ 558.217236][T13882] : entered promiscuous mode [ 558.597809][ T30] audit: type=1400 audit(1766715272.391:1055): avc: denied { setopt } for pid=13890 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.905353][ T30] audit: type=1400 audit(1766715272.701:1056): avc: denied { mounton } for pid=13890 comm="syz.3.2015" path="/377/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.928585][T13893] fuse: Unknown parameter 'user_i00000000000000000000' [ 558.966625][ T30] audit: type=1400 audit(1766715272.741:1057): avc: denied { read } for pid=13890 comm="syz.3.2015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.988927][ T30] audit: type=1400 audit(1766715272.741:1058): avc: denied { read } for pid=13890 comm="syz.3.2015" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 559.012101][ T30] audit: type=1400 audit(1766715272.751:1059): avc: denied { open } for pid=13890 comm="syz.3.2015" path="/377/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 559.103982][ T30] audit: type=1400 audit(1766715272.751:1060): avc: denied { read } for pid=13890 comm="syz.3.2015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 559.127682][ T30] audit: type=1400 audit(1766715272.751:1061): avc: denied { read } for pid=13890 comm="syz.3.2015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 559.462862][ T5935] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 559.593782][ T30] audit: type=1400 audit(1766715273.391:1062): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 559.627871][ T5935] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 559.637489][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.660385][ T5935] usb 6-1: config 0 descriptor?? [ 559.874658][ T5935] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 559.962705][ T6521] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 560.091676][ T5935] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 560.099370][ T5935] [drm] Initialized udl on minor 2 [ 560.122410][ T6521] usb 4-1: Using ep0 maxpacket: 16 [ 560.129095][ T6521] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.141067][ T6521] usb 4-1: config 0 interface 0 has no altsetting 0 [ 560.148143][ T6521] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 560.157873][ T6521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.168267][ T6521] usb 4-1: config 0 descriptor?? [ 560.326605][ T5935] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 560.340441][ T5935] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 560.424562][ T6018] net_ratelimit: 18 callbacks suppressed [ 560.424582][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 560.533973][T13895] 9p: Bad value for 'rfdno' [ 560.539337][ T5895] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.539567][ T5879] usb 6-1: USB disconnect, device number 11 [ 560.549491][ T5895] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 560.565235][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 560.585042][ T6521] nzxt-smart2 0003:1E71:2009.002E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 560.682686][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 560.792867][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 560.904165][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 561.025343][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 561.142768][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 561.494731][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 561.622870][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 561.742839][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 561.842287][ T792] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 561.916592][ T5879] usb 4-1: USB disconnect, device number 87 [ 562.023825][ T792] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.038913][ T792] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 562.049443][ T792] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.073888][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.093670][T13922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.111717][ T792] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.415795][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.482911][ T5935] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 562.486090][ T792] usb 6-1: USB disconnect, device number 12 [ 562.655508][ T5935] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 562.698537][ T5935] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 563.277670][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 563.287045][ T5935] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 563.296992][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.317919][ T5935] usb 3-1: config 0 descriptor?? [ 563.786105][ T5935] koneplus 0003:1E7D:2E22.002F: unbalanced delimiter at end of report description [ 563.867242][ T5935] koneplus 0003:1E7D:2E22.002F: parse failed [ 563.874046][ T5935] koneplus 0003:1E7D:2E22.002F: probe with driver koneplus failed with error -22 [ 563.954792][ T792] usb 3-1: USB disconnect, device number 107 [ 564.162231][ T5879] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 564.284745][T13961] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2034'. [ 564.336404][ T5879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.353897][ T5879] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 564.372335][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 564.382231][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.404315][T13956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.421304][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.734957][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.749053][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.772294][ T5935] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 564.829882][ T5895] usb 4-1: USB disconnect, device number 88 [ 564.946450][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.967232][ T5935] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 564.992654][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.006659][ T5935] usb 3-1: config 0 descriptor?? [ 565.017952][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 565.477623][ T3794] net_ratelimit: 28 callbacks suppressed [ 565.477640][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 565.668638][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 565.854166][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 565.972841][T13245] bond1: (slave geneve2): failed to get link speed/duplex [ 566.031043][T13994] Invalid source name [ 566.035133][T13994] UBIFS error (pid: 13994): cannot open "/dev/rnullb0", error -22 [ 566.170059][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 566.324245][ T30] audit: type=1400 audit(1766715280.121:1063): avc: denied { ioctl } for pid=13993 comm="syz.3.2043" path="/384/file0" dev="tmpfs" ino=2061 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 566.349587][T13997] blktrace: Concurrent blktraces are not allowed on loop6 [ 566.422249][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 566.532830][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 566.659664][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 566.773898][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 566.883021][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 567.098736][T14003] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2046'. [ 567.347148][T14013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.354404][T14013] IPv6: NLM_F_CREATE should be set when creating new route [ 567.361632][T14013] IPv6: NLM_F_CREATE should be set when creating new route [ 567.440330][T14013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.551385][ T5935] pwc: recv_control_msg error -71 req 02 val 2400 [ 567.558675][ T5935] pwc: recv_control_msg error -71 req 02 val 2600 [ 567.575124][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 567.583632][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 567.590570][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 567.598094][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 567.611831][ T30] audit: type=1400 audit(1766715281.401:1064): avc: denied { getopt } for pid=14014 comm="syz.3.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 567.635933][ T5935] pwc: Registered as video103. [ 567.675102][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 567.704624][ T5935] usb 3-1: USB disconnect, device number 108 [ 567.859443][T14022] sg_write: process 151 (syz.5.2051) changed security contexts after opening file descriptor, this is not allowed. [ 567.972385][T14026] netlink: 'syz.2.2052': attribute type 2 has an invalid length. [ 568.102336][ T30] audit: type=1400 audit(1766715281.841:1065): avc: denied { link } for pid=14021 comm="syz.2.2052" name="#34" dev="tmpfs" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 568.285373][T14022] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2051'. [ 568.314530][ T30] audit: type=1400 audit(1766715281.841:1066): avc: denied { rename } for pid=14021 comm="syz.2.2052" name="#35" dev="tmpfs" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 568.504402][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 568.514852][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'. [ 568.650001][ T30] audit: type=1400 audit(1766715282.391:1067): avc: denied { getopt } for pid=14031 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 568.762816][ T5935] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 569.834862][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 569.845488][ T5935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 569.865915][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 570.180070][ T5935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 570.192092][ T5935] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 570.204820][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.213481][ T5935] usb 6-1: Product: syz [ 570.222820][ T5935] usb 6-1: Manufacturer: syz [ 570.227426][ T5935] usb 6-1: SerialNumber: syz [ 570.234903][ T5935] usb 6-1: config 0 descriptor?? [ 570.242863][ T5935] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 570.530493][ T5935] scsi host1: usb-storage 6-1:0.0 [ 570.556711][ T5935] usb 6-1: USB disconnect, device number 13 [ 570.587082][ T3533] net_ratelimit: 20 callbacks suppressed [ 570.587102][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 570.743271][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 570.852241][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 570.992875][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 571.157097][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 571.275336][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 571.325409][ T30] audit: type=1400 audit(1766715285.121:1068): avc: denied { getopt } for pid=14079 comm="syz.2.