last executing test programs: 14.770671884s ago: executing program 3 (id=192): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x853, 0x148, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) 12.40639579s ago: executing program 3 (id=202): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d03"], 0x0) 10.463869461s ago: executing program 0 (id=208): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYRES32=r3], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 10.340388622s ago: executing program 3 (id=209): socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x14}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00001cf000/0x1000)=nil, 0x1000, 0x9) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3fe, 0x6fb, 0xffffffff, 0x88a8}}]}]}]}, @IFLA_GROUP={0x8, 0x1b, 0xb8}, @IFLA_ALT_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xd8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r10 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r10, &(0x7f00000001c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) 8.909083938s ago: executing program 3 (id=214): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @echo={0x8, 0x0, 0x0, 0x2}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x148000, 0x0, 0x41, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102400, 0x19000) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_elf32(r8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7f454c46071b0107090000000000000003000000ff0300006a030000380000008d030000ff03000001002000010050e900a03b47000000000200000047000000070000000c000000010001000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/600], 0xff5f) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.656006918s ago: executing program 3 (id=215): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) eventfd2(0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000380), &(0x7f00000002c0)=r7}, 0x20) 6.849417673s ago: executing program 4 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffffffe}]}) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c06", 0x3, 0xfffffffffffffffe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000000700000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd214}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@remote, @multicast1}, &(0x7f0000000040)=0x8) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.737289581s ago: executing program 1 (id=218): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x20, 0xb, 0xd, {{0x40, 0x4, 0x3, 0x0, 0x100, 0x67, 0x0, 0xf2, 0x2f, 0x0, @broadcast, @local, {[@cipso={0x86, 0x4c, 0x2, [{0x2, 0x12, "fdc5fcd8755480d048e37ec2e32873b6"}, {0x2, 0x8, "de9dba2318e6"}, {0x2, 0x5, "431c9f"}, {0x0, 0x12, "63fe0e960ceeeecbeabd8b988ffec7af"}, {0x1, 0x6, "2f4990dc"}, {0x6, 0xf, "2355fe760a6d6992e191c9e96d"}]}, @rr={0x7, 0x17, 0x27, [@multicast2, @empty, @local, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x83, [@broadcast, @local]}, @timestamp_addr={0x44, 0x44, 0x3a, 0x1, 0x4, [{@broadcast, 0x7}, {@multicast2, 0x4}, {@local, 0x1}, {@local, 0x62017824}, {@rand_addr=0x64010100, 0xf1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @rr={0x7, 0xb, 0xa5, [@rand_addr=0x64010102, @local]}, @timestamp={0x44, 0x2c, 0x24, 0x0, 0x5, [0x4, 0x2, 0x9, 0x5, 0xff, 0x7, 0x1, 0x7, 0x3, 0x2d]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x6, 0xf, 0x2bd, 0x48, @mcast1, @rand_addr=' \x01\x00', 0x80, 0x7800, 0x1, 0x800}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7, 0x2}}}}]}, 0x40}}, 0x0) 6.513105079s ago: executing program 1 (id=219): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.485050181s ago: executing program 1 (id=220): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r1, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000400)={{0x0, 0x0, 0x2}}, 0x40, 0x0}}) pread64(r0, 0x0, 0x0, 0xa) 6.396959905s ago: executing program 1 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.345202871s ago: executing program 2 (id=222): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x29c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xffffffffffffffe5, 0x2, [@TCA_MATCHALL_ACT={0x244, 0x2, [@m_gact={0xec, 0x1c, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffff2b88, 0x5, 0x0, 0x0, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c97, 0x8}}]}, {0x9a, 0x6, "75fbdce6d89bb2823d3a5114c1e485738899443b456e4fdf270317683aad58b6d4058868024130a7e3c11bc3f940f3f04575574b28410c1a04200fb1d78dd3af053620c4fa7857cfa7c1f98fda01cea84dafd165ccf057484e811efa4c0e6c903156a9198739a6fad30fb2f40d71ad6beae18f0e0e3c59cc21d6aaa8e88e608282b346c6df91399e4bd9cd143eb713c80350040e3ace"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x154, 0x12, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "a9f803b73ac3034ec1d71cf4000eca10"}, @TCA_CT_ACTION={0x6, 0x3, 0x38}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}]}, {0xe2, 0x6, "9d9adc4572e20bea89cfd069faddc201e1e48c01b3a24b30a7d288dd819b0818008617611db7810553e7ce691d273eb06ac34901494c0b086b55d47c65df67163d64d1843d268f6674b9244aa2b302b81905d52a32a13818e5a1fc36df501e1ab4e80776d84e39b32e9f3365a461cf65e93bad7111c182faa32691e72d986b9675030a47393e44af05f76f74620ef5ae9b0301c802a16cfb5da0db2807d882a101b0a702d6c8eab8f1912c33b2d13565952ebb688b274d3a43357423e619b135860456ee41073ef450683025f6d90a1c49e12b5d3849bc3ba2191d931d45"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0af33709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf495efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb382587", 0xae, 0x4000, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r8, &(0x7f0000001180)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.234210276s ago: executing program 0 (id=223): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r7, &(0x7f00000002c0)) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x3, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r5, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0xfac) socket$netlink(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000280), 0x10) 5.395057643s ago: executing program 1 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000380)={0x7, 0xaafe, 0x7, 0xc80e, 0xffffffff, 0x20}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 5.338317344s ago: executing program 4 (id=225): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x40000) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x521043, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) (async) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) read$msr(r3, &(0x7f0000000480)=""/132, 0x84) (async, rerun: 64) setfsuid(r2) (async, rerun: 64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@local}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}]}]}}}}}}}, 0x0) (async) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/fscaps', 0x101000, 0x3) read$FUSE(r6, &(0x7f0000001800)={0x2020}, 0x2020) (async) r7 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.764834771s ago: executing program 0 (id=226): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3725b6b674453d035748cb0a459e95976770", @ANYRES32=r2, @ANYBLOB="0c009900ffffff7f29000000040046000400440004006700"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008008) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/4046], 0xfce) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x804) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0xe0, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800401e00d200670000fd5c907864010101ac1414bb004420a2300001000100000000ffffff65000006f500000006ffffffff000000039404010000940400000000c669edcbd48ceedfb355000000000000040115e6eb6a89d05ee9489288cfe579e6c25ad9865201bffd33159cf7db5a89e1a3c261623e8757c7942a546daa823224d0f3720813e1643cc5fa4f64362291835eed2c773eeef3a0ee3f39327e787b19e930e966896bf22c28e696020000009159dede2cc127eb6328eb91b86965b8353b2a6d847e5e7583deb29b6063f6fa4e42"], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 4.653221016s ago: executing program 4 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) (async) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000056, 0x3) r1 = socket$inet(0x2, 0x4, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0xff}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52}], 0x48) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52}], 0x48) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000025c0)=""/158, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x64e589ace4fc7087, 0x12, r1, 0x6196000) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x64e589ace4fc7087, 0x12, r1, 0x6196000) syz_clone(0x8000, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x8000, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x4, 0x3, 0x9, 0x6, 0xf, 0x8, 0x9}, &(0x7f0000000180)=0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f00000001c0)}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 4.435853546s ago: executing program 4 (id=228): syz_usb_connect(0x2, 0x36, &(0x7f0000001f80)=ANY=[@ANYBLOB="12015002f8f02110081601028246010203018e02240001090e20020904300902ff25770309050a021000070a040905020000000b0149"], &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0}) 3.229046476s ago: executing program 2 (id=229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x33fe0, 0x0, 0x0) 3.22753101s ago: executing program 0 (id=230): syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x20000000, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockname$tipc(r3, 0x0, &(0x7f0000000080)) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) 1.94208795s ago: executing program 2 (id=231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0xffffffff, 0x2}, 0x1e) 1.857403809s ago: executing program 0 (id=232): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001100), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x20000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffff89) lseek(r2, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.68552693s ago: executing program 2 (id=233): socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0xffffffde, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.623830054s ago: executing program 2 (id=234): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.596941156s ago: executing program 1 (id=235): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x701, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0xc58, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xb88, 0xffffffff, 0xffffffff, 0xb88, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9, 0x1}, {0x8, 0x1}, {0x2, 0x2}, {0xc, 0x1}, {0x7fffffff, 0x368216df54a200ea}, {0x82, 0x2}, {0xb208, 0x3}, {0x6, 0x3}, {0x1, 0x2}, {0x4}, {0x0, 0x3}], [{0x0, 0x80000000}, {0x5, 0x80}, {0x6, 0x5}, {0xb84a, 0x9}, {0xfffffffd, 0x3}, {0x4d, 0xd8}, {0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0xb}], 0x7, 0xb}, {[{0x6, 0x3}, {0x1, 0x3}, {0xa0}, {0x401, 0x2}, {0x178, 0x2}, {0x33e480ec, 0x3}, {0x4e20}, {}, {}, {0x60390446, 0x2}, {0x3, 0x3}], [{0x9}, {0xffffff55, 0xfffffffa}, {0xd, 0x10}, {0x2, 0x9}, {0x2190, 0x6}, {0x8, 0x6}, {0x6, 0x8}, {0x325, 0x9}, {0x8001, 0x10000}, {0x6, 0xd}, {0x2, 0x5}], 0x8, 0xa}, {[{0x3, 0x1}, {0x7fff, 0x2}, {0x5, 0x2}, {0xfb2, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x9, 0x2}, {0x0, 0x3}, {0x3ff, 0x2}, {0xfffffffe}, {0x1000, 0x2}], [{0x6, 0x91}, {0x0, 0x40}, {0x6, 0x2}, {0x2, 0xfffffff8}, {0x4, 0x1000}, {0xa09, 0x20000000}, {0x8, 0x3}, {0x5, 0x40}, {0x16f, 0x1}, {0x800, 0x5}, {0xfffffffa, 0xb21f}], 0x5, 0x7}, {[{0xffffff01, 0x3}, {0x4, 0x2}, {0x3, 0x1}, {0xa}, {0x1cd}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x6619, 0x3}, {0x3, 0x1}, {0x3, 0x2}], [{0x6, 0x1}, {0x6}, {0x3, 0x6}, {0x1, 0x80000000}, {0x10, 0x2}, {0x2, 0x9}, {0x8, 0xfffffffd}, {0x2, 0x2}, {0x4, 0xb2a}, {0x2af, 0x5}, {0x7, 0x5}], 0x8}, {[{0x7fff, 0x3}, {0x2, 0x2}, {0x400, 0x3}, {0x9, 0x1}, {0x7}, {0x7, 0x1}, {0xffffffff, 0x3}, {0x7ff}, {0x1, 0x3}, {0x7fff, 0x3}, {0x2, 0x1}], [{0x0, 0x3}, {0x2cc9, 0xb1}, {0x0, 0x4}, {0x6}, {0x4, 0x40}, {0x22939829, 0x5}, {0x8a, 0x9}, {0x81, 0x2}, {0x1, 0x80}, {0x0, 0x7}, {0x4, 0xf}], 0x9, 0xa}, {[{0x9}, {0x7fffffff, 0x3}, {0xbe2, 0x1}, {0x101, 0x3}, {0x8, 0x2}, {0x7, 0x3}, {0x101}, {0x4}, {0xd, 0x1}, {0x9, 0x3}, {0xa}], [{0x9, 0x3}, {0xffffff8d, 0xc21}, {0x0, 0x10}, {0x3, 0x1}, {0x31, 0x3}, {0x26, 0xd3c}, {0x6, 0x10}, {0xffff4825, 0x2}, {0x3, 0xb}, {0xfff, 0x9}, {0x6, 0x3}], 0x2, 0x2}, {[{0x2, 0x2}, {0x1, 0x3}, {0x76be, 0x2}, {0x3, 0x1}, {0x0, 0x9417ffa121247e48}, {0x5, 0x2}, {0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x3ff, 0x1}, {0xb1ba0d}], [{0xdc, 0xef5}, {0x8000, 0x5}, {0x334, 0x9}, {0x8, 0xcb}, {0xc8, 0x101}, {0x7ff, 0x401}, {0x2, 0x8}, {0xc8, 0x2}, {0x100, 0x200}, {0x4, 0x61f}, {0x6, 0x1}], 0x5, 0x2}, {[{0x4}, {0xb, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x2}, {0xa100, 0x1}, {0x8, 0x3}, {0xffffff81, 0x2}, {0x200}, {0x3a, 0x1}, {0x4e67, 0x2}], [{0x203, 0x9ed8}, {0x4, 0x200}, {0x0, 0x101}, {0x3, 0x68}, {0xfffffffe, 0x7f}, {0xf, 0x340}, {0x4, 0x6}, {0xcb25, 0xdcfa}, {0x88, 0x1}, {0xe, 0xbc}, {0x8000, 0x5}], 0x4, 0x4}, {[{0x9, 0x1}, {0x3, 0x2}, {0x480000, 0x3}, {0x2, 0x1}, {0x100, 0x3}, {0x7ff, 0x1}, {0x4}, {0x10000, 0x1}, {0x5}, {0x4, 0x1}, {0xc2b, 0x1}], [{0x10000, 0x40}, {0x100, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x6, 0x8}, {0x9, 0xf}, {0xc1711efc, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0xfffffffb, 0xfffffffe}], 0x8, 0xa}, {[{0x3, 0x2}, {0x18000}, {0x9, 0x2}, {0xfffffa06, 0x1}, {0x1, 0x2}, {0x9}, {0x75e}, {0x7, 0x2}, {0x6, 0x2}, {0x3}, {0x2}], [{0x571}, {0x9, 0x8001}, {0x80000001, 0xfff}, {0x2, 0x9}, {0xff, 0xdf8}, {0x3d2, 0xfffffffa}, {0xffffff38}, {0x1000, 0x9}, {0x6, 0x9}, {0x3ff, 0x3}, {0x61, 0x8}], 0x9, 0x8}, {[{0x4978, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3}, {0x1000000, 0x2}, {0x5}, {0x0, 0x3}, {0x6}, {0x208}, {0xaa, 0x1}, {0x10000, 0x3}], [{0x5, 0x5}, {0x0, 0x3e1}, {0xc3e00000, 0x3}, {0x5, 0x6}, {0x1, 0x7fffffff}, {0xfffff857, 0xc00}, {0x7fffffff, 0x7}, {0x7fff, 0x4}, {0x5, 0x9}, {0x40}, {0x2, 0xffff}], 0x5, 0xb}], 0xb}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x6, 0x84e, 0xfffffffb, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@remote, @private2, [0x0, 0xff, 0xff], [0xff000000, 0xffffff00], 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'gre0\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcb8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000306095cd85f6180000000500000a48000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0400098008000840000000011400000011000100000000000000000002000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) fallocate(r6, 0x10, 0x0, 0x1062200) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f6ff000000000000000000"], 