last executing test programs: 21m17.351566436s ago: executing program 3 (id=289): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}}, 0x8001) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9}, 0x80, 0x0}, 0x30040000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ea1000/0x1000)=nil, 0x1000}, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xd, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xe, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xffff, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x4002, 0xf38, 0x8, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0xa, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x0, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close(0x3) 21m17.096136382s ago: executing program 3 (id=291): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0xb) ioctl$PPPOEIOCDFWD(r0, 0x400261f3, 0xf0ff1f00000000) r1 = socket$inet6(0xa, 0x1, 0x84) shutdown(r1, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x2004c000, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8, 0x8, 0x19948718, 0xe171, {{0x42, 0x4, 0x0, 0x3, 0x108, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x69, 0x0, 0x7, [0xeb, 0x3, 0x4, 0x1ff, 0x6]}, @lsrr={0x83, 0x7, 0xd7, [@multicast1]}, @rr={0x7, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1, @remote, @private=0xa010102, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x6, [{@empty, 0x8}, {@multicast1, 0x7}, {@private=0xa010101, 0x6}, {@remote, 0xff39}, {@empty, 0x5}]}, @timestamp={0x44, 0x2c, 0xa5, 0x0, 0x8, [0xfff, 0x0, 0x4, 0x2, 0x26, 0xffff6b09, 0x1, 0x1, 0xac40, 0xffa]}, @rr={0x7, 0x27, 0xfe, [@multicast1, @multicast2, @local, @multicast1, @rand_addr=0x64010100, @multicast2, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop, @cipso={0x86, 0x2c, 0x1, [{0x1, 0x10, "56162423879fd8ec707ba502eea2"}, {0x0, 0x5, "34b3c3"}, {0x2, 0x11, "091ac50984703f4d28cb508bd9634f"}]}, @ra={0x94, 0x4}]}}}}}) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000040)="444383db69562358291dcc4c0a13c5117dcf67abd8dc27366da432bfdca6fdfbc82cfb1b7bb3e54f5765995497b4d99954725d80acf7da7007e8864159"}, {&(0x7f0000000100)="1e111ef948780a57c1fdaa4808143c01930fd6665bee3d6bea8ac4547fa03fe03442c9b6cdc7910bc7a3850e5a8f88a07ecbddb64676364812b401f11d6e580af54416cd5ae2960e86cd430eebba9e7b1314744f085ec49235207ec1c5d611193e3784d5e430a290f7d33a84cb8c58c4f3ab94dc6cbaef626e6dc8d3248518eaa86aeb9a4ed0804a11c4e321bbbc7676a33f73dc9de182ec38a79e1df1b7e09f0b6d8275bb341265cb8f1fa02038ae64e991a30935ef"}, {&(0x7f0000000200)="03316e12673fd776e03c4438715569ae8454fe3ca866d7cfd09e0e081cb184c3cd56b9ce7853cfc2e36b9535546b9edc3c60b216d6bb702869ecff7d79a185c9841bc5e55e81127e7c27c0942944965b7a6576145b9d8286"}, {&(0x7f0000000280)}, {&(0x7f0000000500)="a7e619638eff0999c9bee54e90adb6d08dd279d02ac8dc82de8c68eafc795d76d2498b0342dc5a898887825ccf100809e0059c7a0f05bc811a49162114fb0895d51085524c96520901eb02ee2072a854c2083a909943b52ee00ea8ccaa3c577b28bb116a077b00a84d6e3b6a69292cd86afb89556194422ea2704988fdf2d1f04e52edfccda7e49e665951bbde9e3a8488c50a7babe059a7258052756b97c9dcfe210e167db1c35a894242f12280e186d6a1bb454b7f250e4637f258e4ccb808ee92910c6401cd70803b69069bc5765c5639adea7150ba85eda0e4100c6413c3c059cdb7d7e8049841e14de5d5061624990d2b04d37e30"}, {&(0x7f0000000600)="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"}, {&(0x7f0000001600)="b870f829bc82d3b1fe62e1ad6f0eb803857ff2ae9943b3621fb0b44f5a1cc2b0e1591ac9531ffadecf"}, {&(0x7f0000001640)="f804da755dd21d5435b96a06e12f61513d998c05c075a58f848fba5b4a5d3075b99cc134a88dc0bc4d507a5fc1aeaca37616e8b990364e2565209f5e3f1902d398608d398e042081814454dd12fd5343666636b8773ef09f51124bb8e17379bd"}], 0x0, &(0x7f0000001740)=[@ip_retopts={{0x0, 0x0, 0x7, {[@ra={0x94, 0x0, 0x1}, @ra]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x98}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0x49, 0x0, 0x7, [0xcf, 0x5, 0x6]}, @end]}}}]}}, {{&(0x7f00000017c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)="98380d5b8841180eb1"}, {&(0x7f0000001840)="9e687c71c5a03a5748eb2d06b086b707e2c51abf620c8d8716b7e6a3afe6fc4859cbbf5b868c783992c2fe3126393f9f76bc64d213a1cf9f3d80dac6559bb5b676e4fd2f745271864c2c9643"}, {&(0x7f00000018c0)="6bea2b4702c355a66e7226cafbe1a2c3bd64bb11f9b45c9966d5e0fb178c3077fdf08f5006c1803512c59671f7e69afa12e74c039b5554307fce044e83ce01e5b5340a3570e93f9bbe3798f7ca897846a05a51e13d6c8ac514862efbf1d58d284e2ffb01fc36f03b05509507e55da0c9db8996f1a2ac2f317651a96bad6e9ed5e893c2b369cdfc73b0058322dfadb4ae9914c80cfa594e146fecd4eea4cb4986c8e9d960eacb38cca92251e0e093d89a263d1c4b43c3542d12a478c1f7654b4a90db7003a69715845e42186f770423e4cda177d38bcf82d53476057d8e94f93c6ed813c963061c0ce8eaf8"}, {&(0x7f00000019c0)="81e97a195b2c00d7a339c6eb35ca98aea488d43c"}, {&(0x7f0000001a00)="2cece2b66818284f93032fe119e672d7e173e9"}], 0x0, &(0x7f0000001ac0)=[@ip_ttl={{0x0, 0x0, 0x2, 0x7}}, @ip_ttl={{0x0, 0x0, 0x2, 0x80000000}}]}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001b40)="36a7205d06368a9998586d7dadd0587895033a4b5e9c6edb8ccdb1348f5a7601ac8e7ac9714a3ab916b38aab31d8867ea4b59dbe6a99c8c60ce3585fbd6177872d0c088a65bf67c4770f8c4cccdeefeb665a14f7068a78d1870466348bc6abec572f733012c653608b2500ef842bf941a6a43a032f91723f01723fd5500e7b8d964658806c7fc170498929e77525d62ae0e6ea3e01d185e59c9c39df5fcf3fb657413d1dfcd944792d424f2bb53931824abb062617962bf0611a92578272ffab2a64c438e5ff"}, {&(0x7f0000001c40)='D|j\a'}, {&(0x7f0000001c80)="b87bdbb366432ba2961ed9d64b0b11a734a6d5e46efa00cf04820ded26dbfd6803d4a0fc0717a8cc5c30c2b72adda596437012018e634335df3a8450"}, {&(0x7f0000001cc0)="8fc3661b72cf8d82b72fdcfcd46818bb83c097c690f1cd0f94a687af53f84cbe3212a543d762d8201ab52d3fba232fc9"}, {&(0x7f0000001d00)="761ef37d5e5f3804c9f259cf48c48bc8625cbbe48e6b12fade8d318213f920d7445393c5c210c9518ddf7b2b21fdce949cfef6274d825b7dfb8e18d25af542a3da2a3e35e20846e7cfdf9e2c98127f38f287b2e2d16bdcf6f8c8bc5db999de4ab4e6b2b1d708087c4aed8df8e308c3529a8c326cc51968d10e98b17d220ae235873ff3c1b87cd141ad6bf2a8b01cf76e281966f7a33ac9fca9c7b598cc98405f13f138c48543110d22fdbb"}, {&(0x7f0000001dc0)="7abf7557b9a371054c9317072a94b4113267dabc09ef01a0dfd54444a0a5f600c24348b63a554f790077e929d9343b3aa5d792085586f69ae07f6f00044a31a1f698793a7909ebedf2adb142f79690384b823421ec6d361fb732187ee9fc0d67162f6a3a24a982d28eecaf12ac04967f6bac266992467e27c380778b5e8afaa9fd5a22a3f001a04e"}, {&(0x7f0000001e80)="1d3af12dcd8c485e0e4931e06335e6282c669f51feaadf6145c307fcefec9f468d4016b3c51e87c2574719a7487b6843c4a6ac481ff4f241bb702a835f0d6fb1d5b439e53b373782ad5386cc513f68c192c3abbfc9af1c38b6d16500b9ef1117fe796d3646624fee94982768ecc4f3e31eed8cc3ad7f2a9e14c3bdaa22e04bec82ccfbcf04c9"}], 0x0, &(0x7f0000001fc0)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0xd2}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x0, 0x0, 0x1, 0xfffffffe}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x7}}]}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000020c0)="15f16547cb7ce83479d9f070"}, {&(0x7f0000000080)="dc9b9170332bf140ce0f81fec0bf43708d05197fa3b9fe033298ebc88d"}, {&(0x7f0000002140)="940cec7f3b399439934f7aea435b8e9351d72830f89e68df610d133d0f11dd935ae5871ff6f614feae03c054e0a3190ebb41c3ea1470009547d58dcd7f6af9244073d020c1e6694c969175a14b5b2fb520aa20fd55c3216634f3b591a05c89db3f8e81e37e3cd585ba4359f67547baa569f73846d480323a4cb19a4f2c00d537b4cfd33679d4a00828ce3af7da651ea0016d8a4776ecb36e47a0bff0b62a117fb67e54d7a0766a9244e3bcbba07ca625a2f7331050c69bc5b39f2a397a7baf03925664440fddf617857157356f496466f933547881b30cb1b2a468dd1f6f68bc488f8da1e226583626506743978ae899b253c973c2bdd2c43a99dcb612d3"}, {&(0x7f0000002240)="24bc23368ba67f26838707c46cd20630fbe7a8892b3a35186894be8ae8518f559420de6a4deee1dfd8f63d16444c1839317790747cecafde2d73c0582ad4ba0553bafd641d5bee88f487cfc515fa3170c2a7f20d2e1c8803c8a9f38a486997cb4f145b22fe45f4f420a3c8"}, {&(0x7f00000022c0)="0847ebb4ea76c4bbfc493abbe454ff4263a2c419db37d5218118c637b8891d2da2c4fd2ee17faab5033d0ef7665e7ab61c4ae1ced00a7de8a25ae6e74c31ccded69e3d41ac1eba1db20dad2781624dc5c61a9539ef817a49fad22250ffedb460ea3acad9119795aa4756ee32eaf91b092e15156b0b49e6b3c5a0c3bc67578da6ae1e977d213a098e45fa1a348631234e9518dcf1de368068f4a486865e820da2bd6823012e5434a845c8c24154492083d1d46989d9fcbd0b9df08a965b762a3972f4dd114e9467aa429f5cbae85817b540cebabc70dcf6a4796998842ecc6e1c3a02d1cfa232def74c5e888f5fedbb148f3d"}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="afd87eb2ed4e19dbba6ef47f0cfa8adea701085db2d91b394dedce0aaae18bc26900098f9b876d0efda466ae2e4c376b6856a594b72282426d16941defc7e8f64b95b2af43c18e30d7c66bdf24932ce31c96107788a8baa71d652021bfe9f43fd8f666a39cc81c"}, {&(0x7f0000002480)="52db0d6fb4b495ab6d717c00c3ec15ba0e0053e6389ed21690e50d4f17bb0a9ba05ce2f7fc54fb665fb47292690d5c2d736f1e98a49cd329b7d5d503d749f08c4ced41a4d1461b94cebf01d932113514cc67110b4a4c2eb61ff7b19ead867c0428e10a8c086ebd425968b6cadee68101827ff474ec9dd193069f527240b06793982e7f2eaebadf13464e9601850d875fbff4052dd85d1dd0e69053cbc0c2458a2405cb0e65d780186c3d3dd5a0a9314f8fd3ea59e86bbd80f84574f625"}, {&(0x7f0000002540)="655f7f27cd3ba19773c9e8c65c2813515f64134ba825f35cdd745acc1db3b230be862a1de471fa143fa53a8c2a25fc27dbc70123d920d83d39d8b52d9bc2ee09190a9784a4f18912b14af79c0a7f95f3d72e13e39135cd5ce325fa9a2e66b012e8f080fd9b3cdbe10df74387053406ec6a71675fdf9eafe24eace63f7040"}, {&(0x7f0000000280)="6599a5d1a4a44275ab61ed493ad61e25e0123ad9744e9196af13fe01891902c70bafc7b3670f129d0f60de6751042b0a193ae19e8bac65022d3ad63c75cb47a4391ba19656e3962ae4200197f143f4847beb3c6215e0acf00f73a1b2cc8494"}, {&(0x7f0000002800)="2cf45368e594f0a7e7c18b018122e19becb1d066e8b0bd14c4eb22470df192a14dd265aa0824fca2057a4b4ffa8b72f19a487cdc9c7c442fd8b868f4e7d18e9150b8d1b7ddfb72cb8e049343fc35bf5ad655a0e78ea5ccba2e0982188d4d1024ed015415f85cb561d3ab2270837886af61cf70a24fd85a0041c4384589a93402f6580888b2773cee532a27463b356f3571522851ccbb79889e3b5e9ad65b50c19e90a8beb1631431c61a3645b1382e259b7f04b5d957421273f9948705d444d7c3d887faca96be"}, {&(0x7f0000002900)="0af8d74420736592924e9014208e545254efd5bf11b98c53df3b14f99a5bba04eb30ab5aeb88b2a21b646af6e9d9262f6f4f60c46b0c3f0823d7263715143faf17a305adb7b5040294fc993423c49241aaf7bf011a260fe2d704d967161d94ebb95de8a5645c8a142e8dbe598360b5512271425669e74b67652f8fcd3acb5af59cdaeefb1033cbdde3f6b3"}, {&(0x7f00000029c0)="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"}], 0x0, &(0x7f0000002680)=[@ip_ttl={{0x0, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x43}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0xb}}}}]}}], 0x1, 0x400c845) close(r1) 21m16.835672858s ago: executing program 3 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x10000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='|', 0x4, 0x8800, &(0x7f0000000280)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, 0x0, 0x4000040) r6 = getpid() r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r7, &(0x7f0000000500)="cf59d29ddb4c168121efc31c699794d3d9f8b5aeead5e170f66158e28f2acfaa608a5eb9efa530d4c123050fa0c27b60faee0763ff350311ec15d200c0049984c27f7ebe00a1", 0x46, 0x4000000, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 21m15.516035583s ago: executing program 3 (id=297): syz_emit_ethernet(0x347, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)={0x1, 0x2, [0xcbd, 0x3e7, 0xf61, 0x73a]}) sendto(0xffffffffffffffff, &(0x7f00000000c0)="d36d549a0dd1296921fd622c48f51394adf660af80829dfedd83d310f5621f72c1cceeb1eccf484a5efe87e32f5d21fbec40704e9703cbdcbabed3524c61a367ba6d0405ea42cf0cc3750cf4cec5b806228f5765e368936a4986e9805c7f098556f6f23061d7bb80947188444f427ffc6febcd13ed4af10e4bce3b76a1d098e4eaf31d5ae2bc355fb7df19d12258be90a69131aaa454b255df", 0x99, 0x20000000, &(0x7f0000000180)=@hci={0x1f, 0x1}, 0x80) r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r0}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) 21m15.273345111s ago: executing program 3 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x44000, 0x0, 0x0, 0x0, 0x0, 0x0) 21m13.976048141s ago: executing program 3 (id=305): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x7e) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) 20m58.578448734s ago: executing program 32 (id=305): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x7e) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) 9m59.298496185s ago: executing program 0 (id=2710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000000180)=@buf="22f82f0e0a6a25ce0baea8ec2a7de0c5"}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f0000000580)=""/26, 0x1a, 0x40000001, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0xfffb9fff, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0xfe33) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 9m57.380504644s ago: executing program 0 (id=2718): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0xee, 0x4c, 0xbe, 0x10, 0x8ca, 0x111, 0x2fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x10, 0x3, "", [{{0x9, 0x4, 0x37, 0x8, 0x0, 0x96, 0x9b, 0xa7, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000300000007e2ff910f000005000000000900000003000000b050000008000000050000000010000009000000000000004d10ffff0e00000001000000050000000700000003000000050000000f00000000000001000000005c004100100000000000001004000000002e00"], &(0x7f0000000440)=""/102, 0x7f, 0x66, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503feffffff000000001600000014000180a27fa62670d2fc7c7a39ad0628b8000004000000010002004e23ac1e01010000000000000000000002000a004e21fffffff3fe8800000000000000000000000000011800000000000680000003002d6bd7c7ee4bffcc781f16735256a9effc8c2edaf6f8da9d0bf3ecae3f7817d5b8e43cb5650cd96b032a7a5fff1a02b9b3700fc7e7f031b72066703af28bc612593085263f9678ebbda92d080f3144894d224a035f6f9ef6a36d747944234d26b6a6e11a21c6090fbcec98f2f6dcd97b1d4ab86ce307d5af44d4e0a056834600000005000000010009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x163, 0x3ff, 0x621f, 0x8200, 0xffffffffffffffff, 0xb, '\x00', 0x0, r1, 0x5, 0x2, 0x4, 0x8, @value=r3}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r5}}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x6000000, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r8, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$FE_READ_SIGNAL_STRENGTH(r9, 0x80026f47, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 9m53.812980937s ago: executing program 0 (id=2728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000002000/0x1000)=nil, 0xeeef0000, 0x3}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf8}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x75, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) 9m50.191733729s ago: executing program 0 (id=2739): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000004c0)={0x3, 0x2, 0x2, 0x0, 0x6}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2010086, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') syz_usb_connect$uac2(0x0, 0xb8, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000300000040820516004000010203010902a60003017fc02c080b0102010020090904000000010120000924010200001c000207240c080695280c24030404030306000400060904010000010220000904010101010205000624020102040a2402010e026409fb0d10240104f802021000000709000000fc0a2402020300a40007050905010910"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x402800, 0x0) 9m46.556695741s ago: executing program 0 (id=2750): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000900000000611116000000000085100000786062a206ee43660000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) removexattr(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="747274737465642e10"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)="05", 0x1}], 0x1) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000440)=""/204, 0xcc}], 0x3, 0x81, 0xff800000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x40202) ioctl$BLKGETZONESZ(r5, 0x80041284, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) 9m44.81433589s ago: executing program 0 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}}, 0x20040040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='madvise', 0x7) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x80) 9m44.271889449s ago: executing program 33 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}}, 0x20040040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='madvise', 0x7) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x80) 51.760765456s ago: executing program 1 (id=4707): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000740)="70565d40eff03043e799339c7b17b42c5a1f07d59e2ac3a4dd2e67b65d408e64fc0c4d18b7a61498ae21085dfd5ec180d243f7f6217c56e2f20640f3845ef90a531cacd1eba00dc2ece8f0333950162f7f74b22497e343ac255cd510d4cad7561cb565c2a6b83903ee79cfd880435f2dfc81d255cbab4643d41a6dff698227dc4c94eefd9b276594274f5fb232fb000b8817d7d8cd6e0b320473219f34c64410046c0754cf278f0409fa10a1ef8d457bbd2ae0c759b3d9e738c85e6c9a4bfeab4dd3d4aeeef439c45dc13aecde36d7ff15c41efdc6dfec5a5b8e6dda21c623cffc131734af1ffaae4eb8f7", 0xeb}, {&(0x7f0000000840)="82747c70f6f0bf202d42f6e19def87091612335b27e5e0eff6e5bde4475a6830d688094855823ee92706e22f78f5293c5aaa6d66c08b1ff22f7a0918f3c9d3ea2b0f4ce365dc19ca46", 0x49}, {&(0x7f00000008c0)="bf1a6d6cf286", 0x6}, {&(0x7f0000000900)="cba93e34f8b8fabd99564ca4eb318e9a5980f978f52880dd7ab880e0cae91e5f93003a4ce139553535a96d1b20bc562856e8e5062f154091bfa9f86b3d95a78cf1a3697632ac3573b8e8f8ff353cba67d21d786578b0aa1a5575b4ea02cc1ea8fa0cd05738ad67e9a9f06d1efa59ac5c2a863cd3a8017477de4cc9776f93a2b758f9cfe928902ccf1641cd90456a3dfe2f8c8deaa2a3ecad548d9184d37ec6f3fe3d79a89cb37147cc17ed48d6215e4a14287480b9", 0xb5}, {&(0x7f00000009c0)="0c6dd5519ff408d511237915274eabdb13872629296b8300b01825dbe123d26f1da1e1885cf86e261a36ffbb8a3b9e25af10bea5c5d7394dc67bdfe30f47e71196fa7df1982df646b779e11813654027c2a291c14b3f85a2d344243ad14bc0d6feebf13715428ecf8949b13d5f8e5c1c59926cad3aeaf0f4fdbec4", 0x7b}], 0x5) r1 = eventfd(0xfffffff9) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a01040000000000000000070000020c0010400000000000000003080007400000002a24000000050a010300000000000000000300000408000a400000000308000a400000000514000000110001000000000700000a0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x20008811}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x2) setns(r4, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}], 0x1}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r7 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000340), &(0x7f0000000ac0)={0x0, 0xfb, 0x105, 0x1, 