last executing test programs: 2m30.562062987s ago: executing program 3 (id=1167): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xb0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m28.964807221s ago: executing program 3 (id=1175): statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TCSETA(0xffffffffffffffff, 0x560a, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0xa) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) mq_notify(0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904"], 0x0) 2m25.875176553s ago: executing program 3 (id=1185): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000b700000000000000950000000000000000000000000000000000000063dbcb3c87dd495541b05cea572e984fdc7c3a70c851bd4f60d4b871fe63fb285c4efa271276ea2e4d5c3b6e11cfbfa2fce180c868891216d86c2ca2a908dba76ea163f1ff740066fd1b0d83b494fac5dbd03a190dcb5fc931065ff161963482257d7876695041da1f2caf7b4b1b668f8c080a70d5a71dad149b5520f5344748a15a655cc792cde60d373c0663d871a599d357577c13cad6d2c60c9be05a940f0b2e9f632bf98697bfaa2412159f33e0814dc5dcee037edaab6c571d0f2e399a687eaa5a5aed435355b8e8d5445dd46fdf0fcd7da2f526674bcf5123a90a270e98454e4c27ffe3583cd6856fc8f06c2ab9539b3132429bda4b3ffa2582ee2c5e63725d8b780275b58f393df7c2e5f562a2a8b5d1043f57a28acee72a9402f39a3147a2876b0e665ccb213201b74f76b22f3510c97b7cf92684c27ec5ed951d97d00826334e97e899df0a83ea8e"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000007c0)=r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x4008010) 2m24.860643546s ago: executing program 3 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f2c, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff2, 0xfd, 0x2, 0x5, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) socket$nl_route(0x10, 0x3, 0x0) 2m24.278099076s ago: executing program 3 (id=1197): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0x60000000}, {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "c57ec9fba9622a6f4f9ae77fe20997d5f5972b74feab4310", "6a5023d5ae2f27c13885e8604916931321ea27967673958081f49b163bbd21e8"}}}}}}, 0x0) 2m23.704052968s ago: executing program 3 (id=1201): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x6, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) shutdown(r2, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, 0x0) (async) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000300)=""/255, 0xff}], 0x3, 0x0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) (async) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @random="56c9d5282097", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xc, 0x0, {0x15, 0x4, 0x1, 0x5, 0x9, 0x64, 0x9, 0x8, 0x32, 0x5, @multicast1, @loopback, {[@generic={0x83, 0x2}, @generic={0x88, 0xa, "9b8feced469c7269"}, @cipso={0x86, 0x31, 0x1, [{0x7, 0xa, "1060fb88b5b4452c"}, {0x1, 0x5, "3bee8a"}, {0x6, 0x11, "28fa5f9711aa76a0053be6ceeeea9b"}, {0x2, 0xb, "71fd35ebaeb683f518"}]}]}}}}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m23.334721963s ago: executing program 32 (id=1201): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x6, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) shutdown(r2, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, 0x0) (async) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000300)=""/255, 0xff}], 0x3, 0x0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) (async) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @random="56c9d5282097", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xc, 0x0, {0x15, 0x4, 0x1, 0x5, 0x9, 0x64, 0x9, 0x8, 0x32, 0x5, @multicast1, @loopback, {[@generic={0x83, 0x2}, @generic={0x88, 0xa, "9b8feced469c7269"}, @cipso={0x86, 0x31, 0x1, [{0x7, 0xa, "1060fb88b5b4452c"}, {0x1, 0x5, "3bee8a"}, {0x6, 0x11, "28fa5f9711aa76a0053be6ceeeea9b"}, {0x2, 0xb, "71fd35ebaeb683f518"}]}]}}}}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.155416416s ago: executing program 0 (id=1805): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x1295) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000002000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$nci(0xffffffffffffffff, &(0x7f0000000340)=""/38, 0x26) 8.645135926s ago: executing program 0 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f2c, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff2, 0xfd, 0x2, 0x5, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) socket$nl_route(0x10, 0x3, 0x0) 8.381572308s ago: executing program 1 (id=1808): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x20400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05a300000000000000", @ANYRES32=r2], 0x1c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) 7.787616379s ago: executing program 5 (id=1812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback={0x3f000000}}, 0x1c) 7.722312683s ago: executing program 0 (id=1815): openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0xfffffffa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r4, 0x406, r4) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfda9, 0x800, 0xffffffff, 0xbfe00000}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40c89}, 0x8004) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="20000000110001000000000000000000100000000c000000000000007fffffff1720bfa8a465402ccc9ddb98d3e4e3bd601f0afa95b846c62d10f726751bc1e24d6c749a3f682e1daf0200ca4e63d92ef348157495ebc5f97cb3621d9cedc074865089dce3730cfc3429154cf7771a6a9ddff6840b6d300b91ee5a5485be5da33332b6e8aae11839ab5efe4f0ccb2f99c93afdd1cb9b1c182eaca64f075c0207ebd694d6e4cac37e342e59c5b4df8033c77aeef197f5ee2a8cbf72d5a8f53c4dc5e87e2fab5e66a454"], 0x20}], 0x1, 0x0, 0x0, 0x2000}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000040)={0xc}) 7.65132549s ago: executing program 5 (id=1816): r0 = syz_usb_connect(0x4, 0xffffffffffffffe3, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1d, 0x10, 0xf7, 0x10, 0xcf3, 0xe019, 0x1b2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe, 0x20, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0x6e, 0xab, 0xff}}]}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) clock_getres(0x3, &(0x7f0000000580)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000500)={0x40, 0x18, 0x8, "58c2b81b8832160b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.710702842s ago: executing program 1 (id=1819): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x6a, 0x7, 0x5, 0x8001}, {0x7f, 0x1c, 0x2, 0x67}, {0x7, 0x0, 0x24, 0x1}, {0x40, 0x6, 0x9, 0x8}, {0x8, 0xb, 0x80, 0x400}, {0x0, 0x93, 0x0, 0x9}, {0x8, 0xff, 0x4, 0x1ff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x6a, 0x7, 0x5, 0x8001}, {0x7f, 0x1c, 0x2, 0x67}, {0x7, 0x0, 0x24, 0x1}, {0x40, 0x6, 0x9, 0x8}, {0x8, 0xb, 0x80, 0x400}, {0x0, 0x93, 0x0, 0x9}, {0x8, 0xff, 0x4, 0x1ff}]}) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 5.675658488s ago: executing program 2 (id=1820): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x20, 0x10}]) 5.485589427s ago: executing program 4 (id=1821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r3, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) 5.279676401s ago: executing program 2 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01072cbd7000fedbdf651f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 5.227627505s ago: executing program 4 (id=1823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000021000002000000000000120095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RFLUSH(r1, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000021000002000000000000120095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) pipe2$9p(&(0x7f0000000040), 0x84000) (async) write$P9_RFLUSH(r1, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) 4.960237347s ago: executing program 2 (id=1824): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x4c) 4.863456953s ago: executing program 4 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f2c, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff2, 0xfd, 0x2, 0x5, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) socket$nl_route(0x10, 0x3, 0x0) 4.83485198s ago: executing program 2 (id=1826): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x8006) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) setpriority(0x0, 0x0, 0x1ff) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x0, 0x4}}, 0x2e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 4.372213994s ago: executing program 5 (id=1827): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x85, 0x19, &(0x7f0000000300)="ad8ced1310974c27a631883347e585cfb0cd1979c307bc9e65aac00ca9794a521498191bccadabbdc6782b14dce688d97fefe88242c4f94e48114289bba1460a4059c3451335b469d323ba336c7a2efb7c355cb04babd76ca14e5f511d2029b988b4746d99b9a87aa059f1aa53efa8dfa3eef0cb6ff45377cca7aa7333b33c9a6c449789b4", &(0x7f0000000080)=""/25, 0x6, 0x0, 0x1d, 0x4b, &(0x7f0000000240)="8f0b3d73cc88b5095eeac9fc435e78d59ef4b5bb232b96b56e7b192718", &(0x7f00000003c0)="1f75d53084458296f6565f2410ba4c27f279154b1521c38bc8a4736f82808a0f9e1c245b40338023e75eb7ee6fae9156040f2f1f33bb3e8becf3ad9efbd0c422ae3e7e1a1c8b4b05842723", 0x7, 0x0, 0xdf1}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6239c4c145bb66472dbd7000fcdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000015c0)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000540)="50f0630266ec1cfc7c5a80b1c1d356c48a3e1ae129bf5b4f7e7eee115d56ca7f5a2562ba68323992b24b23467f001e95062cae1e1ca7fd8d000f9a5d5c2589ff542c60a08e9a40", 