0x50) shutdown(r3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, &(0x7f00007d0000)) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfcfe}, @HCI_OP_WRITE_AUTH_ENABLE={{0x5}, 0xe}}}, 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) 1.490974128s ago: executing program 2 (id=236): r0 = socket$caif_stream(0x25, 0x1, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0xb, 0x0, 0x7, 0x400}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x7de29f33e53460d3, 0x10e) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x46, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff3f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xff, 0x7, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) add_key(&(0x7f0000000400)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x40000}, 0x10) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) capget(&(0x7f0000000680)={0x19980330}, &(0x7f0000001700)={0x1, 0x5, 0x8, 0x7ff, 0x8, 0x3}) syz_io_uring_setup(0x1897, &(0x7f00000002c0)={0x0, 0xf88e, 0x20000, 0x1, 0x193, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0)) fdatasync(r1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x22, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={&(0x7f0000000700)="f02bd71115f4d9ff0183c3aa268bcae6dba45a00f833233157b6bc5c437109f211f18e995d29590dbe339d1701de0b95e40f38d28eaf411aad0c185db0b89dac106dd16910ebc8fbe4b103837f5758c4c30b904cbead6d3eb9d2753c6ac0c6402c2a894410efbf48d74a828e424cd7ae3c8d1abe695bf964ef3be50372940f99e23116175a45552dd197f96dee6ea472d6aa1c053793d09b2d228b729a00c6f55f514360ffbd969386fa72e5382e1827f0c06859cc02ff61fb526d80268fc8cfbee9850371eef501137c274304a83878a2ee379e864bbb3b010252bd730647a11e60f3df9c404e19206764292687be551733148ded23095c0c4654ad7113176515bb84af14256d39997fd75db4192415cf06f4f0480a3b18914e2fde53a94f7cd25562f394181641bb983925c69142db6fbfe0c3050328df370eb05e01f77c0e7de7ce5c006553af1318abb1535c40ba9c3ba687ef04c5ab2687127e5174a5802032ac18dcdc1e367c3b0bd00bc1013033621c2e5605975a9a9ce9acdab69b259ff3e6e6c312c4343ff842dcde6bdbc37de4ecbbd922a12257758e7001e1790f090232fc4cb303c5586e754acf3c464211de4034dd08c0780d314b6035923206f5dee4a235b0940047998f2c84398ae39dc7ce7d29871a29e1ff6b846403b5b99fcb87e734febd22a410604bd1fb964145767749c530c37563645fdaf991a5fe769b56789dfaa32d1e4eeb9a1d13447fb1a3aee32ead09e2bc3be4bed1df3250fb543435fe98212ed1dcaa7b67e46c96fee9e530211e66b4855901e37f0115f1949b04084f71a99d9df425eaa40aba90061f6aea1de3b462ac8db1f5f77f3a31e5734dbb7bc803c62ee93139091c5a81257a32a54c000e76ec39984e4115b31221c2fc7957b012558e37b3ea8ae64c7f34d7c57495042c72405755f2957c17ec314f4efda6a11e85d45af90dc759a53c1b994ef1a9b9f2bd98cdaae00a967d726d9b2251249c5097c28fbf8dad0c406f93109c4efe2f14843c2d9d01c194d36c15b4de28c37fb4ecc1da6c5af308768b63bcd1bf7b0499eb442f82fb4c97f0f69388d777075bc3496fd64a970812b995bfdff4237a9d5b9f7f8cce1229e6e3026937a71fd123ae1c5ee47fe9670a57d53f32f3ba81b9d42231249a1d82af868af7f1c881717037861bea83286b3e562d24a929f12b58cdb6e3f1a297fdbc70d04b8bcf7e108a1d4ee183eb650e1b950a38da6495c5b6e195145ec885e259992dd6876ec6bd6341c90e265f5fdf84f023d10286027c808f4a643e96b5e207f5c9660334c6dae9b4408bec09a94ed636b327d7d63d016c4c440de7d94a816cdac56ec8b22bcdc7f06ef8a39db5a10bc6b1d589ca7856bcf7eb34ac3c9a444832e06279f65f60c263547c7e097c6c9c585151016fb84b65a20c614f4a6e3b6c187f8d96b81d737ecaf159ba7a523892da02d4d4bdb480c7d4d17abb377f293a18af74a3812ad30f9da3390fb9524cb3ca80ca37b4d1a6ec4d901cca68e3ec1cc3f7a1c61a28b83fdc7833926f6b1918f0cc006e3a8eb234e69bea7ac47cb9103ccdc87b21c7eccf86ec04cf8bc0ab413c2274fa6efd2c196cda8ac542bd44416c905e6c10622de6e5b371bfda306a4ef09716bcb88fe52417c7230f0ade60f57585bfd50bd573261e2d3e8a283ac09c97fbe9d0ed51a98e4b60ce3ce1002989071c277592520604327b2e3f20e367dcedff40a06dfe2bdc3edda890f1dfcb551de873d103222869118523e896c68190c867b728ed8b638d35a4acd1709ef8848889a09ffe165a69eb76675a5c12c7e0a83418dc8762d7653b62bf049a84e8b505479ef725e250d15f97613a49e58c6aa9abbf10f1805ae893dad0d6107ae72020e034a86078505bd80e6b89245cec62a727b37285952c522a20a8b58dbc030a0f8454d7e642ea757d55723512cc8e73a6fcacbd9e9c64486e0579d3e1b5a68e44a5591b194021db36cabe09aea9c89c16abc35226911c010916d70bdd5cdff0d8e788df3e29ff1daa33b1a637751cb7229a2ee8c7362e41dc011fe02226f6316ce387b84ffddbc7dd2de4baa1ef1bbe9340f68c0a5708e89a47daf7c4023d0009c487ae672b616da54c0407f0d163bb78eeebf9d380a2b8b375c4b99d79cd76592e6aeceec77518cdc090b57bbf742f38b06077dd0082a6aef85d41a5de7ea2a616fcca08552ac7d334055dba3b90ae66dad1686f7b9e48bc94439dd48d2dbe4a0c24b5705243be3c1058da527d163f7172e1a461acddf3683a5db6f75fc805e235be6c8ff813f74384da2308c54fdd0ce358128b6609be46f811a9b43c06a7221aa02ee772ab02eba81432252e69710e0edc0eedc02d6e6b539427ed9bc68c93b771dd7adfd1f87a3ca94777f674d0bcd956c36ef05ee5b895ae7523f1865984eb1550afb306b42ee1d0aba0cd683253e0def6b67c1747a167f22677e630884ff2ac06ef383eee9b0b06b4272e502e9720803f3e4c4f7935c95b0ee650c7d94137c4f6cf47a7c1e5f200edf35e15657242ff573d9856c1789cfd71b6a4497c4c6025f2c9e304b522dd377d240dba6ca2e6b76ac9333168a57cc5f73d8591ad97daacd48a98e5b0cde07cda63561df52502351241d4df7862e8e1c9794b029ec81212e0babb15c869cf95bac8bf407039fa1246ce675d4f59038874a8f07b5424abda7df4dc386955a8325a8e41a6b052e22b92ae425b3fdcbc7e25ac0c4e895143b73d863e1c057dd7dcb983d9fe6eb3462af772a731fb1923f236037a00835411b13d055866dc3b2bcac042b2642c5530a8b4ed14fb75baa7b4b260475bacd7adfcf736d7574e126071a1d0408247331344d3980b3948057317e310061f29152000bf693d69faace77093830208ea73701f8b2dfd8884c204d32213e98f8249f9fb4e55195f34ee5c579e61d263dcbc43ec304ad2cb9efdfcd4fc80610dc43129951f952ba1d7b4a983b5c9a140099c82d37f552d50992691991a5331cc772490ee24dab7ecad39f39e5c88ee7a3a4f2989efe03c62c4c1c7103a994761e68735c51a9bf82f31835f6142b0389fe12ff5134af99225f4fd994507e7bcfff1bd77979be4f100974f3496d1a3c34cc0fc33e818e96431843fdb8dd4184cdfe0a372b3baef869e7580f346fafc53570d67ac233da40e17acd54cd47ffd49598747f65e90279916e71dcfd9dae0c9b96abbb4bbeab86346c3a1a7885e3d96cc15ffa4f1bfb26a04b384aeba8fda85d7dc026ce36eafc723228f5a5c94850a5c8cd589c0cf3f33b2b66593b074ef7c1ce26327efb2ca6c61019ce083ce85925ab3cf694adb6889c067aa03b1fb2bd08fa5e5b169d36ce5a4d7a110b76906907a82416178a3c7fcee368b267f8d7869973fba23e72cbc3178654a36655401d26ac79a741c52d3e5f284a1f945354753b304cd3f9f8e4ecd60d4ad48579ec741e636bbdbca9ee2de42f2d57973a95e05b225f4f28ad96fc369638031fe0f1ca56214d20e13a2d4ff2c9b54d596559358bc18dbb6b881214dd5f7790868efeb77a77cb8422a181adc786d5408a763c0a4f9ac6973880dd282d8f3a39bf586e72f530bae72f14228d469c39a7e600c383b047f5c299b6366e4651dd777e5be09db092beeb3a9e8c615a45e4e591b9f46e937b2bc7d3dade33ba86c5d1a4510bb4a28f38f601f268922ba74620d82530e07d98dc6143de2e7a1d1c6dac2e7c1024bfaa5c5e571d211d6df50be12a43b6c0e7beef261eda6a14f80b13b5e48937708ebe138b6723c461c6566c2a1d4c62764af270a87a467259e84ef8175f5c6975518e42e625f35b9f0a5157d31fd213f084a83b98f5b20cc337768846e94c6db2a7dd6b5e21664915c71a3561f8e86fd97e0b13e5bfef4df36c4ee62640f2f9cf53f444da0d0547a507f5857da4b18278a59d772cc8c23ab3fd175069a0f8e20c095b624010f6cfed21a2827396d984933ef4f3e968bdba65958a99f27527958171ba8f20fe38bea045ae6111e72e11261e970d812f14df7dec279ab23d818e89f717fa81b0d6447fa23c53c37f526d975b5e4a84b4ad78ad0e65c1cea6cbfeadb1dd832b7d4f04dec5556749551c246d927fc12a953209a34f96fab1ba62945c89a5077b3302dd95306e644ebd2370f93eb4f0928683da9a81e0147456f5a5981177e9154630cf0e5062ff33271219627fbfd969736cb1b5ec74626359b03b2ba8b8ce43232221cbb6a028e03fc0d2f726a37fa9d0fd29609c1bbd9bb748f59685e7b255aaed1d9d1bb65e7a89a578350f90c84ed2f1e22db242da1ae79135a0ec114b33d6b6f01ee31a6ef79436e94d2e689a9aedb7f3068359a5a25498a3eab48c15e52385fdbd3f5ad7e357de6d21530f75eaa9105d9bffcd3ef790d5d58b9dea2b3022a0b2a6f4b1781528699bce14cdaf23029e0e61fedc66131bddc552d8063569a8d72acf49480da7df6a4faee5b7a02cd1b3ad4b2092dce59545b9d500416b0bc911a363e9347c9c7baec137d7b57ceb461146882c064018afb8e8238867baf284ff15f641c800ec9997e61320fde93ce374aaec2ace1f1dbf4736c91cdc1e2076a47a2fbaf8559ca7007122da87dedd2d8d4729d6ca561d79773151b54a2ed6cda56effb6f835cae829bf408906902cac1d3705ec13ddbdd6e31ad9b35286ee323e90fc7f0a25e9ed0b91ba5917aa40e5d37a37956b61583401e9911a89c6cbf136cdba10b8cbae8ac47211e5d861d5c4718959fc157128e6419db11597d982fff0b56581854ae3a9234e8b291506e4025d54afbe552b191e1a659529870db019c27b300481500cfc90710457cbef9e17534cc059e33a82df64fbc16974d8ae659063f2e991a4b403b66bd86c0dd28a10a88f8f9b83e6aa2e0a28c84fc2373dc18a80e8b48fc9bf6b1d503371c2fc6f900d9c245c0386b7b8983597f0b419567be843704192077439d3b4d948edf6a3628047b9b6a5aa0fff4b6d0ac7d1f311dffb2277883b191340ea606006a5dcb55a984fe0efcb6c8cc08db1d0b8621bd66d7b2b9768db4704cfe0558a899ccbfa4af3e47d60e16d7faa28273a63176add7317af30d7ce5ba11906f910349a3397c92a9759c5ce5472e7805af809a82e0cc2d20ea5105a900ace6e76ad51ddd6bc84e21e77b85b903274dec43a9c7448ddaaf27c37ca1d4ccf5ff76793fdc411fb680cc90e89ba23b495907b35807db1132415107c1b21c682513c964ec0ef5f71beb32c53c028894589e94209b2974df53ad34f844113991f13b9c84d85fee539cbcffc8fb52a92d59d20702839a72c9546bacce56c69ab5621f8471b4fa0e0fb1a193374031e77acb9e3b8b52aa3e9cfb505f430ee333225beb07334b044bd492316734e8dd843c8cc291de8d7c19851a4709e81a8e0b80614a6a0e2ce919eff5b1867465577e8f64c06a96256a7cd429ec5139f75c67e14802b5af1c241e4885aba41760b3ddbd5184a68ae5a5360f14d282a5e420b893c9ca6c0d3fea9d4da2a09d7fab8ee0866fdd94839ffd8cc18eb15de9d71de458d3e06991d4246b53eb1153a11a32b6580c14988722db480133225b6e9c75568be8907b2610de2537584bd6f0c919c4abcd3feedabd6aa625f627418bde90b0c2268d8646b1eb97b40529f72fdd97c3cb729894ef1c493beff0c46f0010115279f760e24c7f4294543e8838b26c896ec8acb1dc9b090284f469b7e1c1d05b7d28b6325cc24c2fd2e0a6844959fb4d4dd502fd778c2f6f7728ed", &(0x7f0000000440)=""/243, &(0x7f0000000540)="7bed62c5c8fabc421286f4094ea853fa8609e5a4ea1a6e7f80ae79e88a8d86cec22ca00dfe2405d4b2fc2e68eda351fd66d5fed2612c3c553b4837d31c9b114412ccf78ba7f442718cb898d190a19be9849ba5e7789461a80324545a140c5ffe2d8474363d1c6cbd3170ccf933f7eef5defb55540fc24bd1", &(0x7f00000005c0)="04611d00edc8e97ca59bd0c515c593dc98f8ca81bc8403ee40fbc093bff165793528f572197092b5a9c4f89bd66e73180ebc109893d70f12d02f0df67971632ded73d1b263b8cae811d4cb5e68f170bd55589cb34c9cd2ff133b535a53c7958f90f96489f2", 0xffff, r5, 0x4}, 0x38) close(r0) 1.311592517s ago: executing program 3 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x2) close(0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000004c5de4ea20b398b95bd02000000000000000103", @ANYRES64=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x20481, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.265504799s ago: executing program 4 (id=238): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x206040, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000100)={{r4}, "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"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001100)={"feb2ba930784caf70c235719f49a01d8", 0x0, 0x0, {0x5, 0x7}, {0x8, 0xff}, 0x80000000, [0x9, 0x5, 0x1, 0xc, 0x100000000, 0x3, 0xfff, 0x0, 0xfffffffffffffffb, 0x8, 0x8000000000000001, 0xfffffffffffffffe, 0x259, 0x80000000, 0x6, 0x8]}) r8 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000012c0)={{r0}, r7, 0x3c, @inherit={0x90, &(0x7f0000001200)={0x1, 0x9, 0xffff, 0x10001, {0x20, 0x80000000, 0xffff, 0x9, 0x6}, [0xea1, 0x0, 0x100000001, 0x3, 0x0, 0xff, 0x3, 0x10, 0x3]}}, @subvolid=0x3ff}) 826.507738ms ago: executing program 0 (id=239): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x60, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac813b0d08572a333c7598333a1ee4c5590bcb9d916ea8631b86486210d21f348853cc9189ff8c6e98c69a1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x20, 0x80000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x32}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 0s ago: executing program 4 (id=240): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x3, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x24000014) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000600)=0x0) r9 = syz_open_dev$media(&(0x7f0000000180), 0x8b2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000380)={0x0, 0x8, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000200)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000004c0)={0x80000000, &(0x7f0000000240), &(0x7f0000000440)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000500)=[{}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x7, 0x0, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000640)={{0x80000000, r10, 0x4, [0x9, 0x6523]}, {r11, r12, 0x2, [0x2, 0xfdf5]}, 0x1, [0x81, 0x7ddb]}) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x2}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r13, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 54.947600][ T30] audit: type=1400 audit(1772532545.137:62): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.971240][ T30] audit: type=1400 audit(1772532545.167:63): avc: denied { mount } for pid=5790 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.973911][ T5790] cgroup: Unknown subsys name 'net' [ 55.000199][ T30] audit: type=1400 audit(1772532545.187:64): avc: denied { unmount } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.143892][ T5790] cgroup: Unknown subsys name 'cpuset' [ 55.151498][ T5790] cgroup: Unknown subsys name 'rlimit' [ 55.290745][ T30] audit: type=1400 audit(1772532545.487:65): avc: denied { setattr } for pid=5790 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.314276][ T30] audit: type=1400 audit(1772532545.487:66): avc: denied { create } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.350153][ T30] audit: type=1400 audit(1772532545.487:67): avc: denied { write } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.374672][ T30] audit: type=1400 audit(1772532545.487:68): avc: denied { read } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.395873][ T30] audit: type=1400 audit(1772532545.507:69): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.397826][ T5792] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.421039][ T30] audit: type=1400 audit(1772532545.507:70): avc: denied { mount } for pid=5790 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.452900][ T30] audit: type=1400 audit(1772532545.627:71): avc: denied { relabelto } for pid=5792 