last executing test programs: 17.06561464s ago: executing program 3 (id=489): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0xffffffff, 0x0, 0x0}) 14.073121946s ago: executing program 3 (id=498): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4bd}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000740)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b4b326af78e87e5a6b6d930eda2769c5aa2c7866b9ee6d5e3d541cf9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x85) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x4, 0x400]}}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)=r7}, 0x20) write$UHID_INPUT2(r7, &(0x7f0000000640)={0xc, {0xc1, "f6f2e041e365c306c7b6f4cddf5430159d64200376ef2d29af0a6a7d65418de094e1262d969ea2fcf5fbc5b8f55d0f51964d8ac1828f2a0a08e54875b323a3683f8f6a4dd8f26d343c3277e5106041b7bcc105b086f0d4c36f2029aea93adc117fb7d751b858cbfe47cf0da0c2b66f2cb592592ceaa7ea7c3ba9e5d752d7863d988f6a70b8ddc3c68cd3c1707cb03db2a0145ce0419545b358ee0c576da344db3314bdb3579f1111fe2158fe1c31eeccb5f4cac44b7f541f1fd56fdceb909198c3"}}, 0xc7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c"], 0x38}, 0x1, 0x0, 0x0, 0x8040014}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYRESOCT=r6, @ANYRES32=r10, @ANYBLOB="093f092fa1edc01e09b26f", @ANYRES8=r5], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="bb9c0be595069503f20180966b67e91f9aaecb828af6a375568bf3c1c6bdb7184f2a775bd9bb6ac0db80e4d443", @ANYRES64=r9], 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r11, 0x5, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 12.946057073s ago: executing program 4 (id=500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x32b, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x144, &(0x7f00000000c0)=ANY=[@ANYBLOB="a600004e975cc2b3d9208e71e1429a7017b4e627abbd29c40b946553ed8ae098c248045dd09cf8c9ecc2476fba16dd636c373106f5767fa057ab0a92cfc1058e26fc4b75131eb81208fc26e8fc6f4c48982a57aa1e6659b4b89fc14f070e416f513e56f00cd95657fda1ac5201eaa194160d6b3ad90137c673b2a47a0b95b421c797fd771902f4ce4081cce4c48c145ecc8c6df80a87c83eeeb6014d6499ea515e828340d2db06d201c100009400004e7b02f906b6eb9b10049dec2788cb317df5d0ce8174f2829d77294ef90e3996eb6ebc70bc60cf9cf5b629dc72bd26b65e6a021701c902781ef9ef30900f4476c9a3980f7bd6e8e20b7ee44784e94d7a8eb9de11d804d3a8647203e98a8ee0cfef8a5d0532f2866d612cf44f461d6175cf182ea600327966bf59fa108dde5f4ed9d1f55df064920ddf9fa0af9c6fa6d636fb7458b1"]) r4 = socket$inet6(0xa, 0x3, 0x87) r5 = socket(0x10, 0x3, 0x0) r6 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) ptrace(0x8, r6) ptrace(0x4207, r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbeec, 0x1010, r7, 0x2c253000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmmsg(r4, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}}], 0x1, 0x4000000) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) 12.378371721s ago: executing program 3 (id=501): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1b) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x8, 0x1, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 11.136699826s ago: executing program 0 (id=506): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) 9.58416335s ago: executing program 1 (id=508): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xf5, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 8.728831221s ago: executing program 2 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xc}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x6, 0x20}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000040)={0x6, 0x1}) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.671740185s ago: executing program 4 (id=510): close(0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="6ff7010000040000"], 0x20}}, 0x4084) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.570112584s ago: executing program 1 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, r3, @void, @value=0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@dellink={0xa4, 0x11, 0x1120, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x10000, 0x220}, [@IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x44}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9107e8995f488c6304abd9d884fb7f9b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "56733b2b6d3d4fa55f5d9072c746b3b5"}]}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip_vti0\x00'}]}, 0xa4}}, 0x804) 8.389586443s ago: executing program 1 (id=512): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x4043}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ipvlan1\x00', &(0x7f0000000080)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 8.37146439s ago: executing program 0 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x8, 0x3, 0x0, 0xffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000031, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 8.20070021s ago: executing program 3 (id=514): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000302c00fe8000000000000000000000000000aaf102000000000000000000000000000102009078000008006f2a7a6303ff00010000000000000000000000000000000100000000"], 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9febd6c9bbc18835e925992dfb3d31"], 0x0, 0x1e, 0x0, 0x1}, 0x28) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 7.977325356s ago: executing program 0 (id=515): r0 = io_uring_setup(0x44f, &(0x7f0000001500)={0x0, 0xe903, 0x2, 0x0, 0x1e6}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendfile(r6, r7, 0x0, 0x20fffe82) 7.955929178s ago: executing program 2 (id=516): syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0x8}, 0xfd}}}, 0x7) openat$ppp(0xffffffffffffff9c, 0x0, 0x40100, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000019c, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r6 = fsmount(0xffffffffffffffff, 0x1, 0x6) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x40) 6.935631242s ago: executing program 2 (id=517): close(0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4084) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.837894454s ago: executing program 4 (id=518): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x49, 0x9, 0x4, 0x10, 0x2, 0x3, 0x2}}, {0x4}}]}]}, 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 6.400884812s ago: executing program 1 (id=519): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60a03, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0xf000, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x208a41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 6.292821476s ago: executing program 4 (id=520): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_io_uring_setup(0x5d4b, &(0x7f0000000400)={0x0, 0x783, 0x80, 0x0, 0x5a, 0x0, 0x0}, &(0x7f0000000300), &(0x7f0000000140), 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 4.222809826s ago: executing program 4 (id=521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@struct={0x8, 0x0, 0x0, 0x4, 0x0, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x20, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, 0x0, 0x52}, 0x28) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)=@newtaction={0x1284, 0x30, 0x1, 0x0, 0x0, {}, [{0x1270, 0x1, [@m_police={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x803}}]]}, {0x89, 0x6, "21624273de7540897921b3eaa8ec839b24aadf0d386167b75d73b38822e3591df00bd5e17bf114a577b097731c2cb055f4aba719ee49a84723736ae51b28782d8fa6c02008832f605b2e72270c7e2a1c2ce10e911cab123d4370d57d184bfd3f420a263575c9f5ca870f4887fddc5a90564fef9801b65dadefe7531e484d17feb81f3a4c02"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1178, 0x2, 0x0, 0x0, {{0xb}, {0x114c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x0, 0x1, 0x0, {0x8, 0x0, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, 0xfffc, 0x0, 0x1}}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x3, 0x200, 0x7, 0x5, {0x2, 0x0, 0x1, 0x6, 0xfff7, 0x6}, {0xff, 0x0, 0x10, 0x4, 0x2, 0xf3}, 0x69b066de, 0x8, 0x81}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x1, 0x8, 0xfff, {0x0, 0x1, 0x2, 0x5, 0xfff}, {0x5, 0x0, 0x3, 0x0, 0xe, 0x4}, 0x8, 0x6, 0x10ca000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x8b4, 0x5, 0x5, 0x10001, 0x10000, 0xc00, 0xfff, 0x20, 0x5, 0x6, 0x1ce3, 0x81, 0x9, 0x0, 0x7, 0xfd, 0x2bfc, 0x4, 0x9, 0x4, 0x2d, 0x7ff, 0x6, 0x9, 0x449, 0x4, 0x6, 0x2, 0xfffffffa, 0xb783, 0xd6ad, 0xc007, 0x0, 0x8001, 0xb, 0x10001, 0x8, 0x9, 0x2, 0xeb12, 0x6, 0x9, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0x80000001, 0x9, 0x9, 0x5, 0x80000001, 0x227, 0x80, 0x9, 0x7fff, 0x5, 0x3, 0x6, 0x8, 0x7fffffff, 0x2, 0x2, 0xfffff001, 0x27c800, 0xd7a, 0x7, 0x5, 0x3849e53f, 0x5, 0x4d6, 0x2, 0x8, 0x0, 0xfffffffb, 0x9, 0x1, 0x9, 0xf59, 0x9, 0x9, 0x6, 0x4, 0x6, 0x3ff, 0x84e, 0x8, 0x3aa, 0x0, 0x4, 0x5, 0x80000000, 0x4, 0x5, 0x30000, 0x3c3, 0x100, 0x2, 0x7, 0x9, 0x5, 0x137ca00, 0x40e, 0xfffffffa, 0xff, 0x8000, 0x2, 0x0, 0x9, 0x7c8, 0x4, 0x7, 0x40, 0x7, 0x0, 0x8, 0xfffffff7, 0x5, 0xfff, 0x1, 0x995e, 0xae, 0x0, 0x7, 0x8, 0xc570, 0x7, 0xa, 0x9, 0x80000000, 0x0, 0x5, 0x7, 0x2, 0x2, 0x222, 0x80, 0x3, 0x8000e, 0x4, 0x9, 0x3, 0x4806, 0x1, 0x0, 0x7, 0x1, 0xfcab, 0x1, 0xb1d3, 0xeb, 0x7fff, 0x5, 0x3, 0x3, 0x8, 0x6, 0x6c89, 0x1, 0x9, 0x3, 0x9, 0xf37, 0x8, 0x8, 0x7, 0x4, 0x3ff, 0x4, 0x5, 0x5, 0x3, 0x1, 0x800, 0x1, 0x101, 0x9, 0x7, 0x2, 0x64, 0x7, 0xfffff001, 0x7, 0x1, 0x14000000, 0x34c, 0x7f, 0x1, 0x7fffffff, 0x6, 0x1, 0x5, 0xa413, 0x0, 0xffffff0f, 0xb4, 0x0, 0x5, 0x4, 0xc, 0xff, 0x6, 0x1, 0x0, 0x8, 0x1, 0x8001, 0x7c, 0xfffeffff, 0x1, 0x0, 0xc62, 0x2, 0x400, 0x3, 0xff, 0x9, 0xd, 0x7, 0x0, 0x2, 0x2, 0x1a, 0x6, 0x9, 0x6, 0xa, 0xb, 0x800, 0x2c4, 0x7, 0x5, 0xe, 0xfffffffa, 0x200, 0x3d, 0xd9, 0x0, 0x4a, 0x10000, 0x670, 0x6, 0x100, 0x9, 0x23, 0x7fffffff, 0x7, 0x40, 0x8000, 0x2, 0x861a, 0xddf, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800100, 0x1, 0xfffffff7, 0x9, 0x6c85, 0x2, 0xb, 0x20000000, 0xfffffc00, 0x9, 0xf, 0x3, 0x6, 0x3, 0x10000, 0x2, 0xfffffff3, 0x9, 0xfffffffa, 0x3, 0x7f, 0x9, 0x7, 0xfc000000, 0x5, 0x1, 0x6, 0x6, 0x6, 0xe, 0x401, 0x200, 0x6, 0x230, 0x4, 0x4, 0xe366, 0x8, 0x4, 0x4d9b7a49, 0x3, 0x9, 0x5, 0xcbbd, 0x5, 0xd97a, 0x8, 0x3ff, 0x86, 0x8, 0x5, 0xff, 0x20, 0x100, 0x5, 0x9, 0x9, 0x3, 0x0, 0x3, 0x7, 0x81, 0x41a, 0x5, 0x4d, 0x4, 0x5, 0xe3, 0x5, 0x0, 0x9, 0x5, 0xfd, 0x5, 0x6, 0x10, 0xb9, 0x6, 0x7, 0x6, 0x50, 0x8, 0x81, 0x8, 0x24, 0x7, 0x7ff, 0x7fffffff, 0x9, 0xba, 0x4, 0x2df, 0x9, 0xffffffff, 0x10000, 0x6, 0x8, 0x5, 0x9, 0xfff, 0x9, 0x2, 0x786a, 0x100, 0x8, 0xe1e0, 0xea0, 0x13, 0x5, 0xa, 0x1, 0x8, 0x2, 0x8, 0x0, 0x8001, 0xb3, 0x8, 0x6, 0x1, 0x6, 0xb, 0x2, 0x6, 0x2, 0xdba8, 0x7, 0x2, 0x2, 0x9, 0x7f, 0x7, 0x3ff, 0x2, 0x5, 0x2, 0x7fff, 0x4, 0x0, 0x0, 0x2d7, 0xffff38b0, 0x3, 0xd85b, 0xddc5, 0x8000, 0x2, 0xc91a, 0xf3, 0x7, 0x3, 0xf, 0x7, 0x9, 0x5, 0x5, 0x6, 0x8, 0xc, 0x9, 0x4, 0x10, 0x7fff, 0xdc, 0x9, 0x8f3, 0x4, 0x9, 0x5, 0x93, 0x7, 0x5, 0xffff7fff, 0x6, 0x5, 0x8, 0x4, 0x200, 0x4c2, 0xae0, 0x3, 0x6, 0xe, 0x6e6, 0x9, 0x7, 0x6, 0x0, 0x8, 0x8, 0x3, 0x2, 0x6, 0x9, 0x6, 0x7f5, 0xe6f6, 0x0, 0x1, 0x0, 0x4, 0x5, 0xff, 0x5, 0x5, 0x1, 0x3dc, 0x8001, 0x9, 0x101, 0x5, 0x10000, 0x6, 0x401, 0x1, 0x8e, 0xc, 0x4, 0xac1f, 0x80, 0x1, 0x8, 0x9, 0x10001, 0xffffff35, 0x2, 0x7, 0x4, 0xf, 0x5, 0x85d, 0x6, 0x1df, 0x8001, 0x2ac40097, 0xfff, 0x5, 0x7ff, 0x1ff, 0xa6d, 0xfffffff9, 0x1ad, 0x3, 0x10001, 0x8001, 0x734, 0x9a, 0xfffffffe, 0x1, 0x8, 0x4, 0xade8, 0x5, 0xffffff5f, 0x94b, 0xfffffffa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3f, 0x1, 0x4, 0x3, 0x681, 0x2, 0x6, 0x7, 0x8, 0x6, 0x1, 0x5, 0xad, 0x3, 0x4, 0x6, 0x80000001, 0x8, 0x76e, 0x3, 0x6242, 0x4, 0x149, 0x7, 0xc8, 0x2, 0x6, 0x3, 0xf4, 0x4, 0x10000, 0x1ff, 0x0, 0x0, 0x2, 0x9, 0x0, 0x8, 0x221, 0x3, 0x7ffd, 0x8, 0x1, 0x800, 0x10000, 0x200, 0x5b1, 0x10001, 0x7, 0x7db7a11b, 0x4, 0x8, 0xf, 0x9, 0x1, 0x3, 0x2, 0xffffffa9, 0x7fff, 0x0, 0x0, 0x4800, 0x8001, 0x4, 0x5, 0xc, 0x200, 0xbc0, 0xdf, 0x7, 0x10000, 0x14, 0x1ff, 0x8, 0x3d9, 0x2572, 0xffffffb2, 0x0, 0x3, 0x80, 0x8, 0x4, 0xf7b, 0xfffffff4, 0xfffff800, 0x3, 0x3, 0xfffffff3, 0x2, 0x0, 0x3ff, 0x0, 0xeef2, 0x93, 0x0, 0x11fe, 0x80, 0x9, 0x7, 0xdeb9, 0x9, 0x2, 0x7f, 0x8, 0x1, 0x9, 0x8, 0x400, 0x3, 0x4, 0x5, 0x5, 0x5, 0x727a271f, 0x6, 0x6, 0x6, 0x130d, 0x0, 0x9, 0x5, 0xfffffffd, 0x400000, 0x0, 0x7, 0x2ff, 0x0, 0x6, 0x6, 0x81, 0x5, 0x6, 0x8, 0xa4d1, 0x3, 0x4, 0x9, 0x200, 0x7, 0x100, 0xffffffff, 0x9, 0x0, 0x34, 0x0, 0x7, 0x9, 0x8, 0x5, 0x40, 0x5, 0x1, 0xfffffffb, 0x7fffffff, 0x80b6, 0x8, 0xfffff2a8, 0x3, 0x3, 0xf, 0x7, 0x1, 0x8, 0x4, 0x3, 0xb6c2, 0x1ff, 0x9, 0x4, 0x7, 0x7, 0x8, 0x9, 0xfff, 0xfffffffc, 0x4c8e, 0x1, 0x0, 0x8000, 0x4, 0x6, 0x2, 0x6fd, 0x9, 0x1, 0x8, 0x5, 0xfffffff7, 0x38e, 0x232, 0x5, 0xfffffff7, 0x5, 0x3, 0x35, 0x4, 0x5, 0x0, 0x6, 0x3, 0x8000, 0x7f, 0x4, 0x4, 0x2, 0x3, 0x6, 0x4, 0x2, 0x4, 0x81, 0x9, 0xfffffc00, 0x1, 0x6, 0x6, 0x7, 0x9, 0x0, 0x9, 0x4, 0x3, 0x7, 0x9, 0x40, 0x180, 0x7, 0x4000, 0x0, 0x5, 0x7, 0x2, 0x6, 0x8, 0x3, 0x0, 0x7, 0x80000000, 0x0, 0x3, 0xfffffffd, 0x4, 0x4, 0x3ff, 0x2da, 0x2, 0xf, 0x0, 0x80000000, 0x4, 0xa3, 0x2, 0xf, 0xfffffffd, 0x40, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x0, 0xfff, 0x6, 0x5, {0x2, 0x2, 0x5, 0x5, 0x5, 0x8}, {0x3, 0x1, 0x0, 0xbc, 0x3, 0x4}, 0x400, 0x9, 0xffffffa3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800000, 0xa, 0xfffff000, 0xd08, 0x100, 0x4, 0x0, 0xfffffffa, 0x6, 0x9, 0xfd, 0x2, 0x6, 0x1, 0x40, 0x3, 0x191, 0xe, 0x3, 0x3, 0x6, 0xf, 0x4, 0x8, 0x5, 0x2, 0x6c, 0x1126, 0x10001, 0x21b, 0x4, 0xfd, 0x3f800000, 0x8, 0xe, 0x9, 0x0, 0x300000, 0x5, 0x7, 0xbecf, 0x2, 0x9, 0x4, 0xc, 0x1c55, 0x4, 0x1, 0x8000, 0x200000, 0x4, 0x0, 0x3, 0x4, 0x8, 0x4, 0x7, 0x6, 0x3ff, 0x5, 0x1, 0xae, 0x7, 0x0, 0x101, 0x3, 0x4, 0x79, 0x5, 0x8, 0x4, 0x8, 0x6, 0xffff7671, 0x2, 0x6f6a, 0x5, 0x3, 0x3, 0xffff4762, 0x7, 0x7fffffff, 0x7, 0x6, 0x10, 0x10000, 0x9, 0x4, 0x7ce8, 0x100, 0x5, 0x4, 0x8, 0x0, 0xa9, 0x400, 0xfff, 0x6, 0x3d, 0x80000001, 0xd, 0x1, 0x3, 0x7, 0x2, 0x6, 0x4, 0x65, 0x8, 0x6, 0x10, 0x1ff, 0x8001, 0x4, 0x4, 0xc4d, 0x7ff, 0x101, 0x0, 0x14, 0x0, 0x0, 0x9, 0x2, 0x2, 0x4, 0x7c17, 0x800, 0x8, 0x0, 0x2, 0x6, 0x81, 0x0, 0x5, 0x6, 0x3, 0x6, 0x7, 0xfffffffc, 0xfffffffd, 0x7fffffff, 0x8ff, 0x5, 0x5, 0x2, 0x5, 0x7, 0x7736, 0x6, 0x6, 0xc45b, 0x1, 0x15, 0x200, 0x7, 0x7, 0x4, 0x4, 0xe7, 0xb, 0x5, 0x80, 0x3, 0x5, 0x3, 0x0, 0x6, 0x3, 0x1, 0x8, 0x400, 0x3, 0x2, 0x74, 0x3ff, 0x6, 0x6, 0x7, 0x9, 0x5, 0x80000000, 0x340, 0xb, 0x10, 0x400, 0x0, 0x8, 0x0, 0xff, 0x8001, 0x5, 0x7, 0x7, 0x81, 0xfff, 0x0, 0x7, 0x9, 0x2, 0xfff, 0x2, 0x1469, 0x4, 0xc00, 0x7, 0x4, 0x3, 0x1a80, 0x8, 0xfffffff7, 0x9, 0x5, 0xfffffffa, 0x3746, 0x5, 0xd8b, 0x80000000, 0xf3, 0xa0c2, 0x5, 0x8, 0x4, 0x7, 0x8, 0x9, 0x3, 0x3, 0x6, 0x1, 0x6, 0x400, 0x4, 0x9, 0x5, 0x100, 0x0, 0x200, 0x0, 0x80000000, 0x1, 0x80000001, 0x8, 0x81, 0x2, 0xa, 0x7, 0x2ef, 0x9, 0x4, 0x5, 0x7fffffff, 0x5, 0xfffffe00, 0x400, 0x3]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1284}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000200)={0x1000, 0x0, '\x00', {0x0, @bt={0xff, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x6, 0x1, 0xa3f6, 0x7, 0x2, 0x3, 0x71c, 0x80000001, 0x8, 0x24, {0xf, 0x5}, 0xb2, 0xe}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) fanotify_mark(r3, 0x459, 0x10, r2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020e00000e00000000000000d3e000000000010015004e2200000800120000000400000000000000000006000000000000000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001030006000000000002000000e0000001000000000000"], 0x70}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f0000000340)={0x80, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 3.740870323s ago: executing program 3 (id=522): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x353, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r4, @ANYBLOB="05a300000002000000000d1d000008000362", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x2000040) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) 3.503442838s ago: executing program 2 (id=523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x12c) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000058) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) 1.939699115s ago: executing program 3 (id=524): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1b) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x8, 0x1, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 1.935159698s ago: executing program 0 (id=525): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000007f0000006600000009"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000030c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf251500000008000300", @ANYRES32=r8, @ANYBLOB="0a0026000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x40000) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="f4c6620deeb82204e58db33759a8068ee9d36b0fde069785bf0fbc0531b1103628c4925b010098dca42d7f7d28c5eb22895e5cb36659741c9ee2bbdf3a442635015ddc02b156c8af7ecd4b24eca588936faae1b8be768da2e9dbc71aff7337634b4a95077944b14b624c80a904212ca4139d6db23655545393aafdbc1212be3739d53280e5c9b14782", @ANYRES32=r5, @ANYBLOB="000026bd7000ffdbdf253200000008000300", @ANYRES32=r8, @ANYBLOB="47cec7146eef197974bc639ef0d92587d655769c2eb63d157612b87177d265772858f4caaccb030ad352d10a4c6e933e0eed2e1b075bcde41916539683fb5a25eb11acb0a3d28efc039967be805657f14d17a73249ff59e14885bcea9471fce6e34c6c15d8f5e69f93efdd175994d33857df061c5f54bc21018a12d7a451b7b99bbc1e2020ce8e06e96114832ad520becd9163197e6357c96dba5639"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000080) fcntl$notify(r3, 0x402, 0x8000003d) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x20) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56543, 0x70b925, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x2404880c) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f00000014c0)={'broute\x00', 0x0, 0x3, 0x1000, [0xffff, 0x8001, 0xd5, 0x8, 0x6, 0x7], 0x0, 0x0, &(0x7f00000004c0)=""/4096}, &(0x7f0000001540)=0x78) splice(r9, 0x0, r10, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b003000007fffff58500000068ed000063"], 0x0, 0xc}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34006c00120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 1.919372815s ago: executing program 1 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xc}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x6, 0x20}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000040)={0x6, 0x1}) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.545523406s ago: executing program 2 (id=527): syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0x8}, 