0x47}, {&(0x7f00000005c0)="8456374df4227a16359990d9024dbfe63d444213dee6589e31151311972bb9e9177cb21ddbbb10b5c7376f9b2d510f253b717ddb8a6a74451a0aceafc30c2f6d313135730f3562f318461ad89644598385c74de6ec2b60e7851d31731023c2e0ccf9b903bd9c67e9bda801cfc93b053a9da94d1d17c475b2a5548d147bca2b9c25cb37d3392f9b101b460245db8ff0f6fc21775cfb287b828a61adc5d7f483d5b6f56a2d7e266d42a89c838640ba1834c672a7587863403feada49", 0xbb}, {&(0x7f0000000680)="27411fdaf62112701d8c783253b4ca1be7efc3c512cbf3f751f589cbf5c91c4b396b1c6bcb74ee1e96ff9478dd56781dd703b052fdf9f3403032b6fd4ebcb6515b88d463d970ba3bd76a9f9f1e8f46d6fdf73ed992df4ce737d818d126450365649b7b50bbd147604ab9b9b15f8fc5722f3e710d1361b084ea0be98824b328a16e783a48f3ec6bbe303b235615eb2a1e1b767bbf258f635a8d5e3c33331975f2264d99834bd432404572cdc70b103df8f233d06a", 0xb4}], 0x3, &(0x7f0000000ac0)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r4, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r1, r1, r1]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xe0, 0x44000}}, {{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c40)="7cea343f1a29e2e67796586aef5e8cc75ac7d791a0263fa302e2333597eb258486134f22f9721b741c7c5be4980e8d13f78927e9cb52e39622d8527c01937f0c3081cb7468c6eae1b683c4374cefa0f7121e9579982b10ce91398f6263c3d4a4e13e0c08528278f198cf67c6030c6a5323aad0eac3e11cd5036d3a75f7e6935ca000ef6559f5520a54b7ee2ac8e5a36c070532cf8ae9675e3514fd9ca2d84028860c14", 0xa3}, {&(0x7f0000000d00)="5154a6c82e530e801d19cb28727caccab5326c17e871f1a80df1fc54b5737f078fbcae3b61432fec652e92b5242c60f3ec081948285429d9503650f84acb5eab5ac7200187543b2ef1838a4dab63035a456fc783525ef45e8b8b6c98e208d508131bf4d8", 0x64}, {&(0x7f0000000d80)="effd70a069311cb50ac6d4c3ea7691b837f2334e0b8824f80517e994ec9066468977dd615e0066b401cb38cda03a5fe2fdc49d70c76efd9c1116453e5d95f3d8c00c9480656fedd9507d8a76f38658348c809faee4d4a7f9491f0260d98e9e62b6919116f20bba2a0953bad87d3490766714a36bed4f34b5cc2e73a43d64901fc822ea272163d76d50626328649a3148b93230c39f729c7c4625ce0762f7ddfddeacb7dbda37acd12a2f61fce2b03e3327bc254a23802d421d562439d221106c0f5651b94e41550021e233d5553db3cc9b76b273bff55b9af99213fdc826ff87e22e62bc7b4eacaf29fb4680412ea068fd87433bf9a3f4", 0xf7}, {&(0x7f0000000e80)="d2d873ecc6dcf53e46468dfaf3c7638526d55678614d9656", 0x18}], 0x4, 0x0, 0x0, 0x4008040}}, {{&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000f80)="67305132aae9eb3ce92cf93e8a8e6f6c5bb9b2ee158c927cb2a8e0ca2363897eb5a48917bc37f421cf5e76b6c054da67857674ce39ec21e5930f2589883a18a56614042d", 0x44}, {&(0x7f0000001000)="373461cd9f047b0b2d92d61a879863514cf6b966249ed4536bf395cb9e573119e6ec9be720e8b0454e59180bc78c15b70896c55ba1d2828ef6e8e28a2e491cc83163a9b44a9d7adfd01b0e430e5ef25992744819f7ff6bf651a8b39a4b532b36eac38005986f077eb7a58f7f450158", 0x6f}, {&(0x7f0000001080)="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", 0xfb}], 0x3, &(0x7f00000011c0)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4]}}, @cred={{0x1c}}], 0x50, 0x40000}}, {{&(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000005900)="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", 0x1000}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000001340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000013c0)="a035b8ef31e0a91342df70fa51a3f63868aa3932de67b799039c1aad46b5810e9d103e65220fed8017a913df567da2b47da0bae352325fef1f0b69bf865d181ffb8aa8ee547c0a7a8cd4d0f96d57bdc02645700ae419b834e6b4d181a2ae3e1b05531beeb42d5c3fbe7400272a1985660f630888bf462cd15f544de0e81aee023729ab883768902afd06a618d4c8e126f8e2", 0x92}, {&(0x7f0000001480)="07a632e9b6ce9ae9e837a4075c31f5fddc3c35301239fcf39224bb58c651ee6e01a083c3f63724d84c02cea4b31ef58097a7df23ec0f38fe65935515652afff78c1cad10d8feb4e834c8fa8be6a50cf859bf0a3ee59c58b0c28a7312ec098bf125f5f1758cb987c08ced11497f30ea75b897ac8c5db3dd71d322b97ca607d5f6037c9435ddc5c1efb4345a0857525646ab9ca8e552e5536135c41bd3fe61ccac1dfebcfaf974afc4263a9967668f10c5a0e62e87b1c2de498cc5640fb5195826cdc906b09940a5bf01515eb268cda55d5dbfc58379ecada96f21b58676f794b5edf0431ad3e8fcf15b8f99d0e586a7ad0121e5cc91", 0xf5}], 0x2, 0x0, 0x0, 0x10}}], 0x5, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x3, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="1c000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1", 0xb0}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004080}, 0x4898) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7, 0x9, 0xf1, 0x11a}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002d000900279d7000000000000400000004001800e19597ad3b17dc15a4cf092acbafbc5742f3168ad079ebe57ce196ee1d673d4c24c6bcd2bd7ae40800eb21408890f91572b727a86d571eb8d824518618481b363a0295188339b4694d19d5d53b87ce514edeffea72694461091fa18d6a4bb114a05df0e9ec"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) (async) r8 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r8}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (rerun: 32) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001040), 0x0, 0xc8d1) (async) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) (async, rerun: 64) sendmmsg(r1, 0x0, 0x0, 0x4000000) (rerun: 64) 4.3307112s ago: executing program 4 (id=1828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x4f04}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) 4.316102726s ago: executing program 0 (id=1829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.246945285s ago: executing program 1 (id=1830): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.9333729s ago: executing program 2 (id=1831): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) r1 = socket(0x29, 0x80805, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x10000}, &(0x7f0000000180)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.021459775s ago: executing program 5 (id=1832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r1, 0x37) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1fb, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1f00}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40000) 3.013275544s ago: executing program 4 (id=1833): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0068000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 2.992468643s ago: executing program 1 (id=1834): writev(0xffffffffffffffff, 0x0, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x200, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x3ffe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4085}, 0x800) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(0x0, 0xba, 0x280802) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x82) r2 = socket(0x23, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000040)=""/62, 0x3e) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x1d, r3, 0x0, {0x1}, 0x1}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2.619630017s ago: executing program 2 (id=1835): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x4, 0x8001, 0x1, &(0x7f0000000040)="db"}], 0x1}) 2.28228907s ago: executing program 1 (id=1836): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec161980", @ANYRESHEX=r3], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x2400c000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0xfffffffa, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2b2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d684fe8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b9956bc00000000000000a8ffff7d34171113d80672661538363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437b989000000ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e3a9ca1864f0460c25311963884e6b39905a9719a9001457df7be7e1aefe36350000f60000000000000000000000000000000000617f5f1800"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000163000/0x1000)=nil, 0x1000, 0x13) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 1.68077701s ago: executing program 5 (id=1837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r7, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r6, 0x0, 0x0, 0x0, &(0x7f0000000240)}) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) 502.362029ms ago: executing program 4 (id=1838): r0 = syz_usb_connect(0x4, 0xffffffffffffffe3, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1d, 0x10, 0xf7, 0x10, 0xcf3, 0xe019, 0x1b2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe, 0x20, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0x6e, 0xab, 0xff}}]}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) clock_getres(0x3, &(0x7f0000000580)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000500)={0x40, 0x18, 0x8, "58c2b81b8832160b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 501.982591ms ago: executing program 0 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f2c, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff2, 0xfd, 0x2, 0x5, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) socket$nl_route(0x10, 0x3, 0x0) 388.805041ms ago: executing program 5 (id=1840): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88580, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) pipe2(&(0x7f0000000200), 0x84000) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 329.600036ms ago: executing program 1 (id=1841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000600)={0x1, 0x1, 0x0, 0x0, 0x0, 0xf000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd57087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155934378491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afebc369ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e7fa095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 0 (id=1842): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0xc00, 0x0, 0x880}, 0x0) kernel console output (not intermixed with