0x9, "3bafbf6f02e2c040c122d04df721abf6", "66f883033f12bd42fe2b399969a9dcd9593b9956f22112f1039edf4f8e9c0cea559ec16d49acad0fd5107c925bfd4d4229b2193cb8788ab362c36a99b2510ec9d4cf2fc4fd604ef0ac17755e85d177fd3f31efa551ea38a25dbf4d5378e09e20166cedf922591618a8794675348da1d9ee6dfde5768e32c73f6394e07cf26d0824e706d8a6240ef50330aecbb8a3f4a7666b83c23b09f7b6931a3f2fc27a415d97110d7371b81f8e07524695ed171ba0aa7c14f0ed3fe842026adf7da1471dfc92e688aa43b27abb10370afb11f1fe75375848eca2f30463f6857f44bbcd33e1ec410c4cea2063d13e1b96d48556cd88"}, 0x105, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) 51.140794133s ago: executing program 1 (id=4711): ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) 50.878747397s ago: executing program 1 (id=4715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = msgget$private(0x0, 0x3ac) msgrcv(r7, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r7, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x8, 0x0) add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r6) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x44048044) 49.457298047s ago: executing program 1 (id=4720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001900)='ns/cgroup\x00') chdir(0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) (async, rerun: 64) keyctl$set_reqkey_keyring(0xe, 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x3) fsmount(r5, 0x1, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a62100000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2a, 0x0, {{0x6}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 49.267518361s ago: executing program 1 (id=4721): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$getflags(r1, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) r6 = dup(0xffffffffffffffff) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'}) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000180)=0xffffffff, 0x4) pwrite64(r0, 0x0, 0x0, 0x10c6b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x410000, 0x0) 49.187916432s ago: executing program 1 (id=4722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 ,2', 0xb) 32.308586361s ago: executing program 34 (id=4722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 ,2', 0xb) 23.183285826s ago: executing program 4 (id=4782): r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000200)='./file0\x00', 0x2, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="a37549c80104000000000000a0a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @initdev}, &(0x7f0000000180)=0xc) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x2}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x158, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x158}}, 0x200048c4) read(r2, &(0x7f0000000500)=""/100, 0x7ffe) 19.191868697s ago: executing program 4 (id=4789): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x44002) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0, '\x00', 0x20}) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000002) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 18.974027533s ago: executing program 5 (id=4791): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) 18.464192156s ago: executing program 5 (id=4792): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\x10n\x1ab\xff;\xbe\xff\x9aC\xac\x9b\x87\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/60, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) close_range(r1, 0xffffffffffffffff, 0x0) 16.862387497s ago: executing program 5 (id=4794): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) 13.448777564s ago: executing program 4 (id=4800): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) creat(&(0x7f0000000200)='./bus\x00', 0x84) 13.380267733s ago: executing program 5 (id=4801): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='ffffffff ffffffff f', 0x13) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) pipe2(&(0x7f0000000040), 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r7, 0x40047452, 0xf0ff1f00000000) 11.895322025s ago: executing program 6 (id=4802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c004002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xd}, {0xa}, {0x9, 0xfff1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x400}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="0320"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r3, 0x58, &(0x7f00000003c0)}, 0x10) 11.555146242s ago: executing program 2 (id=4803): ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1], 0x90}}, 0x0) 11.52165789s ago: executing program 4 (id=4804): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) creat(&(0x7f0000000200)='./bus\x00', 0x84) 11.388024401s ago: executing program 6 (id=4805): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0x0, &(0x7f0000000500)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4) r9 = syz_open_dev$media(&(0x7f0000000400), 0x7ffffffc, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x2, 0x0) 9.486632794s ago: executing program 2 (id=4806): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 9.04418872s ago: executing program 5 (id=4807): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x0, 0x4000000}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x9c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8916, &(0x7f0000000000)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8936, &(0x7f0000000000)={r10}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r11, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 9.023946556s ago: executing program 4 (id=4808): socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r1, 0x4) r2 = gettid() ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000140)={0xa, 0x1ff, 0x3, 0xeba}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) 8.495884552s ago: executing program 6 (id=4809): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) creat(&(0x7f0000000200)='./bus\x00', 0x84) 8.495097497s ago: executing program 2 (id=4810): io_setup(0x4, &(0x7f00000014c0)=0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201010102000007"], 0x0) (async) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 5.744057449s ago: executing program 4 (id=4811): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='iso9660\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) pwritev(r0, &(0x7f00000006c0), 0xb, 0x2fd, 0x10001) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x1, @raw_data="26d7c444f211b8972bddf47686906d1978555caa82244e9dc082656d19b527a5193f15b14603c44905fb5daa85be926e554ddb229748c7751bc1a11f02991f8c5f23425349851ea418ffcf7af74c0d7f27ea463e1f43b70e8922b3882036c95f5862493dd45b923cccd2b60b5a0cad268f4783e96738825b733cf60deea364f5686859fb2751f1023e359917c8a5f96306a1a533a89e66f430ad8d0c8b518799925b4d02339d33faecaa4a8b0f24eaa5f615fda560308f205780f52d843a8c07f3abbc5e1ecfd880"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x9) r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f0000000540)=0xed3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) ptrace$getregs(0xe, r5, 0x6, &(0x7f0000000000)=""/162) socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 4.085869133s ago: executing program 2 (id=4812): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000241b0a610d219fcffa6ac01020301090212000109f390d90904bd0000020600097fc72f1336d1adefc327773cfb24fa28e53ef5c2b60a43b98920b8503dd451ef3808145192bde6fba4d276515f4b153fcdd7d540dcb8295ec498e47270545f8528d918297cff79808fc3467cd68537f071a9d118da4be1e729eec6a2b6be00458e14ab046d22906b6f450d78450ff578c93116374bfbbbd87a8490fe8dab2eb0e6e2d6edb75d653d872e077e0b36658cd1ddec18e582c7e4d55183f59f2c4bf9da00d595e564f7303d7a1dd27dfa5834524ff5964321df3925c4dadada2a0f73ed9fe322f01044c6aa22b28405fe6975ce6b4afd87c7ba0f520ce72e84fc80fdd4cf674a32f517616b89340bb2fecda5b0c57a98c3b8ed5b979d6f8d1168fee1009ef2d5d8ccc10c6fd818f2e55b3ef498a2722539ae209891c00c335c9ddf5dfc9d9b12fba9ec64fd657614fb68d61234406507beee574c18c0193b44aa8c94"], 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) lseek(r0, 0xae, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073114e000000000085100000020000008500a505000000007631cde56bc8706bc9663b7b38ae0f8f5a2e5e823f67146ab1f5357025b60568f961c39933e4dec5ad01ad53a27f6104000000c5c7ec27c6e6b9c8249eb80671f6f2c79b92"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x30, 0x41, 0x1, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x65}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) ioperm(0x2, 0xf, 0x8912) 4.084109477s ago: executing program 5 (id=4813): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x104, &(0x7f00000003c0)={[{0xc2, 0x4e00, "6301baf846178d4d4e4d8cdb724782c809e6fb9ec9dfc80804912ab9f29c33d415c4d02caa8c58a0a4f54559d6d21f728404c248b7c114a8699c23741b60fbb5039c50c920609e74b538058a9cfdc3f760792c83de5cd87436342ab3d7c24cec68abb5564391095447bfa358a0546c13f67f3a3a335045e178e164be222a977e9710ece9d0057eb41b7cc1f37a99afee6a93e2803043bc06d49febf2a143d48352ff5c82d8e8eeef587193d0480ffb468eb868fafa325bdf731e72d9e5bd2e05cfb7"}, {0x2c, 0x4e00, "945f1fbc30c230d6c1a376bbd2d06cccbbf453c95715e54f317327963fe2565f267d65405a40bdc5288400c2"}, {0x8, 0x4e00, "084b1f20975b629b"}]}) 1.907761737s ago: executing program 6 (id=4814): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) pipe2$watch_queue(&(0x7f0000009b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvfrom$inet(r2, 0x0, 0x0, 0x40002022, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x2, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280)=0x3, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0xe0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000e80)=0x10000) 376.319384ms ago: executing program 2 (id=4815): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x700, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) 360.125286ms ago: executing program 6 (id=4816): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rm\x00'}, 0x9) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x9) fchdir(r4) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000580)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r1}}, 0xffffff2a) 109.561823ms ago: executing program 2 (id=4817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0x11af9, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf2531000000050036000000000005003400010000000a0001007770616e31"], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x840) 0s ago: executing program 6 (id=4818): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0x0, &(0x7f0000000500)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4) r9 = syz_open_dev$media(&(0x7f0000000400), 0x7ffffffc, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.765290][T19662] usb 7-1: Product: syz [ 1243.769546][T19662] usb 7-1: Manufacturer: syz [ 1243.774250][T19662] usb 7-1: SerialNumber: syz [ 1243.793013][T19052] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1243.910573][T19669] gspca_sunplus: reg_r err -32 [ 1243.929445][T19669] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1244.076827][T19669] usb 2-1: USB disconnect, device number 11 [ 1244.443989][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4236'. [ 1245.029247][T19052] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1245.038470][T19662] usb 7-1: USB disconnect, device number 27 [ 1245.063057][T19052] ath9k_htc: Failed to initialize the device [ 1245.085615][ T5712] usb 6-1: USB disconnect, device number 4 [ 1245.098917][T19662] usb 7-1: ath9k_htc: USB layer deinitialized [ 1245.699716][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1246.147907][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1246.458393][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1246.670894][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4242'. [ 1246.839413][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1246.880981][T22257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4245'. [ 1246.923312][T22257] netlink: 'syz.1.4245': attribute type 7 has an invalid length. [ 1247.057726][T22257] netlink: 'syz.1.4245': attribute type 8 has an invalid length. [ 1247.104618][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4245'. [ 1248.125760][T22257] gretap0: entered promiscuous mode [ 1248.142219][T22257] gretap0: left promiscuous mode [ 1248.463875][T22277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1248.709959][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1249.614534][ T6733] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1249.700705][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1249.757478][T22298] X25: received unknown 00 with LCI 000 [ 1249.797512][ T6733] usb 6-1: Using ep0 maxpacket: 16 [ 1249.822300][ T6733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1249.857058][ T6733] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1249.873193][ T6733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.889063][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 1249.913058][ T6733] usb 6-1: Product: syz [ 1249.921571][ T6733] usb 6-1: Manufacturer: syz [ 1249.935353][ T6733] usb 6-1: SerialNumber: syz [ 1249.950638][ T6733] usb 6-1: config 0 descriptor?? [ 1249.971825][ T6733] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1249.995651][ T6733] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1249.995896][T22304] md: serialize_policy is only effective for raid1 [ 1250.781000][ T6733] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1251.323963][T17265] block device autoloading is deprecated and will be removed. [ 1251.325511][T22313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1251.358377][ T6733] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1251.469667][T21630] udevd[21630]: symlink '../../loop1' '/dev/disk/by-diskseq/131.tmp-b7:1' failed: Read-only file system [ 1251.486354][ T6733] em28xx 6-1:0.0: board has no eeprom [ 1251.500593][T22313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1251.815384][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1251.864544][ T29] audit: type=1400 audit(1786531499.232:1889): avc: denied { listen } for pid=22281 comm="syz.5.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1252.174596][ T6733] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1252.261525][ T6733] em28xx 6-1:0.0: dvb set to bulk mode. [ 1252.291328][T22313] gretap0: entered promiscuous mode [ 1252.312450][T16390] em28xx 6-1:0.0: Binding DVB extension [ 1252.393107][T22313] gretap0: left promiscuous mode [ 1252.603212][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4254'. [ 1253.224109][T17265] block device autoloading is deprecated and will be removed. [ 1253.633767][ T5712] usb 6-1: USB disconnect, device number 5 [ 1253.756306][ T5712] em28xx 6-1:0.0: Disconnecting em28xx [ 1253.764106][T21630] udevd[21630]: symlink '../../loop1' '/dev/disk/by-diskseq/132.tmp-b7:1' failed: Read-only file system [ 1254.066649][T16390] em28xx 6-1:0.0: Registering input extension [ 1254.174387][ T5712] em28xx 6-1:0.0: Closing input extension [ 1254.182733][T22336] netlink: 'syz.2.4270': attribute type 1 has an invalid length. [ 1254.276224][ T5712] em28xx 6-1:0.0: Freeing device [ 1254.291481][T22341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1254.359255][T22344] FAULT_INJECTION: forcing a failure. [ 1254.359255][T22344] name failslab, interval 1, probability 100, space 0, times 0 [ 1254.374394][T22336] bond2: entered promiscuous mode [ 1254.405734][T22336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.447029][T22344] CPU: 0 UID: 0 PID: 22344 Comm: syz.5.4271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.447059][T22344] Tainted: [L]=SOFTLOCKUP [ 1254.447066][T22344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1254.447075][T22344] Call Trace: [ 1254.447080][T22344] [ 1254.447087][T22344] dump_stack_lvl+0x100/0x190 [ 1254.447112][T22344] should_fail_ex.cold+0x5/0xa [ 1254.447133][T22344] should_failslab+0xc2/0x120 [ 1254.447156][T22344] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1254.447179][T22344] ? do_getname+0x35/0x390 [ 1254.447205][T22344] do_getname+0x35/0x390 [ 1254.447226][T22344] __x64_sys_execve+0x76/0xd0 [ 1254.447252][T22344] do_syscall_64+0x115/0x870 [ 1254.447273][T22344] ? clear_bhb_loop+0x40/0x90 [ 1254.447293][T22344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.447310][T22344] RIP: 0033:0x7f746179e0d9 [ 1254.447325][T22344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.447341][T22344] RSP: 002b:00007f7462586028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1254.447359][T22344] RAX: ffffffffffffffda RBX: 00007f7461a25fa0 RCX: 00007f746179e0d9 [ 1254.447371][T22344] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 1254.447381][T22344] RBP: 00007f7462586090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.447391][T22344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.447402][T22344] R13: 00007f7461a26038 R14: 00007f7461a25fa0 R15: 00007fff56e2b0d8 [ 1254.447424][T22344] [ 1254.704574][T19662] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1254.713020][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/132.tmp-b7:1' failed: Read-only file system [ 1254.792845][T22356] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1254.867355][T22356] md: serialize_policy is only effective for raid1 [ 1254.899340][T19662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1254.927606][T19662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1254.937505][T19662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1254.973250][T19662] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1254.982800][T19662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.991682][T19662] usb 7-1: Product: syz [ 1255.001147][T19662] usb 7-1: Manufacturer: syz [ 1255.006209][T19662] usb 7-1: SerialNumber: syz [ 1255.039288][T19662] usb 7-1: config 0 descriptor?? [ 1255.206191][T22345] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1255.226132][T19662] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 1255.696606][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1257.260660][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/132.tmp-b7:1' failed: Read-only file system [ 1257.454364][ T6733] usb 7-1: USB disconnect, device number 28 [ 1257.664590][T16390] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1258.196428][T22395] overlayfs: missing 'lowerdir' [ 1258.214026][T22396] overlayfs: missing 'lowerdir' [ 1258.224560][T16390] usb 6-1: Using ep0 maxpacket: 32 [ 1258.272536][T16390] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1258.296340][T16390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.316472][T16390] usb 6-1: Product: syz [ 1258.319827][T22383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.327016][T16390] usb 