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.399041][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.247097][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.265232][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.273513][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.276959][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.281074][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.296392][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.301044][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.304042][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.310731][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.318258][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.331909][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.339180][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.344935][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.353301][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.360513][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.361302][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.367575][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.374540][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.388221][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.389451][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.396654][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.403365][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.414572][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.419218][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.431278][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.795587][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 58.895994][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 58.922552][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 58.943149][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 58.998029][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.005624][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.014251][ T5802] bridge_slave_0: entered allmulticast mode [ 59.021044][ T5802] bridge_slave_0: entered promiscuous mode [ 59.056058][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.063236][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.070319][ T5802] bridge_slave_1: entered allmulticast mode [ 59.077131][ T5802] bridge_slave_1: entered promiscuous mode [ 59.084309][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 59.157139][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.168290][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.190930][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.198000][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.205236][ T5809] bridge_slave_0: entered allmulticast mode [ 59.211876][ T5809] bridge_slave_0: entered promiscuous mode [ 59.241559][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.248672][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.255954][ T5809] bridge_slave_1: entered allmulticast mode [ 59.262667][ T5809] bridge_slave_1: entered promiscuous mode [ 59.281791][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.288874][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.296259][ T5803] bridge_slave_0: entered allmulticast mode [ 59.302945][ T5803] bridge_slave_0: entered promiscuous mode [ 59.319840][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327074][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.334547][ T5813] bridge_slave_0: entered allmulticast mode [ 59.341415][ T5813] bridge_slave_0: entered promiscuous mode [ 59.349555][ T5802] team0: Port device team_slave_0 added [ 59.355357][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.362581][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.369671][ T5803] bridge_slave_1: entered allmulticast mode [ 59.376434][ T5803] bridge_slave_1: entered promiscuous mode [ 59.393637][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.400904][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.407987][ T5813] bridge_slave_1: entered allmulticast mode [ 59.414842][ T5813] bridge_slave_1: entered promiscuous mode [ 59.422662][ T5802] team0: Port device team_slave_1 added [ 59.442983][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.478874][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.509336][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.518701][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.526427][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.533780][ T5804] bridge_slave_0: entered allmulticast mode [ 59.540513][ T5804] bridge_slave_0: entered promiscuous mode [ 59.555401][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.565928][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.572932][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.598892][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.611943][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.621457][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.628509][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.635877][ T5804] bridge_slave_1: entered allmulticast mode [ 59.642730][ T5804] bridge_slave_1: entered promiscuous mode [ 59.650761][ T5809] team0: Port device team_slave_0 added [ 59.665053][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.674884][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.681889][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.708052][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.733049][ T5809] team0: Port device team_slave_1 added [ 59.769221][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.792844][ T5803] team0: Port device team_slave_0 added [ 59.800794][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.811000][ T5813] team0: Port device team_slave_0 added [ 59.816975][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.824197][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.850457][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.862435][ T5803] team0: Port device team_slave_1 added [ 59.881746][ T5813] team0: Port device team_slave_1 added [ 59.894285][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.901325][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.927379][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.957850][ T5804] team0: Port device team_slave_0 added [ 59.964946][ T5804] team0: Port device team_slave_1 added [ 59.988214][ T5802] hsr_slave_0: entered promiscuous mode [ 59.994440][ T5802] hsr_slave_1: entered promiscuous mode [ 60.015504][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.022504][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.048607][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.060489][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.067413][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.093313][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.105072][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.112242][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.138251][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.150145][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.157096][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.183038][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.201658][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.208586][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.234503][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.279396][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.286499][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.312681][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.361861][ T5813] hsr_slave_0: entered promiscuous mode [ 60.367873][ T5813] hsr_slave_1: entered promiscuous mode [ 60.374043][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 60.379800][ T5813] Cannot create hsr debugfs directory [ 60.402369][ T5804] hsr_slave_0: entered promiscuous mode [ 60.408344][ T5804] hsr_slave_1: entered promiscuous mode [ 60.414364][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 60.420084][ T5804] Cannot create hsr debugfs directory [ 60.438225][ T5809] hsr_slave_0: entered promiscuous mode [ 60.444764][ T5809] hsr_slave_1: entered promiscuous mode [ 60.451035][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 60.456754][ T5809] Cannot create hsr debugfs directory [ 60.462598][ T51] Bluetooth: hci1: command tx timeout [ 60.462787][ T5820] Bluetooth: hci4: command tx timeout [ 60.470635][ T51] Bluetooth: hci0: command tx timeout [ 60.479806][ T5820] Bluetooth: hci3: command tx timeout [ 60.528765][ T5803] hsr_slave_0: entered promiscuous mode [ 60.534937][ T5803] hsr_slave_1: entered promiscuous mode [ 60.540963][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 60.546665][ T5803] Cannot create hsr debugfs directory [ 60.550581][ T5820] Bluetooth: hci2: command tx timeout [ 60.851080][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.866715][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.875761][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.894536][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.921890][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.938574][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.947687][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.964441][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.012006][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.038434][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.049715][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.067255][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.107932][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.131367][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.161475][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.172882][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.179987][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.189851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.196904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.216016][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.238266][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.247705][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.295779][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.313979][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.323199][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.333282][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.356616][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.418092][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.429001][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 61.429013][ T30] audit: type=1400 audit(1772532551.627:84): avc: denied { sys_module } for pid=5802 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.455272][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.467325][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.494899][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.501999][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.513603][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.520717][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.556345][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.607820][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.631121][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.658443][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.665556][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.684877][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.691958][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.706703][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.727151][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.762302][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.769382][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.792460][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.799504][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.830718][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.847955][ T5802] veth0_vlan: entered promiscuous mode [ 61.869981][ T5802] veth1_vlan: entered promiscuous mode [ 61.889893][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.909493][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.924279][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.940822][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.947922][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.976030][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.005094][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.012217][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.084070][ T5802] veth0_macvtap: entered promiscuous mode [ 62.109694][ T5804] veth0_vlan: entered promiscuous mode [ 62.143943][ T5802] veth1_macvtap: entered promiscuous mode [ 62.207352][ T5804] veth1_vlan: entered promiscuous mode [ 62.219128][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.243010][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.290736][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.298351][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.309300][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.322477][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.334348][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.362891][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.415664][ T5804] veth0_macvtap: entered promiscuous mode [ 62.448176][ T5804] veth1_macvtap: entered promiscuous mode [ 62.514567][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.520857][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.535632][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.543728][ T51] Bluetooth: hci0: command tx timeout [ 62.543741][ T5810] Bluetooth: hci4: command tx timeout [ 62.543765][ T5810] Bluetooth: hci1: command tx timeout [ 62.549172][ T5820] Bluetooth: hci3: command tx timeout [ 62.609520][ T5809] veth0_vlan: entered promiscuous mode [ 62.620729][ T5820] Bluetooth: hci2: command tx timeout [ 62.638932][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.658882][ T524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.662425][ T5809] veth1_vlan: entered promiscuous mode [ 62.672191][ T524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.683254][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.695443][ T30] audit: type=1400 audit(1772532552.887:85): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.FFRejd/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.721669][ T30] audit: type=1400 audit(1772532552.907:86): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.740267][ T5813] veth0_vlan: entered promiscuous mode [ 62.751557][ T30] audit: type=1400 audit(1772532552.907:87): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.FFRejd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.777116][ T30] audit: type=1400 audit(1772532552.907:88): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.782931][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.801304][ T30] audit: type=1400 audit(1772532552.907:89): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.FFRejd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.836308][ T524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.846952][ T524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.850029][ T5802] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.861033][ T30] audit: type=1400 audit(1772532552.907:90): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/root/syzkaller.FFRejd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.899074][ T30] audit: type=1400 audit(1772532552.917:91): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.915268][ T5813] veth1_vlan: entered promiscuous mode [ 62.920050][ T30] audit: type=1400 audit(1772532552.947:92): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.936590][ T5809] veth0_macvtap: entered promiscuous mode [ 62.955930][ T30] audit: type=1400 audit(1772532552.947:93): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="gadgetfs" ino=6967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.961036][ T524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.993747][ T5803] veth0_vlan: entered promiscuous mode [ 63.022566][ T5809] veth1_macvtap: entered promiscuous mode [ 63.059300][ T5803] veth1_vlan: entered promiscuous mode [ 63.085769][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.127321][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.140823][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.155840][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.209398][ T5813] veth0_macvtap: entered promiscuous mode [ 63.243970][ T524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.267210][ T524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.276956][ T524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289721][ T5813] veth1_macvtap: entered promiscuous mode [ 63.308541][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.318660][ T524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.328609][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.373476][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.399655][ T5803] veth0_macvtap: entered promiscuous mode [ 63.438471][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.466062][ T5803] veth1_macvtap: entered promiscuous mode [ 63.494902][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.528497][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.542636][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.552164][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.560578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.562303][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.598910][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.626202][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.634019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 63.696799][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.748595][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.759502][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.771391][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.779443][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.790732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.831461][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.840025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.857541][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.885334][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.988577][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.004163][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.093334][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.140170][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.281643][ T524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.289465][ T524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.350578][ T5930] capability: warning: `syz.0.7' uses deprecated v2 capabilities in a way that may be insecure [ 64.460703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.622507][ T5820] Bluetooth: hci3: command tx timeout [ 64.622792][ T5810] Bluetooth: hci0: command tx timeout [ 64.627901][ T5820] Bluetooth: hci4: command tx timeout [ 64.633897][ T5810] Bluetooth: hci1: command tx timeout [ 64.705231][ T5810] Bluetooth: hci2: command tx timeout [ 64.799857][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.053008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.063497][ T5952] Zero length message leads to an empty skb [ 65.163254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.264254][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.448615][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.460403][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 65.489609][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 65.671573][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.687076][ T5959] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 65.698671][ T5960] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 65.724018][ T10] usb 1-1: config 0 descriptor?? [ 65.745997][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.753304][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.510520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 66.520019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 66.580652][ T5895] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.596822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.596828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.771513][ T5810] Bluetooth: hci4: command tx timeout [ 66.787763][ T5810] Bluetooth: hci1: command tx timeout [ 66.800179][ T5810] Bluetooth: hci0: command tx timeout [ 66.800773][ T5820] Bluetooth: hci3: command tx timeout [ 66.806737][ T5810] Bluetooth: hci2: command tx timeout [ 66.806795][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 66.806805][ T30] audit: type=1400 audit(1772532556.787:161): avc: denied { read } for pid=5971 comm="syz.3.16" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.902167][ T30] audit: type=1400 audit(1772532556.787:162): avc: denied { open } for pid=5971 comm="syz.3.16" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.971480][ T30] audit: type=1400 audit(1772532556.847:163): avc: denied { mount } for pid=5971 comm="syz.3.16" name="/" dev="hugetlbfs" ino=9294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.040437][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.086909][ T5895] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 67.159805][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.198768][ T5895] usb 5-1: config 0 descriptor?? [ 67.221705][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.236877][ T5895] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 67.254935][ T5814] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.277148][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.309282][ T5814] usb 4-1: config 0 descriptor?? [ 67.531565][ T30] audit: type=1400 audit(1772532557.727:164): avc: denied { write } for pid=5942 comm="syz.4.9" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.584442][ T30] audit: type=1400 audit(1772532557.727:165): avc: denied { open } for pid=5942 comm="syz.4.9" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.648029][ T30] audit: type=1400 audit(1772532557.827:166): avc: denied { ioctl } for pid=5942 comm="syz.4.9" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.709970][ T5980] trusted_key: syz.2.18 sent an empty control message without MSG_MORE. [ 68.220428][ T10] Bluetooth: Can't get state to change to load ram patch err [ 68.220454][ T10] Bluetooth: Loading patch file failed [ 68.220476][ T10] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 68.245125][ T10] usb 1-1: USB disconnect, device number 2 [ 68.273549][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 68.312386][ T30] audit: type=1400 audit(1772532557.867:167): avc: denied { create } for pid=5942 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.312426][ T30] audit: type=1400 audit(1772532557.897:168): avc: denied { write } for pid=5978 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.312460][ T30] audit: type=1400 audit(1772532557.907:169): avc: denied { read } for pid=5978 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.312495][ T30] audit: type=1400 audit(1772532557.907:170): avc: denied { read write } for pid=5978 comm="syz.2.18" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.416976][ T5814] usbhid 4-1:0.0: can't add hid device: -71 [ 68.417034][ T5814] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 68.418929][ T5814] usb 4-1: USB disconnect, device number 2 [ 68.728785][ T5895] gp8psk: usb in 128 operation failed. [ 68.729030][ T5895] gp8psk: usb in 137 operation failed. [ 68.729038][ T5895] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 68.729054][ T5895] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 68.732321][ T5895] usb 5-1: USB disconnect, device number 2 [ 69.237132][ T5999] SELinux: syz.4.23 (5999) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.781637][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.930416][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 69.944879][ T5895] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 69.992867][ T5895] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 70.022688][ T6011] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.040639][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.073171][ T5895] usb 2-1: config 0 has no interface number 0 [ 70.108809][ T5895] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 70.122672][ T6011] bond1: (slave lo): Enslaving as an active interface with an up link [ 70.143198][ T5895] usb 2-1: config 0 interface 104 has no altsetting 1 [ 70.167546][ T6011] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 70.289557][ T6011] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 70.557706][ T6014] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 70.578553][ T6014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.600779][ T5895] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 70.623554][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.643703][ T5895] usb 2-1: Product: syz [ 70.647855][ T5895] usb 2-1: Manufacturer: syz [ 70.663322][ T5895] usb 2-1: SerialNumber: syz [ 70.678392][ T5895] usb 2-1: config 0 descriptor?? [ 70.699225][ T5895] asix 2-1:0.104: probe with driver asix failed with error -22 [ 70.767487][ T6016] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 71.210443][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.372418][ T5814] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 71.396277][ T5814] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 71.407080][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.425876][ T5814] usb 4-1: config 0 descriptor?? [ 71.833598][ T9] usb 4-1: USB disconnect, device number 3 [ 72.629667][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 72.629684][ T30] audit: type=1400 audit(1772532562.147:188): avc: denied { write } for pid=6021 comm="syz.2.30" name="udp" dev="proc" ino=4026532859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.724970][ T30] audit: type=1400 audit(1772532562.917:189): avc: denied { read append } for pid=6039 comm="syz.0.33" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.736193][ T6040] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 72.758914][ T30] audit: type=1400 audit(1772532562.917:190): avc: denied { open } for pid=6039 comm="syz.0.33" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.758958][ T30] audit: type=1400 audit(1772532562.927:191): avc: denied { write } for pid=6039 comm="syz.0.33" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.838646][ T5895] usb 2-1: USB disconnect, device number 2 [ 73.134320][ T6046] mmap: syz.1.35 (6046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.592116][ T30] audit: type=1400 audit(1772532563.407:192): avc: denied { mounton } for pid=6043 comm="syz.0.36" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 73.654580][ T30] audit: type=1400 audit(1772532563.827:193): avc: denied { write } for pid=6041 comm="syz.1.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.733863][ T30] audit: type=1400 audit(1772532563.927:194): avc: denied { wake_alarm } for pid=6049 comm="syz.3.37" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.926075][ T30] audit: type=1400 audit(1772532564.117:195): avc: denied { kexec_image_load } for pid=6056 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 74.092144][ T30] audit: type=1400 audit(1772532564.277:196): avc: denied { name_bind } for pid=6053 comm="syz.2.