test programs): SB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.805778][ T5903] usb 1-1: Product: syz [ 309.810367][ T5903] usb 1-1: Manufacturer: syz [ 309.816105][ T5903] usb 1-1: SerialNumber: syz [ 309.828335][ T5903] usb 1-1: config 0 descriptor?? [ 309.837218][ T5903] usb 1-1: can't set config #0, error -71 [ 309.859775][ T5903] usb 1-1: USB disconnect, device number 20 [ 311.509470][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 312.453801][ T5022] net_ratelimit: 23 callbacks suppressed [ 312.470439][ T5022] bond1: (slave wlan0): failed to get link speed/duplex [ 312.500884][ T9440] comedi comedi0: No channels found! [ 312.585711][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 312.761342][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 312.891308][ T9425] binder: 9421:9425 ioctl c0306201 2000000003c0 returned -14 [ 312.895368][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 313.035467][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 313.175435][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 313.219401][ T9463] tipc: Enabling of bearer rejected, failed to enable media [ 313.285665][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 313.341833][ T9466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.473535][ T9466] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 313.482543][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 313.942564][ T67] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.953524][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 314.676813][ T9485] tipc: Enabling of bearer rejected, failed to enable media [ 314.876151][ T5929] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 315.039764][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.064309][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.080026][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 315.358718][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 315.370134][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.387496][ T5929] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 315.428638][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 315.684589][ T5929] usb 2-1: Product: syz [ 315.767288][ T5929] usb 2-1: Manufacturer: syz [ 315.772325][ T5929] usb 2-1: SerialNumber: syz [ 315.803460][ T5929] usb 2-1: config 0 descriptor?? [ 315.810185][ T9484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.328517][ T5929] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 316.354636][ T5929] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 316.371949][ T5929] usb 2-1: USB disconnect, device number 21 [ 316.627017][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.633923][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.869096][ T1314] vlan2: left promiscuous mode [ 316.871682][ T30] audit: type=1400 audit(316.852:608): avc: denied { getopt } for pid=9520 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 317.639549][ T13] net_ratelimit: 20 callbacks suppressed [ 317.639565][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 317.704825][ T9536] fuse: Bad value for 'fd' [ 317.788226][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 318.047346][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 318.076443][ T9541] netlink: 'syz.4.1039': attribute type 75 has an invalid length. [ 318.141312][ T30] audit: type=1400 audit(318.122:609): avc: denied { setopt } for pid=9544 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 318.205090][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 318.318916][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 318.804536][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 318.931797][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 319.258319][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 319.385045][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 319.745314][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 319.877363][ T9569] kAFS: No cell specified [ 319.939622][ T30] audit: type=1400 audit(319.852:610): avc: denied { getattr } for pid=9565 comm="syz.2.1045" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 320.752541][ T9577] fuse: Bad value for 'fd' [ 321.345939][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1053'. [ 321.503955][ T30] audit: type=1400 audit(321.482:611): avc: denied { map } for pid=9596 comm="syz.2.1055" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.665184][ T5929] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 321.831689][ T5929] usb 1-1: not running at top speed; connect to a high speed hub [ 321.841873][ T5929] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 321.856416][ T5929] usb 1-1: config 1 has no interface number 0 [ 321.862686][ T5929] usb 1-1: config 1 interface 78 has no altsetting 0 [ 321.896495][ T5929] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 321.914209][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.940222][ T5929] usb 1-1: Product: syz [ 321.948032][ T5929] usb 1-1: Manufacturer: syz [ 321.954800][ T5929] usb 1-1: SerialNumber: syz [ 322.677629][ T49] net_ratelimit: 18 callbacks suppressed [ 322.677649][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 322.726567][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 322.785797][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 322.826308][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 322.975750][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 323.049123][ T9617] netlink: 'syz.4.1062': attribute type 3 has an invalid length. [ 323.056897][ T9617] netlink: 'syz.4.1062': attribute type 3 has an invalid length. [ 323.095479][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 323.135811][ T5929] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 323.205011][ T5929] usb 1-1: selecting invalid altsetting 0 [ 323.212952][ T2334] pvrusb2: control-write URB failure, status=-71 [ 323.215608][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 323.219325][ T2334] pvrusb2: Device being rendered inoperable [ 323.255318][ T5929] usb 1-1: USB disconnect, device number 21 [ 323.278561][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.304349][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.374809][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 323.517305][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 323.587320][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 323.645757][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 323.836185][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 324.348823][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 324.453771][ T9637] CIFS: Unable to determine destination address [ 325.483552][ T9653] comedi comedi0: No channels found! [ 325.921040][ T9660] sctp: [Deprecated]: syz.4.1072 (pid 9660) Use of int in maxseg socket option. [ 325.921040][ T9660] Use struct sctp_assoc_value instead [ 326.860829][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 327.776167][ T1314] net_ratelimit: 19 callbacks suppressed [ 327.776179][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 328.414762][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 328.527404][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 328.838792][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 329.079054][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 329.252424][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 329.973430][ T9688] binder: 9686:9688 ioctl c0306201 2000000003c0 returned -14 [ 329.981557][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 330.133162][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 330.205863][ T9708] comedi comedi0: No channels found! [ 330.524682][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 330.677451][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 331.268779][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 331.561909][ T30] audit: type=1400 audit(331.543:612): avc: denied { ioctl } for pid=9722 comm="syz.1.1089" path="socket:[26136]" dev="sockfs" ino=26136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.586414][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 331.625918][ T30] audit: type=1400 audit(331.613:613): avc: denied { execute_no_trans } for pid=9727 comm="syz.3.1092" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=26140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 331.909007][ T9741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1096'. [ 332.674806][ T9754] comedi comedi4: bad chanlist[0]=0x00008001 chan=32769 range length=2 [ 333.107622][ T6276] net_ratelimit: 5 callbacks suppressed [ 333.107633][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 333.147645][ T30] audit: type=1400 audit(333.113:614): avc: denied { create } for pid=9734 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 333.220849][ T9756] dlm: no locking on control device [ 333.257244][ T30] audit: type=1400 audit(333.113:615): avc: denied { write } for pid=9734 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 333.294656][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 333.438000][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 333.620018][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 333.856061][ T30] audit: type=1400 audit(333.773:616): avc: denied { execute } for pid=9759 comm="syz.0.1102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.716749][ T9772] comedi comedi0: No channels found! [ 335.596591][ T9775] erspan0 