6-1: Manufacturer: syz [ 1258.363200][T16390] usb 6-1: SerialNumber: syz [ 1258.382722][T16390] usb 6-1: config 0 descriptor?? [ 1258.603934][T22383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.692672][T22383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.716915][T22408] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1258.744507][T19662] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1258.780888][T22408] md: serialize_policy is only effective for raid1 [ 1258.829126][T22383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.924082][T19662] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.955103][T19662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.976882][T19662] usb 7-1: Product: syz [ 1258.981770][T19662] usb 7-1: Manufacturer: syz [ 1258.999178][T19662] usb 7-1: SerialNumber: syz [ 1259.061933][T16390] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1259.068479][ T5712] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1259.109396][T16390] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1259.492225][T16390] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1259.502737][T22385] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4283'. [ 1259.558769][T22385] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4283'. [ 1259.606186][T16390] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1259.636901][T17752] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.667100][T17752] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.733055][ T7655] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.800637][T19662] usb 7-1: USB disconnect, device number 29 [ 1259.921431][T16390] usb 6-1: USB disconnect, device number 6 [ 1259.927382][T17409] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.123542][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/132.tmp-b7:1' failed: Read-only file system [ 1260.151118][ T5712] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1260.219998][ T5712] ath9k_htc: Failed to initialize the device [ 1260.268464][T19662] usb 7-1: ath9k_htc: USB layer deinitialized [ 1261.294546][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1261.456164][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1261.496954][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1261.523217][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1261.539867][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.559418][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1261.570204][ T24] usb 2-1: Product: syz [ 1261.574876][ T24] usb 2-1: Manufacturer: syz [ 1261.652603][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1261.675349][ T24] usb 2-1: SerialNumber: syz [ 1261.796237][ T24] usb 2-1: config 0 descriptor?? [ 1261.919858][T22427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1261.957501][T22434] gretap0: entered promiscuous mode [ 1262.054763][T22427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1262.064005][T22434] gretap0: left promiscuous mode [ 1262.086518][T22441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4301'. [ 1262.434179][T22442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'. [ 1262.504280][T22441] netlink: 'syz.5.4301': attribute type 7 has an invalid length. [ 1262.657662][T22427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1262.678026][T22441] netlink: 'syz.5.4301': attribute type 8 has an invalid length. [ 1262.688019][T22427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1262.721050][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'. [ 1262.786894][T22447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1262.866123][T22447] md: serialize_policy is only effective for raid1 [ 1263.229120][ T24] Error reading MAC address [ 1263.851012][T22460] SELinux: policydb magic number 0x6f632f2e does not match expected magic number 0xf97cff8c [ 1264.190982][T22460] SELinux: failed to load policy [ 1264.332703][ T24] usb 2-1: USB disconnect, device number 12 [ 1264.394234][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1264.404903][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1264.414042][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1264.423592][T19671] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1265.803709][T19671] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1265.820246][T19671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.858259][T19671] usb 7-1: Product: syz [ 1265.886413][T19671] usb 7-1: Manufacturer: syz [ 1265.892938][T19671] usb 7-1: SerialNumber: syz [ 1265.945547][T22487] __nla_validate_parse: 2 callbacks suppressed [ 1265.945564][T22487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1265.975239][T16390] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1265.997777][T17265] block device autoloading is deprecated and will be removed. [ 1266.006962][T22489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1266.014786][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1266.035484][T22487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1266.037088][T22489] netlink: 'syz.5.4317': attribute type 7 has an invalid length. [ 1266.090938][T22487] erspan0: entered promiscuous mode [ 1266.093507][T22489] netlink: 'syz.5.4317': attribute type 8 has an invalid length. [ 1266.110278][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1266.119009][T22487] gretap0: entered promiscuous mode [ 1266.166984][T22487] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1266.209275][T22487] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1266.313555][T22495] F2FS-fs: Conflicting test_dummy_encryption options [ 1266.505097][T19671] usb 7-1: USB disconnect, device number 30 [ 1266.784095][T22506] overlayfs: missing 'workdir' [ 1267.121193][T16390] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1267.301293][T16390] ath9k_htc: Failed to initialize the device [ 1267.318127][T19671] usb 7-1: ath9k_htc: USB layer deinitialized [ 1267.453879][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1268.096118][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 1268.675729][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1268.936000][T22529] overlayfs: missing 'workdir' [ 1269.001348][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4326'. [ 1270.031298][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1270.514948][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1271.001793][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4331'. [ 1271.026034][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4331'. [ 1271.043621][T22546] erspan0: entered promiscuous mode [ 1271.053167][T22546] gretap0: entered promiscuous mode [ 1271.064819][T22546] gretap0: left promiscuous mode [ 1271.087020][T22546] erspan0: left promiscuous mode [ 1271.094505][T19662] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1271.267667][T19662] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1271.302962][T19662] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1271.437705][T19662] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1271.446944][T19662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.455105][T19662] usb 2-1: Product: syz [ 1271.459269][T19662] usb 2-1: Manufacturer: syz [ 1271.463937][T19662] usb 2-1: SerialNumber: syz [ 1271.474633][T19662] usb 2-1: config 0 descriptor?? [ 1271.502842][T22542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1271.666353][T22554] overlayfs: missing 'workdir' [ 1271.834729][T22542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1271.894971][T22557] fuse: Bad value for 'fd' [ 1272.109454][T22542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1272.161912][T22542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1272.286496][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4335'. [ 1272.401303][T22564] syz.2.4337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1272.576002][T22567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1272.584782][T22564] CPU: 0 UID: 0 PID: 22564 Comm: syz.2.4337 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.584814][T22564] Tainted: [L]=SOFTLOCKUP [ 1272.584821][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1272.584831][T22564] Call Trace: [ 1272.584839][T22564] [ 1272.584846][T22564] dump_stack_lvl+0x100/0x190 [ 1272.584874][T22564] warn_alloc.cold+0x94/0xa8 [ 1272.584892][T22564] ? __pfx_warn_alloc+0x10/0x10 [ 1272.584908][T22564] ? register_lock_class+0x40/0x560 [ 1272.584932][T22564] ? kasan_save_stack+0x3f/0x50 [ 1272.584952][T22564] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1272.584977][T22564] ? xskq_create+0x52/0x1d0 [ 1272.584995][T22564] ? xsk_setsockopt+0x743/0xab0 [ 1272.585013][T22564] ? do_sock_setsockopt+0xf3/0x1d0 [ 1272.585038][T22564] ? __sys_setsockopt+0x195/0x220 [ 1272.585059][T22564] ? __x64_sys_setsockopt+0xbd/0x160 [ 1272.585080][T22564] ? do_syscall_64+0x115/0x870 [ 1272.585102][T22564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.585130][T22564] ? xskq_create+0xfb/0x1d0 [ 1272.585148][T22564] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1272.585181][T22564] ? xskq_create+0xfb/0x1d0 [ 1272.585206][T22564] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1272.585235][T22564] ? kasan_save_track+0x14/0x30 [ 1272.585254][T22564] ? __kasan_kmalloc+0xaa/0xb0 [ 1272.585274][T22564] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1272.585300][T22564] ? xskq_create+0xfb/0x1d0 [ 1272.585317][T22564] vmalloc_user_noprof+0x9e/0xe0 [ 1272.585339][T22564] ? xskq_create+0xfb/0x1d0 [ 1272.585357][T22564] xskq_create+0xfb/0x1d0 [ 1272.585376][T22564] xsk_setsockopt+0x743/0xab0 [ 1272.585394][T22564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1272.585411][T22564] ? find_held_lock+0x2b/0x80 [ 1272.585425][T22564] ? __fget_files+0x215/0x3d0 [ 1272.585446][T22564] ? selinux_socket_setsockopt+0x6a/0x80 [ 1272.585470][T22564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1272.585488][T22564] do_sock_setsockopt+0xf3/0x1d0 [ 1272.585515][T22564] __sys_setsockopt+0x195/0x220 [ 1272.585540][T22564] __x64_sys_setsockopt+0xbd/0x160 [ 1272.585560][T22564] ? do_syscall_64+0x90/0x870 [ 1272.585579][T22564] ? lockdep_hardirqs_on+0x78/0x100 [ 1272.585598][T22564] do_syscall_64+0x115/0x870 [ 1272.585617][T22564] ? clear_bhb_loop+0x40/0x90 [ 1272.585638][T22564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.585654][T22564] RIP: 0033:0x7f5f65f9e0d9 [ 1272.585669][T22564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.585684][T22564] RSP: 002b:00007f5f66e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1272.585701][T22564] RAX: ffffffffffffffda RBX: 00007f5f66225fa0 RCX: 00007f5f65f9e0d9 [ 1272.585712][T22564] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1272.585722][T22564] RBP: 00007f5f66035024 R08: 0000000000000029 R09: 0000000000000000 [ 1272.585732][T22564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.585742][T22564] R13: 00007f5f66226038 R14: 00007f5f66225fa0 R15: 00007ffedac81648 [ 1272.585765][T22564] [ 1272.585860][T22564] Mem-Info: [ 1272.638732][ T29] audit: type=1326 audit(1786531520.032:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="syz.2.4337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f65f9e0d9 code=0x0 [ 1272.915662][T22564] active_anon:39805 inactive_anon:1543 isolated_anon:0 [ 1272.915662][T22564] active_file:35 inactive_file:62735 isolated_file:0 [ 1272.915662][T22564] unevictable:768 dirty:451 writeback:0 [ 1272.915662][T22564] slab_reclaimable:8340 slab_unreclaimable:103764 [ 1272.915662][T22564] mapped:39039 shmem:26445 pagetables:1758 [ 1272.915662][T22564] sec_pagetables:0 bounce:0 [ 1272.915662][T22564] kernel_misc_reclaimable:0 [ 1272.915662][T22564] free:1250321 free_pcp:8390 free_cma:0 [ 1273.070834][T19662] Error reading MAC address [ 1273.335972][T22564] Node 0 active_anon:144848kB inactive_anon:6172kB active_file:140kB inactive_file:250736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129152kB dirty:1808kB writeback:0kB shmem:90044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14164kB pagetables:6748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1273.464578][T22564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1273.497801][T22564] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1273.533364][T22564] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1273.540192][T22564] Node 0 DMA32 free:1044348kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140448kB inactive_anon:6172kB active_file:140kB inactive_file:250736kB unevictable:1536kB writepending:1808kB zspages:376kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:49300kB local_pcp:28764kB free_cma:0kB [ 1273.754171][ T29] audit: type=1800 audit(1786531521.032:1891): pid=22578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4339" name="file0" dev="overlay" ino=864 res=0 errno=0 [ 1273.881580][T22567] netlink: 'syz.2.4337': attribute type 6 has an invalid length. [ 1274.036110][T22564] lowmem_reserve[]: 0 0 0 0 0 [ 1274.249485][T22564] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.397615][T22564] lowmem_reserve[]: 0 0 0 0 0 [ 1274.430558][T22564] Node 1 Normal free:3942716kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 1274.568674][T22590] netlink: 'syz.4.4341': attribute type 10 has an invalid length. [ 1274.810368][T22590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.827001][T22564] lowmem_reserve[]: 0 0 0 0 0 [ 1274.847233][T22590] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1274.857451][T22564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1274.891781][T22542] SELinux: failed to load policy [ 1274.901914][T22564] Node 0 DMA32: 837*4kB (UME) 378*8kB (UME) 353*16kB (UE) 255*32kB (UME) 1137*64kB (UME) 909*128kB (UME) 570*256kB (UME) 288*512kB (UME) 131*1024kB (UME) 49*2048kB (UME) 75*4096kB (UM) = 1044372kB [ 1274.933596][ T24] usb 2-1: USB disconnect, device number 13 [ 1274.971329][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1274.992023][T22564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.009317][T22579] nvme nvme0: failed to connect socket: -101 [ 1275.033896][T22564] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 11*16kB (UM) 7*32kB (UM) 10*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 959*4096kB (M) = 3942716kB [ 1275.068959][T22564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.084582][T22564] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1275.111677][T22564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.233601][T22564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.304969][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/133.tmp-b7:1' failed: Read-only file system [ 1275.372613][T22564] 84157 total pagecache pages [ 1275.460692][T22564] 656 pages in swap cache [ 1275.530869][T22564] Free swap = 122244kB [ 1275.582821][T22564] Total swap = 124996kB [ 1275.629991][T22564] 2097051 pages RAM [ 1275.688857][T22564] 0 pages HighMem/MovableOnly [ 1275.737262][T22564] 432306 pages reserved [ 1275.782414][T22564] 0 pages cma reserved [ 1276.190731][T22604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4344'. [ 1276.231817][T22604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4344'. [ 1276.402424][T22604] erspan0: entered promiscuous mode [ 1276.414875][T17265] block device autoloading is deprecated and will be removed. [ 1276.417691][T22604] gretap0: entered promiscuous mode [ 1276.446628][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1276.460951][T22604] gretap0: left promiscuous mode [ 1276.475467][T22604] erspan0: left promiscuous mode [ 1276.557812][T22610] fuse: Bad value for 'fd' [ 1276.639686][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1277.334514][T19671] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1277.752587][T19671] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1277.763315][T19671] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1277.797550][T19671] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1277.814103][T19671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.848354][T19671] usb 6-1: Product: syz [ 1277.869274][T19671] usb 6-1: Manufacturer: syz [ 1277.886804][T19671] usb 6-1: SerialNumber: syz [ 1277.898779][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1278.016502][T19671] usb 6-1: config 0 descriptor?? [ 1278.022641][T22634] fuse: Bad value for 'fd' [ 1278.038442][T22622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.050576][T22622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.230966][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 1278.815084][T22622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.858509][T22622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.935961][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1279.175077][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1279.221022][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1279.244459][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1279.257220][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1279.836105][T19671] Error reading MAC address [ 1280.358672][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1280.416412][T22658] SELinux: policydb magic number 0x6f632f2e does not match expected magic number 0xf97cff8c [ 1280.439866][T22658] SELinux: failed to load policy [ 1280.851475][ T24] usb 6-1: USB disconnect, device number 7 [ 1281.467405][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1282.798743][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1283.100288][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4372'. [ 1283.167864][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4370'. [ 1283.558811][T22692] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1283.582156][T22695] netlink: 'syz.4.4375': attribute type 10 has an invalid length. [ 1283.605862][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1283.659376][T22695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1283.754595][T22696] md: serialize_policy is only effective for raid1 [ 1283.964343][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1284.732956][T19052] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1284.956069][T19052] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1284.982690][T19052] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1285.010955][T19052] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1285.029444][T19052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.052068][T19052] usb 6-1: Product: syz [ 1285.118640][T19052] usb 6-1: Manufacturer: syz [ 1285.129771][T19052] usb 6-1: SerialNumber: syz [ 1285.153624][T19052] usb 6-1: config 0 descriptor?? [ 1285.169209][T22706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1285.196334][T22706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1285.458838][T22706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1285.486380][T22721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1285.494323][T22706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1285.550077][T22721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1285.993124][T19052] Error reading MAC address [ 1286.255990][T22729] fuse: Bad value for 'fd' [ 1287.041753][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1287.389021][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1287.765714][T22706] SELinux: failed to load policy [ 1287.878629][T19052] usb 6-1: USB disconnect, device number 8 [ 1288.278289][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1288.294126][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1288.306709][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1288.318514][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1288.329090][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1288.493170][T22763] netlink: zone id is out of range [ 1288.524883][T22763] netlink: get zone limit has 4 unknown bytes [ 1289.587588][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1289.870763][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1289.894669][T19052] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1289.925649][T22782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1289.960541][T22782] netlink: 'syz.1.4398': attribute type 7 has an invalid length. [ 1290.012778][T22782] netlink: 'syz.1.4398': attribute type 8 has an invalid length. [ 1290.046472][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1290.065868][T19052] usb 7-1: Using ep0 maxpacket: 32 [ 1290.078892][T19052] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1290.116573][T22782] erspan0: entered promiscuous mode [ 1290.214119][T22782] gretap0: entered promiscuous mode [ 1290.216981][T19052] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.234307][T19052] usb 7-1: Product: syz [ 1290.238542][T19052] usb 7-1: Manufacturer: syz [ 1290.243141][T19052] usb 7-1: SerialNumber: syz [ 1290.257068][T22782] erspan0: left promiscuous mode [ 1290.262793][T19052] usb 7-1: config 0 descriptor?? [ 1290.308139][T22782] gretap0: left promiscuous mode [ 1290.505662][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1290.887448][T19052] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1291.032347][T19052] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1291.089317][T22780] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4397'. [ 1291.164991][T19052] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1291.223766][T22780] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4397'. [ 1291.356720][T19052] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1291.403576][T19052] usb 7-1: USB disconnect, device number 31 [ 1291.488624][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/134.tmp-b7:1' failed: Read-only file system [ 1291.774504][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1291.969217][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1291.985211][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1292.019071][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1292.041261][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.060101][ T24] usb 2-1: Product: syz [ 1292.081143][ T24] usb 2-1: Manufacturer: syz [ 1292.118017][ T24] usb 2-1: SerialNumber: syz [ 1292.155552][ T24] usb 2-1: config 0 descriptor?? [ 1292.165810][T22799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1292.191356][T22799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1292.425352][T22799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1292.449592][T22799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1293.167169][ T24] Error reading MAC address [ 1294.046505][T22799] SELinux: failed to load policy [ 1294.236609][T19671] usb 2-1: USB disconnect, device number 14 [ 1294.436599][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1294.806790][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1295.178632][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.191714][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.572902][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.581347][ T24] usb 7-1: Product: syz [ 1295.585541][ T24] usb 7-1: Manufacturer: syz [ 1295.590119][ T24] usb 7-1: SerialNumber: syz [ 1295.611693][ T5712] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1295.913846][T17265] block device autoloading is deprecated and will be removed. [ 1295.923379][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1296.159595][ T24] usb 7-1: USB disconnect, device number 32 [ 1296.514733][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1296.689775][ T5712] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1296.826257][ T5712] ath9k_htc: Failed to initialize the device [ 1296.967656][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1296.982637][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1296.991815][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1297.001154][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1297.026372][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 1297.887484][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1299.042925][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'. [ 1299.053455][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'. [ 1299.062617][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'. [ 1299.071707][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'. [ 1299.081312][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'. [ 1299.361695][ T29] audit: type=1400 audit(1786531546.752:1892): avc: denied { bind } for pid=22881 comm="syz.1.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1299.462618][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1299.807754][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1300.784977][ T29] audit: type=1400 audit(1786531547.962:1893): avc: denied { accept } for pid=22892 comm="syz.2.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1301.648631][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1303.373704][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 1303.494715][ T5712] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1303.658767][ T5712] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1303.670294][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.681333][ T5712] usb 7-1: Product: syz [ 1303.688534][ T5712] usb 7-1: Manufacturer: syz [ 1303.694564][ T5712] usb 7-1: SerialNumber: syz [ 1304.018854][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1304.205939][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1304.529903][ T5712] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1304.691080][T19662] usb 7-1: USB disconnect, device number 33 [ 1304.817483][T22942] overlayfs: missing 'lowerdir' [ 1305.113310][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1305.135335][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 1305.148911][ T24] ath9k_htc: Failed to initialize the device [ 1305.163403][ T5712] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1305.176005][T19662] usb 7-1: ath9k_htc: USB layer deinitialized [ 1305.183473][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.219392][ T5712] usb 2-1: Product: syz [ 1305.225411][ T5712] usb 2-1: Manufacturer: syz [ 1305.230064][ T5712] usb 2-1: SerialNumber: syz [ 1305.246789][ T5712] usb 2-1: config 0 descriptor?? [ 1306.169656][ T5712] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1306.181081][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1306.189051][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1306.275320][T22958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1306.322560][T22958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1306.367887][T22930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1306.414632][T22930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1306.543602][T22958] erspan0: entered promiscuous mode [ 1306.552822][T22958] gretap0: entered promiscuous mode [ 1306.563753][T22958] gretap0: left promiscuous mode [ 1306.576978][ T5712] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1306.614902][ T5712] usb 2-1: USB disconnect, device number 15 [ 1306.643017][T22958] erspan0: left promiscuous mode [ 1307.144510][T19671] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1307.296957][T19671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1307.313843][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1307.333632][T19671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1307.381331][T19671] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1307.408221][T19671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.433232][T19671] usb 7-1: Product: syz [ 1307.437719][T19671] usb 7-1: Manufacturer: syz [ 1307.442417][T19671] usb 7-1: SerialNumber: syz [ 1307.455581][T19671] usb 7-1: config 0 descriptor?? [ 1307.472392][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1307.512604][T22968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1307.535265][T22968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1307.640670][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1307.776050][T22968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1307.834728][T22968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1308.017987][T22993] overlayfs: missing 'lowerdir' [ 1308.744788][T19671] Error reading MAC address [ 1309.008285][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1309.310799][T22995] SELinux: policydb magic number 0x6f632f2e does not match expected magic number 0xf97cff8c [ 1309.314138][T23009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1309.330591][T23009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1309.331904][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1309.354689][T22995] SELinux: failed to load policy [ 1309.489100][ T5712] usb 7-1: USB disconnect, device number 34 [ 1309.688334][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1310.832779][T23035] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 2, id = 0 [ 1310.842900][T23034] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4465'. [ 1311.373287][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 1312.012556][T23058] overlayfs: missing 'lowerdir' [ 1312.291968][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'. [ 1314.045062][ T5712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1314.326061][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 1314.362539][ T5712] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1314.381961][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.420242][ T5712] usb 2-1: Product: syz [ 1314.431593][ T5712] usb 2-1: Manufacturer: syz [ 1314.463359][ T5712] usb 2-1: SerialNumber: syz [ 1314.464263][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4477'. [ 1314.478354][ T5712] usb 2-1: config 0 descriptor?? [ 1314.499857][T23084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4476'. [ 1314.510078][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4477'. [ 1314.533124][T23084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4476'. [ 1314.551077][T23086] gretap0: entered promiscuous mode [ 1314.588869][T23086] gretap0: left promiscuous mode [ 1314.611039][T23084] erspan0: entered promiscuous mode [ 1314.617870][T23084] gretap0: entered promiscuous mode [ 1314.624317][T23084] gretap0: left promiscuous mode [ 1314.630804][T23084] erspan0: left promiscuous mode [ 1315.113591][ T5712] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1315.204618][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1315.227688][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1315.313217][T23068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1315.324882][ T5712] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1315.333438][T23068] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1315.373963][ T5712] usb 2-1: USB disconnect, device number 16 [ 1315.943108][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1315.963633][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1315.979073][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1315.992682][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1316.284668][T17265] block device autoloading is deprecated and will be removed. [ 1316.331082][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/136.tmp-b7:1' failed: Read-only file system [ 1316.700537][T23108] overlayfs: missing 'lowerdir' [ 1316.714793][ T5712] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1316.970458][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1317.646709][ T5712] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1317.860134][ T5712] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1317.875710][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1317.888893][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.911933][ T5712] usb 2-1: Product: syz [ 1317.933910][ T5712] usb 2-1: Manufacturer: syz [ 1317.954938][ T5712] usb 2-1: SerialNumber: syz [ 1318.298539][ T5712] cdc_ncm 2-1:1.0: bind() failure [ 1318.337357][ T5712] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1318.368050][ T5712] cdc_ncm 2-1:1.1: bind() failure [ 1318.409765][ T5712] usb 2-1: USB disconnect, device number 17 [ 1318.772937][T23128] erspan0: entered promiscuous mode [ 1318.804009][T23128] gretap0: entered promiscuous mode [ 1318.825257][ T5712] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1318.898703][T23128] debugfs: 'hsr1' already exists in 'hsr' [ 1318.977154][T23128] Cannot create hsr debugfs directory [ 1319.011347][ T5712] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1319.164614][ T5712] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 33029, setting to 1024 [ 1319.243386][ T5712] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 1319.258696][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.271864][ T5712] usb 2-1: Product: syz [ 1319.278148][ T5712] usb 2-1: Manufacturer: syz [ 1319.282782][ T5712] usb 2-1: SerialNumber: syz [ 1319.561109][ T5712] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1319.746107][ T5712] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 1319.921418][ T5712] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1319.939898][T23142] __nla_validate_parse: 3 callbacks suppressed [ 1319.939917][T23142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1319.987725][T17265] block device autoloading is deprecated and will be removed. [ 1319.998998][ T5712] usb 2-1: USB disconnect, device number 18 [ 1320.034125][T21777] udevd[21777]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1320.050174][T23142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1320.068200][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.578951][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1320.588731][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1320.598073][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1320.607197][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1321.151514][ T29] audit: type=1400 audit(1786531568.542:1894): avc: denied { listen } for pid=23156 comm="syz.6.4496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1321.218400][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1321.399630][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1321.862109][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1322.012753][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1322.022013][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1322.031420][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1322.109782][T23172] netlink: 'syz.2.4501': attribute type 7 has an invalid length. [ 1322.352743][T23177] netlink: 'syz.2.4501': attribute type 7 has an invalid length. [ 1322.458716][T23172] netlink: 'syz.2.4501': attribute type 8 has an invalid length. [ 1322.481184][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1322.492444][ T29] audit: type=1400 audit(1786531569.852:1895): avc: denied { append } for pid=23174 comm="syz.1.4502" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1322.585777][T23177] netlink: 'syz.2.4501': attribute type 8 has an invalid length. [ 1322.621776][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1322.705962][T23172] gretap0: entered promiscuous mode [ 1322.719272][T23185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1322.974778][T23185] md: serialize_policy is only effective for raid1 [ 1323.107382][T23172] gretap0: left promiscuous mode [ 1323.289005][T23177] gretap0: entered promiscuous mode [ 1323.360641][ T29] audit: type=1400 audit(1786531570.712:1896): avc: denied { ioctl } for pid=23194 comm="syz.4.4505" path="socket:[90978]" dev="sockfs" ino=90978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1323.662151][T23177] gretap0: left promiscuous mode [ 1323.726988][ T29] audit: type=1400 audit(1786531571.122:1897): avc: denied { write } for pid=23165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.765562][T23195] ip6erspan0: entered allmulticast mode [ 1323.870426][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1324.021491][ T29] audit: type=1400 audit(1786531571.412:1898): avc: denied { mounton } for pid=23202 comm="syz.1.4508" path="/269/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1324.116828][ T29] audit: type=1400 audit(1786531571.412:1899): avc: denied { write } for pid=23206 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.241910][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1325.012070][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1326.716772][T23235] overlayfs: missing 'lowerdir' [ 1326.716976][T23232] __nla_validate_parse: 7 callbacks suppressed [ 1326.716988][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4514'. [ 1326.747368][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1326.757989][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1326.783952][ T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1326.787048][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/137.tmp-b7:1' failed: Read-only file system [ 