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.456824][ T6064] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 74.456824][ T6064] The task syz.0.38 (6064) triggered the difference, watch for misbehavior. [ 74.801666][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.886830][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.41'. [ 74.921874][ T6072] IPVS: sed: FWM 3 0x00000003 - no destination available [ 74.929222][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 75.031382][ T6073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42'. [ 75.131543][ T30] audit: type=1400 audit(1772532565.317:197): avc: denied { mounton } for pid=6065 comm="syz.3.40" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.133514][ T9] IPVS: starting estimator thread 0... [ 75.550441][ T6076] IPVS: using max 77 ests per chain, 184800 per kthread [ 75.621316][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.632424][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.678188][ T10] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.720830][ T10] usb 1-1: config 1 interface 0 has no altsetting 1 [ 75.739220][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 75.755652][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.764114][ T10] usb 1-1: Product: syz [ 75.768293][ T10] usb 1-1: Manufacturer: syz [ 75.773169][ T10] usb 1-1: SerialNumber: syz [ 75.838645][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 75.870587][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.998846][ T24] cfg80211: failed to load regulatory.db [ 76.004613][ T5814] usb 5-1: device descriptor read/64, error -71 [ 76.241330][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 76.250564][ T6089] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 76.293543][ T5814] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.430409][ T5814] usb 5-1: device descriptor read/64, error -71 [ 76.541339][ T5814] usb usb5-port1: attempt power cycle [ 76.747214][ T6099] SELinux: syz.3.49 (6099) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.911052][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.981932][ T5814] usb 5-1: device descriptor read/8, error -71 [ 77.281946][ T10] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 77.302432][ T10] smsusb 1-1:1.0: probe with driver smsusb failed with error -71 [ 77.331530][ T5814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.402677][ T10] usb 1-1: USB disconnect, device number 3 [ 77.422418][ T5814] usb 5-1: device descriptor read/8, error -71 [ 77.541660][ T5814] usb usb5-port1: unable to enumerate USB device [ 77.693104][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 77.693121][ T30] audit: type=1400 audit(1772532567.887:211): avc: denied { create } for pid=6109 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.756752][ T30] audit: type=1400 audit(1772532567.907:212): avc: denied { connect } for pid=6109 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.887342][ T30] audit: type=1400 audit(1772532567.907:213): avc: denied { read } for pid=6109 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.913420][ T30] audit: type=1400 audit(1772532567.957:214): avc: denied { write } for pid=6109 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.985024][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.300384][ T30] audit: type=1400 audit(1772532568.447:215): avc: denied { cmd } for pid=6112 comm="syz.2.54" path="socket:[9124]" dev="sockfs" ino=9124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.564050][ T6120] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 78.572057][ T6120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.100431][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 79.271732][ T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 79.279921][ T10] usb 5-1: config 0 has no interface number 0 [ 79.829789][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 79.842096][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.850156][ T10] usb 5-1: Product: syz [ 79.854363][ T10] usb 5-1: Manufacturer: syz [ 79.858988][ T10] usb 5-1: SerialNumber: syz [ 79.867210][ T10] usb 5-1: config 0 descriptor?? [ 80.300347][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.662261][ T9] usb 1-1: config 0 has no interfaces? [ 80.667786][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 80.685372][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.731429][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.744927][ T9] usb 1-1: config 0 descriptor?? [ 80.768307][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.975631][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.984305][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.001904][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.010627][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.027544][ T5814] usb 1-1: USB disconnect, device number 4 [ 81.093795][ T30] audit: type=1400 audit(1772532571.287:216): avc: denied { create } for pid=6152 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.525670][ T30] audit: type=1400 audit(1772532571.287:217): avc: denied { connect } for pid=6152 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.577723][ T30] audit: type=1400 audit(1772532571.287:218): avc: denied { read append } for pid=6152 comm="syz.1.65" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.664543][ T30] audit: type=1400 audit(1772532571.287:220): avc: denied { ioctl } for pid=6152 comm="syz.1.65" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.691218][ T30] audit: type=1400 audit(1772532571.287:219): avc: denied { open } for pid=6152 comm="syz.1.65" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.698371][ T9] libceph: connect (1)[c::]:6789 error -101 [ 81.721582][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 81.729022][ T9] libceph: connect (1)[c::]:6789 error -101 [ 81.737932][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 81.790396][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.888294][ T10] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 81.928392][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 81.941278][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 81.966081][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.969609][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 82.002003][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 82.028911][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 82.032042][ T24] usb 1-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 82.046431][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 82.082899][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.084216][ T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 82.242194][ T24] usb 1-1: Product: syz [ 82.258813][ T24] usb 1-1: Manufacturer: syz [ 82.267950][ T10] usb 5-1: USB disconnect, device number 7 [ 82.286122][ T24] usb 1-1: SerialNumber: syz [ 82.314022][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 82.331348][ T10] keyspan 5-1:0.133: device disconnected [ 82.332261][ T24] usb 1-1: config 0 descriptor?? [ 82.379542][ T24] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 82.412996][ T24] ums-datafab 1-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 82.452459][ T6160] delete_channel: no stack [ 82.470179][ T24] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 82.555217][ T6175] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 82.572924][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 82.583440][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 82.614141][ T6175] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.674759][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.958378][ T24] usb 1-1: USB disconnect, device number 5 [ 82.990481][ T10] usb 5-1: device descriptor read/64, error -71 [ 83.240405][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.323241][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 83.323257][ T30] audit: type=1400 audit(1772532573.517:228): avc: denied { unlink } for pid=5802 comm="syz-executor" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.390816][ T10] usb 5-1: device descriptor read/64, error -71 [ 83.501305][ T10] usb usb5-port1: attempt power cycle [ 83.926746][ T30] audit: type=1400 audit(1772532574.087:229): avc: denied { read write } for pid=6196 comm="syz.0.75" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.930443][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.966517][ T24] hid-generic 0000:008B:0000.0001: unknown main item tag 0x0 [ 84.048756][ T24] hid-generic 0000:008B:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.084297][ T30] audit: type=1400 audit(1772532574.087:230): avc: denied { open } for pid=6196 comm="syz.0.75" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.169926][ T24] hid-generic 0000:008B:0000.0002: unknown main item tag 0x0 [ 84.393962][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 84.838985][ T6159] ceph: No mds server is up or the cluster is laggy [ 86.039900][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 86.049901][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 86.060129][ T30] audit: type=1400 audit(1772532575.047:231): avc: denied { ioctl } for pid=6201 comm="syz.3.76" path="socket:[9764]" dev="sockfs" ino=9764 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.094464][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 86.584021][ T24] hid-generic 0000:008B:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.639739][ T10] usb 5-1: device descriptor read/8, error -71 [ 86.811956][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.046490][ T6216] fido_id[6216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.544439][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.80'. [ 87.553985][ T6225] SELinux: syz.2.79 (6225) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.346453][ T30] audit: type=1400 audit(1772532578.537:232): avc: denied { search } for pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.350016][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 88.462266][ T30] audit: type=1400 audit(1772532578.537:233): avc: denied { search } for pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.491431][ T30] audit: type=1400 audit(1772532578.537:234): avc: denied { search } for pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.567750][ T30] audit: type=1400 audit(1772532578.537:235): avc: denied { read } for pid=5472 comm="dhcpcd" name="n100" dev="tmpfs" ino=2359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.630066][ T30] audit: type=1400 audit(1772532578.537:236): avc: denied { open } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.061565][ T30] audit: type=1400 audit(1772532578.537:237): avc: denied { getattr } for pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.127290][ T6241] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.147540][ T30] audit: type=1400 audit(1772532579.237:238): avc: denied { nlmsg_write } for pid=6212 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.413333][ T5921] hid-generic 0000:008B:0000.0003: unknown main item tag 0x0 [ 89.475924][ T30] audit: type=1400 audit(1772532579.317:239): avc: denied { read open } for pid=6252 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.525161][ T5921] hid-generic 0000:008B:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.812090][ T30] audit: type=1400 audit(1772532579.317:240): avc: denied { getattr } for pid=6252 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.457411][ T6263] netlink: 104 bytes leftover after parsing attributes in process `syz.1.88'. [ 90.488030][ T30] audit: type=1400 audit(1772532580.677:241): avc: denied { getopt } for pid=6262 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.549550][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.557512][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.645950][ T6299] process 'syz.4.91' launched '/dev/fd/10' with NULL argv: empty string added [ 92.810461][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 93.040754][ T5814] usb 4-1: config 0 has no interfaces? [ 93.065038][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.074252][ T5814] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.082532][ T5814] usb 4-1: Manufacturer: syz [ 93.092658][ T5814] usb 4-1: config 0 descriptor?? [ 93.100096][ T5895] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 93.117965][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.135503][ T5895] usb 1-1: Product: syz [ 93.139721][ T5895] usb 1-1: Manufacturer: syz [ 93.144662][ T5895] usb 1-1: SerialNumber: syz [ 93.569777][ T5953] usb 4-1: USB disconnect, device number 4 [ 93.575729][ T5895] gspca_main: pac207-2.14.0 probing 093a:2476 [ 93.629321][ T5895] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 93.661344][ T5895] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 93.688360][ T5895] uvcvideo 1-1:13.0: No valid video chain found. [ 93.720265][ T5895] usb 1-1: USB disconnect, device number 6 [ 93.817817][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 93.817832][ T30] audit: type=1400 audit(1772532584.007:256): avc: denied { create } for pid=6328 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.975034][ T6335] xt_hashlimit: size too large, truncated to 1048576 [ 93.982044][ T30] audit: type=1400 audit(1772532584.157:257): avc: denied { setopt } for pid=6328 comm="syz.2.98" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.085627][ T5807] hid-generic 0000:008B:0000.0004: unknown main item tag 0x0 [ 94.109581][ T5807] hid-generic 0000:008B:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.140624][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.082842][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.093600][ T5814] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.112900][ T5814] usb 2-1: language id specifier not provided by device, defaulting to English [ 95.132754][ T5814] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 95.150394][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.160386][ T5814] usb 2-1: Manufacturer: ‰ [ 95.164938][ T5814] usb 2-1: SerialNumber: syz [ 95.351426][ T30] audit: type=1400 audit(1772532585.387:258): avc: denied { write } for pid=6344 comm="syz.3.101" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.421526][ T5814] usb 2-1: config 0 descriptor?? [ 95.714502][ T30] audit: type=1400 audit(1772532585.897:259): avc: denied { ioctl } for pid=6356 comm="syz.4.103" path="/dev/sg0" dev="devtmpfs" ino=807 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.843694][ T30] audit: type=1400 audit(1772532586.037:260): avc: denied { setopt } for pid=6331 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.010815][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 96.185804][ T30] audit: type=1400 audit(1772532586.197:261): avc: denied { create } for pid=6360 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.260790][ T29] usb 2-1: USB disconnect, device number 3 [ 96.588886][ T6371] SELinux: syz.3.106 (6371) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.641282][ T30] audit: type=1400 audit(1772532586.837:262): avc: denied { ioctl } for pid=6372 comm="syz.2.107" path="socket:[10166]" dev="sockfs" ino=10166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.670146][ T30] audit: type=1400 audit(1772532586.867:263): avc: denied { ioctl } for pid=6372 comm="syz.2.107" path="socket:[10171]" dev="sockfs" ino=10171 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.697941][ T30] audit: type=1400 audit(1772532586.897:264): avc: denied { lock } for pid=6372 comm="syz.2.107" path="socket:[10172]" dev="sockfs" ino=10172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.723504][ T5814] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.768482][ T6376] macsec1: entered promiscuous mode [ 96.774738][ T6376] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 97.089481][ T5814] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 97.089505][ T5814] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.091644][ T5814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.091661][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.091673][ T5814] usb 5-1: Product: syz [ 97.091681][ T5814] usb 5-1: Manufacturer: syz [ 97.091689][ T5814] usb 5-1: SerialNumber: syz [ 97.234672][ T30] audit: type=1400 audit(1772532587.427:265): avc: denied { map } for pid=6383 comm="syz.1.110" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.335290][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.345008][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.355767][ T5814] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 97.375387][ T5814] usb 5-1: USB disconnect, device number 12 [ 98.491836][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.670383][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 98.688223][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.705568][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.800712][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.810751][ T29] usb 2-1: Product: syz [ 98.815354][ T29] usb 2-1: Manufacturer: syz [ 98.819953][ T29] usb 2-1: SerialNumber: syz [ 98.832632][ T29] usb 2-1: config 0 descriptor?? [ 98.944622][ T29] hid-generic 0000:008B:0000.0005: unknown main item tag 0x0 [ 99.038502][ T29] hid-generic 0000:008B:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.114046][ T5814] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.361024][ T30] audit: type=1326 audit(1772532589.547:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.0.