0xfd}}}, 0x7) openat$ppp(0xffffffffffffff9c, 0x0, 0x40100, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000019c, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r6 = fsmount(0xffffffffffffffff, 0x1, 0x6) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x40) 1.432074775s ago: executing program 4 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1b8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20008140) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004895) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101, 0x3}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4cc84d183ad2", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000000000600120105000000"], 0x30}}, 0x800) openat(r0, &(0x7f0000000540)='./file0\x00', 0x40402, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00') 807.473372ms ago: executing program 1 (id=529): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x4043}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ipvlan1\x00', &(0x7f0000000080)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 757.644697ms ago: executing program 0 (id=530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xb000, 0x80000001, 0xe7, 0x3, 0x0, [{0x6, 0xbe, 0x5}, {0x9, 0x8, 0x9, '\x00', 0xae}, {0x0, 0xe6, 0x8f, '\x00', 0x4}, {0xa1, 0x33, 0x6, '\x00', 0x1}, {0x2, 0x4, 0x9, '\x00', 0x9}, {0x0, 0xb, 0x0, '\x00', 0x4}, {0x89, 0x7, 0x7f, '\x00', 0x9}, {0xa, 0x7b, 0x9b, '\x00', 0x6}, {0x5, 0x7, 0xe3}, {0x7, 0x6, 0x6, '\x00', 0x2}, {0x1, 0x4f, 0x59, '\x00', 0xae}, {0x91, 0x4, 0x7f, '\x00', 0x80}, {0x2, 0x40, 0x2}, {0x5, 0xa, 0x2, '\x00', 0x6}, {0x54, 0x5b, 0x9, '\x00', 0xa3}, {0xfd, 0x9, 0x0, '\x00', 0x61}, {0xb, 0xfb, 0x0, '\x00', 0x4}, {0xc7, 0x7, 0x2, '\x00', 0x7}, {0x5, 0x3a, 0x9, '\x00', 0x8}, {0x2, 0x3e, 0x5, '\x00', 0xb6}, {0xbc, 0x81, 0x2, '\x00', 0x6}, {0xe, 0x8, 0x5, '\x00', 0x9}, {0xff, 0xb, 0x7, '\x00', 0xfd}, {0x4, 0x10, 0x4, '\x00', 0xa9}]}}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 620.56433ms ago: executing program 2 (id=531): r0 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000d00)={{0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x10, 0x80800) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x301, 0x1, 0x7, 0x81, 0x0, @multicast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000640)='rxrpc\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x50) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000500)=0x9) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) 0s ago: executing program 0 (id=532): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='pcmda12\x00', 0x8000, &(0x7f0000000040)={@align=0x7, {0xac15, 0xffff, 0x1, 0x101}}, 0xa36, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 6, logical block 0, async page read [ 99.537548][ T6165] fuse: fd is not a fuse device [ 99.545739][ T6162] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.568097][ T6162] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.584086][ T6162] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.600524][ T6162] ldm_validate_partition_table(): Disk read failed. [ 99.619681][ T6162] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.636652][ T6162] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.656339][ T6162] Dev loop6: unable to read RDB block 0 [ 99.666793][ T6162] loop6: unable to read partition table [ 99.679156][ T6162] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 99.844345][ T6173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.865507][ T6173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.440073][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 100.440094][ T29] audit: type=1400 audit(1777321816.166:256): avc: denied { name_connect } for pid=6179 comm="syz.2.87" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.945908][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.953489][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.977007][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.984247][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.991745][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.999007][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.011095][ T6146] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.021243][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.055320][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.223630][ T29] audit: type=1400 audit(1777321816.946:257): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 101.497457][ T29] audit: type=1400 audit(1777321817.166:258): avc: denied { create } for pid=6187 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.970256][ T6201] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.94'. [ 102.004461][ T6200] loop6: detected capacity change from 0 to 2640 [ 102.033326][ T6200] ldm_validate_partition_table(): Disk read failed. [ 102.051593][ T6200] Dev loop6: unable to read RDB block 0 [ 102.067318][ T6200] loop6: unable to read partition table [ 102.158447][ T6200] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 102.224778][ T803] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.235251][ T29] audit: type=1400 audit(1777321817.966:259): avc: denied { setopt } for pid=6205 comm="syz.2.96" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.414750][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.424414][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 102.443662][ T803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.459204][ T803] usb 4-1: config 4 interface 0 has no altsetting 0 [ 102.482948][ T803] usb 4-1: string descriptor 0 read error: -22 [ 102.495348][ T803] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 102.515425][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.526799][ T803] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 102.849593][ T29] audit: type=1400 audit(1777321818.576:260): avc: denied { read } for pid=6207 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.905031][ T803] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 103.022173][ T803] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.060867][ T803] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 103.089893][ T803] usb 4-1: media controller created [ 103.097865][ T29] audit: type=1400 audit(1777321818.816:261): avc: denied { mount } for pid=6214 comm="syz.2.100" name="/" dev="ramfs" ino=9047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.126253][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.178129][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.281025][ T803] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.314255][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 103.329569][ T5834] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 103.350671][ T5834] usb 1-1: config 0 has no interface number 0 [ 103.365401][ T5834] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.386876][ T5834] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 103.404199][ T5834] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 103.431170][ T5834] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 103.451801][ T5834] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 103.515360][ T5834] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.515364][ T29] audit: type=1400 audit(1777321819.236:262): avc: denied { create } for pid=6222 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 103.515394][ T5834] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.565387][ T5834] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.616144][ T5834] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.642028][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 103.669538][ T5834] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 103.679370][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.687569][ T5834] usb 1-1: Product: syz [ 103.692412][ T5834] usb 1-1: Manufacturer: syz [ 103.698268][ T5834] usb 1-1: SerialNumber: syz [ 103.770282][ T5834] usb 1-1: config 0 descriptor?? [ 103.891603][ T6216] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 104.215807][ T5834] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 104.225191][ T5834] usb 1-1: couldn't find an output bulk endpoint. Bailing out. [ 104.243644][ T5609] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.442873][ T5609] usb 5-1: Using ep0 maxpacket: 8 [ 104.454597][ T5609] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.469975][ T5609] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.525864][ T5609] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.583303][ T5609] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.631662][ T5609] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.653567][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.078460][ T5609] usb 5-1: GET_CAPABILITIES returned 0 [ 105.084275][ T5609] usbtmc 5-1:16.0: can't read capabilities [ 105.262498][ T29] audit: type=1400 audit(1777321820.986:263): avc: denied { getopt } for pid=6232 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.265180][ T5619] Bluetooth: Wrong link type (-57) [ 105.312303][ T6233] policy can only be matched on NF_INET_PRE_ROUTING [ 105.312318][ T6233] unable to load match [ 105.326467][ T29] audit: type=1400 audit(1777321821.036:264): avc: denied { create } for pid=6232 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.361514][ T5609] usb 4-1: USB disconnect, device number 4 [ 105.895999][ T6240] /dev/nullb0: Can't open blockdev [ 106.094477][ T29] audit: type=1400 audit(1777321821.486:265): avc: denied { write } for pid=6234 comm="syz.3.103" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.218481][ T29] audit: type=1326 audit(1777321821.616:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 106.284381][ T803] usb 1-1: USB disconnect, device number 6 [ 106.833086][ T6253] FAULT_INJECTION: forcing a failure. [ 106.833086][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.836695][ T29] audit: type=1326 audit(1777321821.616:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 106.851157][ T6255] overlayfs: overlapping lowerdir path [ 106.877124][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT(full) [ 106.877142][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.877154][ T6253] Call Trace: [ 106.877159][ T6253] [ 106.877164][ T6253] dump_stack_lvl+0x100/0x190 [ 106.877186][ T6253] should_fail_ex.cold+0x5/0xa [ 106.877202][ T6253] _copy_from_user+0x2e/0xd0 [ 106.877219][ T6253] __sys_bpf+0x243/0x4b90 [ 106.877240][ T6253] ? __pfx___sys_bpf+0x10/0x10 [ 106.877258][ T6253] ? proc_fail_nth_write+0x9f/0x220 [ 106.877277][ T6253] ? find_held_lock+0x2b/0x80 [ 106.877299][ T6253] ? find_held_lock+0x2b/0x80 [ 106.877313][ T6253] ? ksys_write+0x190/0x250 [ 106.877325][ T6253] ? ksys_write+0x190/0x250 [ 106.877339][ T6253] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 106.877352][ T6253] ? kernel_write+0x663/0x6c0 [ 106.877363][ T6253] ? __fget_files+0x215/0x3d0 [ 106.877385][ T6253] ? fput+0x79/0x100 [ 106.877399][ T6253] ? ksys_write+0x1ac/0x250 [ 106.877410][ T6253] ? __pfx_ksys_write+0x10/0x10 [ 106.877425][ T6253] __x64_sys_bpf+0x7b/0xc0 [ 106.877435][ T6253] ? lockdep_hardirqs_on+0x78/0x100 [ 106.877447][ T6253] do_syscall_64+0x10b/0xf80 [ 106.877459][ T6253] ? clear_bhb_loop+0x40/0x90 [ 106.877473][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.877484][ T6253] RIP: 0033:0x7f979db9cdd9 [ 106.877498][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.877508][ T6253] RSP: 002b:00007f979e99b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.877527][ T6253] RAX: ffffffffffffffda RBX: 00007f979de16090 RCX: 00007f979db9cdd9 [ 106.877534][ T6253] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002 [ 106.877541][ T6253] RBP: 00007f979e99b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.877547][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.877553][ T6253] R13: 00007f979de16128 R14: 00007f979de16090 R15: 00007fffc5624cc8 [ 106.877568][ T6253] [ 107.445504][ T29] audit: type=1326 audit(1777321821.616:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 107.454668][ T6259] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.493983][ T6258] fuse: Bad value for 'fd' [ 107.503328][ T29] audit: type=1400 audit(1777321821.616:269): avc: denied { mounton } for pid=6234 comm="syz.3.103" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 107.531555][ T29] audit: type=1326 audit(1777321821.636:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 107.556710][ T29] audit: type=1326 audit(1777321821.636:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 107.727702][ T6264] loop6: detected capacity change from 0 to 2640 [ 107.743962][ T6264] buffer_io_error: 32 callbacks suppressed [ 107.743974][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.796528][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.854304][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.862350][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.880700][ T10] usb 5-1: USB disconnect, device number 6 [ 107.903150][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.904875][ T29] audit: type=1326 audit(1777321821.636:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 107.998922][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.048009][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.073771][ T29] audit: type=1326 audit(1777321821.636:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 108.216943][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.252993][ T6264] ldm_validate_partition_table(): Disk read failed. [ 108.275597][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.760267][ T6264] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.785445][ T29] audit: type=1326 audit(1777321821.636:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979db9cdd9 code=0x7ffc0000 [ 108.824306][ T6264] Dev loop6: unable to read RDB block 0 [ 108.852579][ T6264] loop6: unable to read partition table [ 108.870585][ T6264] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 109.523680][ T6285] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.114'. [ 109.782940][ T5730] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.793457][ T5344] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.963371][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 109.972935][ T5344] usb 3-1: Using ep0 maxpacket: 8 [ 109.978199][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.996445][ T5344] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.008308][ T5730] usb 4-1: config 4 interface 0 has no altsetting 0 [ 110.025160][ T5344] usb 3-1: config 179 has no interface number 0 [ 110.038792][ T5730] usb 4-1: string descriptor 0 read error: -22 [ 110.046166][ T5344] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 110.062107][ T5730] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 110.080575][ T5344] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 110.092235][ T5730] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 110.124658][ T5730] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 110.132417][ T5344] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 110.169326][ T5730] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.181427][ T5344] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 110.194181][ T5730] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 110.202335][ T5344] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.215857][ T5730] usb 4-1: media controller created [ 110.225814][ T5344] usb 3-1: config 179 interface 65 has no altsetting 0 [ 110.244385][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.252999][ T5344] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 110.272144][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.322887][ T5730] zl10353_read_register: readreg error (reg=127, ret==0) [ 110.339863][ T5344] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 110.403681][ T5710] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.424484][ T4963] input input6: unable to receive magic message: -110 [ 110.455091][ T4963] input input6: unable to receive magic message: -32 [ 110.496006][ T4963] input input6: unable to receive magic message: -32 [ 110.510503][ T4963] input input6: unable to receive magic message: -32 [ 110.531884][ T4963] input input6: unable to receive magic message: -32 [ 110.550141][ T4963] input input6: unable to receive magic message: -32 [ 110.557104][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.570445][ T4963] input input6: unable to receive magic message: -32 [ 110.579047][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.596879][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 110.727256][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.744797][ T5710] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 110.981538][ T6298] input input6: unable to receive magic message: -32 [ 111.288542][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 111.314020][ T5710] usb 5-1: string descriptor 0 read error: -22 [ 111.344595][ T5710] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 111.426651][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.740057][ T5710] snd-ua101 5-1:1.0: invalid num_altsetting [ 112.407642][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 112.619086][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 112.619110][ T29] audit: type=1400 audit(1777321828.346:282): avc: denied { ioctl } for pid=6314 comm="syz.1.119" path="socket:[10158]" dev="sockfs" ino=10158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.272515][ T29] audit: type=1400 audit(1777321828.996:283): avc: denied { open } for pid=6321 comm="syz.1.121" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 113.388807][ T5710] usb 3-1: USB disconnect, device number 9 [ 113.388820][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.586037][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.594899][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.070272][ T803] usb 5-1: USB disconnect, device number 7 [ 114.109429][ T5344] usb 4-1: USB disconnect, device number 5 [ 114.323996][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 114.926423][ T5710] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.106767][ T5710] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.117023][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.158756][ T5710] usb 5-1: config 0 descriptor?? [ 115.211287][ T5710] cp210x 5-1:0.0: cp210x converter detected [ 115.875762][ T5710] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 115.912107][ T5710] usb 5-1: cp210x converter now attached to ttyUSB0 [ 115.995121][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 116.425377][ T5609] usb 5-1: USB disconnect, device number 8 [ 116.455507][ T5609] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.846711][ T5609] cp210x 5-1:0.0: device disconnected [ 118.119507][ T29] audit: type=1400 audit(1777321833.366:284): avc: denied { create } for pid=6363 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.139017][ T29] audit: type=1400 audit(1777321833.366:285): avc: denied { read } for pid=6363 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.408408][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.472172][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.512878][ T6369] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 118.683740][ T6379] fuse: Unknown parameter '0000000000000000000300000000000000000005' [ 118.790825][ T6382] fuse: Bad value for 'group_id' [ 118.797015][ T6382] fuse: Bad value for 'group_id' [ 118.843037][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.908083][ T29] audit: type=1400 audit(1777321834.636:286): avc: denied { write } for pid=6373 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.002942][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 119.014054][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.024467][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 119.055809][ T10] usb 4-1: string descriptor 0 read error: -22 [ 119.080538][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 119.110986][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.157840][ T10] snd-ua101 4-1:1.0: invalid num_altsetting [ 119.534721][ T29] audit: type=1400 audit(1777321835.266:287): avc: denied { create } for pid=6388 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.960653][ T29] audit: type=1400 audit(1777321835.686:288): avc: denied { setopt } for pid=6388 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.633175][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.751720][ T5710] usb 4-1: USB disconnect, device number 6 [ 122.250926][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 122.268826][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.305222][ T42] usb 1-1: config 4 has an invalid interface number: 241 but max is 0 [ 122.313615][ T42] usb 1-1: config 4 has no interface number 0 [ 122.324036][ T42] usb 1-1: config 4 interface 241 has no altsetting 0 [ 122.364620][ T42] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=2b.4b [ 122.386339][ T42] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 122.410272][ T42] usb 1-1: Product: syz [ 122.419997][ T42] usb 1-1: Manufacturer: syz [ 122.426035][ T29] audit: type=1400 audit(1777321838.166:289): avc: denied { read write } for pid=6425 comm="syz.1.148" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.432577][ T42] usb 1-1: SerialNumber: syz [ 122.530142][ T29] audit: type=1400 audit(1777321838.166:290): avc: denied { open } for pid=6425 comm="syz.1.148" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.562865][ T29] audit: type=1400 audit(1777321838.166:291): avc: denied { ioctl } for pid=6425 comm="syz.1.148" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.597435][ T6433] fuse: Bad value for 'group_id' [ 122.602584][ T6433] fuse: Bad value for 'group_id' [ 122.665692][ T5609] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.824080][ T5609] usb 4-1: Using ep0 maxpacket: 16 [ 122.838667][ T5609] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.853827][ T5609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.865125][ T5609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.888465][ T5609] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.897976][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.906231][ T5609] usb 4-1: Product: syz [ 122.910908][ T5609] usb 4-1: Manufacturer: syz [ 122.918200][ T5609] usb 4-1: SerialNumber: syz [ 122.945961][ T5609] usb 4-1: 0:2 : does not exist [ 123.647465][ T29] audit: type=1400 audit(1777321839.376:292): avc: denied { watch } for pid=6440 comm="syz.2.152" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.859232][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 124.213841][ T5609] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 124.244176][ T803] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.331204][ T42] cypress_m8 1-1:4.241: DeLorme Earthmate USB converter detected [ 124.366281][ T42] earthmate ttyUSB0: required endpoint is missing [ 124.405190][ T803] usb 3-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 124.425659][ T42] usb 1-1: USB disconnect, device number 7 [ 124.432037][ T6450] warning: `syz.0.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.446360][ T803] usb 3-1: config 1 interface 0 has no altsetting 0 [ 124.454765][ T42] cypress_m8 1-1:4.241: device disconnected [ 124.466566][ T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 124.597938][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.620175][ T803] usb 3-1: Product: syz [ 125.084716][ T803] usb 3-1: Manufacturer: syz [ 125.089618][ T803] usb 3-1: SerialNumber: syz [ 125.131664][ T6441] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 125.151796][ T29] audit: type=1400 audit(1777321840.876:293): avc: denied { ioctl } for pid=6452 comm="syz.1.154" path="socket:[11497]" dev="sockfs" ino=11497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.240543][ T29] audit: type=1400 audit(1777321840.916:294): avc: denied { write } for pid=6452 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.322837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.442514][ T5609] usb 4-1: USB disconnect, device number 7 [ 125.477994][ T29] audit: type=1400 audit(1777321840.926:295): avc: denied { bind } for pid=6452 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.586037][ T42] IPVS: starting estimator thread 0... [ 125.617547][ T29] audit: type=1400 audit(1777321841.326:296): avc: denied { create } for pid=6463 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.731561][ T803] usb 3-1: USB disconnect, device number 10 [ 125.739879][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.757069][ T6465] IPVS: using max 45 ests per chain, 108000 per kthread [ 125.903049][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 126.084888][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.105634][ T10] usb 1-1: config 0 has no interfaces? [ 126.121934][ T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 126.141866][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.184222][ T10] usb 1-1: config 0 descriptor?? [ 126.754906][ T29] audit: type=1400 audit(1777321842.126:297): avc: denied { ioctl } for pid=6470 comm="syz.4.160" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.970000][ T29] audit: type=1400 audit(1777321842.696:298): avc: denied { ioctl } for pid=6477 comm="syz.2.161" path="socket:[11520]" dev="sockfs" ino=11520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.037708][ T29] audit: type=1400 audit(1777321842.696:299): avc: denied { bind } for pid=6477 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.060350][ T10] usb 1-1: string descriptor 0 read error: -71 [ 127.074013][ T10] usb 1-1: USB disconnect, device number 8 [ 127.135142][ T29] audit: type=1400 audit(1777321842.696:300): avc: denied { setopt } for pid=6477 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.335706][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.162'. [ 127.358753][ T6483] netlink: 2 bytes leftover after parsing attributes in process `syz.4.162'. [ 127.531165][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 129.174776][ T6508] bond1: option xmit_hash_policy: invalid value (9) [ 129.185760][ T6508] bond1 (unregistering): Released all slaves [ 129.353081][ T803] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.367562][ T29] audit: type=1400 audit(1777321845.076:301): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 129.784279][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 129.972079][ T803] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.004169][ T803] usb 1-1: config 0 has no interface number 0 [ 130.005747][ T6523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6523 comm=syz.3.171 [ 130.051323][ T803] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.092489][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.114617][ T803] usb 1-1: Product: syz [ 130.127506][ T803] usb 1-1: Manufacturer: syz [ 130.140532][ T803] usb 1-1: SerialNumber: syz [ 130.175216][ T803] usb 1-1: config 0 descriptor?? [ 130.303707][ T5730] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.463186][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 130.474156][ T5730] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 130.528455][ T5609] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.542059][ T5730] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.583928][ T5730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.597559][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.605638][ T5730] usb 3-1: SerialNumber: syz [ 130.616049][ T6525] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 130.636696][ T5730] usb 3-1: No union descriptors [ 130.724133][ T5609] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 130.733567][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.745782][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.758797][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.766853][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.776194][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.789800][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.162054][ T5344] usb 3-1: USB disconnect, device number 11 [ 131.170375][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.183608][ T29] audit: type=1400 audit(1777321846.886:302): avc: denied { create } for pid=6524 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.213606][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.241777][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.260939][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.280237][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.314365][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.335353][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.372619][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.425397][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.448130][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.463179][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.480515][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.488868][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.498120][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.513777][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.524998][ T5609] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.534120][ T5609] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.545268][ T5609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.556328][ T5609] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.565561][ T5609] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 132.169503][ T29] audit: type=1400 audit(1777321847.526:303): avc: denied { mounton } for pid=6537 comm="syz.4.178" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.587792][ T5609] usb 4-1: Product: syz [ 132.595869][ T5609] usb 4-1: Manufacturer: syz [ 132.600661][ T5609] usb 4-1: SerialNumber: syz [ 132.623455][ T5609] usb 4-1: config 0 descriptor?? [ 132.709028][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.718609][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.730324][ T3333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.756012][ T5609] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.781923][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.792958][ T3333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 133.251452][ T5609] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 133.297160][ T5344] usb 4-1: USB disconnect, device number 8 [ 133.339408][ T5609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.559250][ T5344] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 133.583384][ T5609] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.132811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.143327][ T5344] IPVS: starting estimator thread 0... [ 136.161339][ T29] audit: type=1400 audit(1777321851.886:304): avc: denied { write } for pid=6573 comm="syz.2.186" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 136.193253][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -110 [ 136.227500][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.242954][ T6578] IPVS: using max 66 ests per chain, 158400 per kthread [ 136.252292][ T6576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6576 comm=syz.3.187 [ 136.279279][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 136.339693][ T803] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 136.396485][ T6580] can0: slcan on ttyS3. [ 136.438116][ T29] audit: type=1400 audit(1777321852.166:305): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.501393][ T29] audit: type=1400 audit(1777321852.226:306): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.514418][ T803] usb 1-1: USB disconnect, device number 9 [ 136.534379][ T5344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.753176][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.827064][ T29] audit: type=1400 audit(1777321852.226:307): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.994848][ T29] audit: type=1400 audit(1777321852.226:308): avc: denied { read } for pid=5273 comm="dhcpcd" name="n30" dev="tmpfs" ino=2844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.053326][ T29] audit: type=1400 audit(1777321852.226:309): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.079787][ T29] audit: type=1400 audit(1777321852.226:310): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.104690][ T29] audit: type=1400 audit(1777321852.756:311): avc: denied { bind } for pid=6591 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.124909][ T29] audit: type=1400 audit(1777321852.756:312): avc: denied { node_bind } for pid=6591 comm="syz.3.190" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 137.150032][ T29] audit: type=1400 audit(1777321852.756:313): avc: denied { connect } for pid=6591 comm="syz.3.190" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.278351][ T6582] can0 (unregistered): slcan off ttyS3. [ 137.713871][ T803] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 137.916728][ T803] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 137.997987][ T803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.145761][ T803] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 138.176506][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.202044][ T803] usb 5-1: SerialNumber: syz [ 138.404183][ T6620] overlayfs: overlapping lowerdir path [ 138.413491][ T803] usb 5-1: 0:2 : does not exist [ 138.530747][ T6613] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.605237][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.644120][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.702446][ T6594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=6594 comm=syz.4.191 [ 138.780605][ T6628] i2c i2c-0: Invalid block write size 255 [ 138.839711][ T6629] tmpfs: Unknown parameter 'grpquota_limit' [ 138.879137][ T6625] loop6: detected capacity change from 0 to 2640 [ 138.902253][ T6625] buffer_io_error: 11 callbacks suppressed [ 138.902271][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.944422][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.969371][ T6619] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.976129][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.999664][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.021508][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.039604][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.052236][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.068790][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.089337][ T6625] ldm_validate_partition_table(): Disk read failed. [ 139.099309][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.108028][ T6625] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.122452][ T6625] Dev loop6: unable to read RDB block 0 [ 139.150925][ T6625] loop6: unable to read partition table [ 139.183280][ T6625] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 139.261631][ T803] usb 5-1: USB disconnect, device number 9 [ 143.173777][ T5730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.194799][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 143.194863][ T29] audit: type=1400 audit(1777321858.376:358): avc: denied { execute } for pid=6656 comm="syz.3.208" name="file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.432940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.536861][ T29] audit: type=1400 audit(1777321858.926:359): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.903790][ T29] audit: type=1400 audit(1777321859.626:360): avc: denied { checkpoint_restore } for pid=6682 comm="syz.2.213" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.905557][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 144.110086][ T6690] netlink: 'syz.3.215': attribute type 10 has an invalid length. [ 144.181651][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 144.259621][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 144.305951][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.313514][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.372280][ T6693] bond1 (unregistering): Released all slaves [ 144.413109][ T6687] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.548266][ T6704] netlink: 'syz.4.216': attribute type 10 has an invalid length. [ 144.589522][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.598071][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.618684][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 144.676800][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.684001][ T6704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.691396][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.698522][ T6704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.711612][ T803] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.766378][ T6704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.802409][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.833206][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.883724][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.904218][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 144.918927][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.960903][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.985998][ T803] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.013058][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.057059][ T803] usb 1-1: config 0 descriptor?? [ 145.087577][ T803] hub 1-1:0.0: USB hub found [ 145.280610][ T803] hub 1-1:0.0: 1 port detected [ 145.883220][ T29] audit: type=1400 audit(1777321861.606:361): avc: denied { create } for pid=6717 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.917737][ T29] audit: type=1400 audit(1777321861.636:362): avc: denied { bind } for pid=6717 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.962528][ T29] audit: type=1400 audit(1777321861.636:363): avc: denied { write } for pid=6717 comm="syz.4.221" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 146.188438][ T6721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.217'. [ 146.199193][ T6721] netlink: 92 bytes leftover after parsing attributes in process `syz.0.217'. [ 146.208453][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 146.359448][ T6723] Error: Device magic number does not match. [ 146.507176][ T6726] FAULT_INJECTION: forcing a failure. [ 146.507176][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.521894][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.521927][ T6726] Tainted: [L]=SOFTLOCKUP [ 146.521934][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.521945][ T6726] Call Trace: [ 146.521952][ T6726] [ 146.521960][ T6726] dump_stack_lvl+0x100/0x190 [ 146.521991][ T6726] should_fail_ex.cold+0x5/0xa [ 146.522020][ T6726] _copy_to_user+0x32/0xd0 [ 146.522051][ T6726] simple_read_from_buffer+0xcb/0x170 [ 146.522079][ T6726] proc_fail_nth_read+0x1af/0x230 [ 146.522102][ T6726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.522126][ T6726] ? rw_verify_area+0xce/0x6d0 [ 146.522156][ T6726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.522178][ T6726] vfs_read+0x1e4/0xb30 [ 146.522203][ T6726] ? __pfx_vfs_read+0x10/0x10 [ 146.522223][ T6726] ? __fget_files+0x215/0x3d0 [ 146.522253][ T6726] ? __fget_files+0x21f/0x3d0 [ 146.522286][ T6726] ksys_read+0x12a/0x250 [ 146.522306][ T6726] ? __pfx_ksys_read+0x10/0x10 [ 146.522330][ T6726] ? rcu_is_watching+0x12/0xc0 [ 146.522363][ T6726] do_syscall_64+0x10b/0xf80 [ 146.522385][ T6726] ? clear_bhb_loop+0x40/0x90 [ 146.522410][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.522431][ T6726] RIP: 0033:0x7fb75675d60e [ 146.522448][ T6726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.522481][ T6726] RSP: 002b:00007fb757652fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.522501][ T6726] RAX: ffffffffffffffda RBX: 00007fb7576536c0 RCX: 00007fb75675d60e [ 146.522514][ T6726] RDX: 000000000000000f RSI: 00007fb7576530a0 RDI: 0000000000000006 [ 146.522526][ T6726] RBP: 00007fb757653090 R08: 0000000000000000 R09: 0000000000000000 [ 146.522537][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.522548][ T6726] R13: 00007fb756a16038 R14: 00007fb756a15fa0 R15: 00007ffe14ddedf8 [ 146.522578][ T6726] [ 146.857223][ T6733] netlink: 80 bytes leftover after parsing attributes in process `syz.3.225'. [ 147.001665][ T803] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 147.494661][ T29] audit: type=1400 audit(1777321863.206:364): avc: denied { shutdown } for pid=6729 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.559358][ T5740] usb 1-1: USB disconnect, device number 10 [ 148.153084][ T29] audit: type=1400 audit(1777321863.856:365): avc: denied { connect } for pid=6756 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.162913][ T5740] IPVS: starting estimator thread 0... [ 148.224652][ T6759] overlayfs: overlapping lowerdir path [ 148.452903][ T6760] IPVS: using max 66 ests per chain, 158400 per kthread [ 148.868392][ T29] audit: type=1400 audit(1777321864.586:366): avc: denied { read } for pid=6768 comm="syz.4.232" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.125555][ T29] audit: type=1400 audit(1777321864.586:367): avc: denied { open } for pid=6768 comm="syz.4.232" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.405400][ T29] audit: type=1400 audit(1777321864.656:368): avc: denied { ioctl } for pid=6768 comm="syz.4.232" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.463649][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.485973][ T29] audit: type=1400 audit(1777321865.086:369): avc: denied { create } for pid=6768 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.102900][ T29] audit: type=1400 audit(1777321865.166:370): avc: denied { ioctl } for pid=6768 comm="syz.4.232" path="socket:[12116]" dev="sockfs" ino=12116 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.881155][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.347367][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.401944][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.452876][ T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.473427][ T803] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.603733][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 152.616051][ T42] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 152.625505][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.642923][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 152.657315][ T42] usb 1-1: config 0 has no interface number 0 [ 152.674163][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 152.685960][ T42] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.705981][ T803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 152.720142][ T42] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.763809][ T803] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 152.773342][ T42] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 152.783745][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.793857][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.812959][ T42] usb 1-1: Product: syz [ 152.818953][ T803] usb 5-1: Product: syz [ 152.831697][ T42] usb 1-1: Manufacturer: syz [ 152.840226][ T803] usb 5-1: Manufacturer: syz [ 152.850758][ T42] usb 1-1: SerialNumber: syz [ 152.857454][ T803] usb 5-1: SerialNumber: syz [ 152.886488][ T42] usb 1-1: config 0 descriptor?? [ 152.898970][ T803] usb 5-1: config 0 descriptor?? [ 152.921751][ T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 152.951206][ T6845] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 152.969961][ T42] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 153.036799][ T803] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.998686][ T5730] usb 5-1: USB disconnect, device number 10 [ 154.713146][ T29] audit: type=1400 audit(1777321870.416:371): avc: denied { ioctl } for pid=6867 comm="syz.3.245" path="socket:[12181]" dev="sockfs" ino=12181 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.146075][ T29] audit: type=1400 audit(1777321870.876:372): avc: denied { create } for pid=6873 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 155.232277][ T42] usb 1-1: USB disconnect, device number 11 [ 155.355055][ T6876] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.747837][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.943122][ T6878] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 157.101413][ T6895] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 157.101413][ T6895] program syz.2.251 not setting count and/or reply_len properly [ 157.635714][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.643052][ T29] audit: type=1400 audit(1777321874.346:373): avc: denied { append } for pid=6913 comm="syz.4.255" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.780232][ T29] audit: type=1400 audit(1777321874.356:374): avc: denied { open } for pid=6913 comm="syz.4.255" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.987877][ T29] audit: type=1400 audit(1777321874.396:375): avc: denied { ioctl } for pid=6913 comm="syz.4.255" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.013940][ T29] audit: type=1400 audit(1777321874.546:376): avc: denied { getopt } for pid=6909 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.122944][ T42] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.712930][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 159.721951][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.746512][ T42] usb 4-1: string descriptor 0 read error: -22 [ 159.754948][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 159.772864][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.797106][ T42] snd-ua101 4-1:1.1: invalid format type [ 159.806156][ T42] snd-ua101 4-1:1.0: invalid num_altsetting [ 159.822992][ T5710] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.772852][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 160.833451][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.515694][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.332820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.691782][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.921665][ T5710] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.929803][ T5710] usb 5-1: can't read configurations, error -71 [ 163.361799][ T42] usb 4-1: USB disconnect, device number 9 [ 163.394485][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.803284][ T29] audit: type=1400 audit(1777321879.506:377): avc: denied { write } for pid=6949 comm="syz.2.266" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 163.929952][ T29] audit: type=1400 audit(1777321879.506:378): avc: denied { open } for pid=6949 comm="syz.2.266" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 164.078389][ T6951] futex_wake_op: syz.2.266 tries to shift op by 144; fix this program [ 164.113184][ T29] audit: type=1400 audit(1777321879.606:379): avc: denied { open } for pid=6953 comm="syz.4.268" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.139854][ T29] audit: type=1400 audit(1777321879.646:380): avc: denied { write } for pid=6949 comm="syz.2.266" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.311220][ T6966] SELinux: failed to load policy [ 164.376399][ T6968] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.477613][ T29] audit: type=1400 audit(1777321880.196:381): avc: denied { watch } for pid=6961 comm="syz.3.269" path="/61/file1" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.553910][ T29] audit: type=1400 audit(1777321880.196:382): avc: denied { watch_sb watch_reads } for pid=6961 comm="syz.3.269" path="/61/file1" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.780673][ T29] audit: type=1400 audit(1777321880.496:383): avc: denied { ioctl } for pid=6953 comm="syz.4.268" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 164.844763][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 165.107902][ T6956] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 165.185125][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.207380][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 165.222064][ T10] usb 1-1: config 64 has an invalid interface number: 72 but max is 0 [ 165.230928][ T10] usb 1-1: config 64 has no interface number 0 [ 165.253662][ T10] usb 1-1: config 64 interface 72 altsetting 2 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 165.305975][ T10] usb 1-1: config 64 interface 72 altsetting 2 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 165.341297][ T10] usb 1-1: config 64 interface 72 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 165.381605][ T10] usb 1-1: config 64 interface 72 has no altsetting 0 [ 165.396482][ T6980] Error: Device magic number does not match. [ 165.406843][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=fc.11 [ 165.421854][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.444396][ T10] usb 1-1: Product: syz [ 165.509342][ T10] usb 1-1: Manufacturer: syz [ 165.716714][ T10] usb 1-1: SerialNumber: syz [ 166.068315][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.426524][ T10] usb 1-1: USB disconnect, device number 12 [ 166.657840][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:64.72/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.685359][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.072410][ T29] audit: type=1804 audit(1777321882.796:384): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.278" name="/newroot/56/file0" dev="tmpfs" ino=328 res=1 errno=0 [ 167.220146][ T7005] bridge0: port 3(syz_tun) entered blocking state [ 167.248693][ T7005] bridge0: port 3(syz_tun) entered disabled state [ 167.276378][ T7005] syz_tun: entered allmulticast mode [ 167.308653][ T7005] syz_tun: entered promiscuous mode [ 167.319028][ T5619] block nbd4: Receive control failed (result -107) [ 167.345035][ T7005] bridge0: port 3(syz_tun) entered blocking state [ 167.353399][ T7005] bridge0: port 3(syz_tun) entered forwarding state [ 167.397851][ T7000] block nbd4: shutting down sockets [ 167.585367][ T29] audit: type=1400 audit(1777321883.316:385): avc: denied { set_context_mgr } for pid=7010 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.739942][ T7013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7013 comm=syz.4.284 [ 168.398956][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.354782][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.374590][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.515347][ T10] usb 1-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 169.540638][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.557636][ T7030] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 169.590842][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 169.702354][ T7034] overlayfs: overlapping lowerdir path [ 169.753569][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 169.762704][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.772731][ T10] usb 1-1: Product: syz [ 169.876553][ T7035] overlayfs: overlapping lowerdir path [ 170.084406][ T10] usb 1-1: Manufacturer: syz [ 170.242998][ T10] usb 1-1: SerialNumber: syz [ 170.524392][ T7018] geneve1: entered allmulticast mode [ 171.618963][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 171.689130][ T10] usb 1-1: USB disconnect, device number 13 [ 171.776933][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.904064][ T29] audit: type=1400 audit(1777321887.626:386): avc: denied { connect } for pid=7038 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.955297][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 172.069333][ T29] audit: type=1400 audit(1777321887.706:387): avc: denied { write } for pid=7038 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.088957][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.284573][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 172.304421][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 172.334285][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.353275][ T3333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.366075][ T10] usb 1-1: config 0 has no interface number 0 [ 172.396191][ T10] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.452132][ T10] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.491518][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 172.491547][ T29] audit: type=1400 audit(1777321888.216:388): avc: denied { create } for pid=7073 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.563735][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.600955][ T10] usb 1-1: Product: syz [ 172.624848][ T10] usb 1-1: Manufacturer: syz [ 172.664294][ T10] usb 1-1: SerialNumber: syz [ 172.799266][ T10] usb 1-1: config 0 descriptor?? [ 172.812912][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.870324][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 172.932882][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 173.033523][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 173.050458][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.100377][ T42] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 173.143772][ T42] usb 5-1: string descriptor 0 read error: -22 [ 173.168358][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 173.194904][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.237334][ T42] snd-ua101 5-1:1.0: invalid num_altsetting [ 174.218874][ T29] audit: type=1400 audit(1777321889.946:389): avc: denied { connect } for pid=7073 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.292181][ T29] audit: type=1400 audit(1777321889.946:390): avc: denied { write } for pid=7073 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.293110][ T7090] comedi comedi0: Minor 3 could not be opened [ 174.378330][ T5710] usb 5-1: USB disconnect, device number 13 [ 174.389943][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 175.107698][ T5935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.183582][ T5710] usb 1-1: USB disconnect, device number 14 [ 175.533411][ T5832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.673032][ T5710] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.775237][ T7117] overlayfs: overlapping lowerdir path [ 176.071413][ T5832] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.096128][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.141685][ T5832] usb 3-1: config 0 descriptor?? [ 176.161922][ T5832] cp210x 3-1:0.0: cp210x converter detected [ 176.202888][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 176.248338][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.365620][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 176.422818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 177.228886][ T5710] usb 1-1: string descriptor 0 read error: -22 [ 177.348219][ T5710] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 177.401439][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.424954][ T5832] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 177.738888][ T5832] cp210x 3-1:0.0: querying part number failed [ 177.756394][ T5710] snd-ua101 1-1:1.0: invalid