speed is unknown, defaulting to 1000 [ 336.478662][ T5929] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 336.516123][ T5929] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.584557][ T9799] loop5: detected capacity change from 0 to 7 [ 336.676626][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 336.824617][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 336.936620][ T5022] bond1: (slave wlan0): failed to get link speed/duplex [ 336.986895][ T30] audit: type=1400 audit(336.973:617): avc: denied { ioctl } for pid=9802 comm="syz.3.1115" path="socket:[26268]" dev="sockfs" ino=26268 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.033327][ T6036] Dev loop5: unable to read RDB block 7 [ 337.072963][ T30] audit: type=1400 audit(337.003:618): avc: denied { create } for pid=9802 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 337.076424][ T6036] loop5: unable to read partition table [ 337.137921][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 337.266035][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 337.306689][ T6036] loop5: partition table beyond EOD, truncated [ 337.770849][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 337.903214][ T9813] trusted_key: encrypted_key: insufficient parameters specified [ 338.112911][ T9819] tipc: Started in network mode [ 338.129910][ T9819] tipc: Node identity 0a6ec5364b88, cluster identity 4711 [ 338.158149][ T9819] tipc: Enabled bearer , priority 0 [ 338.191599][ T9827] syzkaller0: entered promiscuous mode [ 338.196004][ T30] audit: type=1400 audit(338.173:619): avc: denied { getopt } for pid=9825 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 338.220333][ T9827] syzkaller0: entered allmulticast mode [ 338.230491][ T9826] tipc: Enabling of bearer rejected, failed to enable media [ 338.351308][ T1314] net_ratelimit: 2 callbacks suppressed [ 338.351321][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 338.364270][ T5974] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 338.875073][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 338.950138][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.064039][ T5022] bond1: (slave wlan0): failed to get link speed/duplex [ 339.194538][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 339.275209][ T5929] tipc: Node number set to 1105642806 [ 339.291939][ T5974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.302275][ T5974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.311347][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.342010][ T9822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 339.352763][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.463844][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 339.574781][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 339.601343][ T5974] usb 2-1: USB disconnect, device number 22 [ 339.613372][ T9851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.626637][ T9855] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1131'. [ 339.722031][ T5022] bond1: (slave wlan0): failed to get link speed/duplex [ 339.856252][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 339.996502][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 340.071511][ T9864] bond0: (slave bond_slave_1): Releasing backup interface [ 340.093808][ T5022] bond1: (slave wlan0): failed to get link speed/duplex [ 340.222480][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 340.356594][ T9870] sctp: [Deprecated]: syz.3.1135 (pid 9870) Use of int in maxseg socket option. [ 340.356594][ T9870] Use struct sctp_assoc_value instead [ 340.813738][ T30] audit: type=1326 audit(340.684:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.079313][ T30] audit: type=1326 audit(340.684:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.174855][ T9896] sctp: [Deprecated]: syz.4.1140 (pid 9896) Use of int in maxseg socket option. [ 341.174855][ T9896] Use struct sctp_assoc_value instead [ 341.221587][ T30] audit: type=1326 audit(340.694:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.473288][ T9901] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 341.481127][ T9901] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1144'. [ 341.562736][ T30] audit: type=1326 audit(340.694:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.722532][ T30] audit: type=1326 audit(340.694:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.807465][ T30] audit: type=1326 audit(340.704:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 341.832328][ T30] audit: type=1326 audit(340.704:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 342.228430][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 342.332017][ T9910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9910 comm=syz.3.1148 [ 342.355527][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 342.383780][ T8910] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 342.453794][ T5929] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 342.473186][ T9911] netlink: 'syz.3.1148': attribute type 2 has an invalid length. [ 342.612466][ T8910] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 342.622440][ T8910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.634237][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.636413][ T8910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.660195][ T5929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.662379][ T8910] usb 1-1: config 1 has no interface number 0 [ 342.671270][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.686380][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.791550][ T8910] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.805163][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.834037][ T9918] bond0: Device is already in use. [ 342.848168][ T8910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.848670][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.872576][ T8910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.884963][ T8910] usb 1-1: Product: syz [ 342.889204][ T8910] usb 1-1: Manufacturer: syz [ 342.896942][ T8910] usb 1-1: SerialNumber: syz [ 342.930421][ T8910] cdc_wdm 1-1:1.128: skipping garbage [ 342.946342][ T8910] cdc_wdm 1-1:1.128: probe with driver cdc_wdm failed with error -22 [ 343.053667][ T5929] usb 3-1: USB disconnect, device number 25 [ 343.505864][ T36] net_ratelimit: 22 callbacks suppressed [ 343.505935][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 343.803897][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 343.917167][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 344.123637][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 344.313588][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 344.383564][ T5837] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 344.448342][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 344.528502][ T9946] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.547818][ T5837] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 344.575958][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 344.588290][ T9946] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.637699][ T9946] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.683787][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 344.693302][ T9946] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.777448][ T6276] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.793064][ T6276] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.811401][ T6276] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.827185][ T6276] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.853573][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 344.963529][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 345.377935][ T5974] usb 1-1: USB disconnect, device number 22 [ 345.920365][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 345.920381][ T30] audit: type=1400 audit(345.904:640): avc: denied { create } for pid=9964 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 345.966309][ T30] audit: type=1400 audit(345.934:641): avc: denied { write } for pid=9964 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 346.031949][ T9974] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 346.044764][ T30] audit: type=1400 audit(346.034:642): avc: denied { create } for pid=9973 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.203610][ T5929] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 346.303502][ T5903] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 346.365559][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.376693][ T5929] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.386849][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.397428][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.408021][ T9968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.418263][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.434274][ T5903] usb 3-1: device descriptor read/64, error -71 [ 346.623048][ T5974] usb 4-1: USB disconnect, device number 28 [ 346.673848][ T5903] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 346.682259][ T9977] tmpfs: Unknown parameter 'grpquota_inode_harlimit' [ 346.843689][ T5903] usb 3-1: device descriptor read/64, error -71 [ 346.907412][ T5837] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 346.916505][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.926114][ T5837] usb 2-1: config 0 descriptor?? [ 346.933530][ T5837] usb 2-1: can't