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251379c799 code=0x0 [ 99.422116][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 99.435995][ T5814] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 99.445423][ T5814] usb 5-1: config 16 has an invalid descriptor of length 192, skipping remainder of the config [ 99.476130][ T5814] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.496798][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.542466][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 99.648118][ T5814] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 99.693740][ T5814] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.728161][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.881809][ T5814] usb 5-1: usb_control_msg returned -71 [ 99.900464][ T5814] usbtmc 5-1:16.0: can't read capabilities [ 99.944593][ T5814] usb 5-1: USB disconnect, device number 13 [ 100.126144][ T6409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6409 comm=syz.4.115 [ 100.418226][ T6416] xt_hashlimit: size too large, truncated to 1048576 [ 100.731252][ T5814] usb 2-1: USB disconnect, device number 4 [ 100.920908][ T6427] smc: net device wlan0 applied user defined pnetid SYZ0 [ 100.940737][ T30] audit: type=1400 audit(1772532591.127:267): avc: denied { ioctl } for pid=6424 comm="syz.1.121" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 101.008308][ T6432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.120'. [ 101.388309][ T6430] loop6: detected capacity change from 0 to 2640 [ 101.396889][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.404864][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.414015][ T30] audit: type=1400 audit(1772532847.583:268): avc: denied { append } for pid=6424 comm="syz.1.121" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.420238][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.466453][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.474530][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.482611][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.498259][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.510224][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.524341][ T6430] ldm_validate_partition_table(): Disk read failed. [ 101.540620][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.549359][ T6430] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.557825][ T6430] Dev loop6: unable to read RDB block 0 [ 101.566477][ T6430] loop6: unable to read partition table [ 101.572733][ T6430] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 101.832550][ T30] audit: type=1400 audit(1772533103.987:269): avc: denied { ioctl } for pid=6434 comm="syz.2.122" path="socket:[10897]" dev="sockfs" ino=10897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.268176][ T5177] ldm_validate_partition_table(): Disk read failed. [ 102.283532][ T5177] Dev loop6: unable to read RDB block 0 [ 102.290464][ T5177] loop6: unable to read partition table [ 102.650087][ T5953] hid-generic 0000:008B:0000.0006: unknown main item tag 0x0 [ 102.697550][ T5953] hid-generic 0000:008B:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.402562][ T30] audit: type=1400 audit(1772533105.578:270): avc: denied { shutdown } for pid=6445 comm="syz.3.125" lport=50501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.833841][ T30] audit: type=1400 audit(1772533105.998:271): avc: denied { read } for pid=6457 comm="syz.2.128" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.213842][ T30] audit: type=1400 audit(1772533105.998:272): avc: denied { open } for pid=6457 comm="syz.2.128" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.447989][ T6462] fido_id[6462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.565631][ T30] audit: type=1400 audit(1772533106.208:273): avc: denied { write } for pid=6457 comm="syz.2.128" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.617071][ T30] audit: type=1400 audit(1772533106.759:274): avc: denied { setopt } for pid=6464 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.647227][ T30] audit: type=1400 audit(1772533106.759:275): avc: denied { bind } for pid=6464 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.677503][ T6457] ALSA: mixer_oss: invalid OSS volume '' [ 104.774985][ T30] audit: type=1400 audit(1772533106.969:276): avc: denied { bind } for pid=6470 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.883839][ T30] audit: type=1400 audit(1772533106.969:277): avc: denied { name_bind } for pid=6470 comm="syz.1.132" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.906120][ T30] audit: type=1400 audit(1772533106.969:278): avc: denied { node_bind } for pid=6470 comm="syz.1.132" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.075375][ T30] audit: type=1400 audit(1772533106.969:279): avc: denied { connect } for pid=6470 comm="syz.1.132" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.118309][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 105.166803][ T30] audit: type=1400 audit(1772533107.179:280): avc: denied { read write } for pid=6470 comm="syz.1.132" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.245877][ T30] audit: type=1400 audit(1772533107.179:281): avc: denied { open } for pid=6470 comm="syz.1.132" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.281292][ T30] audit: type=1400 audit(1772533107.179:282): avc: denied { ioctl } for pid=6470 comm="syz.1.132" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.309717][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 105.323051][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.337058][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.347026][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.355873][ T5921] usb 5-1: Product: syz [ 105.360165][ T6478] SELinux: syz.0.133 (6478) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.373982][ T5921] usb 5-1: Manufacturer: syz [ 105.379582][ T5921] usb 5-1: SerialNumber: syz [ 105.391363][ T5921] usb 5-1: config 0 descriptor?? [ 106.054529][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 107.100042][ T5814] hid-generic 0000:008B:0000.0007: unknown main item tag 0x0 [ 107.290082][ T5814] hid-generic 0000:008B:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.589118][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 109.909044][ T5807] usb 5-1: USB disconnect, device number 14 [ 110.045332][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 110.045348][ T30] audit: type=1400 audit(1772533112.241:300): avc: denied { setattr } for pid=6545 comm="syz.2.151" name="RAW" dev="sockfs" ino=11460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.518735][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 111.544035][ T30] audit: type=1400 audit(1772533113.742:301): avc: denied { create } for pid=6568 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.587801][ T30] audit: type=1400 audit(1772533113.772:302): avc: denied { bind } for pid=6568 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.031890][ T51] Bluetooth: Wrong link type (-57) [ 112.164852][ T5953] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 112.365721][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.388790][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 112.410045][ T5953] usb 3-1: can't read configurations, error -71 [ 112.487331][ T6590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.578519][ T6596] SELinux: syz.0.166 (6596) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.624541][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.772099][ T6603] loop6: detected capacity change from 0 to 2640 [ 112.779933][ T6603] buffer_io_error: 32 callbacks suppressed [ 112.779947][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.793732][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.801641][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.809516][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.817378][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.830042][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 112.836849][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.849000][ T5814] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.883669][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.904004][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.922833][ T5814] usb 2-1: Product: syz [ 113.026867][ T5814] usb 2-1: Manufacturer: syz [ 113.051727][ T5814] usb 2-1: SerialNumber: syz [ 113.129146][ T30] audit: type=1400 audit(1772533371.327:303): avc: denied { write } for pid=6605 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.033194][ T5814] usb 2-1: config 0 descriptor?? [ 114.067973][ T5814] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.183877][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.193195][ T5814] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 114.200065][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.249313][ T6603] ldm_validate_partition_table(): Disk read failed. [ 114.256237][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.338421][ T6603] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.387629][ T6603] Dev loop6: unable to read RDB block 0 [ 114.400263][ T6603] loop6: unable to read partition table [ 114.573570][ T5807] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.623776][ T6603] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 114.641917][ T5177] ldm_validate_partition_table(): Disk read failed. [ 114.648607][ T5177] Dev loop6: unable to read RDB block 0 [ 114.654489][ T5177] loop6: unable to read partition table [ 114.710837][ T5814] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 114.724984][ T5807] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.733394][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.764375][ T5807] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.773514][ T5807] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.786901][ T5807] usb 3-1: Manufacturer: syz [ 114.803544][ T5807] usb 3-1: config 0 descriptor?? [ 114.903414][ T5807] rc_core: IR keymap rc-hauppauge not found [ 114.927207][ T5807] Registered IR keymap rc-empty [ 114.933192][ T5807] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 114.974936][ T5807] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 114.979033][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 116.104806][ T5814] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.128795][ T5814] em28xx 2-1:0.0: board has no eeprom [ 116.233861][ T5814] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.249766][ T5814] em28xx 2-1:0.0: dvb set to bulk mode. [ 116.293478][ T5895] em28xx 2-1:0.0: Binding DVB extension [ 116.581654][ T5895] em28xx 2-1:0.0: Registering input extension [ 116.972866][ T6643] netlink: 'syz.4.177': attribute type 4 has an invalid length. [ 117.002703][ T6643] netlink: 17 bytes leftover after parsing attributes in process `syz.4.177'. [ 117.070626][ T30] audit: type=1400 audit(1772533631.270:304): avc: denied { getopt } for pid=6644 comm="syz.3.178" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.133276][ T30] audit: type=1400 audit(1772533631.300:305): avc: denied { read } for pid=6644 comm="syz.3.178" path="socket:[12436]" dev="sockfs" ino=12436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.194075][ T5814] usb 3-1: USB disconnect, device number 4 [ 117.302210][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 117.452313][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 117.462406][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 117.480799][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 117.563062][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 117.572479][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.580662][ T10] usb 5-1: Product: syz [ 117.585536][ T10] usb 5-1: Manufacturer: syz [ 117.590130][ T10] usb 5-1: SerialNumber: syz [ 117.885013][ T10] usb 5-1: Fast Track Pro switching to config #2 [ 117.983406][ T10] usb 5-1: USB disconnect, device number 15 [ 118.001854][ T5814] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 118.153303][ T5814] usb 1-1: config 4 has an invalid interface number: 187 but max is 0 [ 118.161766][ T5814] usb 1-1: config 4 has no interface number 0 [ 118.167884][ T5814] usb 1-1: config 4 interface 187 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 118.194946][ T5814] usb 1-1: config 4 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.228974][ T2148] usb 2-1: USB disconnect, device number 5 [ 119.198568][ T5814] usb 1-1: config 4 interface 187 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 119.215112][ T5814] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=f6.ef [ 119.227670][ T2148] em28xx 2-1:0.0: Disconnecting em28xx [ 119.335518][ T2148] em28xx 2-1:0.0: Closing input extension [ 119.344568][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.361264][ T5814] usb 1-1: Product: 挬ᘓ배鮁덨烧⯸诊퍉걌苎☄蒍予赓㯋媀䫓쬅姌쾙縹뼔呂兂魡Dž甝몁㙧ᤫ셖ቈ潼뗚컲෴쾥佡덄꜈侗酓傆ﵖᎠ⪄ [ 119.436709][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 119.445805][ T5814] usb 1-1: Manufacturer: Д [ 119.462000][ T2148] em28xx 2-1:0.0: Freeing device [ 119.485299][ T5814] usb 1-1: SerialNumber: syz [ 119.514572][ T6654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.534136][ T6666] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.546968][ T6654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.026915][ T5814] vmk80xx 1-1:4.187: driver 'vmk80xx' failed to auto-configure device. [ 120.057283][ T5814] usb 1-1: USB disconnect, device number 7 [ 120.287850][ T30] audit: type=1400 audit(1772533634.492:306): avc: denied { setopt } for pid=6678 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.470768][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.670711][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 120.779836][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 