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 571.393001][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 571.438578][ T30] audit: type=1400 audit(1766715285.171:1069): avc: denied { ioctl } for pid=14079 comm="syz.2.2066" path="socket:[40224]" dev="sockfs" ino=40224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 571.512803][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 571.531154][T14091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2071'. [ 571.625313][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 571.876653][ T5935] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 571.996033][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 572.086309][ T5935] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 572.096526][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.104902][ T5935] usb 4-1: Product: syz [ 572.109069][ T5935] usb 4-1: Manufacturer: syz [ 572.115230][ T5935] usb 4-1: SerialNumber: syz [ 572.172349][T14103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 572.654889][ T96] block nbd1: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 300 seconds [ 572.665813][ T96] block nbd1: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 300 seconds [ 572.677074][ T96] block nbd1: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 300 seconds [ 572.688176][ T96] block nbd1: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 300 seconds [ 573.288884][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.300239][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.408294][ T5935] rtl8150 4-1:1.0: couldn't reset the device [ 573.419280][ T5935] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 573.438163][ T5935] usb 4-1: USB disconnect, device number 89 [ 573.612923][ T6521] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 573.990027][ T6521] usb 3-1: Using ep0 maxpacket: 32 [ 574.054230][ T6521] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 574.089108][ T6521] usb 3-1: config 0 has no interface number 0 [ 574.095767][ T30] audit: type=1400 audit(1766715287.891:1070): avc: denied { map } for pid=14124 comm="syz.5.2082" path="socket:[40294]" dev="sockfs" ino=40294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.117555][ T6521] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 574.153623][ T6521] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 574.198926][ T6521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.242914][ T6521] usb 3-1: Product: syz [ 574.247333][ T6521] usb 3-1: Manufacturer: syz [ 574.252035][ T6521] usb 3-1: SerialNumber: syz [ 574.308200][ T6521] usb 3-1: config 0 descriptor?? [ 574.654708][ T6521] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 574.666097][ T6521] em28xx 3-1:0.132: Video interface 132 found: [ 575.615590][ T155] net_ratelimit: 21 callbacks suppressed [ 575.615611][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 575.752263][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 575.931159][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 575.941975][ T6521] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 576.011600][ T6521] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 576.024733][ T6521] em28xx 3-1:0.132: board has no eeprom [ 576.062284][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 576.096434][ T6521] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 576.131306][ T6521] em28xx 3-1:0.132: analog set to bulk mode. [ 576.174932][ T6265] em28xx 3-1:0.132: Registering V4L2 extension [ 576.182309][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 576.254711][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 576.281089][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 576.296008][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 576.313084][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 576.323111][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 576.367929][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 576.401756][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 576.429920][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 576.444080][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 576.456816][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 576.501509][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 576.518121][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 576.530425][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 576.539792][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 576.549083][ T6265] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 576.559982][ T6265] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 576.568377][ T6265] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 576.572241][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 576.576010][ T6265] em28xx 3-1:0.132: No AC97 audio processor [ 576.668487][ T6521] usb 3-1: USB disconnect, device number 109 [ 576.682939][ T6265] usb 3-1: Decoder not found [ 576.687555][ T6265] em28xx 3-1:0.132: failed to create media graph [ 576.695451][ T6521] em28xx 3-1:0.132: Disconnecting em28xx [ 576.701362][ T6265] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 576.706545][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 576.718698][ T6265] em28xx 3-1:0.132: Remote control support is not available for this card. [ 576.731893][ T6521] em28xx 3-1:0.132: Closing input extension [ 576.745923][ T6521] em28xx 3-1:0.132: Freeing device [ 576.832264][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 577.928063][ T30] audit: type=1400 audit(1766715291.721:1071): avc: denied { read } for pid=14181 comm="syz.2.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 579.765932][ T30] audit: type=1400 audit(1766715293.561:1072): avc: denied { getopt } for pid=14196 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 579.835663][T14201] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2101'. [ 579.868816][T14201] unsupported nlmsg_type 40 [ 579.905579][T14201] syz_tun: entered allmulticast mode [ 579.999483][T14201] dvmrp8: entered allmulticast mode [ 580.042267][T14210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14210 comm=syz.0.2104 [ 580.152789][ T6265] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 580.477880][T14196] syz_tun: left allmulticast mode [ 580.553769][ T6265] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 580.565999][ T6265] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 580.595651][ T6265] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 580.631028][ T6265] usb 6-1: config 220 has no interface number 2 [ 580.638651][ T6265] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 580.654847][ T3794] net_ratelimit: 24 callbacks suppressed [ 580.654863][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 580.655913][ T6265] usb 6-1: config 220 interface 0 has no altsetting 0 [ 580.704728][ T6265] usb 6-1: config 220 interface 76 has no altsetting 0 [ 580.729343][ T6265] usb 6-1: config 220 interface 1 has no altsetting 0 [ 580.755705][ T6265] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 580.766147][ T6265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.779695][ T6265] usb 6-1: Product: syz [ 580.783528][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 580.788542][ T6265] usb 6-1: Manufacturer: syz [ 580.804634][ T6265] usb 6-1: SerialNumber: syz [ 580.894311][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 580.952207][ T5879] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 581.002729][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 581.064950][ T6265] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 581.073055][ T6265] uvcvideo 6-1:220.0: No valid video chain found. [ 581.079513][ T6265] usb 6-1: selecting invalid altsetting 0 [ 581.099832][ T6265] usb 6-1: selecting invalid altsetting 0 [ 581.108927][ T6265] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 581.115854][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 581.119031][ T5935] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 581.137482][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 581.145383][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 581.153873][ T6265] usb 6-1: USB disconnect, device number 14 [ 581.182868][ T5879] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 581.197913][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.208862][ T5879] usb 4-1: config 0 descriptor?? [ 581.216701][T14217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 581.225850][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 581.262734][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 581.373020][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 581.424256][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.434631][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.436418][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.449061][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.454958][ T5935] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 581.469111][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 581.471782][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.477715][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 581.493186][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 581.774722][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 581.819826][ T5879] usb 4-1: USB disconnect, device number 90 [ 581.890312][ T5935] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 581.899955][ T5935] usb 3-1: no configuration chosen from 1 choice [ 582.000463][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 582.482378][ T5879] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 583.112189][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 583.119063][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 583.130413][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 583.143539][ T5879] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 583.152600][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.170632][ T5879] usb 4-1: config 0 descriptor?? [ 583.185308][ T5879] hub 4-1:0.0: bad descriptor, ignoring hub [ 583.193847][ T5879] hub 4-1:0.0: probe with driver hub failed with error -5 [ 583.581012][ T5879] hid-multitouch 0003:0EEF:72C4.0030: reserved main item tag 0xd [ 583.604573][ T5879] hid-multitouch 0003:0EEF:72C4.0030: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 583.702874][ T6265] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 583.862865][ T6265] usb 6-1: Using ep0 maxpacket: 16 [ 583.871065][ T6265] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.883112][ T5935] usb 4-1: USB disconnect, device number 91 [ 583.950312][ T5879] usb 3-1: USB disconnect, device number 110 [ 583.983083][ T6265] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.999964][ T6265] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 584.021032][ T6265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.032821][T14217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.107102][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'. [ 584.144274][ T6265] usb 6-1: config 0 descriptor?? [ 584.153149][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 584.182854][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.193718][T14257] bond3: (slave bond0): Enslaving as an active interface with a down link [ 584.417479][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 584.598126][ T6265] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 585.094143][ T6265] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 585.426813][T14277] No such timeout policy "syz1" [ 585.449703][ T30] audit: type=1400 audit(1766715299.241:1073): avc: denied { write } for pid=14247 comm="syz.5.2117" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 585.702453][ T3794] net_ratelimit: 27 callbacks suppressed [ 585.702474][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 586.188474][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 586.273532][ T6265] usb 3-1: Using ep0 maxpacket: 16 [ 586.284967][ T6265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 586.298908][ T6265] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 586.308448][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 586.317781][ T6265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.326801][ T6265] usb 3-1: Product: syz [ 586.331156][ T6265] usb 3-1: Manufacturer: syz [ 586.341762][ T6265] usb 3-1: SerialNumber: syz [ 586.353635][ T6265] usb 3-1: config 0 descriptor?? [ 586.364188][ T6265] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 586.375434][ T6265] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 586.413778][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 586.453329][ T30] audit: type=1400 audit(1766715300.251:1074): avc: denied { lock } for pid=14287 comm="syz.0.2128" path="socket:[40762]" dev="sockfs" ino=40762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.545003][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 586.663215][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 586.782661][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 586.937543][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 586.940516][ T6521] usb 6-1: USB disconnect, device number 15 [ 587.190311][ T6265] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 587.252658][ T30] audit: type=1400 audit(2000000000.320:1075): avc: denied { listen } for pid=14308 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 587.283058][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 587.370072][ T30] audit: type=1400 audit(2000000000.440:1076): avc: denied { lock } for pid=14308 comm="syz.5.2135" path="socket:[41008]" dev="sockfs" ino=41008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.473500][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 587.600346][T14315] futex_wake_op: syz.0.2137 tries to shift op by -1; fix this program [ 587.611134][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 587.628501][T14315] team1: entered