set config #0, error -71 [ 346.940376][ T5929] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 346.956741][ T5837] usb 2-1: USB disconnect, device number 23 [ 346.957154][ T5903] usb usb3-port1: attempt power cycle [ 347.117038][ T5929] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 347.125474][ T5929] usb 1-1: config 0 has no interface number 0 [ 347.131721][ T5929] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 347.142351][ T5929] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.155825][ T5929] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 347.165278][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.173256][ T5929] usb 1-1: Product: syz [ 347.177606][ T5929] usb 1-1: Manufacturer: syz [ 347.182202][ T5929] usb 1-1: SerialNumber: syz [ 347.193898][ T5929] usb 1-1: config 0 descriptor?? [ 347.204342][ T9977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 347.216380][ T5929] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 347.231209][ T5929] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 347.304810][ T5903] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 347.325156][ T5903] usb 3-1: device descriptor read/8, error -71 [ 347.533472][ T30] audit: type=1400 audit(347.504:643): avc: denied { create } for pid=9987 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 347.564131][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.604307][ T30] audit: type=1400 audit(347.534:644): avc: denied { write } for pid=9987 comm="syz.3.1175" path="socket:[27787]" dev="sockfs" ino=27787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 347.654864][ T30] audit: type=1400 audit(347.594:645): avc: denied { append } for pid=9976 comm="syz.0.1170" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.683421][ T5903] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 347.940721][ T5903] usb 3-1: device descriptor read/8, error -71 [ 348.462483][ T5903] usb usb3-port1: unable to enumerate USB device [ 348.503374][ T5837] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 348.574475][ T67] net_ratelimit: 27 callbacks suppressed [ 348.574485][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 348.693597][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 348.699999][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 348.717645][ T5837] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 348.756661][ T5837] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 348.770010][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.779741][ T5837] usb 4-1: Product: syz [ 348.786229][ T5837] usb 4-1: Manufacturer: syz [ 348.790903][ T5837] usb 4-1: SerialNumber: syz [ 348.813560][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 348.943750][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 349.110784][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 349.298028][ T67] bond1: (slave wlan0): failed to get link speed/duplex [ 349.351716][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'. [ 349.625125][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 349.711151][ T10] usb 1-1: USB disconnect, device number 23 [ 349.743620][ T6277] bond1: (slave wlan0): failed to get link speed/duplex [ 349.792162][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 349.867023][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 349.895873][ T30] audit: type=1400 audit(349.864:646): avc: denied { append } for pid=10011 comm="syz.0.1182" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.901146][ T10] cyberjack 1-1:0.69: device disconnected [ 350.015271][T10012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.023528][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 350.053364][T10012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.078599][T10012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.475032][ T5837] garmin_gps 4-1:8.0: Garmin GPS usb/tty converter detected [ 350.500520][ T5837] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 350.524838][ T5837] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 350.552491][ T5837] usb 4-1: USB disconnect, device number 29 [ 350.571692][ T5837] garmin_gps 4-1:8.0: device disconnected [ 350.817403][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.824557][T10032] bridge0: port 2(bridge_slave_1) entered listening state [ 350.831867][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.838982][T10032] bridge0: port 1(bridge_slave_0) entered listening state [ 351.215997][T10039] fuse: Bad value for 'group_id' [ 351.246878][T10039] fuse: Bad value for 'group_id' [ 351.326496][ T30] audit: type=1326 audit(351.314:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.349230][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.376072][ T30] audit: type=1326 audit(351.314:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.470858][ T30] audit: type=1326 audit(351.364:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.682890][ T30] audit: type=1326 audit(351.364:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.758859][ T8910] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 351.838987][ T30] audit: type=1326 audit(351.364:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.862028][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.868964][ T30] audit: type=1326 audit(351.364:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.891881][ T30] audit: type=1326 audit(351.364:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.914624][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.925840][ T30] audit: type=1326 audit(351.364:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.948576][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.955246][ T30] audit: type=1326 audit(351.364:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 351.989263][ T30] audit: type=1326 audit(351.364:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 352.015434][ T8910] usb 3-1: Using ep0 maxpacket: 16 [ 352.024253][ T8910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.049400][ T8910] usb 3-1: config 0 has no interfaces? [ 352.055195][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.072076][ T8910] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 352.090761][ T8910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.099152][ T8910] usb 3-1: Product: syz [ 352.103551][ T8910] usb 3-1: Manufacturer: syz [ 352.108135][ T8910] usb 3-1: SerialNumber: syz [ 352.124358][ T8910] usb 3-1: config 0 descriptor?? [ 352.133235][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.139217][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.254110][ T8009] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 352.468350][ T8009] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 352.528218][ T8009] usb 2-1: can't read configurations, error -61 [ 352.733263][ T8009] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 352.866215][ T6277] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.923552][ T6277] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.977348][ T6277] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.029160][ T8009] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 353.037872][ T8009] usb 2-1: can't read configurations, error -61 [ 353.054116][ T8009] usb usb2-port1: attempt power cycle [ 353.652839][T10087] fuse: Bad value for 'group_id' [ 353.656758][ T36] net_ratelimit: 30 callbacks suppressed [ 353.656772][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 353.664783][T10087] fuse: Bad value for 'group_id' [ 353.698182][ T6277] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.723716][ T1314] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 353.742693][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.753783][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.762202][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.784836][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.795053][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 353.802375][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.963511][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.003385][ T8009] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 354.050982][ T6277] bridge_slave_1: left allmulticast mode [ 354.060283][ T6277] bridge_slave_1: left promiscuous mode [ 354.067612][ T8009] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 354.078748][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.087365][ T8009] usb 2-1: can't read configurations, error -61 [ 354.098504][ T6277] bridge_slave_0: left allmulticast mode [ 354.104760][ T6277] bridge_slave_0: left promiscuous mode [ 354.110439][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.122711][ T6277] tipc: Resetting bearer [ 354.233259][ T8009] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 354.266114][ T8009] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 354.275663][ T8009] usb 2-1: can't read configurations, error -61 [ 354.283027][ T8009] usb usb2-port1: unable to enumerate USB device [ 354.299884][ T6277] tipc: Disabling bearer [ 354.395815][ T5837] usb 3-1: USB disconnect, device number 30 [ 354.455860][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.470001][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.493786][ T6277] bond0 (unregistering): Released all slaves [ 354.514249][T10089] erspan0 speed is unknown, defaulting to 1000 [ 354.524711][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.543551][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 