120.802146][ T30] audit: type=1400 audit(1772533635.002:307): avc: denied { setattr } for pid=6678 comm="syz.1.191" name="XDP" dev="sockfs" ino=11797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.856285][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.900402][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.943626][ T5895] usb 3-1: Product: syz [ 120.980385][ T5895] usb 3-1: Manufacturer: syz [ 120.995481][ T5895] usb 3-1: SerialNumber: syz [ 121.021637][ T5895] usb 3-1: config 0 descriptor?? [ 121.043152][ T5895] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.062263][ T5895] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 121.200516][ T2148] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.290670][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.298002][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.384560][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.195'. [ 121.418310][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.429804][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.492890][ T2148] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.525135][ T2148] usb 4-1: string descriptor 0 read error: -22 [ 121.531442][ T6698] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.540727][ T2148] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 121.549840][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.560457][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.571747][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.617661][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.659621][ T5895] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 121.689411][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.732739][ T6698] usb 2-1: Using ep0 maxpacket: 16 [ 121.751446][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 121.789469][ T6698] usb 2-1: config 0 has no interfaces? [ 121.802073][ T6698] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.814408][ T6698] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.834936][ T6698] usb 2-1: Manufacturer: syz [ 121.847482][ T6698] usb 2-1: config 0 descriptor?? [ 122.058987][ T6716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.130661][ T6698] usb 2-1: USB disconnect, device number 6 [ 122.170495][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.172879][ T6716] tipc: Started in network mode [ 122.178806][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.187825][ T6716] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.209218][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.213580][ T6716] tipc: Enabled bearer , priority 10 [ 122.219598][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.229253][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.239783][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.246741][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.259701][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.269794][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.276680][ T2148] topre 0003:0853:0148.0008: unknown main item tag 0x0 [ 122.385399][ T2148] topre 0003:0853:0148.0008: hidraw0: USB HID vff.7f Device [HID 0853:0148] on usb-dummy_hcd.3-1/input0 [ 122.389656][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.479790][ T2148] usb 4-1: USB disconnect, device number 5 [ 122.545962][ T6720] fido_id[6720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 122.610988][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 122.631695][ T9] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 122.642034][ T9] usb 1-1: config 0 has no interface number 0 [ 122.679542][ T9] usb 1-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 123.277934][ T5895] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 123.303449][ T5895] em28xx 3-1:0.0: board has no eeprom [ 123.319225][ T9] usb 1-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.406105][ T9] usb 1-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.436861][ T9] usb 1-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 123.451162][ T5874] tipc: Node number set to 1 [ 123.476783][ T5895] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 123.632805][ T9] usb 1-1: config 0 interface 30 has no altsetting 0 [ 123.647996][ T5895] em28xx 3-1:0.0: dvb set to bulk mode. [ 123.671839][ T5921] em28xx 3-1:0.0: Binding DVB extension [ 123.671838][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 123.671862][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.728088][ T6730] netlink: 'syz.1.203': attribute type 8 has an invalid length. [ 123.732179][ T9] usb 1-1: config 0 descriptor?? [ 123.763710][ T6730] sch_fq: defrate 0 ignored. [ 123.779050][ T6698] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.787214][ T2148] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 123.817180][ T5921] em28xx 3-1:0.0: Registering input extension [ 123.958901][ T6698] usb 4-1: Using ep0 maxpacket: 16 [ 123.966003][ T5921] usb 3-1: USB disconnect, device number 5 [ 123.980117][ T5921] em28xx 3-1:0.0: Disconnecting em28xx [ 123.985588][ T5921] em28xx 3-1:0.0: Closing input extension [ 123.999805][ T6698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 124.018818][ T6698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 124.041570][ T2148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.049474][ T5921] em28xx 3-1:0.0: Freeing device [ 124.059253][ T2148] usb 5-1: not running at top speed; connect to a high speed hub [ 124.070827][ T6698] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 124.089004][ T6698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.098186][ T6698] usb 4-1: Product: syz [ 124.104576][ T2148] usb 5-1: config 139 has no interfaces? [ 124.114567][ T6698] usb 4-1: Manufacturer: syz [ 124.121966][ T2148] usb 5-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=b0.64 [ 124.131169][ T6698] usb 4-1: SerialNumber: syz [ 124.138132][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.147947][ T6698] usb 4-1: config 0 descriptor?? [ 124.153078][ T2148] usb 5-1: Product: syz [ 124.157372][ T2148] usb 5-1: Manufacturer: syz [ 124.162611][ T9] uclogic 0003:256C:006E.0009: interface is invalid, ignoring [ 124.163026][ T6698] hub 4-1:0.0: bad descriptor, ignoring hub [ 124.176474][ T2148] usb 5-1: SerialNumber: syz [ 124.178817][ T5874] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 124.182187][ T6698] hub 4-1:0.0: probe with driver hub failed with error -5 [ 124.201008][ T6698] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.280435][ T6698] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 124.316917][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.360100][ T5874] usb 2-1: config 4 has an invalid interface number: 187 but max is 0 [ 124.398764][ T5874] usb 2-1: config 4 has no interface number 0 [ 124.404906][ T5874] usb 2-1: config 4 interface 187 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 124.408824][ T2148] usb 5-1: USB disconnect, device number 16 [ 124.442066][ T5874] usb 2-1: config 4 interface 187 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.473903][ T5874] usb 2-1: config 4 interface 187 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 124.497747][ T5874] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=f6.ef [ 124.507501][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.527173][ T5874] usb 2-1: Product: 挬ᘓ배鮁덨烧⯸诊퍉걌苎☄蒍予赓㯋媀䫓쬅姌쾙縹뼔呂兂魡Dž甝몁㙧ᤫ셖ቈ潼뗚컲෴쾥佡덄꜈侗酓傆ﵖᎠ⪄ [ 124.565204][ T5874] usb 2-1: Manufacturer: Д [ 124.570134][ T5874] usb 2-1: SerialNumber: syz [ 124.586837][ T6733] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 124.594616][ T6733] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 124.596369][ T6698] usb 1-1: USB disconnect, device number 8 [ 124.660262][ T2148] usb 4-1: USB disconnect, device number 6 [ 124.830699][ T5874] vmk80xx 2-1:4.187: driver 'vmk80xx' failed to auto-configure device. [ 124.862258][ T5874] usb 2-1: USB disconnect, device number 7 [ 125.441268][ T6750] FAULT_INJECTION: forcing a failure. [ 125.441268][ T6750] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.454465][ T6750] CPU: 0 UID: 0 PID: 6750 Comm: syz.1.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.454483][ T6750] Tainted: [L]=SOFTLOCKUP [ 125.454486][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.454493][ T6750] Call Trace: [ 125.454497][ T6750] [ 125.454501][ T6750] dump_stack_lvl+0x100/0x190 [ 125.454523][ T6750] should_fail_ex.cold+0x5/0xa [ 125.454538][ T6750] _copy_to_user+0x32/0xd0 [ 125.454555][ T6750] simple_read_from_buffer+0xcb/0x170 [ 125.454574][ T6750] proc_fail_nth_read+0x1af/0x230 [ 125.454590][ T6750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.454606][ T6750] ? rw_verify_area+0xce/0x6d0 [ 125.454625][ T6750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.454640][ T6750] vfs_read+0x1e4/0xb30 [ 125.454658][ T6750] ? __pfx_vfs_read+0x10/0x10 [ 125.454676][ T6750] ? __fget_files+0x215/0x3d0 [ 125.454690][ T6750] ? __fget_files+0x21f/0x3d0 [ 125.454704][ T6750] ksys_read+0x12a/0x250 [ 125.454720][ T6750] ? __pfx_ksys_read+0x10/0x10 [ 125.454741][ T6750] do_syscall_64+0x106/0xf80 [ 125.454752][ T6750] ? clear_bhb_loop+0x40/0x90 [ 125.454765][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.454777][ T6750] RIP: 0033:0x7ffa3c15cfce [ 125.454786][ T6750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.454796][ T6750] RSP: 002b:00007ffa3cffafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.454807][ T6750] RAX: ffffffffffffffda RBX: 00007ffa3cffb6c0 RCX: 00007ffa3c15cfce [ 125.454814][ T6750] RDX: 000000000000000f RSI: 00007ffa3cffb0a0 RDI: 000000000000000a [ 125.454820][ T6750] RBP: 00007ffa3cffb090 R08: 0000000000000000 R09: 0000000000000000 [ 125.454826][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.454831][ T6750] R13: 00007ffa3c416038 R14: 00007ffa3c415fa0 R15: 00007fff6536abc8 [ 125.454845][ T6750] [ 125.691561][ T30] audit: type=1400 audit(1772533639.605:308): avc: denied { create } for pid=6749 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.774401][ T30] audit: type=1400 audit(1772533639.965:309): avc: denied { write } for pid=6746 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.114310][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.248130][ T5874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.340527][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 126.383406][ T9] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 126.397664][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 126.404303][ T5874] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 126.412613][ T5874] usb 2-1: config 0 has no interface number 0 [ 126.420545][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.440640][ T5874] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 126.457643][ T9] usb 1-1: Product: syz [ 126.465959][ T9] usb 1-1: Manufacturer: syz [ 126.474180][ T5874] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.507585][ T9] usb 1-1: SerialNumber: syz [ 126.523385][ T5874] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.535733][ T9] usb 1-1: config 0 descriptor?? [ 126.563841][ T5874] usb 2-1: config 0 interface 196 has no altsetting 0 [ 126.660748][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 126.673371][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.683490][ T5874] usb 2-1: Product: syz [ 126.693426][ T5874] usb 2-1: Manufacturer: syz [ 126.698433][ T5874] usb 2-1: SerialNumber: syz [ 126.701849][ T2148] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.724387][ T5874] usb 2-1: config 0 descriptor?? [ 126.730116][ T6759] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.501453][ T6766] loop3: detected capacity change from 0 to 127 [ 127.897197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.903475][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.909778][ T2148] usb 3-1: Using ep0 maxpacket: 8 [ 127.919587][ T6766] Dev loop3: unable to read RDB block 8 [ 127.925410][ T6766] loop3: unable to read partition table [ 127.931118][ T6766] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 128.064248][ T2148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.080137][ T2148] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 128.103517][ T2148] usb 3-1: config 6 has no interface number 0 [ 128.109969][ T2148] usb 3-1: config 6 interface 57 has no altsetting 0 [ 128.124643][ T6755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.132036][ T2148] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 128.141715][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.144909][ T6755] team0: Port device batadv1 added [ 128.150773][ T2148] usb 3-1: Product: syz [ 128.166901][ T2148] usb 3-1: Manufacturer: syz [ 128.171660][ T2148] usb 3-1: SerialNumber: syz [ 128.210982][ T5874] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 128.220482][ T5874] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 128.294816][ T5874] usb 2-1: USB disconnect, device number 8 [ 128.697159][ T2148] legousbtower 3-1:6.57: interrupt endpoints not found [ 128.711048][ T2148] usb 3-1: USB disconnect, device number 6 [ 129.297138][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.434259][ T9] usb_8dev 1-1:0.0 can0: sending command message failed [ 129.449460][ T9] usb_8dev 1-1:0.0 can0: can't get firmware version [ 129.606232][ T2148] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.915881][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 129.932861][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.970976][ T6798] : renamed from vlan0 [ 129.971031][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.987738][ T9] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 130.000933][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.002076][ T9] usb 1-1: USB disconnect, device number 9 [ 130.016078][ T5874] usb 4-1: Product: syz [ 130.020867][ T5874] usb 4-1: Manufacturer: syz [ 130.025463][ T5874] usb 4-1: SerialNumber: syz [ 130.051432][ T5874] usb 4-1: config 0 descriptor?? [ 130.075107][ T5874] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.087196][ T5874] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 130.116390][ T2148] usb 3-1: Using ep0 maxpacket: 16 [ 130.122855][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.250609][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.262018][ T2148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.280960][ T2148] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 130.290302][ T2148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.304243][ T2148] usb 3-1: config 0 descriptor?? [ 130.681962][ T5874] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 