promiscuous mode [ 587.633908][T14315] team1: entered allmulticast mode [ 587.642242][ T5900] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 587.802367][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 587.810686][ T5900] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 587.819073][ T5900] usb 4-1: config 0 has no interface number 0 [ 587.825238][ T5900] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 587.837358][ T5900] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 587.846518][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.854530][ T5900] usb 4-1: Product: syz [ 587.858667][ T5900] usb 4-1: Manufacturer: syz [ 587.863466][ T5900] usb 4-1: SerialNumber: syz [ 587.882836][ T5900] usb 4-1: config 0 descriptor?? [ 587.890465][T14313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 587.975282][ T6265] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 587.990448][ T6265] em28xx 3-1:0.0: board has no eeprom [ 588.072846][ T6265] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 588.087533][ T6265] em28xx 3-1:0.0: dvb set to bulk mode. [ 588.096936][ T5935] em28xx 3-1:0.0: Binding DVB extension [ 588.114951][T14313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 588.122791][ T6265] usb 3-1: USB disconnect, device number 111 [ 588.143173][ T6265] em28xx 3-1:0.0: Disconnecting em28xx [ 588.169755][ T5935] em28xx 3-1:0.0: Registering input extension [ 588.181757][ T6265] em28xx 3-1:0.0: Closing input extension [ 588.218330][ T6265] em28xx 3-1:0.0: Freeing device [ 588.342815][ T5935] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 588.540703][ T5900] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 588.551206][ T5900] asix 4-1:0.188: probe with driver asix failed with error -61 [ 588.552717][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 588.566180][ T5935] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.578836][ T5935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 588.585999][ T5935] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 588.597417][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.608429][ T5935] usb 6-1: config 0 descriptor?? [ 588.662685][T14330] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 588.693404][ T30] audit: type=1400 audit(2000000001.920:1077): avc: denied { accept } for pid=14328 comm="syz.2.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 589.036928][ T5935] nzxt-smart2 0003:1E71:2009.0032: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 589.395012][T14338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2144'. [ 589.784577][ T5935] usb 6-1: USB disconnect, device number 16 [ 590.461146][ T5935] usb 4-1: USB disconnect, device number 92 [ 590.722336][ T2115] net_ratelimit: 27 callbacks suppressed [ 590.722354][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 591.242330][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 591.383161][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 591.496064][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 591.504394][ T5935] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 591.622801][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 591.672595][ T5935] usb 4-1: device descriptor read/64, error -71 [ 591.732894][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 592.156273][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 592.222865][ T5935] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 592.267669][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 592.282710][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 592.362811][ T5935] usb 4-1: device descriptor read/64, error -71 [ 592.415290][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 592.472679][ T5935] usb usb4-port1: attempt power cycle [ 592.542893][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 592.572819][ T5895] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 592.853074][ T5935] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 592.879435][ T5895] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 592.902893][T14398] 9pnet_virtio: no channels available for device syz [ 592.922094][ T5935] usb 4-1: device descriptor read/8, error -71 [ 592.930226][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.940520][ T5895] usb 3-1: Product: syz [ 592.945499][ T5895] usb 3-1: Manufacturer: syz [ 592.950713][ T5895] usb 3-1: SerialNumber: syz [ 593.090718][ T5895] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 593.173030][ T5935] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 593.308358][ T6521] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 593.327602][ T5935] usb 4-1: device descriptor read/8, error -71 [ 593.529728][ T5935] usb usb4-port1: unable to enumerate USB device [ 593.794310][ T5900] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 593.954025][ T5900] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 593.962270][ T5900] usb 6-1: config 0 has no interface number 0 [ 594.165600][ T5900] usb 6-1: config 0 interface 41 has no altsetting 0 [ 594.174349][ T5900] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 594.199565][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.212989][ T5900] usb 6-1: Product: syz [ 594.222199][ T5900] usb 6-1: Manufacturer: syz [ 594.226812][ T5900] usb 6-1: SerialNumber: syz [ 594.250261][ T5900] usb 6-1: config 0 descriptor?? [ 594.411940][ T5935] usb 3-1: USB disconnect, device number 112 [ 594.575645][ T6521] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 594.651732][ T6521] ath9k_htc: Failed to initialize the device [ 594.731982][ T5935] usb 3-1: ath9k_htc: USB layer deinitialized [ 595.053856][ T5935] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 595.224084][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.242711][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 595.265130][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 595.292929][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 595.394423][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 595.404529][ T5935] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 595.421933][ T5935] usb 3-1: Manufacturer: syz [ 595.430195][ T5935] usb 3-1: config 0 descriptor?? [ 595.511173][ T30] audit: type=1400 audit(2000000008.720:1078): avc: denied { map } for pid=14422 comm="syz.3.2167" path="socket:[42100]" dev="sockfs" ino=42100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.659562][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.706102][ T30] audit: type=1400 audit(2000000008.720:1079): avc: denied { read accept } for pid=14422 comm="syz.3.2167" path="socket:[42100]" dev="sockfs" ino=42100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.738599][ T4937] net_ratelimit: 17 callbacks suppressed [ 595.738651][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 595.797138][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.914458][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 596.013185][ T5935] rc_core: IR keymap rc-hauppauge not found [ 596.027771][ T5935] Registered IR keymap rc-empty [ 596.042297][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 596.056903][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.105828][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.107922][ T5140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 596.123595][ T5140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 596.134565][ T5140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 596.142333][ T5140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 596.149833][ T5140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 596.150394][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 596.157064][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 596.261869][T14433] lo speed is unknown, defaulting to 1000 [ 596.274589][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 596.285033][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 596.335646][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.393144][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.402957][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 596.443497][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.456343][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'. [ 596.493134][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.522260][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 596.533801][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.573211][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.602876][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.632269][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 596.641715][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.693085][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.753988][ T5935] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 596.804990][ T5935] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 596.822375][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 596.830342][ T5900] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 596.832754][ T5935] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 596.872651][ T5900] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 596.909735][ T5900] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 596.941034][ T5900] usb 6-1: USB disconnect, device number 17 [ 596.942987][ T5935] usb 3-1: USB disconnect, device number 113 [ 597.072584][ T38] bond1: (slave geneve2): failed to get link speed/duplex [ 597.300709][T14433] chnl_net:caif_netlink_parms(): no params data found [ 597.401438][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 597.719068][T14433] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.765478][T14433] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.779488][T14433] bridge_slave_0: entered allmulticast mode [ 597.803459][T14433] bridge_slave_0: entered promiscuous mode [ 597.919305][T14433] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.941246][T14433] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.407495][T14433] bridge_slave_1: entered allmulticast mode [ 598.423672][ T5140] Bluetooth: hci6: command tx timeout [ 598.449980][T14433] bridge_slave_1: entered promiscuous mode [ 598.476698][ T3834] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.497267][ T3834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 598.521477][ T3834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 598.549133][ T3834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 598.608740][T14433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.648622][T14433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.764789][ T30] audit: type=1400 audit(2000000011.990:1080): avc: denied { lock } for pid=14472 comm="syz.3.2177" path="socket:[41586]" dev="sockfs" ino=41586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 598.821304][ T3834] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.831920][ T3834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 598.852002][ T3834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 598.881342][ T3834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 598.914464][T14433] team0: Port device team_slave_0 added [ 598.921388][T14433] team0: Port device team_slave_1 added [ 599.031746][ T3834] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.070880][ T3834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 599.117519][ T3834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 599.139552][ T3834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 599.427399][T14433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.454955][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.515743][T14433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.536615][ T3834] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.556279][ T3834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 599.652916][ T3834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 599.664244][ T3834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 599.729245][T14433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.751919][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.811618][T14433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.936685][T14433] hsr_slave_0: entered promiscuous mode [ 599.969198][T14433] hsr_slave_1: entered promiscuous mode [ 599.975830][T14433] debugfs: 'hsr0' already exists in 'hsr' [ 599.981581][T14433] Cannot create hsr debugfs directory [ 600.492915][ T5140] Bluetooth: hci6: command tx timeout [ 600.621192][ T3834] bridge_slave_1: left allmulticast mode [ 600.627335][ T3834] bridge_slave_1: left promiscuous mode [ 600.706452][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.754490][ T3834] bridge_slave_0: left allmulticast mode [ 600.760163][ T3834] bridge_slave_0: left promiscuous mode [ 600.782343][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.337946][ T3834] bond2 (unregistering): (slave geneve2): Releasing active interface [ 601.504550][ T3834] bond4 (unregistering): (slave bridge1): Releasing active interface [ 601.736694][ T3834] bond1 (unregistering): Released all slaves [ 602.006642][ T3834] bond2 (unregistering): Released all slaves [ 602.218329][ T3834] bond3 (unregistering): Released all slaves [ 602.249919][ T3834] bond4 (unregistering): Released all slaves [ 602.265497][ T3834] bond0 (unregistering): Released all slaves [ 602.333048][ T36] net_ratelimit: 2 callbacks suppressed [ 602.333065][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 602.573110][ T5140] Bluetooth: hci6: command tx timeout [ 602.592485][ T5011] bond1: (slave geneve2): failed to get link speed/duplex [ 602.746029][ T96] block nbd1: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 330 seconds [ 602.769924][ T96] block nbd1: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 330 seconds [ 602.780904][ T96] block nbd1: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 330 seconds [ 602.791896][ T96] block nbd1: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 330 seconds [ 602.942658][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 603.502311][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 603.962851][ T5935] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 604.053057][T14471] bond1: (slave geneve2): failed to get link speed/duplex [ 604.159042][T14433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.171207][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.218288][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.265761][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 604.289036][ T5935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 604.328635][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.377220][T14433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.439362][ T5935] usb 6-1: config 0 descriptor?? [ 604.495049][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 604.544741][T14544] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 604.607324][T14433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.726942][ T5140] Bluetooth: hci6: command tx timeout [ 605.267034][T14544] bond4: entered promiscuous mode [ 605.272840][T14544] bond4: entered allmulticast mode [ 605.279562][T14544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.469321][T14433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 605.487232][ T5935] isku 0003:1E7D:319C.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 605.648933][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 605.785492][ T5935] isku 0003:1E7D:319C.0033: couldn't init struct isku_device [ 605.796761][ T5935] isku 0003:1E7D:319C.0033: couldn't install keyboard [ 605.814552][ T5935] isku 0003:1E7D:319C.0033: probe with driver isku failed with error -71 [ 605.840773][ T5935] usb 6-1: USB disconnect, device number 18 [ 605.865835][T14543] erspan1: entered allmulticast mode [ 605.892906][T14543] bond4: (slave erspan1): making interface the new active one [ 605.900408][T14543] erspan1: entered promiscuous mode [ 605.909004][T14543] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 605.922628][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 605.952632][ T3834] hsr_slave_0: left promiscuous mode [ 605.958577][ T3834] hsr_slave_1: left promiscuous mode [ 606.026294][ T3834] veth1_macvtap: left promiscuous mode [ 606.067338][ T3834] veth0_macvtap: left promiscuous mode [ 606.082670][ T3834] veth1_vlan: left promiscuous mode [ 606.096742][ T3834] veth0_vlan: left promiscuous mode [ 606.319336][ T30] audit: type=1400 audit(2000000019.520:1081): avc: denied { append } for pid=14559 comm="syz.3.2192" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 606.770813][ T3834] pim6reg (unregistering): left allmulticast mode [ 606.857280][ T5879] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 607.039947][ T5879] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.059090][ T5879] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.081759][ T5879] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.091301][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.124010][T14568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 607.144015][ T5879] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.395520][ T3834] team0 (unregistering): Port device team_slave_1 removed [ 607.407762][ T5935] usb 6-1: USB disconnect, device number 19 [ 607.485986][ T3834] team0 (unregistering): Port device team_slave_0 removed [ 608.854896][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 609.009944][T14433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.049951][T14433] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.068215][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.075370][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.126536][ T5011] bond1: (slave geneve2): failed to get link speed/duplex [ 609.178679][T14597] comedi: valid board names for 8255 driver are: [ 609.185155][T14597] 8255 [ 609.188033][T14597] comedi: valid board names for vmk80xx driver are: [ 609.198665][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.205757][ T6018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.230097][T14597] vmk80xx [ 609.285434][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 609.290281][T14597] comedi: valid board names for usbduxsigma driver are: [ 609.304369][T14597] usbduxsigma [ 609.312079][T14597] comedi: valid board names for usbduxfast driver are: [ 609.314497][ T30] audit: type=1400 audit(2000000022.540:1082): avc: denied { lock } for pid=14595 comm="syz.3.2203" path="socket:[42546]" dev="sockfs" ino=42546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 609.348162][T14597] usbduxfast [ 609.351619][T14597] comedi: valid board names for usbdux driver are: [ 609.360951][T14597] usbdux [ 609.381879][T14597] comedi: valid board names for ni6501 driver are: [ 609.412791][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 609.427029][T14597] ni6501 [ 609.585114][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 609.663492][T14607] netlink: 'syz.3.2204': attribute type 3 has an invalid length. [ 609.672043][T14607] netlink: 'syz.3.2204': attribute type 3 has an invalid length. [ 610.045296][T14597] comedi: valid board names for dt9812 driver are: [ 610.053421][T14597] dt9812 [ 610.059074][T14597] comedi: valid board names for ni_labpc_cs driver are: [ 610.060207][ T30] audit: type=1400 audit(2000000023.270:1083): avc: denied { write } for pid=14596 comm="syz.5.2202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 610.087763][T14597] ni_labpc_cs [ 610.092991][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 610.113748][T14597] comedi: valid board names for ni_daq_700 driver are: [ 610.125248][T14597] ni_daq_700 [ 610.128613][T14597] comedi: valid board names for labpc_pci driver are: [ 610.137938][T14597] labpc_pci [ 610.148358][T14597] comedi: valid board names for adl_pci9118 driver are: [ 610.212879][ T3834] IPVS: stop unused estimator thread 0... [ 610.231101][T14597] pci9118dg [ 610.234437][T14597] pci9118hg [ 610.237749][T14597] pci9118hr [ 610.241047][T14597] comedi: valid board names for 8255_pci driver are: [ 610.247934][T14597] 8255_pci [ 610.251126][T14597] comedi: valid board names for s526 driver are: [ 610.257594][T14597] s526 [ 610.260396][T14597] comedi: valid board names for multiq3 driver are: [ 610.266762][ T3794] bond1: (slave geneve2): failed to get link speed/duplex [ 610.274237][T14597] multiq3 [ 610.277437][T14597] comedi: valid board names for pcmuio driver are: [ 610.289038][T14597] pcmuio48 [ 610.297708][T14597] pcmuio96 [ 610.300956][T14597] comedi: valid board names for pcmmio driver are: [ 610.300971][ T30] audit: type=1400 audit(2000000023.480:1084): avc: denied { ioctl } for pid=14596 comm="syz.5.2202" path="socket:[42554]" dev="sockfs" ino=42554 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 610.340690][T14597] pcmmio [ 610.343911][T14597] comedi: valid board names for pcmda12 driver are: [ 610.350558][T14597] pcmda12 [ 610.355523][T14597] comedi: valid board names for pcmad driver are: [ 610.433098][T14597] pcmad12 [ 610.436213][T14597] pcmad16 [ 610.462811][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 610.500358][T14597] comedi: valid board names for ni_labpc driver are: [ 610.515842][T14597] lab-pc-1200 [ 610.519286][T14597] lab-pc-1200ai [ 610.522975][T14597] lab-pc+ [ 610.526061][T14597] comedi: valid board names for atmio16 driver are: [ 610.602825][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 610.623193][T14597] atmio16 [ 610.639727][T14618] binder: 14615:14618 ioctl 54a2 0 returned -22 [ 610.655557][T14597] atmio16d [ 610.693620][T14597] comedi: valid board names for ni_at_ao driver are: [ 610.701435][T14597] at-ao-6 [ 610.706388][T14597] at-ao-10 [ 610.707926][T14622] binder: 14615:14622 ioctl c0306201 200000000640 returned -14 [ 610.735082][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 610.752958][T14597] comedi: valid board names for ni_at_a2150 driver are: [ 610.760063][T14597] ni_at_a2150 [ 610.765181][T14597] comedi: valid board names for adq12b driver are: [ 610.772873][T14597] adq12b [ 610.779152][T14597] comedi: valid board names for mpc624 driver are: [ 610.841006][T14597] mpc624 [ 610.867959][T14597] comedi: valid board names for c6xdigio driver are: [ 610.885694][T14597] c6xdigio [ 610.890009][T14597] comedi: valid board names for aio_iiro_16 driver are: [ 610.918813][T14433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.968442][T14433] veth0_vlan: entered promiscuous mode [ 611.077690][T14597] aio_iiro_16 [ 611.089211][T14433] veth1_vlan: entered promiscuous mode [ 611.105641][T14597] comedi: valid board names for aio_aio12_8 driver are: [ 611.620040][T14597] aio_aio12_8 [ 611.623639][T14597] aio_ai12_8 [ 611.627063][T14597] aio_ao12_4 [ 611.630490][T14597] comedi: valid board names for fl512 driver are: [ 611.637108][T14597] fl512 [ 611.650772][T14433] veth0_macvtap: entered promiscuous mode [ 611.660712][T14597] comedi: valid board names for dmm32at driver are: [ 611.671821][T14597] dmm32at [ 611.675481][T14597] comedi: valid board names for dt282x driver are: [ 611.685920][T14597] dt2821 [ 611.689248][T14597] dt2821-f [ 611.693979][T14597] dt2821-g [ 611.697224][T14597] dt2823 [ 611.700236][T14597] dt2824-pgh [ 611.703883][T14597] dt2824-pgl [ 611.707240][T14597] dt2825 [ 611.708836][T14433] veth1_macvtap: entered promiscuous mode [ 611.741146][T14597] dt2827 [ 611.745356][T14597] dt2828 [ 611.757085][T14597] dt2829 [ 611.771042][T14597] dt21-ez [ 611.774580][T14597] dt23-ez [ 611.797998][T14597] dt24-ez [ 611.809946][T14597] dt24-ez-pgl [ 611.821479][T14597] comedi: valid board names for dt2817 driver are: [ 611.829324][T14433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.836888][T14597] dt2817 [ 611.841079][T14597] comedi: valid board names for dt2815 driver are: [ 611.856578][T14597] dt2815 [ 611.866597][T14433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.883771][T14597] comedi: valid board names for dt2814 driver are: [ 611.891040][T14597] dt2814 [ 611.895708][ T4937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.936044][T14597] comedi: valid board names for dt2811 driver are: [ 611.947257][ T6018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.966284][ T6018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.977329][T14597] dt2811-pgh [ 611.977386][ T6018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.989539][T14597] dt2811-pgl [ 611.993026][T14597] comedi: valid board names for dt2801 driver are: [ 612.001084][T14597] dt2801 [ 612.008394][T14597] comedi: valid board names for das6402 driver are: [ 612.029424][T14597] das6402-12 [ 612.040372][T14597] das6402-16 [ 612.044012][T14597] comedi: valid board names for das1800 driver are: [ 612.044026][T14597] das-1701st [ 612.044033][T14597] das-1701st-da [ 612.044040][T14597] das-1702st [ 612.044052][T14597] das-1702st-da [ 612.044060][T14597] das-1702hr [ 612.044067][T14597] das-1702hr-da [ 612.044074][T14597] das-1701ao [ 612.044081][T14597] das-1702ao [ 612.044087][T14597] das-1801st [ 612.044094][T14597] das-1801st-da [ 612.044101][T14597] das-1802st [ 612.044108][T14597] das-1802st-da [ 612.044114][T14597] das-1802hr [ 612.044121][T14597] das-1802hr-da [ 612.044128][T14597] das-1801hc [ 612.044135][T14597] das-1802hc [ 612.044142][T14597] das-1801ao [ 612.044148][T14597] das-1802ao [ 612.044156][T14597] comedi: valid board names for das800 driver are: [ 612.044165][T14597] das-800 [ 612.044171][T14597] cio-das800 [ 612.044178][T14597] das-801 [ 612.044185][T14597] cio-das801 [ 612.044191][T14597] das-802 [ 612.044198][T14597] cio-das802 [ 612.044205][T14597] cio-das802/16 [ 612.044212][T14597] comedi: valid board names for isa-das08 driver are: [ 612.044221][T14597] isa-das08 [ 612.044228][T14597] das08-pgm [ 612.044235][T14597] das08-pgh [ 612.044242][T14597] das08-pgl [ 612.044249][T14597] das08-aoh [ 612.044256][T14597] das08-aol [ 612.044263][T14597] das08-aom [ 612.044269][T14597] das08/jr-ao [ 612.044276][T14597] das08jr-16-ao [ 612.044283][T14597] pc104-das08 [ 612.044290][T14597] das08jr/16 [ 612.044297][T14597] comedi: valid board names for das16m1 driver are: [ 612.044305][T14597] das16m1 [ 612.044312][T14597] comedi: valid board names for dac02 driver are: [ 612.044320][T14597] dac02 [ 612.044327][T14597] comedi: valid board names for rti802 driver are: [ 612.044335][T14597] rti802 [ 612.044342][T14597] comedi: valid board names for rti800 driver are: [ 612.044351][T14597] rti800 [ 612.044358][T14597] rti815 [ 612.044364][T14597] comedi: valid board names for pcm3724 driver are: [ 612.044373][T14597] pcm3724 [ 612.044379][T14597] comedi: valid board names for pcl818 driver are: [ 612.044388][T14597] pcl818l [ 612.044394][T14597] pcl818h [ 612.044401][T14597] pcl818hd [ 612.044407][T14597] pcl818hg [ 612.044414][T14597] pcl818 [ 612.044420][T14597] pcl718 [ 612.044426][T14597] pcm3718 [ 612.044433][T14597] comedi: valid board names for pcl816 driver are: [ 612.044441][T14597] pcl816 [ 612.044448][T14597] pcl814b [ 612.044454][T14597] comedi: valid board names for pcl812 driver are: [ 612.044463][T14597] pcl812 [ 612.044470][T14597] pcl812pg [ 612.044476][T14597] acl8112pg [ 612.044483][T14597] acl8112dg [ 612.044490][T14597] acl8112hg [ 612.044496][T14597] a821pgl [ 612.044502][T14597] a821pglnda [ 612.044509][T14597] a821pgh [ 612.044516][T14597] a822pgl [ 612.044522][T14597] a822pgh [ 612.044530][T14597] a823pgl [ 612.044536][T14597] a823pgh [ 612.044543][T14597] pcl813 [ 612.044550][T14597] pcl813b [ 612.044556][T14597] acl8113 [ 612.044563][T14597] iso813 [ 612.044570][T14597] acl8216 [ 612.044577][T14597] a826pg [ 612.044584][T14597] comedi: valid board names for pcl730 driver are: [ 612.044593][T14597] pcl730 [ 612.044600][T14597] iso730 [ 612.044607][T14597] acl7130 [ 612.044614][T14597] pcm3730 [ 612.044621][T14597] pcl725 [ 612.044628][T14597] p8r8dio [ 612.044634][T14597] acl7225b [ 612.044642][T14597] p16r16dio [ 612.044649][T14597] pcl733 [ 612.044655][T14597] pcl734 [ 612.044662][T14597] opmm-1616-xt [ 612.044669][T14597] pearl-mm-p [ 612.044676][T14597] ir104-pbf [ 612.044683][T14597] comedi: valid board names for pcl726 driver are: [ 612.044691][T14597] pcl726 [ 612.044698][T14597] pcl727 [ 612.044705][T14597] pcl728 [ 612.044712][T14597] acl6126 [ 612.044719][T14597] acl6128 [ 612.044725][T14597] comedi: valid board names for pcl724 driver are: [ 612.044734][T14597] pcl724 [ 612.044741][T14597] pcl722 [ 612.044748][T14597] pcl731 [ 612.044755][T14597] acl7122 [ 612.426689][T14597] acl7124 [ 612.429942][T14597] pet48dio [ 612.438210][T14597] pcmio48 [ 612.451292][T14597] onyx-mm-dio [ 612.455634][T14597] comedi: valid board names for pcl711 driver are: [ 612.463446][T14597] pcl711 [ 612.467567][T14597] pcl711b [ 612.470788][T14597] acl8112hg [ 612.474239][T14597] acl8112dg [ 612.478024][T14597] comedi: valid board names for amplc_pc263 driver are: [ 612.485863][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.496557][T14597] pc263 [ 612.500868][T14597] comedi: valid board names for amplc_pc236 driver are: [ 612.506330][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.508310][T14597] pc36at [ 612.518800][T14597] comedi: valid board names for amplc_dio200 driver are: [ 612.526379][T14597] pc212e [ 612.529465][T14597] pc214e [ 612.532799][T14597] pc215e [ 612.539576][T14597] pc218e [ 612.542567][T14597] pc272e [ 612.548789][T14597] comedi: valid board names for comedi_parport driver are: [ 612.558418][T14597] comedi_parport [ 612.563327][T14597] comedi: valid board names for comedi_test driver are: [ 612.578379][T14597] comedi_test [ 612.584565][T14597] comedi: valid board names for comedi_bond driver are: [ 612.592113][T14597] comedi_bond [ 612.629505][ T4937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.644609][ T4937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.757490][T14650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.932398][T14650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.941618][ T6018] net_ratelimit: 18 callbacks suppressed [ 613.941630][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 614.005805][ T30] audit: type=1400 audit(2000000027.220:1085): avc: denied { map } for pid=14654 comm="syz.5.2213" path="/dev/tty30" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 614.033068][T14650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.048745][T14650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.063516][ T5938] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 614.085529][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 614.202331][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 614.232234][ T792] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 614.243421][ T5938] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 614.254924][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.268333][ T5938] usb 4-1: Product: syz [ 614.273371][ T5938] usb 4-1: Manufacturer: syz [ 614.278009][ T5938] usb 4-1: SerialNumber: syz [ 614.289439][ T5938] usb 4-1: config 0 descriptor?? [ 614.323965][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 614.394559][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 614.416938][ T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.442887][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 614.443371][ T792] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 614.461319][ T792] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.686217][T14471] bond1: (slave geneve2): failed to get link speed/duplex [ 614.717877][ T792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.745526][ T5938] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 614.753164][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.761257][ T5938] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 614.770781][ T792] usb 3-1: Product: syz [ 614.775249][ T792] usb 3-1: Manufacturer: syz [ 614.782962][ T5938] usb 4-1: USB disconnect, device number 97 [ 614.790034][ T792] usb 3-1: SerialNumber: syz [ 614.802843][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 614.814090][T14653] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 614.922600][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 614.933357][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 615.043524][ T1140] bond1: (slave geneve2): failed to get link speed/duplex [ 615.432452][ T30] audit: type=1400 audit(2000000028.330:1086): avc: denied { execute_no_trans } for pid=14665 comm="syz.5.2216" path="/file0" dev="hugetlbfs" ino=42777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 615.461494][ T36] bond1: (slave geneve2): failed to get link speed/duplex [ 615.472109][ T5886] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 615.481954][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.490238][ T5886] usb 1-1: Product: syz [ 615.494602][ T5886] usb 1-1: Manufacturer: syz [ 615.499233][ T5886] usb 1-1: SerialNumber: syz [ 615.506487][ T5886] usb 1-1: config 0 descriptor?? [ 615.515382][ T5886] hso 1-1:0.0: Not our interface [ 615.520600][ T5886] usb-storage 1-1:0.0: USB Mass Storage device detected [ 615.662518][ T792] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 615.675705][ T792] cdc_ncm 3-1:1.0: bind() failure [ 615.836155][ T792] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 615.900999][ T792] cdc_ncm 3-1:1.1: bind() failure [ 616.015556][ T792] usb 3-1: USB disconnect, device number 114 [ 616.137949][ T5886] usb 1-1: USB disconnect, device number 11 [ 616.814207][ T6521] libceph: connect (1)[c::]:6789 error -101 [ 616.850842][ T6521] libceph: mon0 (1)[c::]:6789 connect error [ 616.936199][T14677] ceph: No mds server is up or the cluster is laggy [ 617.172634][ T6521] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 617.272231][ T5879] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 617.324430][ T6521] usb 3-1: Using ep0 maxpacket: 32 [ 617.334272][ T6521] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.354385][ T6521] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.48 [ 617.364308][ T6521] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 617.374035][ T6521] usb 3-1: Product: syz [ 617.378265][ T6521] usb 3-1: Manufacturer: syz [ 617.383465][ T6521] usb 3-1: SerialNumber: syz [ 617.400311][ T6521] usb 3-1: config 0 descriptor?? [ 617.408276][ T6521] redrat3 3-1:0.0: Couldn't find all endpoints [ 617.444374][ T5879] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 617.454565][ T5879] usb 4-1: config 0 has no interface number 0 [ 617.467014][ T5879] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 617.476430][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.484530][ T5879] usb 4-1: Product: syz [ 617.489051][ T5879] usb 4-1: Manufacturer: syz [ 617.493710][ T5879] usb 4-1: SerialNumber: syz [ 617.500136][ T5879] usb 4-1: config 0 descriptor?? [ 617.610501][ T6521] usb 3-1: USB disconnect, device number 115 [ 617.713661][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.749702][ T5879] usb 4-1: USB disconnect, device number 98 [ 617.800725][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.647391][T14714] xt_l2tp: v2 doesn't support IP mode [ 618.873965][T14718] fuse: Bad value for 'fd' [ 619.015525][T14722] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 619.044627][ T6018] net_ratelimit: 23 callbacks suppressed [ 619.044662][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 619.413258][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 619.578709][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 619.752866][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 619.896645][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 620.523765][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 620.543521][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.553964][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.679032][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 620.780391][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 620.852343][ T5886] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 620.852448][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 621.001922][ T5011] bond1: (slave geneve2): failed to get link speed/duplex [ 621.092415][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 621.100750][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.119591][ T5886] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 621.129235][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 621.142054][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.158850][ T5886] usb 4-1: config 0 descriptor?? [ 621.386076][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 621.428403][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 621.439508][ T5886] usb 4-1: USB disconnect, device number 99 [ 621.665339][T14760] hpfs: Bad magic ... probably not HPFS [ 622.045241][T14772] netlink: 'syz.3.2245': attribute type 10 has an invalid length. [ 622.077658][T14772] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 622.383133][ T6521] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 622.844674][ T6521] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 622.898000][ T6521] usb 4-1: config 0 has no interface number 0 [ 622.938540][ T6521] usb 4-1: config 0 interface 41 has no altsetting 0 [ 622.997089][ T6521] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 623.040209][ T6521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.076628][ T6521] usb 4-1: Product: syz [ 623.094082][ T6521] usb 4-1: Manufacturer: syz [ 623.100454][ T6521] usb 4-1: SerialNumber: syz [ 623.107611][ T6521] usb 4-1: config 0 descriptor?? [ 623.185835][T14797] 9pnet_fd: p9_fd_create_unix (14797): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 623.858196][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.092963][ T180] net_ratelimit: 27 callbacks suppressed [ 624.092988][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 624.162500][ T180] bond3: (slave bond0): failed to get link speed/duplex [ 624.252906][T13245] bond1: (slave geneve2): failed to get link speed/duplex [ 624.295610][T14817] binder: 14816:14817 ioctl 54a2 0 returned -22 [ 624.303161][T13245] bond3: (slave bond0): failed to get link speed/duplex [ 624.367827][T14820] binder: 14816:14820 ioctl c0306201 200000000640 returned -14 [ 624.414021][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 624.432827][ T79] bond3: (slave bond0): failed to get link speed/duplex [ 624.533258][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 624.568848][T14824] syzkaller0: entered promiscuous mode [ 624.574478][T14824] syzkaller0: entered allmulticast mode [ 624.709186][T14828] syz.5.2260 (14828): /proc/14827/oom_adj is deprecated, please use /proc/14827/oom_score_adj instead. [ 624.775027][ T79] bond3: (slave bond0): failed to get link speed/duplex [ 624.802858][T14669] bond1: (slave geneve2): failed to get link speed/duplex [ 624.953482][T14669] bond3: (slave bond0): failed to get link speed/duplex [ 625.209558][ T30] audit: type=1400 audit(2000000038.060:1087): avc: denied { relabelfrom } for pid=14830 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 625.234698][ T30] audit: type=1400 audit(2000000038.080:1088): avc: denied { relabelto } for pid=14830 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 625.264197][ T30] audit: type=1400 audit(2000000038.160:1089): avc: denied { attach_queue } for pid=14830 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 626.049106][ T6521] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 626.060480][ T6521] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 626.074735][ T6521] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 626.097715][ T6521] usb 4-1: USB disconnect, device number 100 [ 626.413864][ T5895] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 626.543226][ T5938] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 626.572783][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 626.581865][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.593814][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.604614][ T5895] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 626.624622][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.634301][ T5895] usb 3-1: config 0 descriptor?? [ 626.648942][ T30] audit: type=1326 audit(2000000039.870:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.0.2268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae4a18f749 code=0x0 [ 626.743566][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 626.750012][ T5938] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.774204][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 626.788444][ T5938] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 626.809191][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.857636][ T5938] usb 6-1: config 0 descriptor?? [ 626.966680][T14856] binder: 14854:14856 ioctl 54a2 0 returned -22 [ 627.030956][T14859] binder: 14854:14859 ioctl c0306201 200000000640 returned -14 [ 627.083023][ T5895] apple 0003:05AC:024B.0034: fixing up MacBook JIS keyboard report descriptor [ 627.095190][ T5895] apple 0003:05AC:024B.0034: unknown main item tag 0x6 [ 627.105547][ T5895] apple 0003:05AC:024B.0034: ignoring exceeding usage max [ 627.115987][ T5895] apple 0003:05AC:024B.0034: invalid report_size 16640 [ 627.124574][ T5895] apple 0003:05AC:024B.0034: item 0 2 1 7 parsing failed [ 627.136749][ T5895] apple 0003:05AC:024B.0034: parse failed [ 627.144211][ T5895] apple 0003:05AC:024B.0034: probe with driver apple failed with error -22 [ 627.290304][ T5938] nzxt-smart2 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 627.483021][T14846] bpq0: entered promiscuous mode [ 627.483397][ T5895] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 627.551881][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.621873][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.692999][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 627.730642][ T5895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.751188][ T5895] usb 4-1: config 0 has no interface number 0 [ 627.764867][ T5895] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 627.774865][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.774888][ T5895] usb 4-1: Product: syz [ 627.774903][ T5895] usb 4-1: Manufacturer: syz [ 627.774918][ T5895] usb 4-1: SerialNumber: syz [ 627.783853][ T5895] usb 4-1: config 0 descriptor?? [ 627.786739][ T5895] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 627.786764][ T5895] usb 4-1: selecting invalid altsetting 1 [ 627.786787][ T5895] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 627.789323][ T5895] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 627.811685][ T30] audit: type=1400 audit(2000000041.040:1091): avc: denied { read } for pid=14869 comm="syz.0.2273" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 627.817452][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 627.839838][ T30] audit: type=1400 audit(2000000041.060:1092): avc: denied { open } for pid=14869 comm="syz.0.2273" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 627.841139][ T5895] usb 4-1: media controller created [ 627.851749][ T30] audit: type=1400 audit(2000000041.060:1093): avc: denied { getopt } for pid=14869 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 627.884961][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.909102][ T30] audit: type=1400 audit(2000000041.060:1094): avc: denied { append } for pid=14869 comm="syz.0.2273" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 627.954250][ T6521] usb 6-1: USB disconnect, device number 20 [ 628.050235][T14874] netlink: 4452 bytes leftover after parsing attributes in process `syz.0.2274'. [ 628.974540][ T5895] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 628.983870][ T5895] zl10353_read_register: readreg error (reg=127, ret==-110) [ 629.032236][ T5938] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 629.050829][T14861] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 629.086928][ T5895] usb 4-1: USB disconnect, device number 101 [ 629.103096][ T79] net_ratelimit: 61 callbacks suppressed [ 629.103112][ T79] bond3: (slave bond0): failed to get link speed/duplex [ 629.163169][ T6018] bond1: (slave geneve2): failed to get link speed/duplex [ 629.199406][ T6521] usb 3-1: USB disconnect, device number 116 [ 629.212190][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 629.219629][ T5938] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.242256][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 629.248905][ T5938] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 629.258071][ T6883] bond3: (slave bond0): failed to get link speed/duplex [ 629.273984][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.292822][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 629.301297][ T5938] usb 6-1: config 0 descriptor?? [ 629.312762][ T9943] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 629.383664][ T12] bond3: (slave bond0): failed to get link speed/duplex [ 629.402809][ T6883] bond1: (slave geneve2): failed to get link speed/duplex [ 629.472636][ T9943] usb 1-1: Using ep0 maxpacket: 16 [ 629.479348][ T9943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.489902][ T9943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.497177][T14798] bond3: (slave bond0): failed to get link speed/duplex [ 629.504905][ T9943] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 629.514853][ T9943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.533811][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 629.534280][ T9943] usb 1-1: config 0 descriptor?? [ 629.624550][ T79] bond3: (slave bond0): failed to get link speed/duplex [ 629.673216][T14798] bond1: (slave geneve2): failed to get link speed/duplex [ 629.766576][ T5938] nzxt-smart2 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 630.229629][ T9943] usbhid 1-1:0.0: can't add hid device: -71 [ 630.279661][ T9943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 630.406615][ T9943] usb 1-1: USB disconnect, device number 12 [ 630.508270][ T5879] usb 6-1: USB disconnect, device number 21 [ 630.563003][ T5895] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 630.722841][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 630.754037][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 630.806467][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.817442][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.840460][ T5895] usb 4-1: Product: syz [ 630.845211][ T5895] usb 4-1: Manufacturer: syz [ 630.851606][T14907] binder: 14903:14907 ioctl 54a2 0 returned -22 [ 630.852342][ T5895] usb 4-1: SerialNumber: syz [ 630.883220][ T5895] usb 4-1: config 0 descriptor?? [ 630.908646][ T5895] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 630.915120][T14910] binder: 14903:14910 ioctl c0306201 200000000640 returned -14 [ 630.932760][ T5895] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 631.021909][T14906] input: syz1 as /devices/virtual/input/input41 [ 631.756527][T14924] ubi: mtd0 is already attached to ubi31 [ 631.872443][ T30] audit: type=1400 audit(2000000045.080:1095): avc: denied { append } for pid=14918 comm="syz.0.2286" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 632.119963][ T5895] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 632.408110][T14928] ceph: No mds server is up or the cluster is laggy [ 632.738168][ T5895] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 632.772888][ T5895] em28xx 4-1:0.0: board has no eeprom [ 632.831178][ T96] block nbd1: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 360 seconds [ 632.832702][ T5895] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 632.842048][ T96] block nbd1: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 360 seconds [ 632.842078][ T96] block nbd1: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 360 seconds [ 632.842103][ T96] block nbd1: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 360 seconds [ 632.922564][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 632.982674][ T5895] em28xx 4-1:0.0: dvb set to bulk mode. [ 632.988319][ T9943] em28xx 4-1:0.0: Binding DVB extension [ 633.005865][ T5895] usb 4-1: USB disconnect, device number 102 [ 633.040327][ T5895] em28xx 4-1:0.0: Disconnecting em28xx [ 633.106130][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.119178][ T5879] usb 1-1: config 0 has no interface number 0 [ 633.126936][ T5879] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.138053][ T5879] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.138410][ T9943] em28xx 4-1:0.0: Registering input extension [ 633.147874][ T5879] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 633.147898][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.174065][ T6521] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 633.174511][ T5879] usb 1-1: config 0 descriptor?? [ 633.257277][ T5895] em28xx 4-1:0.0: Closing input extension [ 633.287562][ T5895] em28xx 4-1:0.0: Freeing device [ 633.376479][ T6521] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.393559][ T6521] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 633.417224][ T6521] usb 3-1: can't read configurations, error -71 [ 633.748690][T14946] binder: 14945:14946 ioctl c0306201 200000000440 returned -14 [ 634.085313][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.111897][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.120758][T14798] net_ratelimit: 73 callbacks suppressed [ 634.120775][T14798] bond3: (slave bond0): failed to get link speed/duplex [ 634.172873][T14798] bond1: (slave geneve2): failed to get link speed/duplex [ 634.238035][T14952] binder: 14950:14952 ioctl 4018620d 0 returned -22 [ 634.253593][T14798] bond3: (slave bond0): failed to get link speed/duplex [ 634.392527][ T79] bond1: (slave geneve2): failed to get link speed/duplex [ 634.548064][ T5879] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0037/input/input43 [ 634.572327][ T79] bond3: (slave bond0): failed to get link speed/duplex [ 634.824358][ T3533] bond1: (slave geneve2): failed to get link speed/duplex [ 634.905679][T14960] netlink: 'syz.2.2296': attribute type 12 has an invalid length. [ 634.971518][T14954] binder: 14953:14954 ioctl 54a2 0 returned -22 [ 635.019861][ T5879] holtek_kbd 0003:04D9:A055.