1326.793213][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.914990][T12362] usb 5-1: Failed to early initialize device [ 1326.974175][ T24] usb 6-1: Product: syz [ 1327.015001][ T24] usb 6-1: Manufacturer: syz [ 1327.021651][T12362] usb 5-1: USB disconnect, device number 11 [ 1327.052914][ T24] usb 6-1: SerialNumber: syz [ 1327.081976][ T24] usb 6-1: config 0 descriptor?? [ 1327.110289][T23222] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1327.232202][T23222] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1327.282508][T23253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1327.344202][T23253] netlink: 'syz.6.4520': attribute type 7 has an invalid length. [ 1327.366320][T23251] fuse: Bad value for 'fd' [ 1327.418031][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1327.457730][ T24] usb 6-1: can't set config #0, error -71 [ 1327.478488][T23253] netlink: 'syz.6.4520': attribute type 8 has an invalid length. [ 1327.511628][ T24] usb 6-1: USB disconnect, device number 9 [ 1327.534808][ T29] audit: type=1400 audit(1786531574.932:1900): avc: denied { write } for pid=23216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.550365][T23258] netlink: 'syz.6.4520': attribute type 7 has an invalid length. [ 1327.646121][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1327.654592][T23258] netlink: 'syz.6.4520': attribute type 8 has an invalid length. [ 1327.748562][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1327.790637][T23253] erspan0: entered promiscuous mode [ 1327.807395][T23253] gretap0: entered promiscuous mode [ 1327.835285][T23253] gretap0: left promiscuous mode [ 1327.855733][T23253] erspan0: left promiscuous mode [ 1327.962023][T23258] erspan0: entered promiscuous mode [ 1327.974864][T16390] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1328.010735][ T29] audit: type=1400 audit(1786531575.402:1901): avc: denied { write } for pid=23268 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.052877][T23258] gretap0: entered promiscuous mode [ 1328.224945][T16390] usb 2-1: device descriptor read/64, error -71 [ 1328.388239][T23258] gretap0: left promiscuous mode [ 1328.422516][T23258] erspan0: left promiscuous mode [ 1328.594523][T16390] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1328.734513][T16390] usb 2-1: device descriptor read/64, error -71 [ 1328.854858][T16390] usb usb2-port1: attempt power cycle [ 1329.468740][T16390] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1329.552082][T23288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4528'. [ 1329.577066][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1329.603568][T23288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4528'. [ 1329.774550][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1329.788196][ T24] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1329.819335][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.399448][ T24] usb 7-1: Product: syz [ 1330.404313][T16390] usb 2-1: device descriptor read/8, error -71 [ 1330.431537][ T24] usb 7-1: Manufacturer: syz [ 1330.470873][ T24] usb 7-1: SerialNumber: syz [ 1330.516491][ T24] usb 7-1: config 0 descriptor?? [ 1330.582974][T17265] block device autoloading is deprecated and will be removed. [ 1330.610475][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/138.tmp-b7:1' failed: Read-only file system [ 1330.686523][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4531'. [ 1330.936168][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1331.710497][ T24] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1331.726287][ T24] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1331.733142][ T24] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1331.900225][ T24] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1331.925774][T23284] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4527'. [ 1331.966977][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/138.tmp-b7:1' failed: Read-only file system [ 1331.984547][T23284] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4527'. [ 1332.096916][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1332.113231][ T24] usb 7-1: USB disconnect, device number 35 [ 1332.803854][T23306] netlink: 'syz.1.4534': attribute type 7 has an invalid length. [ 1332.981842][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1332.993532][T23306] netlink: 'syz.1.4534': attribute type 8 has an invalid length. [ 1333.005535][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1333.017759][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1333.028875][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1333.039305][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1333.234045][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1333.293047][T23306] erspan0: entered promiscuous mode [ 1333.391035][T23306] gretap0: entered promiscuous mode [ 1333.677338][T23306] erspan0: left promiscuous mode [ 1333.697307][T23306] gretap0: left promiscuous mode [ 1333.876656][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/138.tmp-b7:1' failed: Read-only file system [ 1334.044551][T16390] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1334.143801][T23330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4541'. [ 1334.211246][T16390] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1334.223051][T16390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.224470][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1334.242092][T16390] usb 7-1: Product: syz [ 1334.261488][T16390] usb 7-1: Manufacturer: syz [ 1334.265923][T23330] gretap0: entered promiscuous mode [ 1334.280953][T16390] usb 7-1: SerialNumber: syz [ 1334.440128][T23330] gretap0: left promiscuous mode [ 1334.475800][ T6733] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1335.061130][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1335.116540][T16390] usb 7-1: USB disconnect, device number 36 [ 1335.355684][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.369926][ T24] usb 2-1: Product: syz [ 1335.374268][ T24] usb 2-1: Manufacturer: syz [ 1335.378993][ T24] usb 2-1: SerialNumber: syz [ 1335.420432][T12362] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1335.634673][ T6733] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1335.652939][ T6733] ath9k_htc: Failed to initialize the device [ 1335.667148][T16390] usb 7-1: ath9k_htc: USB layer deinitialized [ 1335.896446][T19666] usb 2-1: USB disconnect, device number 23 [ 1336.525024][T12362] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1336.693605][T12362] ath9k_htc: Failed to initialize the device [ 1336.710728][T19666] usb 2-1: ath9k_htc: USB layer deinitialized [ 1337.036900][T23345] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1337.969022][T17265] block device autoloading is deprecated and will be removed. [ 1338.017308][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system [ 1338.112081][T23355] __nla_validate_parse: 2 callbacks suppressed [ 1338.112101][T23355] netlink: 248 bytes leftover after parsing attributes in process `syz.6.4548'. [ 1338.161743][T23355] NCSI netlink: No device for ifindex 0 [ 1338.399639][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1338.424779][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1338.432558][T12362] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1338.446505][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system [ 1338.706496][T12362] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.717456][T12362] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1338.731481][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1338.742051][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.751005][T12362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1338.763635][ T24] usb 7-1: Product: syz [ 1338.768850][ T24] usb 7-1: Manufacturer: syz [ 1338.773778][T12362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1338.904375][T23374] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1338.913358][T23374] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1339.183591][ T24] usb 7-1: SerialNumber: syz [ 1339.215462][ T5712] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1339.229561][T12362] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1339.260054][T12362] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1339.321654][T12362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1339.352595][T12362] usb 6-1: Product: syz [ 1339.363160][T12362] usb 6-1: Manufacturer: syz [ 1339.376903][T12362] usb 6-1: SerialNumber: syz [ 1339.393238][T12362] usb 6-1: config 0 descriptor?? [ 1339.425529][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4555'. [ 1339.521764][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system [ 1339.537633][ T29] audit: type=1400 audit(1786531586.932:1902): avc: denied { create } for pid=23354 comm="syz.6.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1339.613768][T12362] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1339.632116][T12362] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1339.658808][ T6733] usb 7-1: USB disconnect, device number 37 [ 1339.724582][T23384] md: serialize_policy is only effective for raid1 [ 1339.930926][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1340.178879][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1340.914871][ T5712] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1340.924778][T12362] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1340.934065][ T5712] ath9k_htc: Failed to initialize the device [ 1340.940575][T12362] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1340.952705][T12362] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1340.964566][ T6733] usb 7-1: ath9k_htc: USB layer deinitialized [ 1341.024591][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1341.062313][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.096868][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.108993][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1341.120766][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.156901][ T24] usb 2-1: config 0 descriptor?? [ 1341.411488][ T24] hub 2-1:0.0: USB hub found [ 1341.574493][ T6733] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1341.600152][T23381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.611110][T23381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.629396][T23381] netlink: 'syz.1.4556': attribute type 12 has an invalid length. [ 1341.644276][ T24] hub 2-1:0.0: 10 ports detected [ 1341.650635][ T24] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1341.735839][ T6733] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1341.814497][ T6733] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1341.831617][T19666] usb 6-1: USB disconnect, device number 10 [ 1341.888381][ T6733] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1341.930252][ T6733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.974678][ T6733] usb 7-1: Product: syz [ 1341.988080][ T6733] usb 7-1: Manufacturer: syz [ 1342.002916][ T6733] usb 7-1: SerialNumber: syz [ 1342.023896][ T6733] usb 7-1: config 0 descriptor?? [ 1342.045233][T23402] md: serialize_policy is only effective for raid1 [ 1342.115194][T23395] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1342.134674][T23395] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1342.167053][T23410] fuse: Bad value for 'fd' [ 1342.304966][T23412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4566'. [ 1342.357195][T23412] netlink: 'syz.5.4566': attribute type 7 has an invalid length. [ 1342.384448][T23412] netlink: 'syz.5.4566': attribute type 8 has an invalid length. [ 1342.429010][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4566'. [ 1342.505875][T23395] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1342.513153][T23395] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1342.700175][T23421] overlayfs: failed to clone upperpath [ 1342.739983][T23421] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1342.748990][T23421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1342.804029][ T24] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1342.871785][ T24] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1342.962821][ T24] usbhid 2-1:0.0: can't add hid device: -32 [ 1342.976526][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1342.994511][ T6733] Error reading MAC address [ 1343.051202][ T24] usb 2-1: USB disconnect, device number 24 [ 1343.128376][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system [ 1343.531742][T23395] SELinux: failed to load policy [ 1343.563965][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 1343.596640][ T24] usb 7-1: USB disconnect, device number 38 [ 1343.669422][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system [ 1343.944510][ T5712] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1344.145541][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 1344.238182][ T5712] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1344.289522][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.362210][ T5712] usb 2-1: Product: syz [ 1344.372460][ T5712] usb 2-1: Manufacturer: syz [ 1344.383696][ T5712] usb 2-1: SerialNumber: syz [ 1344.404199][ T5712] usb 2-1: config 0 descriptor?? [ 1345.304335][ T5712] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1345.438502][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1345.445785][ T5712] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1345.475398][T23436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4573'. [ 1345.657286][T23436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4573'. [ 1346.011335][ T5712] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1346.023882][ T5712] usb 2-1: USB disconnect, device number 25 [ 1346.211212][T23465] overlayfs: failed to clone upperpath [ 1346.286060][T23467] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1346.295036][T23467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1347.878305][T17265] block device autoloading is deprecated and will be removed. [ 1347.893142][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 1348.536439][ T6733] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1348.810777][ T6733] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1349.373134][ T6733] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1349.398814][ T6733] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1349.515320][ T6733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.533969][ T6733] usb 7-1: Product: syz [ 1349.543794][ T6733] usb 7-1: Manufacturer: syz [ 1349.553430][ T6733] usb 7-1: SerialNumber: syz [ 1349.573720][ T6733] usb 7-1: config 0 descriptor?? [ 1349.585937][T23478] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1349.599804][T23478] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1349.681365][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1349.713198][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4586'. [ 1349.730018][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4586'. [ 1349.739468][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4586'. [ 1349.748917][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4586'. [ 1350.489873][ T6733] dm9601 7-1:0.0: probe with driver dm9601 failed with error -71 [ 1350.538375][ T6733] usb 7-1: USB disconnect, device number 39 [ 1350.573071][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 1351.903566][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1352.954488][T12362] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1353.128557][T17265] block device autoloading is deprecated and will be removed. [ 1353.227197][T12362] usb 7-1: Using ep0 maxpacket: 32 [ 1353.236351][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 1353.241756][T12362] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1353.261502][T12362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.270890][T12362] usb 7-1: Product: syz [ 1353.275315][T12362] usb 7-1: Manufacturer: syz [ 1353.280042][T12362] usb 7-1: SerialNumber: syz [ 1353.296929][T12362] usb 7-1: config 0 descriptor?? [ 1353.422739][T23535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1353.432043][T23535] netlink: 'syz.1.4598': attribute type 7 has an invalid length. [ 1353.440487][T23535] netlink: 'syz.1.4598': attribute type 8 has an invalid length. [ 1353.448786][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1353.480188][T23535] gretap0: entered promiscuous mode [ 1353.496397][T23535] gretap0: left promiscuous mode [ 1353.512084][T23540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1353.574500][T23540] netlink: 'syz.1.4598': attribute type 7 has an invalid length. [ 1353.634429][T23540] netlink: 'syz.1.4598': attribute type 8 has an invalid length. [ 1353.645023][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1353.677304][T23540] gretap0: entered promiscuous mode [ 1353.703119][T23540] gretap0: left promiscuous mode [ 1353.868763][T22330] udevd[22330]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 1353.911519][T12362] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1353.938261][ T29] audit: type=1400 audit(1786531601.332:1903): avc: denied { mounton } for pid=23552 comm="syz.1.4606" path="/283/file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1353.942183][T12362] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1354.034024][T12362] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1354.085264][T23557] netlink: 'syz.5.4600': attribute type 1 has an invalid length. [ 1354.105781][T12362] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1354.114517][T16390] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1354.148483][T12362] usb 7-1: USB disconnect, device number 40 [ 1354.198091][T23557] bond1: entered promiscuous mode [ 1354.232576][T23557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1354.291697][T16390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.334465][T16390] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1354.366145][T16390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1354.399624][T16390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1354.430954][T16390] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1354.461068][T16390] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1354.471263][T16390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1354.494794][T16390] usb 5-1: Product: syz [ 1354.668417][T16390] usb 5-1: Manufacturer: syz [ 