130.732856][ T6794] netlink: 616 bytes leftover after parsing attributes in process `syz.2.222'. [ 130.782977][ T2148] hid_parser_main: 4007 callbacks suppressed [ 130.782993][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 130.805763][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 130.895906][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 130.931028][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 130.951470][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 130.978288][ T2148] logitech 0003:046D:C626.000A: unknown main item tag 0x0 [ 131.034926][ T2148] logitech 0003:046D:C626.000A: item fetching failed at offset 9/41 [ 131.053063][ T2148] logitech 0003:046D:C626.000A: parse failed [ 131.061772][ T30] audit: type=1400 audit(1772533645.267:310): avc: denied { map } for pid=6811 comm="syz.4.227" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.061866][ T2148] logitech 0003:046D:C626.000A: probe with driver logitech failed with error -22 [ 131.096763][ T30] audit: type=1400 audit(1772533645.267:311): avc: denied { execute } for pid=6811 comm="syz.4.227" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.199118][ T2148] usb 3-1: USB disconnect, device number 7 [ 131.229513][ T6820] IPVS: Error connecting to the multicast addr [ 131.255243][ T30] audit: type=1400 audit(1772533645.378:312): avc: denied { create } for pid=6811 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.357830][ T30] audit: type=1400 audit(1772533645.378:313): avc: denied { connect } for pid=6811 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.397057][ T6815] syzkaller1: entered promiscuous mode [ 131.402787][ T6815] syzkaller1: entered allmulticast mode [ 131.410429][ T30] audit: type=1400 audit(1772533645.378:314): avc: denied { setopt } for pid=6811 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.437741][ T30] audit: type=1400 audit(1772533645.438:315): avc: denied { setopt } for pid=6809 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.535147][ T6698] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 132.297947][ T5874] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 132.306550][ T5874] em28xx 4-1:0.0: board has no eeprom [ 132.316867][ T6698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.326895][ T6698] usb 5-1: not running at top speed; connect to a high speed hub [ 132.338144][ T6698] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 142 [ 132.347675][ T6698] usb 5-1: can't read configurations, error -22 [ 132.374640][ T5874] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.413774][ T5874] em28xx 4-1:0.0: dvb set to bulk mode. [ 132.436055][ T9] em28xx 4-1:0.0: Binding DVB extension [ 132.485379][ T6698] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 132.611171][ T9] em28xx 4-1:0.0: Registering input extension [ 132.693388][ T30] audit: type=1400 audit(1772533646.888:316): avc: denied { create } for pid=6827 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.766696][ T6698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.777753][ T6698] usb 5-1: not running at top speed; connect to a high speed hub [ 133.810555][ T6698] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 142 [ 133.838564][ T6698] usb 5-1: can't read configurations, error -22 [ 133.865629][ T6698] usb usb5-port1: attempt power cycle [ 134.148116][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 134.186715][ T5921] usb 4-1: USB disconnect, device number 7 [ 134.193783][ T5921] em28xx 4-1:0.0: Disconnecting em28xx [ 134.207700][ T5921] em28xx 4-1:0.0: Closing input extension [ 134.213759][ T6698] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 134.229846][ T30] audit: type=1400 audit(1772533648.439:317): avc: denied { create } for pid=6846 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.265554][ T6698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.282482][ T6698] usb 5-1: not running at top speed; connect to a high speed hub [ 134.301957][ T5921] em28xx 4-1:0.0: Freeing device [ 134.337591][ T6698] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 134.356949][ T6698] usb 5-1: can't read configurations, error -71 [ 134.379335][ T6848] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 134.411292][ T6848] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 134.693618][ T5860] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.735279][ T6853] xt_hashlimit: overflow, try lower: 3/0 [ 134.753668][ T30] audit: type=1400 audit(1772533648.959:318): avc: denied { append } for pid=6844 comm="syz.1.235" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.754653][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.235'. [ 134.871607][ T5860] usb 3-1: config 1 interface 0 altsetting 70 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.903810][ T5860] usb 3-1: config 1 interface 0 has no altsetting 0 [ 134.933260][ T5860] usb 3-1: string descriptor 0 read error: -22 [ 134.940532][ T5860] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 134.952014][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.213065][ T30] audit: type=1400 audit(1772533649.420:319): avc: denied { ioctl } for pid=6844 comm="syz.1.235" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.242449][ T6855] xt_hashlimit: size too large, truncated to 1048576 [ 135.632599][ T5860] asus 0003:0B05:19B6.000B: unknown main item tag 0x0 [ 135.640177][ T5860] asus 0003:0B05:19B6.000B: unknown main item tag 0x0 [ 135.647562][ T5860] asus 0003:0B05:19B6.000B: unknown main item tag 0x0 [ 135.664762][ T5860] asus 0003:0B05:19B6.000B: unknown main item tag 0x0 [ 135.740321][ T5860] asus 0003:0B05:19B6.000B: hidraw0: USB HID vff.3f Device [HID 0b05:19b6] on usb-dummy_hcd.2-1/input0 [ 135.901224][ T5860] usb 3-1: USB disconnect, device number 8 [ 135.909627][ T5860] ------------[ cut here ]------------ [ 135.915144][ T5860] !work->func [ 135.915155][ T5860] WARNING: kernel/workqueue.c:4288 at __flush_work+0xa5d/0xcb0, CPU#1: kworker/1:4/5860 [ 135.928178][ T5860] Modules linked in: [ 135.932175][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.943139][ T5860] Tainted: [L]=SOFTLOCKUP [ 135.947437][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.957525][ T5860] Workqueue: usb_hub_wq hub_event [ 135.962546][ T5860] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 135.968321][ T5860] Code: 35 00 00 00 00 e8 b3 ef 14 00 e8 9e 3f 1e 00 c6 44 24 0f 00 e9 91 fd ff ff e8 9f bf 38 00 90 0f 0b 90 eb eb e8 94 bf 38 00 90 <0f> 0b 90 eb e0 e8 89 bf 38 00 e8 84 bf 38 00 48 8b 3c 24 e8 ab cd [ 135.988029][ T5860] RSP: 0018:ffffc90003e072e8 EFLAGS: 00010283 [ 135.994100][ T5860] RAX: 0000000000008f75 RBX: dffffc0000000000 RCX: ffffc9001a7e3000 [ 136.002046][ T5860] RDX: 0000000000100000 RSI: ffffffff81cff36c RDI: ffff888035fdc980 [ 136.010516][ T5860] RBP: ffff888036ebd4c8 R08: 0000000000000001 R09: 0000000000000000 [ 136.018940][ T5860] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 136.026959][ T5860] R13: ffff888036ebd4e0 R14: 0000000000000001 R15: 0000000000000001 [ 136.034925][ T5860] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 136.043909][ T5860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.050474][ T5860] CR2: 0000000075622f2d CR3: 0000000038d5d000 CR4: 00000000003526f0 [ 136.058442][ T5860] Call Trace: [ 136.061694][ T5860] [ 136.064641][ T5860] ? __pfx___flush_work+0x10/0x10 [ 136.069656][ T5860] ? __pfx___might_resched+0x10/0x10 [ 136.074948][ T5860] ? find_held_lock+0x2b/0x80 [ 136.079601][ T5860] cancel_work_sync+0xd1/0xf0 [ 136.084282][ T5860] asus_remove+0x182/0x1f0 [ 136.088687][ T5860] ? __pfx_asus_remove+0x10/0x10 [ 136.093618][ T5860] hid_device_remove+0xd1/0x270 [ 136.098446][ T5860] ? __pfx_hid_device_remove+0x10/0x10 [ 136.103899][ T5860] device_remove+0xcb/0x180 [ 136.108375][ T5860] device_release_driver_internal+0x42e/0x600 [ 136.115337][ T5860] bus_remove_device+0x22f/0x440 [ 136.120250][ T5860] device_del+0x376/0x9b0 [ 136.124720][ T5860] ? __pfx_device_del+0x10/0x10 [ 136.129546][ T5860] ? do_raw_spin_lock+0x128/0x260 [ 136.134576][ T5860] ? find_held_lock+0x2b/0x80 [ 136.139241][ T5860] hid_destroy_device+0x19c/0x240 [ 136.144262][ T5860] usbhid_disconnect+0xa0/0xe0 [ 136.149000][ T5860] usb_unbind_interface+0x1dd/0x9e0 [ 136.154188][ T5860] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 136.159709][ T5860] ? __pfx_usb_unbind_interface+0x10/0x10 [ 136.165427][ T5860] device_remove+0x12a/0x180 [ 136.169991][ T5860] device_release_driver_internal+0x42e/0x600 [ 136.176054][ T5860] bus_remove_device+0x22f/0x440 [ 136.180970][ T5860] device_del+0x376/0x9b0 [ 136.185293][ T5860] ? __pfx_device_del+0x10/0x10 [ 136.190114][ T5860] ? kobject_put+0xb9/0x640 [ 136.194621][ T5860] usb_disable_device+0x367/0x810 [ 136.199621][ T5860] usb_disconnect+0x2e2/0x9a0 [ 136.204288][ T5860] hub_event+0x1d0c/0x4af0 [ 136.208685][ T5860] ? __lock_acquire+0x4a5/0x2630 [ 136.214084][ T5860] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.219258][ T5860] ? __pfx_hub_event+0x10/0x10 [ 136.224302][ T5860] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.229918][ T5860] ? sched_core_enqueue+0x560/0xc00 [ 136.235114][ T5860] ? rcu_is_watching+0x12/0xc0 [ 136.239855][ T5860] process_one_work+0x9d7/0x1920 [ 136.244807][ T5860] ? __pfx_process_one_work+0x10/0x10 [ 136.250158][ T5860] ? __pfx_hub_event+0x10/0x10 [ 136.254926][ T5860] worker_thread+0x5da/0xe40 [ 136.259493][ T5860] ? kthread+0x13a/0x450 [ 136.263727][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 136.268812][ T5860] kthread+0x370/0x450 [ 136.272863][ T5860] ? __pfx_kthread+0x10/0x10 [ 136.277426][ T5860] ret_from_fork+0x754/0xd80 [ 136.281992][ T5860] ? __pfx_ret_from_fork+0x10/0x10 [ 136.287146][ T5860] ? __switch_to+0x7b4/0x1120 [ 136.291798][ T5860] ? __pfx_kthread+0x10/0x10 [ 136.296381][ T5860] ret_from_fork_asm+0x1a/0x30 [ 136.301124][ T5860] [ 136.304137][ T5860] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.311399][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.322300][ T5860] Tainted: [L]=SOFTLOCKUP [ 136.326601][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.336626][ T5860] Workqueue: usb_hub_wq hub_event [ 136.341634][ T5860] Call Trace: [ 136.344883][ T5860] [ 136.347785][ T5860] dump_stack_lvl+0x100/0x190 [ 136.352437][ T5860] vpanic+0x552/0x970 [ 136.356388][ T5860] ? __pfx_vpanic+0x10/0x10 [ 136.360865][ T5860] panic+0xd1/0xe0 [ 136.364556][ T5860] ? __pfx_panic+0x10/0x10 [ 136.368952][ T5860] check_panic_on_warn.cold+0x19/0x34 [ 136.374294][ T5860] ? __flush_work+0xa5d/0xcb0 [ 136.378940][ T5860] __warn.cold+0x191/0x348 [ 136.383327][ T5860] __report_bug+0x296/0x3d0 [ 136.387806][ T5860] ? __flush_work+0xa5d/0xcb0 [ 136.392452][ T5860] ? __pfx___report_bug+0x10/0x10 [ 136.397458][ T5860] ? arch_stack_walk+0x94/0xf0 [ 136.402197][ T5860] ? ret_from_fork_asm+0x1a/0x30 [ 136.407108][ T5860] ? __flush_work+0xa5d/0xcb0 [ 136.411754][ T5860] report_bug+0xb2/0x220 [ 136.415964][ T5860] ? __flush_work+0xa5d/0xcb0 [ 136.420611][ T5860] handle_bug+0x16a/0x2a0 [ 136.424914][ T5860] exc_invalid_op+0x17/0x50 [ 136.429388][ T5860] asm_exc_invalid_op+0x1a/0x20 [ 136.434206][ T5860] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 136.439461][ T5860] Code: 35 00 00 00 00 e8 b3 ef 14 00 e8 9e 3f 1e 00 c6 44 24 0f 00 e9 91 fd ff ff e8 9f bf 38 00 90 0f 0b 90 eb eb e8 94 bf 38 00 90 <0f> 0b 90 eb e0 e8 89 bf 38 00 e8 84 bf 38 00 48 8b 3c 24 e8 ab cd [ 136.459037][ T5860] RSP: 0018:ffffc90003e072e8 EFLAGS: 00010283 [ 136.465080][ T5860] RAX: 0000000000008f75 RBX: dffffc0000000000 RCX: ffffc9001a7e3000 [ 136.473021][ T5860] RDX: 0000000000100000 RSI: ffffffff81cff36c RDI: ffff888035fdc980 [ 136.480961][ T5860] RBP: ffff888036ebd4c8 R08: 0000000000000001 R09: 0000000000000000 [ 136.488908][ T5860] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 136.496855][ T5860] R13: ffff888036ebd4e0 R14: 0000000000000001 R15: 0000000000000001 [ 136.504805][ T5860] ? __flush_work+0xa5c/0xcb0 [ 136.509457][ T5860] ? __flush_work+0xa5c/0xcb0 [ 136.514111][ T5860] ? __pfx___flush_work+0x10/0x10 [ 136.519130][ T5860] ? __pfx___might_resched+0x10/0x10 [ 136.524386][ T5860] ? find_held_lock+0x2b/0x80 [ 136.529037][ T5860] cancel_work_sync+0xd1/0xf0 [ 136.533688][ T5860] asus_remove+0x182/0x1f0 [ 136.538080][ T5860] ? __pfx_asus_remove+0x10/0x10 [ 136.542992][ T5860] hid_device_remove+0xd1/0x270 [ 136.547833][ T5860] ? __pfx_hid_device_remove+0x10/0x10 [ 136.553279][ T5860] device_remove+0xcb/0x180 [ 136.557768][ T5860] device_release_driver_internal+0x42e/0x600 [ 136.563818][ T5860] bus_remove_device+0x22f/0x440 [ 136.568733][ T5860] device_del+0x376/0x9b0 [ 136.573048][ T5860] ? __pfx_device_del+0x10/0x10 [ 136.577878][ T5860] ? do_raw_spin_lock+0x128/0x260 [ 136.582877][ T5860] ? find_held_lock+0x2b/0x80 [ 136.587532][ T5860] hid_destroy_device+0x19c/0x240 [ 136.592544][ T5860] usbhid_disconnect+0xa0/0xe0 [ 136.597289][ T5860] usb_unbind_interface+0x1dd/0x9e0 [ 136.602460][ T5860] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 136.607984][ T5860] ? __pfx_usb_unbind_interface+0x10/0x10 [ 136.613676][ T5860] device_remove+0x12a/0x180 [ 136.618237][ T5860] device_release_driver_internal+0x42e/0x600 [ 136.624280][ T5860] bus_remove_device+0x22f/0x440 [ 136.629190][ T5860] device_del+0x376/0x9b0 [ 136.633492][ T5860] ? __pfx_device_del+0x10/0x10 [ 136.638320][ T5860] ? kobject_put+0xb9/0x640 [ 136.642796][ T5860] usb_disable_device+0x367/0x810 [ 136.647802][ T5860] usb_disconnect+0x2e2/0x9a0 [ 136.652456][ T5860] hub_event+0x1d0c/0x4af0 [ 136.656862][ T5860] ? __lock_acquire+0x4a5/0x2630 [ 136.661776][ T5860] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.666947][ T5860] ? __pfx_hub_event+0x10/0x10 [ 136.671682][ T5860] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.677294][ T5860] ? sched_core_enqueue+0x560/0xc00 [ 136.682477][ T5860] ? rcu_is_watching+0x12/0xc0 [ 136.687217][ T5860] process_one_work+0x9d7/0x1920 [ 136.692130][ T5860] ? __pfx_process_one_work+0x10/0x10 [ 136.697476][ T5860] ? __pfx_hub_event+0x10/0x10 [ 136.702221][ T5860] worker_thread+0x5da/0xe40 [ 136.706795][ T5860] ? kthread+0x13a/0x450 [ 136.711006][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 136.716085][ T5860] kthread+0x370/0x450 [ 136.720124][ T5860] ? __pfx_kthread+0x10/0x10 [ 136.724685][ T5860] ret_from_fork+0x754/0xd80 [ 136.729247][ T5860] ? __pfx_ret_from_fork+0x10/0x10 [ 136.734328][ T5860] ? __switch_to+0x7b4/0x1120 [ 136.738977][ T5860] ? __pfx_kthread+0x10/0x10 [ 136.743536][ T5860] ret_from_fork_asm+0x1a/0x30 [ 136.748282][ T5860] [ 136.751498][ T5860] Kernel Offset: disabled [ 136.755793][ T5860] Rebooting in 86400 seconds..