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 635.039654][T14954] binder: 14953:14954 ioctl c0306201 200000000640 returned -14 [ 635.047973][T14669] bond1: (slave geneve2): failed to get link speed/duplex [ 635.054746][ T5879] usb 1-1: USB disconnect, device number 13 [ 635.055726][T14669] bond3: (slave bond0): failed to get link speed/duplex [ 635.130667][ T6521] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 635.151912][T14963] fido_id[14963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 635.166611][T14669] bond1: (slave geneve2): failed to get link speed/duplex [ 635.192670][ T155] bond3: (slave bond0): failed to get link speed/duplex [ 635.237572][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.262635][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.293119][ T6521] usb 3-1: Using ep0 maxpacket: 16 [ 635.304436][ T6521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 635.316975][ T6521] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.326548][ T6521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.336653][ T6521] usb 3-1: Product: syz [ 635.340827][ T6521] usb 3-1: Manufacturer: syz [ 635.352857][ T6521] usb 3-1: SerialNumber: syz [ 635.359639][ T6521] usb 3-1: config 0 descriptor?? [ 635.369591][ T6521] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.383641][ T6521] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 635.393416][T14970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2299'. [ 635.413505][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 635.463106][ T5895] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 635.552451][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2299'. [ 635.652879][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 635.663139][ T5895] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 635.663261][ T30] audit: type=1400 audit(2000000048.790:1096): avc: denied { connect } for pid=14969 comm="syz.3.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.679008][ T5895] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 635.823629][ T30] audit: type=1400 audit(2000000049.050:1097): avc: denied { getopt } for pid=14972 comm="syz.0.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 635.897623][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.919997][ T5895] usb 6-1: config 0 descriptor?? [ 635.937989][ T5895] gspca_main: 055f:d001 too many config [ 635.938887][T14978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2301'. [ 636.124076][ T5879] usb 6-1: USB disconnect, device number 22 [ 636.367819][ T6521] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 637.791864][T15000] siw: device registration error -23 [ 637.849284][ T6521] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 637.911244][ T6521] em28xx 3-1:0.0: board has no eeprom [ 638.057058][ T6521] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 638.074082][ T6521] em28xx 3-1:0.0: dvb set to bulk mode. [ 638.079690][ T5935] em28xx 3-1:0.0: Binding DVB extension [ 638.093371][ T6521] usb 3-1: USB disconnect, device number 119 [ 638.103746][ T6521] em28xx 3-1:0.0: Disconnecting em28xx [ 638.185222][T15012] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 638.193648][T15012] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 638.202824][T15012] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 638.210573][T15012] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 638.242848][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 638.613079][ T49] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 638.630739][ T5935] em28xx 3-1:0.0: Registering input extension [ 638.642338][ T6521] em28xx 3-1:0.0: Closing input extension [ 638.660278][ T6521] em28xx 3-1:0.0: Freeing device [ 638.772796][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 638.890806][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.910004][ T49] usb 4-1: config 0 has no interface number 0 [ 638.920111][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 639.253594][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 639.444937][T14687] net_ratelimit: 42 callbacks suppressed [ 639.444957][T14687] bond1: (slave geneve2): failed to get link speed/duplex [ 639.487255][ T49] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 639.492224][T14687] bond3: (slave bond0): failed to get link speed/duplex [ 639.500506][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.600744][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 639.620033][ T49] usb 4-1: Product: syz [ 639.632269][ T155] bond3: (slave bond0): failed to get link speed/duplex [ 639.636839][ T49] usb 4-1: Manufacturer: syz [ 639.666974][ T49] usb 4-1: SerialNumber: syz [ 639.676742][ T49] usb 4-1: config 0 descriptor?? [ 639.692005][ T49] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.732880][ T3834] bond1: (slave geneve2): failed to get link speed/duplex [ 639.762231][ T3834] bond3: (slave bond0): failed to get link speed/duplex [ 639.862702][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 639.892225][ T155] bond3: (slave bond0): failed to get link speed/duplex [ 639.912466][ T5879] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 639.992744][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 640.022818][T14687] bond3: (slave bond0): failed to get link speed/duplex [ 640.082216][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 640.131494][ T5879] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.448258][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 640.457567][ T5879] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 640.482357][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.524333][ T5879] usb 3-1: config 0 descriptor?? [ 641.002988][ T5879] nzxt-smart2 0003:1E71:2009.0038: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 641.373120][T13260] Bluetooth: hci5: command 0x0406 tx timeout [ 641.626637][ T5886] usb 4-1: USB disconnect, device number 103 [ 641.810101][ T5879] usb 3-1: USB disconnect, device number 120 [ 641.940122][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 641.949930][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 642.490589][T15061] Process accounting resumed [ 643.543035][ T6521] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 643.702759][ T6521] usb 1-1: device descriptor read/64, error -71 [ 643.787307][T15089] lo speed is unknown, defaulting to 1000 [ 643.963047][ T6521] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 644.124310][ T6521] usb 1-1: device descriptor read/64, error -71 [ 644.215585][T15089] Invalid argument reading file caps for ./file0 [ 644.242497][ T6521] usb usb1-port1: attempt power cycle [ 644.417608][ T5886] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 644.544019][T14669] net_ratelimit: 64 callbacks suppressed [ 644.544052][T14669] bond3: (slave bond0): failed to get link speed/duplex [ 644.893900][T14669] bond1: (slave geneve2): failed to get link speed/duplex [ 644.922803][ T6521] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 644.954528][ T6521] usb 1-1: device descriptor read/8, error -71 [ 644.960018][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 644.988686][ T5886] usb 3-1: can't read configurations, error -61 [ 644.999391][ T30] audit: type=1400 audit(2000000058.220:1098): avc: denied { bind } for pid=15112 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 645.033931][T14669] bond3: (slave bond0): failed to get link speed/duplex [ 645.053009][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 645.123131][ T5886] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 645.142196][ T12] bond3: (slave bond0): failed to get link speed/duplex [ 645.220808][ T6521] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 645.239814][T13117] bond1: (slave geneve2): failed to get link speed/duplex [ 645.274081][ T6521] usb 1-1: device descriptor read/8, error -71 [ 645.281593][T13117] bond3: (slave bond0): failed to get link speed/duplex [ 645.285132][T15119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.379515][T14687] bond1: (slave geneve2): failed to get link speed/duplex [ 645.390064][ T6521] usb usb1-port1: unable to enumerate USB device [ 645.400377][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 645.403224][T14687] bond3: (slave bond0): failed to get link speed/duplex [ 645.434226][ T5886] usb 3-1: can't read configurations, error -61 [ 645.592529][ T5886] usb usb3-port1: attempt power cycle [ 645.953968][ T5886] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 645.986019][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 645.995803][ T5886] usb 3-1: can't read configurations, error -61 [ 646.042933][ T6521] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 646.142373][ T5886] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 646.154876][ T30] audit: type=1326 audit(2000000059.380:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.179710][ T30] audit: type=1326 audit(2000000059.400:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.205413][ T30] audit: type=1326 audit(2000000059.400:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.222688][ T6521] usb 6-1: Using ep0 maxpacket: 8 [ 646.229499][ T30] audit: type=1326 audit(2000000059.400:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.259041][T15141] futex_wake_op: syz.0.2341 tries to shift op by -1; fix this program [ 646.268276][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 646.269318][ T6521] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 646.276009][ T5886] usb 3-1: can't read configurations, error -61 [ 646.276328][ T5886] usb usb3-port1: unable to enumerate USB device [ 646.299478][ T30] audit: type=1326 audit(2000000059.400:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.301887][ T5935] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 646.334143][ T30] audit: type=1326 audit(2000000059.400:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.345193][ T6521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.387830][ T30] audit: type=1326 audit(2000000059.400:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.422157][ T30] audit: type=1326 audit(2000000059.400:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.426214][ T6521] pvrusb2: Hardware description: Terratec Grabster AV400 [ 646.460775][ T30] audit: type=1326 audit(2000000059.400:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15140 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4a18f749 code=0x7ffc0000 [ 646.461112][ T6521] pvrusb2: ********** [ 646.490183][ T6521] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 646.502016][ T6521] pvrusb2: Important functionality might not be entirely working. [ 646.510368][ T6521] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 646.528056][ T6521] pvrusb2: ********** [ 646.542726][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 646.555641][ T5935] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 646.566778][ T5935] usb 4-1: config 254 has no interface number 0 [ 646.573906][ T5935] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 646.585716][ T5935] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 646.598121][ T5935] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 646.610096][ T5935] usb 4-1: config 254 interface 235 has no altsetting 0 [ 646.624457][ T2339] pvrusb2: Invalid write control endpoint [ 646.833301][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 646.833506][T15130] pvrusb2: Invalid write control endpoint [ 646.843142][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 646.857294][ T5935] usb 4-1: Product: syz [ 646.861537][ T5935] usb 4-1: Manufacturer: syz [ 646.867047][ T5935] usb 4-1: SerialNumber: syz [ 646.935338][T15139] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 646.973456][ T5895] usb 6-1: USB disconnect, device number 23 [ 647.038340][ T2339] pvrusb2: Invalid write control endpoint [ 647.046532][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.063188][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.071399][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.099235][ T2339] pvrusb2: Device being rendered inoperable [ 647.126111][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.135792][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 647.153336][ T2339] pvrusb2: Attached sub-driver cx25840 [ 647.159169][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.170470][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 647.271830][T15138] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 647.493365][ T5935] usbtest 4-1:254.235: Linux gadget zero [ 647.709391][ T5935] usbtest 4-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 647.783532][ T5935] usb 4-1: USB disconnect, device number 104 [ 648.848493][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2350'. [ 648.865833][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2350'. [ 649.043766][ T5935] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 649.253592][ T5935] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 649.304904][ T5935] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 649.338913][ T5935] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 649.364621][ T5935] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 649.373537][ T5935] usb 1-1: Manufacturer: syz [ 649.385407][ T5935] usb 1-1: config 0 descriptor?? [ 649.552741][ T4937] net_ratelimit: 54 callbacks suppressed [ 649.552777][ T4937] bond3: (slave bond0): failed to get link speed/duplex [ 649.600120][ T5935] igorplugusb 1-1:0.0: incorrect number of endpoints [ 649.629926][ T5935] usb 1-1: USB disconnect, device number 18 [ 649.719993][ T2115] bond1: (slave geneve2): failed to get link speed/duplex [ 649.738887][ T2115] bond3: (slave bond0): failed to get link speed/duplex [ 649.843589][ T155] bond1: (slave geneve2): failed to get link speed/duplex [ 650.102373][ T31] INFO: task syz.1.1778:13041 blocked for more than 143 seconds. [ 650.331652][ T31] Tainted: G L syzkaller #0 [ 650.349902][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.369524][ T12] bond3: (slave bond0): failed to get link speed/duplex [ 650.376712][ T31] task:syz.1.1778 state:D stack:26008 pid:13041 tgid:13040 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 650.389801][ T31] Call Trace: [ 650.393186][ T31] [ 650.396191][ T31] ? __schedule+0x10b9/0x6150 [ 650.401072][ T31] __schedule+0x1139/0x6150 [ 650.405724][ T31] ? __lock_acquire+0x436/0x2890 [ 650.410754][ T31] ? __pfx___schedule+0x10/0x10 [ 650.420160][ T31] ? find_held_lock+0x2b/0x80 [ 650.426135][ T31] ? schedule+0x2d7/0x3a0 [ 650.434042][ T31] schedule+0xe7/0x3a0 [ 650.438236][ T31] schedule_preempt_disabled+0x13/0x30 [ 650.443829][ T180] bond1: (slave geneve2): failed to get link speed/duplex [ 650.443974][ T31] __mutex_lock+0xc69/0x1ca0 [ 650.455849][ T31] ? sync_bdevs+0x153/0x480 [ 650.460883][ T31] ? __lock_acquire+0x436/0x2890 [ 650.471502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 650.477019][ T31] ? iput.part.0+0x192/0x1190 [ 650.481871][ T31] ? sync_bdevs+0x153/0x480 [ 650.486506][ T31] sync_bdevs+0x153/0x480 [ 650.490990][ T31] ksys_sync+0xb2/0x150 [ 650.495458][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 650.500282][ T31] ? syscall_user_dispatch+0x78/0x140 [ 650.505878][ T31] ? syscall_trace_enter+0x5e/0x220 [ 650.511142][ T31] __do_sys_sync+0xe/0x20 [ 650.515524][ T31] do_syscall_64+0xcd/0xf80 [ 650.520191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.526206][ T31] RIP: 0033:0x7f9858b8f749 [ 650.530761][ T31] RSP: 002b:00007f9859a34038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 650.539409][ T31] RAX: ffffffffffffffda RBX: 00007f9858de5fa0 RCX: 00007f9858b8f749 [ 650.547737][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.554104][ T180] bond3: (slave bond0): failed to get link speed/duplex [ 650.580233][ T31] RBP: 00007f9858de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 650.592181][ T4937] bond1: (slave geneve2): failed to get link speed/duplex [ 650.602846][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.614494][ T31] R13: 00007f9858de6038 R14: 00007f9858de5fa0 R15: 00007ffd2ff30e98 [ 650.625968][ T31] [ 650.630197][ T31] [ 650.630197][ T31] Showing all locks held in the system: [ 650.639320][ T31] 1 lock held by khungtaskd/31: [ 650.644715][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 650.665490][ T31] 2 locks held by getty/5576: [ 650.670287][ T31] #0: ffff888030f150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 650.682895][ T4937] bond3: (slave bond0): failed to get link speed/duplex [ 650.691262][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 650.701571][ T31] 1 lock held by udevd/5834: [ 650.706321][T13245] bond1: (slave geneve2): failed to get link speed/duplex [ 650.713607][ T31] #0: ffff888141be1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 650.723063][ T31] 1 lock held by syz.1.1778/13041: [ 650.728261][ T31] #0: ffff888141be1358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 650.740207][ T31] 2 locks held by syz.2.2354/15193: [ 650.745556][ T31] [ 650.747929][ T31] ============================================= [ 650.747929][ T31] [ 650.756431][ T31] NMI backtrace for cpu 0 [ 650.756449][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 650.756474][ T31] Tainted: [L]=SOFTLOCKUP [ 650.756481][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.756492][ T31] Call Trace: [ 650.756498][ T31] [ 650.756511][ T31] dump_stack_lvl+0x116/0x1f0 [ 650.756539][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 650.756575][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 650.756596][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 650.756626][ T31] sys_info+0x133/0x180 [ 650.756651][ T31] watchdog+0xe66/0x1180 [ 650.756678][ T31] ? rcu_is_watching+0x12/0xc0 [ 650.756695][ T31] ? __pfx_watchdog+0x10/0x10 [ 650.756713][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.756743][ T31] ? __kthread_parkme+0x19e/0x250 [ 650.756764][ T31] ? __pfx_watchdog+0x10/0x10 [ 650.756784][ T31] kthread+0x3c5/0x780 [ 650.756806][ T31] ? __pfx_kthread+0x10/0x10 [ 650.756828][ T31] ? rcu_is_watching+0x12/0xc0 [ 650.756845][ T31] ? __pfx_kthread+0x10/0x10 [ 650.756867][ T31] ret_from_fork+0x983/0xb10 [ 650.756888][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 650.756910][ T31] ? __switch_to+0x7af/0x10d0 [ 650.756934][ T31] ? __pfx_kthread+0x10/0x10 [ 650.756956][ T31] ret_from_fork_asm+0x1a/0x30 [ 650.756995][ T31] [ 650.757002][ T31] Sending NMI from CPU 0 to CPUs 1: [ 650.897657][ C1] NMI backtrace for cpu 1 [ 650.897676][ C1] CPU: 1 UID: 0 PID: 15193 Comm: syz.2.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.897698][ C1] Tainted: [L]=SOFTLOCKUP [ 650.897703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.897711][ C1] RIP: 0010:__get_user_pages+0x299/0x3590 [ 650.897735][ C1] Code: 8f 1b 00 00 65 48 8b 15 5d 4d a8 11 48 89 d0 48 89 54 24 08 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 48 01 c8 48 89 44 24 48 <49> 8d 47 10 48 89 44 24 28 e8 89 83 b4 ff 48 8b 7c 24 08 be 08 00 [ 650.897750][ C1] RSP: 0018:ffffc900060def18 EFLAGS: 00000282 [ 650.897763][ C1] RAX: ffffed100ce0d498 RBX: 0000000000000000 RCX: dffffc0000000000 [ 650.897772][ C1] RDX: ffff88806706a4c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 650.897781][ C1] RBP: 0000001b30241001 R08: 0000000000000007 R09: 0000000000000000 [ 650.897790][ C1] R10: 0000000000000000 R11: ffff88806706aff0 R12: 0000000000000000 [ 650.897804][ C1] R13: 000000000000000e R14: 0000000000000001 R15: ffff88807c5b9a00 [ 650.897814][ C1] FS: 00007fbdbafea6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 650.897829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.897839][ C1] CR2: 00007fae4a3b6ad8 CR3: 000000003ee68000 CR4: 00000000003526f0 [ 650.897849][ C1] Call Trace: [ 650.897854][ C1] [ 650.897864][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 650.897883][ C1] ? __kernel_write_iter+0x5a5/0xb10 [ 650.897907][ C1] get_dump_page+0x257/0x3d0 [ 650.897925][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 650.897944][ C1] ? dump_user_range+0x756/0xb70 [ 650.897967][ C1] dump_user_range+0x195/0xb70 [ 650.897990][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 650.898011][ C1] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 650.898030][ C1] ? __pfx_writenote+0x10/0x10 [ 650.898046][ C1] elf_core_dump+0x29c3/0x3c10 [ 650.898065][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 650.898078][ C1] ? kasan_save_stack+0x33/0x60 [ 650.898095][ C1] ? kasan_save_track+0x14/0x30 [ 650.898109][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 650.898124][ C1] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 650.898139][ C1] ? vfs_coredump+0x1dd9/0x55e0 [ 650.898158][ C1] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 650.898177][ C1] ? irqentry_exit+0x38a/0x8c0 [ 650.898195][ C1] ? asm_exc_page_fault+0x26/0x30 [ 650.898211][ C1] ? 0xffffffffff600000 [ 650.898238][ C1] ? vfs_coredump+0x2b85/0x55e0 [ 650.898257][ C1] vfs_coredump+0x2b85/0x55e0 [ 650.898280][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 650.898299][ C1] ? __lock_acquire+0x436/0x2890 [ 650.898317][ C1] ? __lock_acquire+0x436/0x2890 [ 650.898333][ C1] ? lock_acquire+0x179/0x330 [ 650.898351][ C1] ? lock_acquire+0x179/0x330 [ 650.898372][ C1] ? arch_stack_walk+0xa6/0x100 [ 650.898393][ C1] ? stack_trace_save+0x8e/0xc0 [ 650.898408][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 650.898423][ C1] ? stack_depot_save_flags+0x29/0x9b0 [ 650.898444][ C1] ? __lock_acquire+0x436/0x2890 [ 650.898460][ C1] ? kasan_save_stack+0x42/0x60 [ 650.898490][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 650.898508][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 650.898527][ C1] ? rcu_is_watching+0x12/0xc0 [ 650.898541][ C1] get_signal+0x22e1/0x26d0 [ 650.898564][ C1] ? __pfx_get_signal+0x10/0x10 [ 650.898586][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 650.898605][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.898627][ C1] ? do_user_addr_fault+0x926/0x1370 [ 650.898646][ C1] irqentry_exit+0x38a/0x8c0 [ 650.898665][ C1] asm_exc_page_fault+0x26/0x30 [ 650.898678][ C1] RIP: 0033:0x7fbdba18f751 [ 650.898689][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 650.898702][ C1] RSP: 002b:00000000000000e0 EFLAGS: 00010217 [ 650.898713][ C1] RAX: 0000000000000000 RBX: 00007fbdba3e5fa0 RCX: 00007fbdba18f749 [ 650.898722][ C1] RDX: 0000000000000000 RSI: 00000000000000e0 RDI: 0000000000002080 [ 650.898730][ C1] RBP: 00007fbdba213f91 R08: 0000000000000000 R09: 0000000000000000 [ 650.898739][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 650.898748][ C1] R13: 00007fbdba3e6038 R14: 00007fbdba3e5fa0 R15: 00007ffd559de5f8 [ 650.898763][ C1] [ 651.321541][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 651.328387][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 651.339065][ T31] Tainted: [L]=SOFTLOCKUP [ 651.343386][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.353440][ T31] Call Trace: [ 651.356713][ T31] [ 651.359639][ T31] dump_stack_lvl+0x3d/0x1f0 [ 651.364231][ T31] vpanic+0x640/0x6f0 [ 651.368214][ T31] panic+0xca/0xd0 [ 651.371937][ T31] ? __pfx_panic+0x10/0x10 [ 651.376355][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 651.382333][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 651.388493][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 651.394654][ T31] ? watchdog+0xe83/0x1180 [ 651.399057][ T31] ? watchdog+0xe76/0x1180 [ 651.403461][ T31] watchdog+0xe94/0x1180 [ 651.407690][ T31] ? rcu_is_watching+0x12/0xc0 [ 651.412441][ T31] ? __pfx_watchdog+0x10/0x10 [ 651.417105][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.422308][ T31] ? __kthread_parkme+0x19e/0x250 [ 651.427316][ T31] ? __pfx_watchdog+0x10/0x10 [ 651.431977][ T31] kthread+0x3c5/0x780 [ 651.436031][ T31] ? __pfx_kthread+0x10/0x10 [ 651.440608][ T31] ? rcu_is_watching+0x12/0xc0 [ 651.445375][ T31] ? __pfx_kthread+0x10/0x10 [ 651.449974][ T31] ret_from_fork+0x983/0xb10 [ 651.454548][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 651.459642][ T31] ? __switch_to+0x7af/0x10d0 [ 651.464305][ T31] ? __pfx_kthread+0x10/0x10 [ 651.468882][ T31] ret_from_fork_asm+0x1a/0x30 [ 651.473673][ T31] [ 651.476957][ T31] Kernel Offset: disabled [ 651.481256][ T31] Rebooting in 86400 seconds..