354.607472][ T6277] tipc: Left network mode [ 354.643495][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.803051][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 354.980256][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 355.125718][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 355.139741][T10121] hub 9-0:1.0: USB hub found [ 355.146349][T10121] hub 9-0:1.0: 1 port detected [ 355.241749][T10120] sctp: [Deprecated]: syz.2.1208 (pid 10120) Use of int in maxseg socket option. [ 355.241749][T10120] Use struct sctp_assoc_value instead [ 355.290817][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 355.878252][T10146] fuse: Bad value for 'group_id' [ 355.903003][T10146] fuse: Bad value for 'group_id' [ 356.024009][ T5833] Bluetooth: hci1: command tx timeout [ 356.991656][T10089] chnl_net:caif_netlink_parms(): no params data found [ 357.194735][ T8009] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 357.241632][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.262553][T10089] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.289055][T10089] bridge_slave_0: entered allmulticast mode [ 357.398491][T10089] bridge_slave_0: entered promiscuous mode [ 357.417814][ T8009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.435880][ T8009] usb 3-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91 [ 357.457025][ T6277] hsr_slave_0: left promiscuous mode [ 357.777607][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.786438][ T6277] hsr_slave_1: left promiscuous mode [ 357.798328][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.806112][ T8009] usb 3-1: Product: syz [ 357.810621][ T8009] usb 3-1: Manufacturer: syz [ 357.815929][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.824587][ T8009] usb 3-1: SerialNumber: syz [ 357.831315][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.839209][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.866556][ T8009] usb 3-1: config 0 descriptor?? [ 357.895459][ T8009] smsusb:smsusb_probe: board id=11, interface number 0 [ 357.916842][ T6277] veth1_macvtap: left promiscuous mode [ 357.922581][ T8009] smsusb:smsusb_probe: Device initialized with return code -19 [ 357.932086][ T6277] veth1_vlan: left promiscuous mode [ 357.938819][ T6277] veth0_vlan: left promiscuous mode [ 358.063110][ T5833] Bluetooth: hci1: command tx timeout [ 358.417682][ T6277] pim6reg (unregistering): left allmulticast mode [ 359.071117][T10202] fuse: Bad value for 'rootmode' [ 359.085107][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 359.085121][ T30] audit: type=1400 audit(359.075:683): avc: denied { lock } for pid=10200 comm="syz.1.1223" path="/244/file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 359.155991][T10202] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1223'. [ 359.627101][ T6277] team0 (unregistering): Port device team_slave_1 removed [ 359.741016][ T6277] team0 (unregistering): Port device team_slave_0 removed [ 360.208934][ T5833] Bluetooth: hci1: command tx timeout [ 360.560623][ T30] audit: type=1400 audit(360.545:684): avc: denied { write } for pid=10219 comm="syz.1.1229" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.588705][ T30] audit: type=1400 audit(360.565:685): avc: denied { ioctl } for pid=10219 comm="syz.1.1229" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.701971][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.709369][T10089] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.721356][T10089] bridge_slave_1: entered allmulticast mode [ 360.740627][T10089] bridge_slave_1: entered promiscuous mode [ 360.825646][ T1314] net_ratelimit: 6 callbacks suppressed [ 360.825659][ T1314] bond1: (slave wlan0): failed to get link speed/duplex [ 360.941202][T10089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.968364][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 360.988442][ T30] audit: type=1326 audit(360.975:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.012937][T10089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.036586][ T30] audit: type=1326 audit(360.975:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.064671][ T30] audit: type=1326 audit(361.015:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.094381][ T30] audit: type=1326 audit(361.015:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.182028][ T30] audit: type=1326 audit(361.015:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.207941][T10089] team0: Port device team_slave_0 added [ 361.218375][T10089] team0: Port device team_slave_1 added [ 361.253982][ T10] usb 3-1: USB disconnect, device number 31 [ 361.296054][ T30] audit: type=1326 audit(361.015:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.339615][ T30] audit: type=1326 audit(361.015:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 361.362371][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.472789][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 361.480196][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 361.514580][T10089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.592811][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.618691][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.796391][T10089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.817384][T10089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.227504][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.254005][T10089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.292794][ T5833] Bluetooth: hci1: command tx timeout [ 362.331281][T10252] bond4: option mode: unable to set because the bond device has slaves [ 362.471325][ T6277] IPVS: stop unused estimator thread 0... [ 362.503949][T10089] hsr_slave_0: entered promiscuous mode [ 363.013304][T10089] hsr_slave_1: entered promiscuous mode [ 363.647111][ T6276] bond1: (slave wlan0): failed to get link speed/duplex [ 363.781605][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 363.942864][T10274] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 364.088707][T10274] veth0_vlan: left promiscuous mode [ 364.094875][T10274] veth0_vlan: entered promiscuous mode [ 364.102016][T10274] team0: Device veth0_vlan failed to register rx_handler [ 364.379905][ T67] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 364.436891][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 364.436904][ T30] audit: type=1400 audit(364.425:709): avc: denied { setopt } for pid=10286 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 364.487213][ T30] audit: type=1326 audit(364.455:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.514306][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 364.517187][ T30] audit: type=1326 audit(364.455:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.546023][ T30] audit: type=1326 audit(364.455:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.567788][T10089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.580647][ T30] audit: type=1326 audit(364.455:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.606051][ T30] audit: type=1326 audit(364.455:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.738527][ T30] audit: type=1326 audit(364.455:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.768662][ T30] audit: type=1326 audit(364.455:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.821066][ T30] audit: type=1326 audit(364.455:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 364.849878][T10089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.957584][T10089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.017616][ T30] audit: type=1326 audit(364.455:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 365.040361][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.198966][T10089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.265307][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 367.154307][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 367.161298][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 367.322365][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 367.338026][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 367.464726][T10089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.492884][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 367.507022][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 367.525237][T10089] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.558136][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.565250][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.658832][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 368.593524][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 368.667659][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.674751][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.746751][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 368.775348][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 368.826726][T10360] bridge0: port 4(macvlan3) entered blocking state [ 368.934698][T10360] bridge0: port 4(macvlan3) entered disabled state [ 368.941445][T10360] macvlan3: entered allmulticast mode [ 368.963029][T10360] macvlan3: entered promiscuous mode [ 369.076321][T10089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.549175][ T6278] bond1: (slave wlan0): failed to get link speed/duplex [ 370.140924][T10089] veth0_vlan: entered promiscuous mode [ 370.168074][T10089] veth1_vlan: entered promiscuous mode [ 370.210739][T10089] veth0_macvtap: entered promiscuous mode [ 370.220718][T10089] veth1_macvtap: entered promiscuous mode [ 370.251344][T10089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.265609][T10089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.273078][ T5837] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 370.292012][ T6278] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.302953][ T6278] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.321227][ T6278] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.330956][ T6278] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.413721][ T6278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.430817][ T6278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.457104][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 370.471052][ T5837] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.486759][ T6278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.497948][ T6278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.508766][ T5837] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.520440][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.538482][ T5837] usb 2-1: Product: syz [ 370.544029][ T5837] usb 2-1: Manufacturer: syz [ 370.557527][ T5837] usb 2-1: SerialNumber: syz [ 370.576052][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 370.576064][ T30] audit: type=1400 audit(370.565:722): avc: denied { mounton } for pid=10089 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 370.605346][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.708307][ T5837] usb 2-1: config 0 descriptor?? [ 371.214519][T10389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.967692][ T30] audit: type=1400 audit(371.955:723): avc: denied { mounton } for pid=10414 comm="syz.2.1275" path="/227/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 372.224265][ T3154] net_ratelimit: 14 callbacks suppressed [ 372.224306][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.463017][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.494203][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 372.582131][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.726497][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.891964][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.985213][T10443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10443 comm=syz.2.1282 [ 373.036944][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 373.085202][T10445] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 373.194858][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 373.472659][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 373.556631][ T8009] usb 2-1: USB disconnect, device number 28 [ 373.683775][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 373.790697][T10449] FAULT_INJECTION: forcing a failure. [ 373.790697][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.804113][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 373.804134][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.804143][T10449] Call Trace: [ 373.804149][T10449] [ 373.804156][T10449] dump_stack_lvl+0x16c/0x1f0 [ 373.804187][T10449] should_fail_ex+0x512/0x640 [ 373.804212][T10449] _copy_to_user+0x32/0xd0 [ 373.804235][T10449] simple_read_from_buffer+0xcb/0x170 [ 373.804261][T10449] proc_fail_nth_read+0x197/0x240 [ 373.804279][T10449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.804298][T10449] ? rw_verify_area+0xcf/0x6c0 [ 373.804320][T10449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.804336][T10449] vfs_read+0x1e4/0xcf0 [ 373.804365][T10449] ? __pfx_vfs_read+0x10/0x10 [ 373.804388][T10449] ? irqentry_exit+0x3b/0x90 [ 373.804407][T10449] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.804433][T10449] ? ksys_read+0x7e/0x250 [ 373.804461][T10449] ksys_read+0x12a/0x250 [ 373.804484][T10449] ? __pfx_ksys_read+0x10/0x10 [ 373.804508][T10449] ? fput+0x9b/0xd0 [ 373.804531][T10449] do_syscall_64+0xcd/0x4e0 [ 373.804555][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.804571][T10449] RIP: 0033:0x7fb9e798d8dc [ 373.804585][T10449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.804600][T10449] RSP: 002b:00007fb9e8856030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.804616][T10449] RAX: ffffffffffffffda RBX: 00007fb9e7be6180 RCX: 00007fb9e798d8dc [ 373.804627][T10449] RDX: 000000000000000f RSI: 00007fb9e88560a0 RDI: 0000000000000008 [ 373.804636][T10449] RBP: 00007fb9e8856090 R08: 0000000000000000 R09: 0000000000000000 [ 373.804646][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.804656][T10449] R13: 00007fb9e7be6218 R14: 00007fb9e7be6180 R15: 00007ffd625fe998 [ 373.804679][T10449] [ 373.998023][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.310762][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1288'. [ 375.345772][ T8009] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 375.513120][ T8009] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 3845, setting to 64 [ 375.525526][ T8009] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 375.536886][ T8009] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 375.557304][ T8009] usb 3-1: Manufacturer: syz [ 375.566242][ T8009] usb 3-1: SerialNumber: syz [ 375.686893][T10486] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1296'. [ 375.755805][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10488 comm=syz.4.1296 [ 375.799054][T10488] CIFS: Unable to determine destination address [ 375.910194][ T8009] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 375.923428][ T8009] usb 3-1: USB disconnect, device number 32 [ 377.296939][ T6278] net_ratelimit: 20 callbacks suppressed [ 377.296956][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.502367][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.527833][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 378.292053][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 378.292224][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.327936][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.401678][ T67] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 378.517016][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 378.574524][ T67] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 378.591783][ T8009] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 378.691783][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 378.861846][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.183405][ T8009] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 379.222265][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.783158][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.129505][T10350] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.700036][ T8009] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 380.749451][ T8009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.833295][ T30] audit: type=1400 audit(380.826:724): avc: denied { map } for pid=10550 comm="syz.0.1315" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 381.129093][T10567] fuse: Bad value for 'fd' [ 382.160988][ T8009] usb 6-1: config 0 descriptor?? [ 382.171062][ T8009] usb 6-1: can't set config #0, error -71 [ 382.179360][ T8009] usb 6-1: USB disconnect, device number 2 [ 382.355092][T10350] net_ratelimit: 8 callbacks suppressed [ 382.355105][T10350] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.923060][ T1314] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.096918][ T5833] Bluetooth: hci0: unexpected event for opcode 0x29c4 [ 383.161356][ T8009] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 383.161916][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.389956][ T5837] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 383.401384][ T8009] usb 6-1: Using ep0 maxpacket: 8 [ 383.401708][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.426685][ T8009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.474040][ T8009] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 383.483542][ T8009] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 383.501876][ T8009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.581174][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 383.593165][ T5837] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 383.603506][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.644273][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.654870][ T8009] usb 6-1: config 0 descriptor?? [ 383.657103][ T5837] usb 2-1: config 0 descriptor?? [ 383.852284][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.962299][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.276923][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.339841][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.362336][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.492272][ T1314] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.631474][ T6278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.634004][ T5929] usb 2-1: USB disconnect, device number 29 [ 385.171583][ T5837] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 385.269215][T10624] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1328'. [ 385.323019][ T5837] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 385.393514][ T5929] usb 6-1: USB disconnect, device number 3 [ 385.567311][ T30] audit: type=1400 audit(385.546:725): avc: denied { bind } for pid=10635 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 385.626323][T10640] syz_tun: left allmulticast mode [ 385.631546][T10640] dvmrp8: left allmulticast