1354.726466][T16390] usb 5-1: SerialNumber: syz [ 1354.932916][T16390] usb 5-1: config 0 descriptor?? [ 1355.427961][T16390] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1355.573912][T16390] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1356.192089][T16390] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1356.383518][T16390] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1356.404897][T16390] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1356.518149][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.524583][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.552866][T23582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1356.911670][T23593] __nla_validate_parse: 2 callbacks suppressed [ 1356.911688][T23593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4615'. [ 1356.930946][T23593] netlink: 'syz.2.4615': attribute type 7 has an invalid length. [ 1356.939696][T23593] netlink: 'syz.2.4615': attribute type 8 has an invalid length. [ 1356.947564][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4615'. [ 1356.963249][T23593] gretap0: entered promiscuous mode [ 1356.968709][T12362] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1356.979577][T23593] gretap0: left promiscuous mode [ 1357.106830][ T6733] usb 5-1: USB disconnect, device number 12 [ 1357.112815][ T29] audit: type=1326 audit(1786531604.462:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.140704][T16390] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1357.148016][T12362] usb 7-1: Using ep0 maxpacket: 16 [ 1357.165777][T12362] usb 7-1: config 9 has an invalid interface number: 189 but max is 0 [ 1357.183996][ T29] audit: type=1326 audit(1786531604.462:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.199439][T23599] tipc: Started in network mode [ 1357.210979][T12362] usb 7-1: config 9 has no interface number 0 [ 1357.234023][T12362] usb 7-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 1357.236384][T23599] tipc: Node identity 36cbeb1e24b8, cluster identity 4711 [ 1357.245841][T12362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.264459][ T29] audit: type=1326 audit(1786531604.532:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.295920][T12362] usb 7-1: Product: syz [ 1357.300108][T12362] usb 7-1: Manufacturer: syz [ 1357.305042][T12362] usb 7-1: SerialNumber: syz [ 1357.305889][T23599] tipc: Enabled bearer , priority 0 [ 1357.325779][T23601] syzkaller0: mtu less than device minimum [ 1357.338702][T16390] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1357.347863][T16390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.356411][ T29] audit: type=1326 audit(1786531604.532:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.402579][T16390] usb 6-1: Product: syz [ 1357.412442][T16390] usb 6-1: Manufacturer: syz [ 1357.422499][T16390] usb 6-1: SerialNumber: syz [ 1357.441079][ T29] audit: type=1326 audit(1786531604.532:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.504357][ T6733] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1357.563599][ T29] audit: type=1326 audit(1786531604.532:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x0 [ 1357.595260][T12362] usb 7-1: No union descriptors [ 1357.665154][T23603] fuse: Bad value for 'fd' [ 1357.692090][ T29] audit: type=1326 audit(1786531604.532:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.737982][T12362] usb 7-1: USB disconnect, device number 41 [ 1357.804449][ T29] audit: type=1326 audit(1786531604.532:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.808227][T17265] block device autoloading is deprecated and will be removed. [ 1357.838515][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 1357.877257][T23588] openvswitch: netlink: Missing valid actions attribute. [ 1357.906343][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1357.916280][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1357.925741][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1357.935273][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1357.944693][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1357.974457][T23588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1357.983468][ T29] audit: type=1326 audit(1786531604.572:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23595 comm="syz.2.4616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f65f9e0d9 code=0x7ffc0000 [ 1357.998457][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 1358.105130][T19666] usb 6-1: USB disconnect, device number 11 [ 1358.226120][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 1358.313045][T16390] tipc: Node number set to 309586718 [ 1359.038478][ T6733] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1359.054609][ T6733] ath9k_htc: Failed to initialize the device [ 1359.062877][T19666] usb 6-1: ath9k_htc: USB layer deinitialized [ 1359.456482][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 1359.532068][T23630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1359.699406][T23630] netlink: 'syz.5.4626': attribute type 7 has an invalid length. [ 1359.707314][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1359.707330][ T29] audit: type=1400 audit(1786531606.892:1927): avc: granted { setsecparam } for pid=23625 comm="syz.6.4624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1359.758111][T23630] netlink: 'syz.5.4626': attribute type 8 has an invalid length. [ 1359.766382][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1359.798952][T23635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4627'. [ 1360.038112][T23635] gretap0: entered promiscuous mode [ 1360.510111][T23635] gretap0: left promiscuous mode [ 1361.124528][ T5712] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1362.602601][ T5712] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.700879][ T5712] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1362.731638][ T5712] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1362.736863][T23662] fuse: Bad value for 'fd' [ 1362.745514][ T29] audit: type=1400 audit(1786531610.132:1928): avc: denied { mounton } for pid=23659 comm="syz.2.4634" path="/474/file0" dev="tmpfs" ino=2664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1362.761185][T23663] device-mapper: table: 248:0: zero-length target [ 1362.779258][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.790384][ T5712] usb 7-1: Product: syz [ 1362.794801][ T5712] usb 7-1: Manufacturer: syz [ 1362.799991][T23663] device-mapper: ioctl: error adding target to table [ 1362.810498][ T5712] usb 7-1: SerialNumber: syz [ 1362.842464][T23663] __nla_validate_parse: 2 callbacks suppressed [ 1362.842484][T23663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1362.927139][T23667] device-mapper: table: 248:0: zero-length target [ 1362.933789][T23667] device-mapper: ioctl: error adding target to table [ 1362.944799][T23667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4636'. [ 1363.038143][ T5712] ttusb_dec_send_command: result bulk message failed: error -22 [ 1363.081985][ T5712] ttusb-dec 7-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1363.138826][ T5712] usb 7-1: USB disconnect, device number 42 [ 1363.139198][T17265] block device autoloading is deprecated and will be removed. [ 1363.180211][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system [ 1363.282100][T23679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4641'. [ 1363.295059][T23679] netlink: 'syz.5.4641': attribute type 7 has an invalid length. [ 1363.313137][T23679] netlink: 'syz.5.4641': attribute type 8 has an invalid length. [ 1363.327390][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system [ 1363.353829][T23686] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1363.363286][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4641'. [ 1365.090096][T23705] device-mapper: table: 248:0: zero-length target [ 1365.104423][T23705] device-mapper: ioctl: error adding target to table [ 1365.144243][T23710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4647'. [ 1365.296878][T17265] block device autoloading is deprecated and will be removed. [ 1365.332582][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1365.735788][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1365.814581][T19671] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1365.965650][T12362] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1366.040307][T19671] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.057601][T21676] udevd[21676]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1366.062881][T19671] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1366.175279][T12362] usb 6-1: Using ep0 maxpacket: 32 [ 1366.186637][T19671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1366.361991][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1366.372081][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1366.381241][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1366.390353][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1366.507218][T19671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1366.670192][T12362] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1366.714054][T12362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.762975][T12362] usb 6-1: Product: syz [ 1366.795354][T12362] usb 6-1: Manufacturer: syz [ 1366.823082][T12362] usb 6-1: SerialNumber: syz [ 1366.897714][T12362] usb 6-1: config 0 descriptor?? [ 1366.906213][T19671] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1366.937808][T19671] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1366.957005][T19671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1366.984442][T19671] usb 5-1: Product: syz [ 1366.989518][T19671] usb 5-1: Manufacturer: syz [ 1366.995777][T19671] usb 5-1: SerialNumber: syz [ 1367.008396][T19671] usb 5-1: config 0 descriptor?? [ 1367.116775][T21549] udevd[21549]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1367.269438][T19671] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1367.291489][T19671] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1367.521973][T23740] overlayfs: missing 'workdir' [ 1367.815117][T12362] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1368.315709][T19671] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1368.323142][T23744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4650'. [ 1368.334418][T19671] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1368.354640][T19671] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1368.373032][T12362] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1368.382906][T23744] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4650'. [ 1368.402176][T12362] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1368.615326][T12362] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1368.632325][T12362] usb 6-1: USB disconnect, device number 12 [ 1368.905607][T23753] overlayfs: missing 'workdir' [ 1369.452908][T12362] usb 5-1: USB disconnect, device number 13 [ 1369.620166][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1369.793124][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1370.937654][ T24] usb 7-1: device descriptor read/64, error -71 [ 1371.142727][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1371.152294][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1371.161427][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1371.170452][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1371.179523][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1371.314560][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1371.534319][ T24] usb 7-1: device descriptor read/64, error -71 [ 1371.743217][T23786] overlayfs: missing 'workdir' [ 1371.750694][ T24] usb usb7-port1: attempt power cycle [ 1372.214527][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1372.255140][ T24] usb 7-1: device descriptor read/8, error -71 [ 1372.488060][ T29] audit: type=1400 audit(1786531619.882:1929): avc: denied { write } for pid=23788 comm="syz.4.4673" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1372.817806][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1373.131499][ T24] usb 7-1: device descriptor read/8, error -71 [ 1373.337435][ T24] usb usb7-port1: unable to enumerate USB device [ 1373.403724][T23800] udevd[23800]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1373.583627][T19666] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1373.922136][T23809] overlayfs: missing 'lowerdir' [ 1374.167957][T19666] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.198327][T19666] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1374.371469][T19666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1375.057340][T19666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1375.090898][T19666] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1376.103209][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1376.112935][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1376.122077][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1376.131103][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1376.140216][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1376.172440][T19666] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1376.218915][T19666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1376.245960][T19666] usb 2-1: Product: syz [ 1376.257933][T19666] usb 2-1: Manufacturer: syz [ 1376.280310][T19666] usb 2-1: SerialNumber: syz [ 1376.299188][T19666] usb 2-1: config 0 descriptor?? [ 1376.426167][T23835] netlink: 'syz.6.4685': attribute type 4 has an invalid length. [ 1376.446728][T19666] usb 2-1: can't set config #0, error -71 [ 1376.983644][T19666] usb 2-1: USB disconnect, device number 26 [ 1377.213253][T23804] udevd[23804]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1377.686996][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1377.823209][T23855] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(520093700.2.0), cmd(5) [ 1377.884540][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1377.898641][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.938565][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.954575][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1377.978368][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.015791][ T24] usb 6-1: config 0 descriptor?? [ 1378.048352][ T24] hub 6-1:0.0: USB hub found [ 1378.099077][T23797] udevd[23797]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1378.276124][ T24] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1378.902227][ T24] hid-generic 0003:046D:C31C.001B: item fetching failed at offset 0/1 [ 1379.028102][ T24] hid-generic 0003:046D:C31C.001B: probe with driver hid-generic failed with error -22 [ 1379.108706][T23804] udevd[23804]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1379.132925][T23872] FAULT_INJECTION: forcing a failure. [ 1379.132925][T23872] name failslab, interval 1, probability 100, space 0, times 0 [ 1379.152461][ T24] usb 6-1: USB disconnect, device number 13 [ 1379.194988][T23872] CPU: 0 UID: 0 PID: 23872 Comm: syz.1.4694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.195017][T23872] Tainted: [L]=SOFTLOCKUP [ 1379.195023][T23872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1379.195034][T23872] Call Trace: [ 1379.195040][T23872] [ 1379.195048][T23872] dump_stack_lvl+0x100/0x190 [ 1379.195076][T23872] should_fail_ex.cold+0x5/0xa [ 1379.195099][T23872] should_failslab+0xc2/0x120 [ 1379.195124][T23872] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1379.195148][T23872] ? register_pidns_sysctls+0x48/0x1c0 [ 1379.195173][T23872] kmemdup_noprof+0x29/0x60 [ 1379.195193][T23872] register_pidns_sysctls+0x48/0x1c0 [ 1379.195212][T23872] ? __ns_common_init+0x299/0x4b0 [ 1379.195240][T23872] copy_pid_ns+0x680/0x10a0 [ 1379.195267][T23872] ? __pfx_copy_pid_ns+0x10/0x10 [ 1379.195290][T23872] ? rcu_is_watching+0x12/0xc0 [ 1379.195318][T23872] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1379.195341][T23872] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1379.195363][T23872] ? create_new_namespaces+0x30/0xac0 [ 1379.195391][T23872] create_new_namespaces+0x2aa/0xac0 [ 1379.195422][T23872] unshare_nsproxy_namespaces+0xf2/0x220 [ 1379.195449][T23872] ksys_unshare+0x438/0xab0 [ 1379.195478][T23872] ? __pfx_ksys_unshare+0x10/0x10 [ 1379.195503][T23872] ? ksys_write+0x1ac/0x250 [ 1379.195527][T23872] __x64_sys_unshare+0x31/0x40 [ 1379.195552][T23872] do_syscall_64+0x115/0x870 [ 1379.195574][T23872] ? clear_bhb_loop+0x40/0x90 [ 1379.195597][T23872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.195615][T23872] RIP: 0033:0x7ff461d9e0d9 [ 1379.195630][T23872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.195647][T23872] RSP: 002b:00007ff462b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1379.195664][T23872] RAX: ffffffffffffffda RBX: 00007ff462025fa0 RCX: 00007ff461d9e0d9 [ 1379.195676][T23872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1379.195687][T23872] RBP: 00007ff462b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.195697][T23872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.195708][T23872] R13: 00007ff462026038 R14: 00007ff462025fa0 R15: 00007ffc537e67f8 [ 1379.195732][T23872] [ 1379.764814][T19671] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1379.845356][T12362] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1380.080201][T12362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.134732][T12362] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1380.265230][T12362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1380.414364][T12362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1380.432033][T19671] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1380.454440][T19671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.460190][T12362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1380.474405][T19671] usb 5-1: Product: syz [ 1380.479458][T19671] usb 5-1: Manufacturer: syz [ 1380.484065][T19671] usb 5-1: SerialNumber: syz [ 1380.527176][T12362] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1380.539216][T12362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1380.669074][T12362] usb 2-1: Product: syz [ 1380.695473][T12362] usb 2-1: Manufacturer: syz [ 1380.707603][T12362] usb 2-1: SerialNumber: syz [ 1380.860349][T12362] usb 2-1: config 0 descriptor?? [ 