num_altsetting [ 177.823602][ T5832] usb 3-1: cp210x converter now attached to ttyUSB0 [ 178.113225][ T5940] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.443022][ T5710] usb 3-1: USB disconnect, device number 12 [ 178.482952][ T5619] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 178.517078][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.536330][ T5710] cp210x 3-1:0.0: device disconnected [ 179.526414][ T29] audit: type=1400 audit(1777321894.976:391): avc: denied { kexec_image_load } for pid=7138 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 179.657972][ T5832] usb 1-1: USB disconnect, device number 15 [ 180.675953][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.696594][ T7155] Error: Device magic number does not match. [ 180.734499][ T29] audit: type=1400 audit(1777321896.456:392): avc: denied { write } for pid=7158 comm="syz.4.314" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.784676][ T29] audit: type=1400 audit(1777321896.456:393): avc: denied { open } for pid=7158 comm="syz.4.314" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.808699][ T5832] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.824218][ T29] audit: type=1400 audit(1777321896.496:394): avc: denied { ioctl } for pid=7158 comm="syz.4.314" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.891431][ T7161] fuse: Unknown parameter 'grou00000000000000000000' [ 180.899360][ T29] audit: type=1400 audit(1777321896.496:395): avc: denied { write } for pid=7158 comm="syz.4.314" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 180.963540][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 180.979244][ T5832] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.020156][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.048801][ T5832] usb 1-1: config 0 has no interface number 0 [ 181.058965][ T5832] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.098204][ T29] audit: type=1800 audit(1777321896.826:396): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.315" name="file0" dev="overlay" ino=392 res=0 errno=0 [ 181.146904][ T5832] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 181.156298][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.178386][ T5832] usb 1-1: Product: syz [ 181.189367][ T5832] usb 1-1: Manufacturer: syz [ 181.209931][ T5832] usb 1-1: SerialNumber: syz [ 181.243396][ T5832] usb 1-1: config 0 descriptor?? [ 181.259004][ T5832] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 181.375472][ T5832] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 181.981076][ T7171] ISOFS: Unable to identify CD-ROM format. [ 183.104991][ T7190] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 183.179214][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.187126][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.245107][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.981800][ T5832] usb 1-1: USB disconnect, device number 16 [ 185.269710][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.277329][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.284943][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.292142][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.308725][ T5740] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.884202][ T3333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.892990][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 185.901548][ T5740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.911873][ T5740] usb 4-1: config 0 has no interfaces? [ 185.917426][ T5740] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 185.926599][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.945422][ T7190] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.971578][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.990821][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.999079][ T5740] usb 4-1: config 0 descriptor?? [ 186.034583][ T7209] FAULT_INJECTION: forcing a failure. [ 186.034583][ T7209] name failslab, interval 1, probability 0, space 0, times 1 [ 186.067712][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.0.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.067753][ T7209] Tainted: [L]=SOFTLOCKUP [ 186.067760][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.067772][ T7209] Call Trace: [ 186.067779][ T7209] [ 186.067786][ T7209] dump_stack_lvl+0x100/0x190 [ 186.067828][ T7209] should_fail_ex.cold+0x5/0xa [ 186.067857][ T7209] should_failslab+0xc2/0x120 [ 186.067880][ T7209] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 186.067911][ T7209] ? __alloc_skb+0x140/0x710 [ 186.067936][ T7209] ? __alloc_skb+0x5b7/0x710 [ 186.067966][ T7209] __alloc_skb+0x140/0x710 [ 186.067990][ T7209] ? __alloc_skb+0x5b7/0x710 [ 186.068015][ T7209] ? __pfx___alloc_skb+0x10/0x10 [ 186.068048][ T7209] netlink_alloc_large_skb+0x69/0x150 [ 186.068073][ T7209] netlink_sendmsg+0x680/0xda0 [ 186.068099][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.068120][ T7209] ? pti_set_user_pgtbl+0x50/0x50 [ 186.068159][ T7209] ____sys_sendmsg+0x9e1/0xb70 [ 186.068180][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.068207][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.068243][ T7209] ___sys_sendmsg+0x190/0x1e0 [ 186.068268][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.068326][ T7209] __sys_sendmsg+0x170/0x220 [ 186.068355][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.068396][ T7209] ? rcu_is_watching+0x12/0xc0 [ 186.068429][ T7209] do_syscall_64+0x10b/0xf80 [ 186.068452][ T7209] ? clear_bhb_loop+0x40/0x90 [ 186.068476][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.068497][ T7209] RIP: 0033:0x7fa20bf9cdd9 [ 186.068519][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.068538][ T7209] RSP: 002b:00007fa20cf05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.068562][ T7209] RAX: ffffffffffffffda RBX: 00007fa20c215fa0 RCX: 00007fa20bf9cdd9 [ 186.068576][ T7209] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 186.068588][ T7209] RBP: 00007fa20cf05090 R08: 0000000000000000 R09: 0000000000000000 [ 186.068600][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.068611][ T7209] R13: 00007fa20c216038 R14: 00007fa20c215fa0 R15: 00007ffc2131d988 [ 186.068640][ T7209] [ 186.514223][ T29] audit: type=1400 audit(1777321902.226:397): avc: denied { create } for pid=7191 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 186.660582][ T7214] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 186.807122][ T5832] usb 4-1: USB disconnect, device number 10 [ 186.931563][ T7216] Bluetooth: MGMT ver 1.23 [ 188.317839][ T29] audit: type=1400 audit(1777321903.906:398): avc: denied { wake_alarm } for pid=7222 comm="syz.2.331" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.192260][ T5935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.425116][ T29] audit: type=1400 audit(1777321907.046:399): avc: denied { module_request } for pid=7232 comm="syz.4.334" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 191.552997][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.743070][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.864645][ T29] audit: type=1400 audit(1777321907.596:400): avc: denied { read } for pid=7240 comm="syz.0.335" path="socket:[13044]" dev="sockfs" ino=13044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.040456][ T29] audit: type=1400 audit(1777321907.736:401): avc: denied { ioctl } for pid=7240 comm="syz.0.335" path="socket:[13044]" dev="sockfs" ino=13044 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.202080][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 192.210448][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 192.210454][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 192.276478][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 192.381319][ T7250] kAFS: No cell specified [ 192.478130][ T7258] loop6: detected capacity change from 0 to 2640 [ 192.521725][ T7258] buffer_io_error: 11 callbacks suppressed [ 192.521744][ T7258] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.538221][ T5632] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.564186][ T7258] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.596562][ T5632] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.612308][ T7258] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.635146][ T5632] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.668814][ T7258] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.746745][ T5632] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.771157][ T7258] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.804960][ T5632] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.833058][ T7258] ldm_validate_partition_table(): Disk read failed. [ 192.865836][ T7258] Dev loop6: unable to read RDB block 0 [ 192.875161][ T7258] loop6: unable to read partition table [ 192.885870][ T7258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 192.912364][ T4978] ldm_validate_partition_table(): Disk read failed. [ 192.920586][ T4978] Dev loop6: unable to read RDB block 0 [ 192.936046][ T4978] loop6: unable to read partition table [ 193.318714][ T29] audit: type=1400 audit(1777321909.036:402): avc: denied { create } for pid=7286 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 194.121364][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128959][ T5740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.139933][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.483577][ T7301] fuse: Unknown parameter 'group_id00000000000000000000' [ 195.244567][ T29] audit: type=1400 audit(1777321910.956:403): avc: denied { cmd } for pid=7309 comm="syz.0.348" path="socket:[14127]" dev="sockfs" ino=14127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.578594][ T7316] loop6: detected capacity change from 0 to 2640 [ 195.637959][ T7316] ldm_validate_partition_table(): Disk read failed. [ 195.715577][ T7316] Dev loop6: unable to read RDB block 0 [ 195.723028][ T7316] loop6: unable to read partition table [ 195.729338][ T7316] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 195.833857][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.874129][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.033789][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.995015][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 197.193383][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 197.316810][ T130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.533146][ T5710] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.667787][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.837478][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 197.854951][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 197.869135][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.891493][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.963177][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 198.232051][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.252171][ T5710] usb 5-1: Product: syz [ 198.266455][ T5710] usb 5-1: Manufacturer: syz [ 198.279666][ T5710] usb 5-1: SerialNumber: syz [ 198.298915][ T5710] usb 5-1: config 0 descriptor?? [ 198.320553][ T10] usb 3-1: string descriptor 0 read error: -22 [ 198.332504][ T5710] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 198.335370][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 198.392027][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.462812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.632265][ T7349] overlayfs: overlapping lowerdir path [ 198.674147][ T5740] IPVS: starting estimator thread 0... [ 198.793121][ T7350] IPVS: using max 43 ests per chain, 103200 per kthread [ 198.940664][ T10] snd-ua101 3-1:1.0: invalid num_altsetting [ 199.009380][ T29] audit: type=1400 audit(1777321914.736:404): avc: denied { getopt } for pid=7325 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.077879][ T29] audit: type=1400 audit(1777321914.806:405): avc: denied { ioctl } for pid=7354 comm="syz.1.361" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 199.124151][ T7353] fuse: Unknown parameter 'group_id00000000000000000000' [ 199.166177][ T29] audit: type=1400 audit(1777321914.886:406): avc: denied { name_connect } for pid=7356 comm="syz.0.362" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 199.184094][ T7362] syz.0.362 (7362) used greatest stack depth: 20008 bytes left [ 199.275696][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.718377][ T7368] Error: Device magic number does not match. [ 199.779383][ T5710] usb 3-1: USB disconnect, device number 13 [ 199.855512][ T7375] netlink: 'syz.0.367': attribute type 18 has an invalid length. [ 199.876075][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 199.950204][ T7375] netlink: 'syz.0.367': attribute type 18 has an invalid length. [ 199.962413][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.984109][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.997321][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 200.014885][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.049850][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.068214][ T803] usb 5-1: USB disconnect, device number 14 [ 200.158048][ T7382] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 201.558459][ T7388] Error: Device magic number does not match. [ 201.631191][ T7397] fuse: Unknown parameter 'user_i00000000000000000000' [ 201.663055][ T29] audit: type=1400 audit(1777321917.386:407): avc: denied { remount } for pid=7395 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 201.899296][ T130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.437539][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.912938][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 203.146016][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.215243][ T29] audit: type=1400 audit(1777321918.926:408): avc: denied { setopt } for pid=7432 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.246241][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.277910][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.286484][ T29] audit: type=1400 audit(1777321918.946:409): avc: denied { connect } for pid=7432 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.309671][ T10] usb 5-1: config 0 descriptor?? [ 203.331393][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 203.757124][ T7439] fuse: Unknown parameter 'group_id00000000000000000000' [ 203.811435][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.841339][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.853295][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 203.868615][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 203.884382][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 203.899825][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 203.913489][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 203.928790][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 203.947778][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 203.957248][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 203.972565][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 203.987230][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 204.148744][ T7444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.380'. [ 204.379511][ T29] audit: type=1400 audit(1777321920.106:410): avc: denied { ioctl } for pid=7446 comm="syz.3.381" path="socket:[14401]" dev="sockfs" ino=14401 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.379726][ T7447] syzkaller0: entered promiscuous mode [ 204.409804][ T7447] syzkaller0: entered allmulticast mode [ 204.487987][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 204.490445][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.517517][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 204.537885][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.554378][ T7447] ceph: No mds server is up or the cluster is laggy [ 204.634860][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.791585][ T10] pwc: Registered as video103. [ 205.145551][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 205.195475][ T7457] futex_wake_op: syz.3.384 tries to shift op by 144; fix this program [ 205.239511][ T29] audit: type=1400 audit(1777321920.976:411): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=2974 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.276968][ T10] usb 5-1: USB disconnect, device number 15 [ 205.377270][ T29] audit: type=1400 audit(1777321920.976:412): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2974 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.405726][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 205.525343][ T29] audit: type=1400 audit(1777321920.976:413): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2974 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.705421][ T29] audit: type=1400 audit(1777321921.406:414): avc: denied { append } for pid=7469 comm="syz.3.388" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.882916][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.902959][ T29] audit: type=1400 audit(1777321921.426:415): avc: denied { ioctl } for pid=7466 comm="syz.2.387" path="socket:[14439]" dev="sockfs" ino=14439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 206.109105][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.158663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.321496][ T10] usb 5-1: config 0 descriptor?? [ 206.329358][ T10] cp210x 5-1:0.0: cp210x converter detected [ 206.890911][ T7488] Cannot find del_set index 4 as target [ 207.056733][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 207.091859][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 207.142065][ T7492] fuse: Bad value for 'user_id' [ 207.153431][ T7492] fuse: Bad value for 'user_id' [ 207.212107][ T29] audit: type=1400 audit(1777321922.936:416): avc: denied { ioctl } for pid=7493 comm="syz.2.395" path="socket:[15535]" dev="sockfs" ino=15535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.327230][ T5710] usb 5-1: USB disconnect, device number 16 [ 207.498559][ T29] audit: type=1400 audit(1777321923.126:417): avc: denied { listen } for pid=7493 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.522401][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.560399][ T3333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.645724][ T29] audit: type=1400 audit(1777321923.126:418): avc: denied { accept } for pid=7493 comm="syz.2.395" lport=48860 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.791883][ T29] audit: type=1400 audit(1777321923.136:419): avc: denied { write } for pid=7493 comm="syz.2.395" lport=48860 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 207.875574][ T5710] cp210x 5-1:0.0: device disconnected [ 208.196679][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.911435][ T7520] futex_wake_op: syz.0.398 tries to shift op by 144; fix this program [ 208.936322][ T7525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.653731][ T7532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.401'. [ 209.821517][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 209.821532][ T29] audit: type=1400 audit(1777321925.546:422): avc: denied { name_bind } for pid=7527 comm="syz.0.401" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 210.722893][ T803] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 210.885350][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 210.905984][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.933527][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.938448][ T7548] loop6: detected capacity change from 0 to 2640 [ 210.959597][ T7548] buffer_io_error: 48 callbacks suppressed [ 210.959615][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.963584][ T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.972973][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.992975][ T803] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.036691][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.039148][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.045227][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.102218][ T803] usb 5-1: config 0 descriptor?? [ 211.108585][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.151765][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.212725][ T7555] fuse: Bad value for 'user_id' [ 211.214113][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.229777][ T7555] fuse: Bad value for 'user_id' [ 211.241790][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.261190][ T7548] ldm_validate_partition_table(): Disk read failed. [ 211.268553][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.276942][ T7548] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.285512][ T7548] Dev loop6: unable to read RDB block 0 [ 211.291698][ T7548] loop6: unable to read partition table [ 211.308007][ T7548] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 211.407808][ T4978] ldm_validate_partition_table(): Disk read failed. [ 211.456140][ T4978] Dev loop6: unable to read RDB block 0 [ 211.479741][ T4978] loop6: unable to read partition table [ 211.583513][ T7563] vxfs: unable to read disk superblock at 1 [ 211.591338][ T7563] vxfs: unable to read disk superblock at 8 [ 211.598615][ T7563] vxfs: can't find superblock. [ 211.968592][ T803] usbhid 5-1:0.0: can't add hid device: -71 [ 211.974950][ T803] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 211.986314][ T803] usb 5-1: USB disconnect, device number 17 [ 212.285949][ T7565] futex_wake_op: syz.0.411 tries to shift op by 144; fix this program [ 212.504138][ T803] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.733343][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 212.763582][ T803] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.802643][ T803] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 212.814337][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.822557][ T803] usb 4-1: Product: syz [ 212.829183][ T803] usb 4-1: Manufacturer: syz [ 212.840047][ T803] usb 4-1: SerialNumber: syz [ 212.992878][ T5740] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.078140][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.101388][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.147945][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.168173][ T5740] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.192126][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.205692][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.219396][ T5740] usb 5-1: Product: syz [ 213.237032][ T5740] usb 5-1: Manufacturer: syz [ 213.242686][ T5740] usb 5-1: SerialNumber: syz [ 213.259065][ T5740] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 213.282917][ T5730] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 213.317405][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.398270][ T29] audit: type=1400 audit(1777321929.126:423): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 213.439225][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 213.522905][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 213.524899][ T803] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.574230][ T5832] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.629330][ T5730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.661352][ T5730] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 213.671611][ T803] usb 4-1: USB disconnect, device number 11 [ 213.743395][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 213.785651][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.818347][ T5832] usb 3-1: config 4 interface 0 has no altsetting 0 [ 213.840451][ T5832] usb 3-1: string descriptor 0 read error: -22 [ 213.847739][ T5832] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 213.857277][ T5832] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 214.006208][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.021278][ T5832] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 214.442938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.481036][ T5740] usb 5-1: USB disconnect, device number 18 [ 214.491848][ T5832] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.524512][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 214.533147][ T5832] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 214.545710][ T7589] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.563220][ T5832] usb 3-1: media controller created [ 214.589318][ T10] ath9k_htc: Failed to initialize the device [ 214.626435][ T5730] usb 1-1: string descriptor 0 read error: -22 [ 214.648677][ T5730] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 214.659670][ T5740] usb 5-1: ath9k_htc: USB layer deinitialized [ 214.678654][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.712060][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.788060][ T5730] snd-ua101 1-1:1.0: invalid num_altsetting [ 214.820224][ T5832] zl10353_read_register: readreg error (reg=127, ret==0) [ 214.933088][ T5832] usb 3-1: USB disconnect, device number 14 [ 215.102889][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 215.339860][ T7603] fuse: Bad value for 'user_id' [ 215.360918][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 215.372062][ T7603] fuse: Bad value for 'user_id' [ 215.383711][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 215.400722][ T10] usb 4-1: config 179 has no interface number 0 [ 215.411928][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 215.432956][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 215.445509][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 215.461193][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 215.479699][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 215.487422][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 215.496804][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.718658][ T5832] usb 4-1: USB disconnect, device number 12 [ 216.782523][ T29] audit: type=1400 audit(1777321932.506:424): avc: denied { ioctl } for pid=7613 comm="syz.2.424" path="socket:[15854]" dev="sockfs" ino=15854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.396521][ T5740] usb 1-1: USB disconnect, device number 17 [ 217.433671][ T7616] futex_wake_op: syz.1.426 tries to shift op by 144; fix this program [ 217.446570][ T29] audit: type=1400 audit(1777321933.156:425): avc: denied { append } for pid=7621 comm="syz.3.427" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.458370][ T7622] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 217.525369][ T7622] SET target dimension over the limit! [ 217.566275][ T7622] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 217.575121][ T7622] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 217.710252][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 218.484821][ T7638] overlayfs: overlapping lowerdir path [ 218.495808][ T5740] IPVS: starting estimator thread 0... [ 218.853013][ T7640] IPVS: using max 43 ests per chain, 103200 per kthread [ 219.080604][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.412589][ T5730] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 219.752514][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.269463][ T7656] fuse: Bad value for 'fd' [ 222.792809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.434893][ T5730] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.953707][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 223.969212][ T5730] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.019221][ T5730] usb 5-1: config 0 has no interface number 0 [ 224.037199][ T5730] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 224.260575][ T5730] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.301755][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.368753][ T5730] usb 5-1: Product: syz [ 224.406591][ T5730] usb 5-1: Manufacturer: syz [ 224.455376][ T5730] usb 5-1: SerialNumber: syz [ 224.491070][ T5730] usb 5-1: config 0 descriptor?? [ 224.544162][ T7712] block nbd0: not configured, cannot reconfigure [ 224.551875][ T5730] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 224.588822][ T29] audit: type=1400 audit(1777321940.316:426): avc: denied { block_suspend } for pid=7711 comm="syz.3.445" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.668936][ T5730] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 224.834709][ T3333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.098489][ T29] audit: type=1400 audit(1777321940.826:427): avc: denied { setopt } for pid=7718 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.118837][ T7719] x_tables: duplicate underflow at hook 2 [ 225.167341][ T29] audit: type=1400 audit(1777321940.866:428): avc: denied { getopt } for pid=7718 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.907051][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.997465][ T7726] fuse: Bad value for 'fd' [ 226.250867][ T5832] usb 5-1: USB disconnect, device number 20 [ 226.359431][ T5611] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 228.955412][ T29] audit: type=1400 audit(1777321944.686:429): avc: denied { create } for pid=7779 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 228.992552][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.068255][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.610084][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.890163][ T7801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.461'. [ 231.234386][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.383662][ T7810] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 231.500416][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.643929][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.056451][ T7813] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 232.114398][ T7813] bridge0: port 3(syz_tun) entered disabled state [ 232.121016][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.128651][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.362947][ T5730] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 233.383237][ T29] audit: type=1400 audit(1777321949.116:430): avc: denied { write } for pid=7829 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 233.543066][ T5730] usb 5-1: device descriptor read/64, error -71 [ 234.208946][ T7837] futex_wake_op: syz.2.470 tries to shift op by 144; fix this program [ 234.237338][ T5730] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 234.441723][ T5730] usb 5-1: device descriptor read/64, error -71 [ 234.623587][ T5730] usb usb5-port1: attempt power cycle [ 235.245956][ T5730] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.307139][ T5730] usb 5-1: device descriptor read/8, error -71 [ 235.354437][ T7864] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.554108][ T5730] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 235.634009][ T5730] usb 5-1: device descriptor read/8, error -71 [ 235.798782][ T7892] x_tables: duplicate underflow at hook 1 [ 235.808636][ T7891] GUP no longer grows the stack in syz.1.474 (7891): 200000004000-20000000a000 (200000002000) [ 235.826810][ T5730] usb usb5-port1: unable to enumerate USB device [ 235.855985][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.1.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.856020][ T7891] Tainted: [L]=SOFTLOCKUP [ 235.856028][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.856042][ T7891] Call Trace: [ 235.856049][ T7891] [ 235.856058][ T7891] dump_stack_lvl+0x100/0x190 [ 235.856094][ T7891] gup_vma_lookup.cold+0x83/0x96 [ 235.856129][ T7891] __get_user_pages+0x241/0x32a0 [ 235.856165][ T7891] ? find_held_lock+0x2b/0x80 [ 235.856189][ T7891] ? mtree_load+0x311/0xa90 [ 235.856214][ T7891] ? __pfx___get_user_pages+0x10/0x10 [ 235.856251][ T7891] get_user_pages_remote+0x3d2/0xb10 [ 235.856278][ T7891] ? mas_root_expand+0x670/0x750 [ 235.856306][ T7891] ? __pfx_get_user_pages_remote+0x10/0x10 [ 235.856334][ T7891] ? __access_remote_vm+0x755/0x890 [ 235.856357][ T7891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.856400][ T7891] __access_remote_vm+0x3bb/0x890 [ 235.856427][ T7891] ? do_raw_spin_lock+0x128/0x260 [ 235.856458][ T7891] ? __pfx___access_remote_vm+0x10/0x10 [ 235.856476][ T7891] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 235.856507][ T7891] proc_pid_cmdline_read+0x4f2/0x8c0 [ 235.856534][ T7891] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 235.856557][ T7891] ? rw_verify_area+0xce/0x6d0 [ 235.856589][ T7891] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 235.856610][ T7891] vfs_readv+0x5d8/0x8d0 [ 235.856639][ T7891] ? __pfx_vfs_readv+0x10/0x10 [ 235.856681][ T7891] ? __fget_files+0x21f/0x3d0 [ 235.856718][ T7891] ? do_preadv+0x1ac/0x270 [ 235.856737][ T7891] do_preadv+0x1ac/0x270 [ 235.856761][ T7891] ? __pfx_do_preadv+0x10/0x10 [ 235.856784][ T7891] ? rcu_is_watching+0x12/0xc0 [ 235.856822][ T7891] do_syscall_64+0x10b/0xf80 [ 235.856846][ T7891] ? clear_bhb_loop+0x40/0x90 [ 235.856874][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.856897][ T7891] RIP: 0033:0x7fb75679cdd9 [ 235.856918][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.856940][ T7891] RSP: 002b:00007fb757653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 235.856964][ T7891] RAX: ffffffffffffffda RBX: 00007fb756a15fa0 RCX: 00007fb75679cdd9 [ 235.856979][ T7891] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 235.856993][ T7891] RBP: 00007fb756832d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 235.857008][ T7891] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 235.857021][ T7891] R13: 00007fb756a16038 R14: 00007fb756a15fa0 R15: 00007ffe14ddedf8 [ 235.857054][ T7891] [ 236.158755][ T7895] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 236.167612][ T7892] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 236.240636][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.252281][ T29] audit: type=1400 audit(1777321951.976:431): avc: denied { getopt } for pid=7889 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.358472][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.373126][ T773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.388894][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.792992][ T5730] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 236.964346][ T5730] usb 1-1: config 0 has an invalid interface number: 48 but max is 2 [ 237.005136][ T5730] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 237.046145][ T5730] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 237.076339][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 237.085973][ T5730] usb 1-1: config 0 has no interface number 0 [ 237.092581][ T5730] usb 1-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 237.107669][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.122002][ T5730] usb 1-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 237.136416][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.147083][ T5730] usb 1-1: config 0 interface 48 has no altsetting 0 [ 237.167308][ T5730] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 237.178079][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.223490][ T5730] usb 1-1: config 0 descriptor?? [ 237.471355][ T7903] virtio-fs: tag not found [ 237.539738][ T5730] usb 1-1: string descriptor 0 read error: -71 [ 237.589213][ T5730] usb 1-1: USB disconnect, device number 18 [ 237.891253][ T7927] futex_wake_op: syz.2.483 tries to shift op by 144; fix this program [ 238.848612][ T29] audit: type=1400 audit(1777321954.576:432): avc: denied { write } for pid=7943 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.102352][ T29] audit: type=1400 audit(1777321954.956:433): avc: denied { create } for pid=7948 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.302924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 240.512916][ T5730] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 240.535248][ T29] audit: type=1400 audit(1777321954.966:434): avc: denied { setopt } for pid=7948 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.582825][ T7965] fuse: Unknown parameter '0x0000000000000004' [ 240.602334][ T29] audit: type=1400 audit(1777321956.206:435): avc: denied { setopt } for pid=7943 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.737299][ T5730] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 240.777178][ T5730] usb 4-1: config 0 has no interface number 0 [ 240.802172][ T5730] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 240.827566][ T5730] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.843354][ T5730] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 240.857435][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 240.865736][ T5730] usb 4-1: Manufacturer: syz [ 240.873200][ T5730] usb 4-1: SerialNumber: syz [ 240.882214][ T7971] loop6: detected capacity change from 0 to 2640 [ 240.890597][ T7973] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.493'. [ 240.892502][ T7971] buffer_io_error: 27 callbacks suppressed [ 240.892521][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.902020][ T5730] usb 4-1: config 0 descriptor?? [ 240.925211][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.934651][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.953349][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.964574][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.978425][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.987142][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.001761][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.014500][ T7971] ldm_validate_partition_table(): Disk read failed. [ 241.027942][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.045703][ T7971] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.054758][ T7971] Dev loop6: unable to read RDB block 0 [ 241.061169][ T7971] loop6: unable to read partition table [ 241.067854][ T7971] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 241.213660][ T803] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 241.235648][ T7958] usb usb7: usbfs: process 7958 (syz.3.489) did not claim interface 0 before use [ 241.245616][ T5730] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 241.264867][ T5730] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 241.266421][ T4978] ldm_validate_partition_table(): Disk read failed. [ 241.285183][ T29] audit: type=1400 audit(1777321957.016:436): avc: denied { ioctl } for pid=7977 comm="syz.1.494" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.320033][ T4978] Dev loop6: unable to read RDB block 0 [ 241.324055][ T5730] usb 4-1: USB disconnect, device number 13 [ 241.328533][ T4978] loop6: unable to read partition table [ 241.393118][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 241.436423][ T803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.468216][ T803] usb 1-1: config 4 interface 0 has no altsetting 0 [ 241.540333][ T803] usb 1-1: string descriptor 0 read error: -22 [ 241.565210][ T803] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 241.632990][ T803] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 241.686312][ T803] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 241.723399][ T803] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.748813][ T803] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 241.771582][ T803] usb 1-1: media controller created [ 241.779913][ T7982] futex_wake_op: syz.4.495 tries to shift op by 144; fix this program [ 241.802084][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.940459][ T7985] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.496'. [ 242.046234][ T7987] loop6: detected capacity change from 0 to 2640 [ 242.064232][ T7987] ldm_validate_partition_table(): Disk read failed. [ 242.077034][ T7987] Dev loop6: unable to read RDB block 0 [ 242.092336][ T7987] loop6: unable to read partition table [ 242.113269][ T7987] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 242.113285][ T773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.135300][ T5935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.232900][ T5730] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 242.901040][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 243.853018][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 243.860129][ T5730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.869355][ T5730] usb 3-1: config 4 interface 0 has no altsetting 0 [ 243.879407][ T5730] usb 3-1: string descriptor 0 read error: -22 [ 243.885783][ T5730] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.897456][ T5730] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 243.913026][ T5730] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 243.923990][ T5730] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.937154][ T5730] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 243.946296][ T5730] usb 3-1: media controller created [ 243.993021][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.002232][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.022901][ T5740] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.065062][ T8010] fuse: Unknown parameter '0x0000000000000004' [ 244.155072][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 244.163748][ T10] usb 5-1: config 1 has no interface number 0 [ 244.179674][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 244.203493][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 244.211656][ T5740] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 244.220645][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 244.230698][ T5740] usb 4-1: config 0 has no interface number 0 [ 244.237406][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 244.253250][ T5740] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 244.266666][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.380249][ T5740] usb 4-1: Product: syz [ 244.463301][ T5740] usb 4-1: Manufacturer: syz [ 244.483684][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 244.496529][ T5740] usb 4-1: SerialNumber: syz [ 244.517176][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.527167][ T5740] usb 4-1: config 0 descriptor?? [ 244.533091][ T10] usb 5-1: Product: syz [ 244.537696][ T10] usb 5-1: Manufacturer: syz [ 244.562940][ T10] usb 5-1: SerialNumber: syz [ 244.679832][ T8006] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 244.839778][ T8018] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 244.849908][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.857511][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.897100][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.920577][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.939765][ T803] usb 1-1: USB disconnect, device number 19 [ 244.954373][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 245.457400][ T29] audit: type=1400 audit(1777321961.186:437): avc: denied { map } for pid=8005 comm="syz.4.500" path="cgroup:[4026532789]" dev="nsfs" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.565498][ T29] audit: type=1400 audit(1777321961.186:438): avc: denied { execute } for pid=8005 comm="syz.4.500" path="cgroup:[4026532789]" dev="nsfs" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.670208][ T8028] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 245.701792][ T10] usb 5-1: No status endpoint found [ 246.280916][ T8039] i2c i2c-0: Invalid block write size 34 [ 247.306763][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.346225][ T803] usb 3-1: USB disconnect, device number 15 [ 247.370688][ T988] usb 5-1: USB disconnect, device number 25 [ 247.546271][ T5740] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 247.566514][ T5740] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 247.625478][ T5740] usb 4-1: USB disconnect, device number 14 [ 247.639262][ T8047] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 247.670487][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.677833][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.729165][ T8048] futex_wake_op: syz.2.509 tries to shift op by 144; fix this program [ 247.840420][ T29] audit: type=1400 audit(1777321963.566:439): avc: denied { append } for pid=8059 comm="syz.0.513" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.873504][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.925688][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.974291][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.644198][ T8067] syzkaller0: entered promiscuous mode [ 248.649767][ T8067] syzkaller0: entered allmulticast mode [ 249.262272][ T8076] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 249.584500][ T8075] syz.3.514 uses obsolete (PF_INET,SOCK_PACKET) [ 252.453293][ T3316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.834757][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.340999][ T8113] futex_wake_op: syz.1.526 tries to shift op by 144; fix this program [ 254.472932][ T803] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.502015][ T29] audit: type=1400 audit(1777321970.226:440): avc: denied { ioctl } for pid=8115 comm="syz.0.525" path="socket:[17873]" dev="sockfs" ino=17873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.534846][ T8116] netlink: 'syz.0.525': attribute type 38 has an invalid length. [ 255.213235][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 255.221656][ T803] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 255.230965][ T803] usb 4-1: config 0 has no interface number 0 [ 255.240280][ T803] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 255.250752][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.259915][ T8123] overlayfs: failed to resolve './file1': -2 [ 255.271128][ T803] usb 4-1: Product: syz [ 255.280935][ T803] usb 4-1: Manufacturer: syz [ 255.295552][ T803] usb 4-1: SerialNumber: syz [ 255.333361][ T29] audit: type=1400 audit(1777321971.056:441): avc: denied { read } for pid=8124 comm="syz.0.530" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.357110][ T803] usb 4-1: config 0 descriptor?? [ 255.504807][ T29] audit: type=1400 audit(1777321971.056:442): avc: denied { open } for pid=8124 comm="syz.0.530" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.548138][ T29] audit: type=1400 audit(1777321971.116:443): avc: denied { ioctl } for pid=8124 comm="syz.0.530" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.554981][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.590084][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.599219][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753160][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.018882][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.214284][ T5611] block nbd0: Receive control failed (result -32) [ 256.242352][ T5611] block nbd0: Receive control failed (result -32) [ 256.296599][ T8123] nbd0: detected capacity change from 0 to 128 [ 256.349688][ T5608] [ 256.352071][ T5608] ====================================================== [ 256.359102][ T5608] WARNING: possible circular locking dependency detected [ 256.366139][ T5608] syzkaller #0 Tainted: G L [ 256.372125][ T5608] ------------------------------------------------------ [ 256.379153][ T5608] udevd/5608 is trying to acquire lock: [ 256.384708][ T5608] ffff888077cdce68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 256.393883][ T5608] [ 256.393883][ T5608] but task is already holding lock: [ 256.401239][ T5608] ffff88804f03e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 256.409767][ T5608] [ 256.409767][ T5608] which lock already depends on the new lock. [ 256.409767][ T5608] [ 256.420246][ T5608] [ 256.420246][ T5608] the existing dependency chain (in reverse order) is: [ 256.429260][ T5608] [ 256.429260][ T5608] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 256.436511][ T5608] __mutex_lock+0x1a4/0x1b10 [ 256.441641][ T5608] nbd_queue_rq+0xba/0x1080 [ 256.446662][ T5608] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 256.452837][ T5608] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 256.459936][ T5608] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 256.466485][ T5608] blk_mq_run_hw_queue+0x23c/0x670 [ 256.472149][ T5608] blk_mq_dispatch_list+0x51d/0x1360 [ 256.478006][ T5608] blk_mq_flush_plug_list+0x130/0x600 [ 256.484020][ T5608] __blk_flush_plug+0x2c4/0x4b0 [ 256.489644][ T5608] __submit_bio+0x584/0x6c0 [ 256.494682][ T5608] submit_bio_noacct_nocheck+0x543/0xbf0 [ 256.500840][ T5608] submit_bio_noacct+0xd18/0x2000 [ 256.506389][ T5608] submit_bh_wbc+0x681/0x890 [ 256.511497][ T5608] block_read_full_folio+0x4c8/0x8e0 [ 256.517328][ T5608] filemap_read_folio+0xfc/0x3b0 [ 256.523092][ T5608] do_read_cache_folio+0x2d7/0x6b0 [ 256.528824][ T5608] read_part_sector+0xd1/0x370 [ 256.534220][ T5608] adfspart_check_ICS+0x91/0x7d0 [ 256.539697][ T5608] bdev_disk_changed+0x7a3/0x1250 [ 256.545242][ T5608] blkdev_get_whole+0x187/0x290 [ 256.550616][ T5608] bdev_open+0x2c7/0xe40 [ 256.555382][ T5608] blkdev_open+0x34e/0x4f0 [ 256.560309][ T5608] do_dentry_open+0x6d8/0x1660 [ 256.565599][ T5608] vfs_open+0x82/0x3f0 [ 256.570187][ T5608] path_openat+0x208c/0x31a0 [ 256.575291][ T5608] do_file_open+0x20e/0x430 [ 256.580399][ T5608] do_sys_openat2+0x10d/0x1e0 [ 256.585597][ T5608] __x64_sys_openat+0x12d/0x210 [ 256.590971][ T5608] do_syscall_64+0x10b/0xf80 [ 256.596072][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.602479][ T5608] [ 256.602479][ T5608] -> #5 (set->srcu){.+.+}-{0:0}: [ 256.609597][ T5608] __synchronize_srcu+0xa2/0x300 [ 256.615141][ T5608] blk_mq_quiesce_queue+0x149/0x1c0 [ 256.620900][ T5608] elevator_switch+0x17b/0x7e0 [ 256.626182][ T5608] elevator_change+0x352/0x530 [ 256.631462][ T5608] elevator_set_default+0x29e/0x360 [ 256.637177][ T5608] blk_register_queue+0x48e/0x630 [ 256.642716][ T5608] __add_disk+0x73f/0xe40 [ 256.647559][ T5608] add_disk_fwnode+0x118/0x5c0 [ 256.652864][ T5608] nbd_dev_add+0x77a/0xb10 [ 256.657802][ T5608] nbd_init+0x291/0x2b0 [ 256.662482][ T5608] do_one_initcall+0x121/0x750 [ 256.667767][ T5608] kernel_init_freeable+0x6ea/0x7b0 [ 256.673497][ T5608] kernel_init+0x1f/0x1e0 [ 256.678343][ T5608] ret_from_fork+0x72b/0xd50 [ 256.683451][ T5608] ret_from_fork_asm+0x1a/0x30 [ 256.688737][ T5608] [ 256.688737][ T5608] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 256.696549][ T5608] __mutex_lock+0x1a4/0x1b10 [ 256.701665][ T5608] elevator_change+0x1bc/0x530 [ 256.706952][ T5608] elevator_set_none+0x92/0xf0 [ 256.712257][ T5608] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 256.718577][ T5608] nbd_start_device+0x1a6/0xbd0 [ 256.723939][ T5608] nbd_genl_connect+0xff2/0x1a40 [ 256.729389][ T5608] genl_family_rcv_msg_doit+0x214/0x300 [ 256.735452][ T5608] genl_rcv_msg+0x560/0x800 [ 256.740474][ T5608] netlink_rcv_skb+0x159/0x420 [ 256.745750][ T5608] genl_rcv+0x28/0x40 [ 256.750244][ T5608] netlink_unicast+0x585/0x850 [ 256.755612][ T5608] netlink_sendmsg+0x8b0/0xda0 [ 256.760892][ T5608] ____sys_sendmsg+0x9e1/0xb70 [ 256.766172][ T5608] ___sys_sendmsg+0x190/0x1e0 [ 256.771366][ T5608] __sys_sendmsg+0x170/0x220 [ 256.776478][ T5608] do_syscall_64+0x10b/0xf80 [ 256.781590][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.788002][ T5608] [ 256.788002][ T5608] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 256.796644][ T5608] blk_alloc_queue+0x610/0x790 [ 256.801938][ T5608] blk_mq_alloc_queue+0x174/0x290 [ 256.807480][ T5608] __blk_mq_alloc_disk+0x29/0x120 [ 256.813150][ T5608] nbd_dev_add+0x492/0xb10 [ 256.818088][ T5608] nbd_init+0x291/0x2b0 [ 256.822766][ T5608] do_one_initcall+0x121/0x750 [ 256.828063][ T5608] kernel_init_freeable+0x6ea/0x7b0 [ 256.833833][ T5608] kernel_init+0x1f/0x1e0 [ 256.838696][ T5608] ret_from_fork+0x72b/0xd50 [ 256.843804][ T5608] ret_from_fork_asm+0x1a/0x30 [ 256.849098][ T5608] [ 256.849098][ T5608] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 256.856300][ T5608] fs_reclaim_acquire+0xc4/0x100 [ 256.861871][ T5608] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 256.868224][ T5608] __alloc_skb+0x140/0x710 [ 256.873161][ T5608] tcp_stream_alloc_skb+0x34/0x660 [ 256.878787][ T5608] tcp_sendmsg_locked+0x13cd/0x4500 [ 256.884506][ T5608] tcp_sendmsg+0x2e/0x50 [ 256.889262][ T5608] inet_sendmsg+0xb9/0x140 [ 256.894194][ T5608] sock_write_iter+0x4ea/0x5a0 [ 256.899477][ T5608] vfs_write+0x6ac/0x1070 [ 256.904410][ T5608] ksys_write+0x1f8/0x250 [ 256.909268][ T5608] do_syscall_64+0x10b/0xf80 [ 256.914394][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.920801][ T5608] [ 256.920801][ T5608] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 256.928446][ T5608] lock_sock_nested+0x41/0xf0 [ 256.933903][ T5608] inet_shutdown+0x67/0x410 [ 256.938947][ T5608] nbd_mark_nsock_dead+0xae/0x5c0 [ 256.944558][ T5608] recv_work+0x5fb/0x8c0 [ 256.949324][ T5608] process_one_work+0xa0e/0x1980 [ 256.954798][ T5608] worker_thread+0x5ef/0xe50 [ 256.959937][ T5608] kthread+0x370/0x450 [ 256.964541][ T5608] ret_from_fork+0x72b/0xd50 [ 256.969654][ T5608] ret_from_fork_asm+0x1a/0x30 [ 256.974949][ T5608] [ 256.974949][ T5608] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 256.983072][ T5608] __lock_acquire+0x14b8/0x2630 [ 256.988457][ T5608] lock_acquire+0x1b1/0x370 [ 256.993484][ T5608] __mutex_lock+0x1a4/0x1b10 [ 256.998648][ T5608] nbd_queue_rq+0x428/0x1080 [ 257.003780][ T5608] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 257.009851][ T5608] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 257.016708][ T5608] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 257.023214][ T5608] blk_mq_run_hw_queue+0x23c/0x670 [ 257.028844][ T5608] blk_mq_dispatch_list+0x51d/0x1360 [ 257.034870][ T5608] blk_mq_flush_plug_list+0x130/0x600 [ 257.040928][ T5608] __blk_flush_plug+0x2c4/0x4b0 [ 257.046298][ T5608] __submit_bio+0x584/0x6c0 [ 257.051388][ T5608] submit_bio_noacct_nocheck+0x543/0xbf0 [ 257.057545][ T5608] submit_bio_noacct+0xd18/0x2000 [ 257.063093][ T5608] submit_bh_wbc+0x681/0x890 [ 257.068203][ T5608] block_read_full_folio+0x4c8/0x8e0 [ 257.074005][ T5608] filemap_read_folio+0xfc/0x3b0 [ 257.079465][ T5608] do_read_cache_folio+0x2d7/0x6b0 [ 257.085098][ T5608] read_part_sector+0xd1/0x370 [ 257.090382][ T5608] adfspart_check_ICS+0x91/0x7d0 [ 257.095840][ T5608] bdev_disk_changed+0x7a3/0x1250 [ 257.101388][ T5608] blkdev_get_whole+0x187/0x290 [ 257.106762][ T5608] bdev_open+0x2c7/0xe40 [ 257.111531][ T5608] blkdev_open+0x34e/0x4f0 [ 257.116464][ T5608] do_dentry_open+0x6d8/0x1660 [ 257.121747][ T5608] vfs_open+0x82/0x3f0 [ 257.126338][ T5608] path_openat+0x208c/0x31a0 [ 257.131449][ T5608] do_file_open+0x20e/0x430 [ 257.136466][ T5608] do_sys_openat2+0x10d/0x1e0 [ 257.141676][ T5608] __x64_sys_openat+0x12d/0x210 [ 257.147058][ T5608] do_syscall_64+0x10b/0xf80 [ 257.152192][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.158711][ T5608] [ 257.158711][ T5608] other info that might help us debug this: [ 257.158711][ T5608] [ 257.169033][ T5608] Chain exists of: [ 257.169033][ T5608] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 257.169033][ T5608] [ 257.181288][ T5608] Possible unsafe locking scenario: [ 257.181288][ T5608] [ 257.188728][ T5608] CPU0 CPU1 [ 257.194078][ T5608] ---- ---- [ 257.199430][ T5608] lock(&cmd->lock); [ 257.203409][ T5608] lock(set->srcu); [ 257.209834][ T5608] lock(&cmd->lock); [ 257.216340][ T5608] lock(&nsock->tx_lock); [ 257.220770][ T5608] [ 257.220770][ T5608] *** DEADLOCK *** [ 257.220770][ T5608] [ 257.228917][ T5608] 3 locks held by udevd/5608: [ 257.233589][ T5608] #0: ffff888028a7b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 257.242936][ T5608] #1: ffff888028957e98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 257.252425][ T5608] #2: ffff88804f03e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 257.261387][ T5608] [ 257.261387][ T5608] stack backtrace: [ 257.267266][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 257.267294][ T5608] Tainted: [L]=SOFTLOCKUP [ 257.267300][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.267312][ T5608] Call Trace: [ 257.267320][ T5608] [ 257.267328][ T5608] dump_stack_lvl+0x100/0x190 [ 257.267351][ T5608] print_circular_bug.cold+0x178/0x1c7 [ 257.267381][ T5608] check_noncircular+0x146/0x160 [ 257.267406][ T5608] __lock_acquire+0x14b8/0x2630 [ 257.267432][ T5608] lock_acquire+0x1b1/0x370 [ 257.267453][ T5608] ? nbd_queue_rq+0x428/0x1080 [ 257.267470][ T5608] ? __pfx___might_resched+0x10/0x10 [ 257.267497][ T5608] ? rcu_is_watching+0x12/0xc0 [ 257.267523][ T5608] __mutex_lock+0x1a4/0x1b10 [ 257.267548][ T5608] ? nbd_queue_rq+0x428/0x1080 [ 257.267565][ T5608] ? nbd_queue_rq+0x428/0x1080 [ 257.267581][ T5608] ? is_bpf_text_address+0x8a/0x1a0 [ 257.267603][ T5608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.267622][ T5608] ? rcu_is_watching+0x12/0xc0 [ 257.267648][ T5608] ? __pfx___mutex_lock+0x10/0x10 [ 257.267667][ T5608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.267686][ T5608] ? is_bpf_text_address+0x94/0x1a0 [ 257.267708][ T5608] ? kernel_text_address+0x8d/0x100 [ 257.267732][ T5608] ? arch_stack_walk+0xa6/0xf0 [ 257.267760][ T5608] ? nbd_queue_rq+0x428/0x1080 [ 257.267776][ T5608] nbd_queue_rq+0x428/0x1080 [ 257.267793][ T5608] ? stack_trace_save+0x8e/0xc0 [ 257.267814][ T5608] ? __pfx_nbd_queue_rq+0x10/0x10 [ 257.267831][ T5608] ? add_lock_to_list+0x99/0x110 [ 257.267849][ T5608] ? lockdep_unlock+0x5a/0xc0 [ 257.267865][ T5608] ? __lock_acquire+0xd73/0x2630 [ 257.267888][ T5608] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 257.267913][ T5608] ? sbitmap_get+0x1d7/0x360 [ 257.267933][ T5608] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 257.267952][ T5608] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 257.267980][ T5608] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 257.268010][ T5608] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 257.268045][ T5608] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 257.268072][ T5608] blk_mq_run_hw_queue+0x23c/0x670 [ 257.268095][ T5608] ? blk_mq_run_hw_queue+0x22e/0x670 [ 257.268119][ T5608] blk_mq_dispatch_list+0x51d/0x1360 [ 257.268138][ T5608] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 257.268166][ T5608] ? update_io_ticks+0x137/0x2a0 [ 257.268190][ T5608] ? __pfx_update_io_ticks+0x10/0x10 [ 257.268215][ T5608] blk_mq_flush_plug_list+0x130/0x600 [ 257.268232][ T5608] ? trace_block_plug+0x70/0x220 [ 257.268252][ T5608] ? blk_add_rq_to_plug+0x30a/0x540 [ 257.268268][ T5608] ? __pfx_wbt_track+0x10/0x10 [ 257.268293][ T5608] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.268311][ T5608] ? blk_mq_submit_bio+0x9aa/0x2dd0 [ 257.268330][ T5608] __blk_flush_plug+0x2c4/0x4b0 [ 257.268356][ T5608] ? __pfx___blk_flush_plug+0x10/0x10 [ 257.268384][ T5608] __submit_bio+0x584/0x6c0 [ 257.268409][ T5608] ? __pfx___submit_bio+0x10/0x10 [ 257.268437][ T5608] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 257.268464][ T5608] ? find_held_lock+0x2b/0x80 [ 257.268481][ T5608] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 257.268507][ T5608] submit_bio_noacct_nocheck+0x543/0xbf0 [ 257.268534][ T5608] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.268599][ T5608] ? __pfx___might_resched+0x10/0x10 [ 257.268626][ T5608] submit_bio_noacct+0xd18/0x2000 [ 257.268653][ T5608] submit_bh_wbc+0x681/0x890 [ 257.268681][ T5608] block_read_full_folio+0x4c8/0x8e0 [ 257.268703][ T5608] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.268730][ T5608] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.268755][ T5608] filemap_read_folio+0xfc/0x3b0 [ 257.268780][ T5608] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.268890][ T5608] do_read_cache_folio+0x2d7/0x6b0 [ 257.268934][ T5608] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.268964][ T5608] read_part_sector+0xd1/0x370 [ 257.268988][ T5608] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.269014][ T5608] adfspart_check_ICS+0x91/0x7d0 [ 257.269039][ T5608] ? __pfx_seq_buf_printf+0x10/0x10 [ 257.269068][ T5608] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.269095][ T5608] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.269119][ T5608] bdev_disk_changed+0x7a3/0x1250 [ 257.269146][ T5608] ? nbd_open+0x320/0x700 [ 257.269164][ T5608] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.269192][ T5608] blkdev_get_whole+0x187/0x290 [ 257.269216][ T5608] bdev_open+0x2c7/0xe40 [ 257.269242][ T5608] blkdev_open+0x34e/0x4f0 [ 257.269259][ T5608] do_dentry_open+0x6d8/0x1660 [ 257.269279][ T5608] ? __pfx_blkdev_open+0x10/0x10 [ 257.269298][ T5608] vfs_open+0x82/0x3f0 [ 257.269324][ T5608] path_openat+0x208c/0x31a0 [ 257.269350][ T5608] ? __pfx_path_openat+0x10/0x10 [ 257.269375][ T5608] do_file_open+0x20e/0x430 [ 257.269397][ T5608] ? __pfx_do_file_open+0x10/0x10 [ 257.269427][ T5608] ? alloc_fd+0x476/0x790 [ 257.269451][ T5608] ? do_getname+0x191/0x390 [ 257.269618][ T5608] do_sys_openat2+0x10d/0x1e0 [ 257.269646][ T5608] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.269671][ T5608] ? __sys_recvmsg+0x18c/0x220 [ 257.269696][ T5608] ? __pfx___sys_recvmsg+0x10/0x10 [ 257.269722][ T5608] __x64_sys_openat+0x12d/0x210 [ 257.269748][ T5608] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.269775][ T5608] ? rcu_is_watching+0x12/0xc0 [ 257.269801][ T5608] do_syscall_64+0x10b/0xf80 [ 257.269820][ T5608] ? clear_bhb_loop+0x40/0x90 [ 257.269840][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.269859][ T5608] RIP: 0033:0x7f7a676a7407 [ 257.269875][ T5608] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 257.269894][ T5608] RSP: 002b:00007fffe9776980 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 257.269912][ T5608] RAX: ffffffffffffffda RBX: 00007f7a67d8b880 RCX: 00007f7a676a7407 [ 257.269925][ T5608] RDX: 00000000000a0800 RSI: 000055810a90b900 RDI: ffffffffffffff9c [ 257.269937][ T5608] RBP: 000055810a6c12c0 R08: 0000000000000000 R09: 0000000000000000 [ 257.269947][ T5608] R10: 0000000000000000 R11: 0000000000000202 R12: 000055810a903d50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 257.269958][ T5608] R13: 000055810a8fc8d0 R14: 0000000000000000 R15: 000055810a903d50 [ 257.269976][ T5608] [ 257.522823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 257.923508][ T803] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 257.968851][ T5608] block nbd0: Dead connection, failed to find a fallback [ 257.976433][ T5608] block nbd0: shutting down sockets [ 257.981856][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.000505][ T803] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 258.007827][ T988] usb 2-1: USB disconnect, device number 2 [ 258.047931][ T803] usb 4-1: USB disconnect, device number 15 [ 258.113344][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.118436][ T5608] buffer_io_error: 48 callbacks suppressed [ 258.118456][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.205097][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.236668][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.253378][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.262513][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.270498][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.279708][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.287646][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.298481][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.308493][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.340330][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.373041][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.382308][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.390453][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.399688][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.424629][ T5608] ldm_validate_partition_table(): Disk read failed. [ 258.496555][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.528138][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.554032][ T5608] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.572917][ T5608] Buffer I/O error on dev nbd0, logical block 0, async page read [ 258.582561][ T5608] Dev nbd0: unable to read RDB block 0 [ 258.603264][ T5608] nbd0: unable to read partition table [ 258.622590][ T5608] ldm_validate_partition_table(): Disk read failed. [ 258.641290][ T5608] Dev nbd0: unable to read RDB block 0 [ 258.649794][ T5608] nbd0: unable to read partition table [ 258.725511][ T8142] syz_tun (unregistering): left allmulticast mode [ 258.732065][ T8142] syz_tun (unregistering): left promiscuous mode [ 258.739976][ T8142] bridge0: port 3(syz_tun) entered disabled state [ 258.750575][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.761371][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.838243][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.848622][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.928559][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.948449][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.986599][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.997593][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.046159][ T29] audit: type=1400 audit(1777321974.776:444): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 259.072293][ T35] bridge_slave_1: left allmulticast mode [ 259.078522][ T35] bridge_slave_1: left promiscuous mode [ 259.084829][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.092949][ T35] bridge_slave_0: left allmulticast mode [ 259.098649][ T35] bridge_slave_0: left promiscuous mode [ 259.104440][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.149789][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 259.235381][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.245112][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.256828][ T35] bond0 (unregistering): Released all slaves [ 259.312216][ T29] audit: type=1400 audit(1777321975.046:445): avc: denied { read open } for pid=8148 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.338003][ T29] audit: type=1400 audit(1777321975.046:446): avc: denied { getattr } for pid=8148 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.393747][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.455679][ T29] audit: type=1400 audit(1777321975.186:447): avc: denied { add_name } for pid=8147 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.495042][ T29] audit: type=1400 audit(1777321975.186:448): avc: denied { create } for pid=8147 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.495077][ T35] hsr_slave_0: left promiscuous mode [ 259.523143][ T29] audit: type=1400 audit(1777321975.186:449): avc: denied { write } for pid=8147 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4537 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.549671][ T35] hsr_slave_1: left promiscuous mode [ 259.549683][ T29] audit: type=1400 audit(1777321975.186:450): avc: denied { append } for pid=8147 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4537 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.560364][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.582103][ T29] audit: type=1400 audit(1777321975.236:451): avc: denied { remove_name } for pid=8158 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4537 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.587614][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.619241][ T29] audit: type=1400 audit(1777321975.236:452): avc: denied { unlink } for pid=8158 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4537 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.645469][ T35] veth1_macvtap: left promiscuous mode [ 259.650961][ T35] veth0_macvtap: left promiscuous mode [ 259.657197][ T35] veth1_vlan: left promiscuous mode [ 259.662505][ T35] veth0_vlan: left promiscuous mode [ 259.718849][ T35] team0 (unregistering): Port device team_slave_1 removed [ 259.730050][ T35] team0 (unregistering): Port device team_slave_0 removed [ 259.778045][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 259.968964][ T35] IPVS: stop unused estimator thread 0... [ 260.031066][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 260.084443][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.160924][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.198423][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.248363][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.262017][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 260.367056][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.401449][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.451734][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.490807][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.510461][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.637744][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.706246][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.757988][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.790915][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 260.818834][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.932511][ T35] bridge_slave_1: left allmulticast mode [ 260.939980][ T35] bridge_slave_1: left promiscuous mode [ 260.947236][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.955981][ T35] bridge_slave_0: left allmulticast mode [ 260.961669][ T35] bridge_slave_0: left promiscuous mode [ 260.967914][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.129186][ T35] bridge_slave_1: left allmulticast mode [ 261.135036][ T35] bridge_slave_1: left promiscuous mode [ 261.140789][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.148823][ T35] bridge_slave_0: left allmulticast mode [ 261.154834][ T35] bridge_slave_0: left promiscuous mode [ 261.160527][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.170191][ T35] bridge_slave_1: left allmulticast mode [ 261.178148][ T35] bridge_slave_1: left promiscuous mode [ 261.184163][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.194480][ T35] bridge_slave_0: left allmulticast mode [ 261.200325][ T35] bridge_slave_0: left promiscuous mode [ 261.206302][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.384199][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 261.427450][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.437829][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.447470][ T35] bond0 (unregistering): Released all slaves [ 261.462036][ T35] bond1 (unregistering): Released all slaves [ 261.538657][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.548260][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.557658][ T35] bond0 (unregistering): Released all slaves [ 261.582497][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 261.645257][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.655350][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.664754][ T35] bond0 (unregistering): Released all slaves [ 261.672414][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.949662][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 262.023180][ T35] hsr_slave_0: left promiscuous mode [ 262.029154][ T35] hsr_slave_1: left promiscuous mode [ 262.035290][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.047609][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.061373][ T35] hsr_slave_0: left promiscuous mode [ 262.067576][ T35] hsr_slave_1: left promiscuous mode [ 262.073501][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.081185][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.091423][ T35] hsr_slave_0: left promiscuous mode [ 262.098972][ T35] hsr_slave_1: left promiscuous mode [ 262.105049][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.112576][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.127877][ T35] veth1_macvtap: left promiscuous mode [ 262.133599][ T35] veth0_macvtap: left promiscuous mode [ 262.139139][ T35] veth1_vlan: left promiscuous mode [ 262.144594][ T35] veth0_vlan: left promiscuous mode [ 262.150594][ T35] veth1_macvtap: left promiscuous mode [ 262.156957][ T35] veth0_macvtap: left promiscuous mode [ 262.162637][ T35] veth1_vlan: left promiscuous mode [ 262.169078][ T35] veth0_vlan: left promiscuous mode [ 262.175294][ T35] veth1_macvtap: left promiscuous mode [ 262.180829][ T35] veth0_macvtap: left promiscuous mode [ 262.186955][ T35] veth1_vlan: left promiscuous mode [ 262.192294][ T35] veth0_vlan: left promiscuous mode [ 262.307607][ T35] team0 (unregistering): Port device team_slave_1 removed [ 262.322102][ T35] team0 (unregistering): Port device team_slave_0 removed [ 262.404656][ T35] team0 (unregistering): Port device team_slave_1 removed [ 262.426384][ T35] team0 (unregistering): Port device team_slave_0 removed [ 262.499996][ T35] team0 (unregistering): Port device team_slave_1 removed [ 262.515393][ T35] team0 (unregistering): Port device team_slave_0 removed [ 262.548654][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 262.913867][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 263.155026][ T35] IPVS: stop unused estimator thread 0... [ 263.161162][ T35] IPVS: stop unused estimator thread 0... [ 263.167327][ T35] IPVS: stop unused estimator thread 0... [ 263.201635][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 263.399809][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 263.575366][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 263.759471][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 263.935621][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 264.142349][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 264.326290][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16