1380.898134][T19666] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1381.294660][T12362] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1381.301546][T12362] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1381.945585][T19671] usb 5-1: USB disconnect, device number 14 [ 1381.954496][T12362] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1381.954523][T12362] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1381.954728][T12362] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1382.306014][T19666] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1382.622265][T19666] ath9k_htc: Failed to initialize the device [ 1382.708785][T19671] usb 5-1: ath9k_htc: USB layer deinitialized [ 1383.065346][T12362] usb 2-1: USB disconnect, device number 27 [ 1383.177564][T23797] udevd[23797]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1383.272603][T23911] No such timeout policy "syz1" [ 1383.342372][ T29] audit: type=1400 audit(1786531630.732:1930): avc: denied { setattr } for pid=23910 comm="syz.1.4707" name="ALG" dev="sockfs" ino=93766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1383.499750][T23915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1383.732360][T23804] udevd[23804]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1384.582420][T23804] udevd[23804]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1384.694518][T19671] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1385.050010][T23949] lo speed is unknown, defaulting to 1000 [ 1385.071973][T23949] lo speed is unknown, defaulting to 1000 [ 1385.084273][T23949] lo speed is unknown, defaulting to 1000 [ 1385.094484][T23949] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1385.105918][T19671] usb 7-1: Using ep0 maxpacket: 32 [ 1385.109325][T23949] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1385.141956][T23949] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1385.142303][T19671] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1385.180291][T19671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.209964][T19671] usb 7-1: Product: syz [ 1385.222796][T23949] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1385.222899][T19671] usb 7-1: Manufacturer: syz [ 1385.253642][T19671] usb 7-1: SerialNumber: syz [ 1385.266288][T19671] usb 7-1: config 0 descriptor?? [ 1385.294521][T19666] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1385.408241][T23949] lo speed is unknown, defaulting to 1000 [ 1385.451017][T19666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.484617][T19666] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1385.487730][T23949] lo speed is unknown, defaulting to 1000 [ 1385.513862][T23797] udevd[23797]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1385.534437][T19666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1385.535903][T23949] lo speed is unknown, defaulting to 1000 [ 1385.557901][T19666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1385.584670][T19666] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1385.603531][T23949] lo speed is unknown, defaulting to 1000 [ 1385.615899][T23797] udevd[23797]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1385.639439][T23949] lo speed is unknown, defaulting to 1000 [ 1385.641166][T19666] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1385.675904][T23949] lo speed is unknown, defaulting to 1000 [ 1385.676213][T19666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1385.726238][T19666] usb 5-1: Product: syz [ 1385.754615][T19666] usb 5-1: Manufacturer: syz [ 1385.767339][T23797] udevd[23797]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 1385.780231][T19666] usb 5-1: SerialNumber: syz [ 1385.797298][T19666] usb 5-1: config 0 descriptor?? [ 1385.892829][T19671] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1385.922810][T19671] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1385.942692][T19671] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1386.012602][T19666] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1386.038796][T19671] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1386.107666][T23930] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1386.124786][T23930] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1386.184471][T19666] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1386.217036][T19671] usb 7-1: USB disconnect, device number 47 [ 1386.725697][T19666] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1386.880699][T19666] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1386.900120][T19666] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1387.298479][T23982] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4725'. [ 1387.364702][ T29] audit: type=1400 audit(1786531634.692:1931): avc: denied { nlmsg_read } for pid=23977 comm="syz.6.4725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1388.382682][T12362] usb 5-1: USB disconnect, device number 15 [ 1388.958715][T19666] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1389.197439][T19666] usb 7-1: Using ep0 maxpacket: 32 [ 1389.256794][T19666] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1389.321334][T19666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.385761][T19666] usb 7-1: Product: syz [ 1389.401615][T19666] usb 7-1: Manufacturer: syz [ 1389.420860][T19666] usb 7-1: SerialNumber: syz [ 1389.452763][T19666] usb 7-1: config 0 descriptor?? [ 1389.489818][T19666] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1389.531742][T19666] dvb-usb: bulk message failed: -22 (4/0) [ 1389.562885][T19666] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1389.726487][T19666] dvb-usb: bulk message failed: -22 (5/0) [ 1389.874329][T19666] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1390.724091][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 1390.879814][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 1391.065511][T24010] ceph: No mds server is up or the cluster is laggy [ 1391.095828][T19666] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1391.097449][T23797] udevd[23797]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1391.124921][T19666] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1391.144447][T19666] usb 7-1: media controller created [ 1391.170438][T19666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1391.194973][T12362] libceph: connect (1)[c::]:6789 error -101 [ 1391.212308][T12362] libceph: mon0 (1)[c::]:6789 connect error [ 1391.254773][T19666] usb 7-1: selecting invalid altsetting 3 [ 1391.273320][T19666] ttusb2: set interface to alts=3 failed [ 1391.398615][T19666] DVB: Unable to find symbol tda10086_attach() [ 1391.434493][T19666] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1391.496276][T19666] dvb-usb: bulk message failed: -22 (4/0) [ 1391.512456][T19666] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.608779][T19666] dvb-usb: bulk message failed: -22 (5/0) [ 1391.618975][T19666] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.647748][T19666] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1392.128803][T19666] usb 7-1: USB disconnect, device number 48 [ 1392.185384][T19666] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1392.413261][T24031] overlay: Unknown parameter 'fsmagic' [ 1392.421192][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 1392.431567][T24031] openvswitch: netlink: Flow key attr not present in new flow. [ 1392.544587][T19666] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1392.694459][T19666] usb 7-1: Using ep0 maxpacket: 32 [ 1392.710049][T19666] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1392.734403][T19666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.754405][T19666] usb 7-1: Product: syz [ 1392.758642][T19666] usb 7-1: Manufacturer: syz [ 1392.763224][T19666] usb 7-1: SerialNumber: syz [ 1392.786567][T19666] usb 7-1: config 0 descriptor?? [ 1393.720828][T19666] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 1393.741392][T19666] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1393.755892][T19666] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1393.777260][T24016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1393.910303][T24016] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1394.302391][T23971] udevd[23971]: symlink '../../loop1' '/dev/disk/by-diskseq/149.tmp-b7:1' failed: Read-only file system [ 1395.022513][T24055] overlayfs: failed to clone upperpath [ 1395.040888][T19666] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1395.357126][T19666] usb 7-1: USB disconnect, device number 49 [ 1395.482945][T24057] overlayfs: failed to clone upperpath [ 1396.110474][T24068] lo speed is unknown, defaulting to 1000 [ 1396.135734][T24071] ip_tables: iptables: counters copy to user failed while replacing table [ 1396.394853][T19666] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1396.594843][T19666] usb 6-1: Using ep0 maxpacket: 16 [ 1396.601574][T19666] usb 6-1: config 9 has an invalid interface number: 189 but max is 0 [ 1396.620027][T19666] usb 6-1: config 9 has no interface number 0 [ 1396.633492][T19666] usb 6-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 1396.714738][T19666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.241090][T19666] usb 6-1: Product: syz [ 1397.254426][T19666] usb 6-1: Manufacturer: syz [ 1397.264419][T19666] usb 6-1: SerialNumber: syz [ 1397.364497][T19671] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1397.530855][T19666] usb 6-1: No union descriptors [ 1397.561829][T19666] usb 6-1: USB disconnect, device number 14 [ 1397.728884][T24097] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1397.776942][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1397.800078][ T29] audit: type=1400 audit(1786531645.152:1932): avc: denied { read write } for pid=24090 comm="syz.6.4757" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1398.040320][ T29] audit: type=1400 audit(1786531645.152:1933): avc: denied { open } for pid=24090 comm="syz.6.4757" path="/393/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1398.044804][T19671] usb 5-1: device descriptor read/64, error -71 [ 1398.089738][ T29] audit: type=1400 audit(1786531645.172:1934): avc: denied { write } for pid=24090 comm="syz.6.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.147119][ T29] audit: type=1400 audit(1786531645.412:1935): avc: denied { create } for pid=24072 comm="syz.5.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.364634][T19671] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1398.539928][T19671] usb 5-1: device descriptor read/64, error -71 [ 1400.408716][T19671] usb usb5-port1: attempt power cycle [ 1403.780307][T12006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1403.784669][T19671] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1403.799829][T12006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1403.809159][T12006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.061251][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4765'. [ 1404.140131][T12006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.158592][T12006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.181827][ T29] audit: type=1400 audit(2000000001.160:1936): avc: denied { read } for pid=24124 comm="syz.4.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1404.353801][T19116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1404.361739][T19116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1404.369452][T19116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.383293][T19116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.392016][T19116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.485247][T19671] usb 7-1: Using ep0 maxpacket: 32 [ 1404.561488][T19671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1404.631603][T19671] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1404.681881][T19671] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1404.725179][T19671] usb 7-1: Product: syz [ 1404.744283][T19671] usb 7-1: Manufacturer: syz [ 1404.760842][T19671] usb 7-1: SerialNumber: syz [ 1404.785825][T19671] usb 7-1: config 0 descriptor?? [ 1404.804989][T24123] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1404.818912][T19671] hub 7-1:0.0: bad descriptor, ignoring hub [ 1404.841277][T19671] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1404.894472][T19666] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1405.070615][T19666] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1405.099841][T19666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.128638][T19666] usb 5-1: Product: syz [ 1405.144134][T19666] usb 5-1: Manufacturer: syz [ 1405.159307][T19666] usb 5-1: SerialNumber: syz [ 1405.175023][T24126] lo speed is unknown, defaulting to 1000 [ 1405.217923][T19671] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1405.903772][T12362] usb 5-1: USB disconnect, device number 19 [ 1405.953777][ T5712] usb 7-1: USB disconnect, device number 50 [ 1406.262883][ T29] audit: type=1400 audit(2000000003.360:1937): avc: denied { write } for pid=24165 comm="syz.5.4770" name="header" dev="configfs" ino=11533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.331355][ T29] audit: type=1400 audit(2000000003.360:1938): avc: denied { write } for pid=24165 comm="syz.5.4770" name="hs" dev="configfs" ino=11541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.376298][T19671] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1406.385406][T19671] ath9k_htc: Failed to initialize the device [ 1406.404949][ T29] audit: type=1400 audit(2000000003.360:1939): avc: denied { create } for pid=24165 comm="syz.5.4770" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1406.425534][T12362] usb 5-1: ath9k_htc: USB layer deinitialized [ 1406.454432][ T29] audit: type=1400 audit(2000000003.360:1940): avc: denied { write } for pid=24165 comm="syz.5.4770" name="hs" dev="configfs" ino=11541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.467536][T24126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.562579][T24126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.588655][T24126] bridge_slave_0: entered allmulticast mode [ 1406.595959][T19116] Bluetooth: hci5: command tx timeout [ 1406.610333][T24126] bridge_slave_0: entered promiscuous mode [ 1406.617771][ T29] audit: type=1400 audit(2000000003.720:1941): avc: denied { write } for pid=24179 comm="syz.6.4773" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1406.623641][T24126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.652068][T24126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.660095][T24126] bridge_slave_1: entered allmulticast mode [ 1406.667816][T24126] bridge_slave_1: entered promiscuous mode [ 1406.721171][T24126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.733900][T24126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.775711][T24126] team0: Port device team_slave_0 added [ 1406.790898][T24126] team0: Port device team_slave_1 added [ 1406.819777][T24126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.826942][T24126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.902745][T24126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.992859][T24126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.114441][ T5712] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1408.020144][T24126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.084426][ T5712] usb 7-1: Using ep0 maxpacket: 16 [ 1408.280633][ T5712] usb 7-1: config 9 has an invalid interface number: 189 but max is 0 [ 1408.289201][ T5712] usb 7-1: config 9 has no interface number 0 [ 1408.456135][ T5712] usb 7-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 1408.466465][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.477555][ T5712] usb 7-1: Product: syz [ 1408.481761][ T5712] usb 7-1: Manufacturer: syz [ 1408.486381][ T5712] usb 7-1: SerialNumber: syz [ 1408.917415][T19116] Bluetooth: hci5: command tx timeout [ 1409.723530][T24175] smpboot: CPU 1 is now offline [ 1410.084282][ T5712] usb 7-1: No union descriptors [ 1410.119717][T24171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1410.158301][ T5712] usb 7-1: USB disconnect, device number 51 [ 1410.181574][T24126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.697969][T24126] hsr_slave_0: entered promiscuous mode [ 1410.844178][T24126] hsr_slave_1: entered promiscuous mode [ 1411.000649][T19116] Bluetooth: hci5: command tx timeout [ 1411.027434][T24202] binder: Bad value for 'max' [ 1411.039415][T24126] debugfs: 'hsr0' already exists in 'hsr' [ 1411.084215][T24126] Cannot create hsr debugfs directory [ 1413.074615][T12006] Bluetooth: hci5: command tx timeout [ 1413.194737][T19666] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1414.354502][T19666] usb 7-1: Using ep0 maxpacket: 16 [ 1415.045144][T19666] usb 7-1: config 9 has an invalid interface number: 189 but max is 0 [ 1415.053329][T19666] usb 7-1: config 9 has no interface number 0 [ 1415.724592][T19666] usb 7-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 1415.745037][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4787'. [ 1415.789925][T19666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.831856][ T29] audit: type=1400 audit(2000000012.910:1942): avc: denied { read write } for pid=24236 comm="syz.4.4789" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1415.911682][T19666] usb 7-1: Product: syz [ 1415.968195][T19666] usb 7-1: Manufacturer: syz [ 1416.214790][T19666] usb 7-1: SerialNumber: syz [ 1416.287547][T19666] usb 7-1: can't set config #9, error -71 [ 1416.319622][ T29] audit: type=1400 audit(2000000012.910:1943): avc: denied { open } for pid=24236 comm="syz.4.4789" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1416.402940][T19666] usb 7-1: USB disconnect, device number 52 [ 1417.959791][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.967270][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1418.404583][T19666] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1418.470025][ T29] audit: type=1400 audit(2000000015.570:1944): avc: denied { ioctl } for pid=24258 comm="syz.6.4796" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1418.577142][T24126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1418.640030][T24126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.660292][T19666] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.706418][T24126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1419.581116][T19671] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1419.902279][T19666] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1420.514741][T19671] usb 7-1: Using ep0 maxpacket: 32 [ 1421.006614][T24126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.154935][T19671] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1421.437295][T19666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1421.484687][T19671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.495577][T24126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1421.548395][T19666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1421.573234][T19671] usb 7-1: Product: syz [ 1421.588643][T24126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1422.601563][T19671] usb 7-1: Manufacturer: syz [ 1423.011516][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1423.024539][T19666] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1423.043190][T19671] usb 7-1: SerialNumber: syz [ 1423.215128][T19671] usb 7-1: config 0 descriptor?? [ 1423.243320][T24126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1423.254506][T19671] usb 7-1: can't set config #0, error -71 [ 1423.260951][T24279] 9p: Bad value for 'wfdno' [ 1423.276179][T19666] usb 6-1: string descriptor 0 read error: -71 [ 1423.342493][T19666] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1423.351829][T19671] usb 7-1: USB disconnect, device number 53 [ 1423.385648][T24126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1423.470388][T19666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1423.547100][T24283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1424.099663][T19666] usb 6-1: config 0 descriptor?? [ 1424.700675][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4804'. [ 1424.745491][ T29] audit: type=1400 audit(2000000021.820:1945): avc: denied { mounton } for pid=24291 comm="syz.6.4805" path="/proc/1352/task" dev="proc" ino=95699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1424.770528][T24283] netlink: 'syz.2.4803': attribute type 6 has an invalid length. [ 1424.951971][T19666] usb 6-1: can't set config #0, error -71 [ 1425.341417][T19666] usb 6-1: USB disconnect, device number 15 [ 1427.160861][T24126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.292293][T24126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.088524][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1430.747887][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.755046][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.034672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1432.651394][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.658530][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.776955][T24321] openvswitch: netlink: Missing valid actions attribute. [ 1432.879015][T24321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.897728][T19669] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1433.001073][T24126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.173060][T19669] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1434.423046][T19669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.557310][T19669] usb 6-1: Product: syz [ 1434.632007][T19669] usb 6-1: Manufacturer: syz [ 1434.687568][T19669] usb 6-1: SerialNumber: syz [ 1434.819025][ T6733] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1434.951246][T24341] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1436.153811][ T6733] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1444.164409][ C0] sched: DL replenish lagged too much [ 1465.571643][ T6733] ath9k_htc: Failed to initialize the device [ 1484.964895][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.854691][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1574.861666][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5817/2:b..l P5271/1:b..l P24320/1:b..l [ 1574.872551][ C0] rcu: (detected by 0, t=10502 jiffies, g=164853, q=617 ncpus=1) [ 1574.880345][ C0] task:syz.5.4813 state:R running task stack:26712 pid:24320 tgid:24319 ppid:19268 task_flags:0x40044c flags:0x00080003 [ 1574.895220][ C0] Call Trace: [ 1574.898498][ C0] [ 1574.901426][ C0] __schedule+0x125c/0x6730 [ 1574.905915][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1574.911100][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1574.916455][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 1574.921627][ C0] ? __pfx___schedule+0x10/0x10 [ 1574.926461][ C0] ? mark_held_locks+0x40/0x70 [ 1574.931199][ C0] preempt_schedule_irq+0x50/0x90 [ 1574.936212][ C0] irqentry_exit+0x205/0xa00 [ 1574.940788][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1574.946771][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1574.952048][ C0] Code: ff 65 0f c1 05 a3 cb 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 84 7e 12 0f 85 4d 01 00 00 48 83 c4 [ 1574.971656][ C0] RSP: 0018:ffffc90006e9f560 EFLAGS: 00000206 [ 1574.977705][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc90006e9f56c [ 1574.985649][ C0] RDX: 0000000000000002 RSI: ffffffff8e1823aa RDI: ffffffff8c402680 [ 1574.993608][ C0] RBP: ffffffff828584ed R08: 0000000000000001 R09: 0000000000000000 [ 1575.001566][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e34ca80 [ 1575.009539][ C0] R13: 00000000027a0806 R14: 0000000000000202 R15: 0000000000000003 [ 1575.017498][ C0] ? __update_page_owner_free_handle.isra.0+0x2fd/0x4b0 [ 1575.024428][ C0] __update_page_owner_free_handle.isra.0+0x302/0x4b0 [ 1575.031176][ C0] ? page_ext_put+0x3e/0xd0 [ 1575.035656][ C0] __reset_page_owner+0x93/0x190 [ 1575.040572][ C0] __free_frozen_pages+0x79f/0x1090 [ 1575.045746][ C0] ? __free_slab+0xd0/0x220 [ 1575.050227][ C0] qlist_free_all+0x47/0xf0 [ 1575.054739][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1575.060207][ C0] __kasan_slab_alloc+0x69/0x90 [ 1575.065053][ C0] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 1575.070928][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1575.075935][ C0] ? kmalloc_reserve+0x148/0x350 [ 1575.080850][ C0] kmalloc_reserve+0x148/0x350 [ 1575.085599][ C0] __alloc_skb+0x185/0x710 [ 1575.090010][ C0] ? __alloc_skb+0x5b7/0x710 [ 1575.094599][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1575.099524][ C0] ? netlink_has_listeners+0x21b/0x430 [ 1575.104968][ C0] ? netlink_has_listeners+0x21b/0x430 [ 1575.110411][ C0] alloc_uevent_skb+0x7d/0x210 [ 1575.115185][ C0] kobject_uevent_env+0xd2d/0x18b0 [ 1575.120305][ C0] ? module_remove_driver+0xb0/0x260 [ 1575.125604][ C0] __kobject_del+0x168/0x220 [ 1575.130190][ C0] kobject_put+0x348/0x640 [ 1575.134585][ C0] bus_remove_driver+0x16e/0x2e0 [ 1575.139497][ C0] driver_unregister+0x76/0xb0 [ 1575.144242][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 1575.149942][ C0] raw_release+0x19b/0x260 [ 1575.154351][ C0] ? __pfx_raw_release+0x10/0x10 [ 1575.159278][ C0] __fput+0x3ff/0xb50 [ 1575.163265][ C0] task_work_run+0x150/0x240 [ 1575.167838][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1575.172925][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1575.178112][ C0] do_exit+0x951/0x2ae0 [ 1575.182256][ C0] ? find_held_lock+0x2b/0x80 [ 1575.186919][ C0] ? __pfx_do_exit+0x10/0x10 [ 1575.191494][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1575.196502][ C0] ? find_held_lock+0x2b/0x80 [ 1575.201163][ C0] ? get_signal+0x7e0/0x21e0 [ 1575.205739][ C0] do_group_exit+0xd5/0x2a0 [ 1575.210230][ C0] get_signal+0x1ec7/0x21e0 [ 1575.214706][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1575.219707][ C0] ? __asan_memset+0x23/0x50 [ 1575.224281][ C0] ? __pfx_get_signal+0x10/0x10 [ 1575.229113][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1575.234555][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1575.240081][ C0] ? get_timespec64+0x147/0x240 [ 1575.244917][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1575.251054][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1575.256910][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1575.262260][ C0] ? rcu_is_watching+0x12/0xc0 [ 1575.267001][ C0] do_syscall_64+0x666/0x870 [ 1575.271580][ C0] ? clear_bhb_loop+0x40/0x90 [ 1575.276240][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.282104][ C0] RIP: 0033:0x7f746175e90e [ 1575.286501][ C0] RSP: 002b:00007f7462583ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1575.294891][ C0] RAX: fffffffffffffdfc RBX: 00007f74625866c0 RCX: 00007f746175e90e [ 1575.302851][ C0] RDX: 00007f7462583f30 RSI: 0000000000000000 RDI: 0000000000000000 [ 1575.310793][ C0] RBP: 00007f7462584fd0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.318746][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1575.326688][ C0] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f7461853882 [ 1575.334640][ C0] [ 1575.337646][ C0] task:dhcpcd state:R running task stack:25360 pid:5271 tgid:5271 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1575.351102][ C0] Call Trace: [ 1575.354356][ C0] [ 1575.357287][ C0] __schedule+0x125c/0x6730 [ 1575.361785][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.366633][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1575.371977][ C0] preempt_schedule_common+0x42/0xc0 [ 1575.377254][ C0] preempt_schedule_thunk+0x16/0x40 [ 1575.382446][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1575.388051][ C0] sock_def_readable+0x154/0x600 [ 1575.392966][ C0] unix_dgram_sendmsg+0xc8f/0x1810 [ 1575.398067][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1575.403600][ C0] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 1575.408946][ C0] sock_write_iter+0x53a/0x5b0 [ 1575.413680][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1575.419554][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1575.424829][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1575.430175][ C0] ? security_file_permission+0x76/0x210 [ 1575.435778][ C0] ? rw_verify_area+0xce/0x6d0 [ 1575.440519][ C0] vfs_write+0x6ac/0x1050 [ 1575.444837][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1575.450104][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1575.454844][ C0] ? __seccomp_filter+0x89d/0x1140 [ 1575.459951][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 1575.465303][ C0] ksys_write+0x1f8/0x250 [ 1575.469617][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1575.474459][ C0] do_syscall_64+0x115/0x870 [ 1575.479035][ C0] ? clear_bhb_loop+0x40/0x90 [ 1575.483703][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.489568][ C0] RIP: 0033:0x7f1392113407 [ 1575.493968][ C0] RSP: 002b:00007ffc0ebcac90 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1575.502351][ C0] RAX: ffffffffffffffda RBX: 00007f1392089780 RCX: 00007f1392113407 [ 1575.510305][ C0] RDX: 0000000000000046 RSI: 00007ffc0ebcacf0 RDI: 0000000000000005 [ 1575.518271][ C0] RBP: 000055c846ff8a48 R08: 0000000000000000 R09: 0000000000000000 [ 1575.526256][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc0ebcb120 [ 1575.534227][ C0] R13: 000000000000fb5a R14: 0000000000000001 R15: 0000000000000001 [ 1575.542186][ C0] [ 1575.545194][ C0] task:kworker/0:7 state:R running task stack:21336 pid:5817 tgid:5817 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1575.558728][ C0] Workqueue: mld mld_ifc_work [ 1575.563388][ C0] Call Trace: [ 1575.566652][ C0] [ 1575.569587][ C0] __schedule+0x125c/0x6730 [ 1575.574108][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.578949][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1575.584296][ C0] preempt_schedule_common+0x42/0xc0 [ 1575.589568][ C0] preempt_schedule_thunk+0x16/0x40 [ 1575.594767][ C0] ? ipv6_get_lladdr+0x299/0x4f0 [ 1575.599688][ C0] __local_bh_enable_ip+0xff/0x120 [ 1575.604786][ C0] ipv6_get_lladdr+0x299/0x4f0 [ 1575.609528][ C0] mld_newpack.isra.0+0x41d/0xa20 [ 1575.614537][ C0] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 1575.620068][ C0] ? rcu_is_watching+0x12/0xc0 [ 1575.624809][ C0] ? trace_contention_end+0x126/0x160 [ 1575.630159][ C0] ? add_grhead+0x299/0x340 [ 1575.634646][ C0] add_grhead+0x299/0x340 [ 1575.638965][ C0] add_grec+0x1389/0x1930 [ 1575.643286][ C0] ? __pfx_add_grec+0x10/0x10 [ 1575.647951][ C0] mld_ifc_work+0x3c5/0xc10 [ 1575.652443][ C0] ? rcu_is_watching+0x12/0xc0 [ 1575.657198][ C0] process_one_work+0xa23/0x1940 [ 1575.662153][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1575.667533][ C0] ? __pfx_mld_ifc_work+0x10/0x10 [ 1575.672556][ C0] worker_thread+0x5ef/0xe50 [ 1575.677127][ C0] ? kthread+0x13a/0x450 [ 1575.681344][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1575.686436][ C0] kthread+0x370/0x450 [ 1575.690483][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.695060][ C0] ret_from_fork+0x72b/0xd50 [ 1575.699627][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1575.704725][ C0] ? __switch_to+0x800/0x10f0 [ 1575.709375][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.713937][ C0] ret_from_fork_asm+0x1a/0x30 [ 1575.718684][ C0] [ 1575.721701][ C0] rcu: rcu_preempt kthread starved for 10080 jiffies! g164853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1575.732951][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1575.742900][ C0] rcu: RCU grace-period kthread stack dump: [ 1575.748765][ C0] task:rcu_preempt state:R running task stack:26104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1575.762209][ C0] Call Trace: [ 1575.765464][ C0] [ 1575.768377][ C0] __schedule+0x125c/0x6730 [ 1575.772860][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.777690][ C0] ? find_held_lock+0x2b/0x80 [ 1575.782338][ C0] ? schedule+0x225/0x2c0 [ 1575.786642][ C0] schedule+0xdd/0x2c0 [ 1575.790686][ C0] schedule_timeout+0x127/0x280 [ 1575.795513][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1575.800860][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1575.806120][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1575.811903][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1575.817336][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1575.822077][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1575.827335][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1575.832252][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1575.837422][ C0] ? rcu_is_watching+0x12/0xc0 [ 1575.842169][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1575.847947][ C0] rcu_gp_kthread+0x179/0x230 [ 1575.852601][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1575.857768][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1575.863574][ C0] ? __kthread_parkme+0x18c/0x230 [ 1575.868580][ C0] ? kthread+0x13a/0x450 [ 1575.872791][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1575.877962][ C0] kthread+0x370/0x450 [ 1575.882001][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.886565][ C0] ret_from_fork+0x72b/0xd50 [ 1575.891127][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1575.896213][ C0] ? __switch_to+0x800/0x10f0 [ 1575.900861][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.905426][ C0] ret_from_fork_asm+0x1a/0x30 [ 1575.910172][ C0] [ 1575.913179][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1575.919476][ C0] CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1575.930723][ C0] Tainted: [L]=SOFTLOCKUP [ 1575.935015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1575.945043][ C0] Workqueue: bat_events batadv_dat_purge [ 1575.950648][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1575.957038][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 1575.976630][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 1575.982690][ C0] RAX: 0000000000000006 RBX: ffff88802ac68000 RCX: 0000000000000004 [ 1575.990645][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 1575.998590][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1576.006532][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881d03fa410 [ 1576.014486][ C0] R13: ffff8881d03fa408 R14: ffff88802af104a3 R15: ffff88802af10410 [ 1576.022439][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1576.031339][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1576.037902][ C0] CR2: 00007ffd32279f80 CR3: 0000000079e9e000 CR4: 00000000003526f0 [ 1576.045844][ C0] Call Trace: [ 1576.049095][ C0] [ 1576.051934][ C0] dummy_timer+0x1d91/0x36f0 [ 1576.056533][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1576.061546][ C0] ? find_held_lock+0x2b/0x80 [ 1576.066201][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1576.071815][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1576.077430][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1576.083206][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1576.088819][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1576.094779][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1576.099693][ C0] ? mark_held_locks+0x40/0x70 [ 1576.104444][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1576.110221][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1576.115140][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1576.120337][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1576.125430][ C0] handle_softirqs+0x1ea/0x9b0 [ 1576.130168][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1576.135423][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1576.140675][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1576.146276][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 1576.152051][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1576.157656][ C0] do_softirq+0xac/0xe0 [ 1576.161782][ C0] [ 1576.164683][ C0] [ 1576.167593][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1576.172675][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 1576.178287][ C0] batadv_dat_purge+0x4b/0xa0 [ 1576.182931][ C0] process_one_work+0xa23/0x1940 [ 1576.187843][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1576.193195][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 1576.198536][ C0] rescuer_thread+0x905/0x14a0 [ 1576.203277][ C0] ? rescuer_thread+0x240/0x14a0 [ 1576.208193][ C0] ? rescuer_thread+0x118/0x14a0 [ 1576.213105][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1576.218271][ C0] ? __kthread_parkme+0x18c/0x230 [ 1576.223268][ C0] ? kthread+0x13a/0x450 [ 1576.227486][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1576.232659][ C0] kthread+0x370/0x450 [ 1576.236702][ C0] ? __pfx_kthread+0x10/0x10 [ 1576.241265][ C0] ret_from_fork+0x72b/0xd50 [ 1576.245828][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1576.250917][ C0] ? __switch_to+0x800/0x10f0 [ 1576.255573][ C0] ? __pfx_kthread+0x10/0x10 [ 1576.260131][ C0] ret_from_fork_asm+0x1a/0x30 [ 1576.264883][ C0] [ 1576.277228][T12006] Bluetooth: hci5: command tx timeout