mode [ 385.758364][T10642] fuse: Bad value for 'fd' [ 386.569451][ T30] audit: type=1400 audit(385.876:726): avc: denied { bind } for pid=10639 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.588553][ T30] audit: type=1326 audit(386.546:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.623022][ T30] audit: type=1326 audit(386.546:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.645774][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.749156][ T30] audit: type=1326 audit(386.546:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.772744][ T30] audit: type=1326 audit(386.546:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.871828][ T30] audit: type=1326 audit(386.546:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.914762][ T30] audit: type=1326 audit(386.556:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.971794][ T30] audit: type=1326 audit(386.556:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 386.998390][ T30] audit: type=1326 audit(386.556:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 387.076161][ T30] audit: type=1326 audit(386.556:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 387.393204][ T1314] net_ratelimit: 10 callbacks suppressed [ 387.393239][ T1314] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.474817][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 387.491318][ T8009] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 387.522526][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.715600][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.728319][ T5837] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 387.740104][T10693] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 387.741637][ T8009] usb 3-1: Using ep0 maxpacket: 8 [ 387.777970][ T8009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.812645][T10701] fuse: Bad value for 'fd' [ 388.172219][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.182066][ T5837] usb 1-1: config 0 descriptor?? [ 388.190558][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 388.200641][ T5837] usb 1-1: can't set config #0, error -71 [ 388.215823][ T8009] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.217038][ T5837] usb 1-1: USB disconnect, device number 24 [ 388.257185][ T8009] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 388.284492][ T8009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.313867][ T8009] usb 3-1: config 0 descriptor?? [ 388.332786][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 388.498904][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.453659][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.525261][T10728] fuse: Unknown parameter 'group_id00000000000000000000' [ 389.591040][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.713416][ T5022] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.921291][ T3154] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.048066][T10741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.207398][T10744] Invalid source name [ 390.212746][T10744] UBIFS error (pid: 10744): cannot open "./file0", error -22 [ 390.300808][ T8910] usb 3-1: USB disconnect, device number 33 [ 390.430857][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1360'. [ 392.362685][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.370030][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.570899][ T5837] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 392.638049][T10770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.732837][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 392.751097][ T5837] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 392.765528][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 392.780596][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 392.809491][ T5837] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 392.819680][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.834597][ T5837] usb 3-1: Product: syz [ 392.838820][ T5837] usb 3-1: Manufacturer: syz [ 392.844409][ T5837] usb 3-1: SerialNumber: syz [ 392.862335][ T5837] usb 3-1: config 0 descriptor?? [ 392.868216][T10785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.891642][ T5837] usb 3-1: ucan: probing device on interface #0 [ 392.906598][ T5837] usb 3-1: ucan: invalid endpoint configuration [ 392.914266][ T5837] usb 3-1: ucan: probe failed; try to update the device firmware [ 393.200593][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.228096][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.247890][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.266635][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.292745][ T6998] usb 3-1: USB disconnect, device number 34 [ 393.315769][ T8909] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 393.346320][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 393.346334][ T30] audit: type=1400 audit(393.336:759): avc: denied { setopt } for pid=10798 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.930758][ T8909] usb 6-1: Using ep0 maxpacket: 8 [ 393.937532][ T8909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.948217][ T8909] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.970748][ T8909] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 393.979777][ T8909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.002688][ T8909] usb 6-1: config 0 descriptor?? [ 394.164784][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1374'. [ 396.021447][ T5887] usb 6-1: USB disconnect, device number 4 [ 396.384287][ T5837] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 397.012504][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 397.027680][T10850] dummy0: entered promiscuous mode [ 397.034847][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.037571][T10850] dummy0: left promiscuous mode [ 397.067781][ T5837] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.083527][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.092414][ T5837] usb 1-1: Product: syz [ 397.096628][ T5837] usb 1-1: Manufacturer: syz [ 397.101458][ T5837] usb 1-1: SerialNumber: syz [ 397.109331][ T5837] usb 1-1: config 0 descriptor?? [ 397.294750][ T5837] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 397.311705][ T6998] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 397.327003][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.461186][ T5837] usb 1-1: USB disconnect, device number 25 [ 398.070538][ T6998] usb 6-1: Using ep0 maxpacket: 16 [ 398.080400][ T6998] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.102515][ T6998] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 398.114180][ T6998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.123640][ T6998] usb 6-1: Product: syz [ 398.127802][ T6998] usb 6-1: Manufacturer: syz [ 398.136377][ T6998] usb 6-1: SerialNumber: syz [ 398.153647][ T6998] usb 6-1: config 0 descriptor?? [ 398.430698][T10868] erspan0 speed is unknown, defaulting to 1000 [ 400.908051][ T6998] usb 6-1: USB disconnect, device number 5 [ 401.969353][T10924] sctp: [Deprecated]: syz.0.1403 (pid 10924) Use of int in maxseg socket option. [ 401.969353][T10924] Use struct sctp_assoc_value instead [ 402.010614][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 402.026265][T10926] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 403.560340][ T6998] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 403.881031][ T6998] usb 2-1: Using ep0 maxpacket: 16 [ 403.895157][ T6998] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 403.914294][ T6998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.924255][ T6998] usb 2-1: Product: syz [ 403.928591][ T6998] usb 2-1: Manufacturer: syz [ 403.955077][ T6998] usb 2-1: SerialNumber: syz [ 403.967231][ T6998] usb 2-1: config 0 descriptor?? [ 404.725675][ T6998] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 405.212664][ T6998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.228777][ T6998] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 405.285269][ T6998] usb 2-1: media controller created [ 405.298289][ T6998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.432227][ T6998] zl10353_read_register: readreg error (reg=127, ret==0) [ 405.439296][ T6998] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 405.447393][ T6998] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 405.460327][ T6998] usb 2-1: USB disconnect, device number 30 [ 405.505098][ T30] audit: type=1400 audit(405.487:760): avc: denied { ioctl } for pid=10978 comm="syz.5.1422" path="socket:[31420]" dev="sockfs" ino=31420 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.529144][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.562464][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 405.591775][ T6998] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 405.603988][ T30] audit: type=1400 audit(405.497:761): avc: denied { ioctl } for pid=10978 comm="syz.5.1422" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 405.984007][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'. [ 406.117568][ T30] audit: type=1326 audit(405.997:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.140316][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.150247][ T30] audit: type=1326 audit(405.997:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.172996][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.195592][ T30] audit: type=1326 audit(405.997:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.225411][ T30] audit: type=1326 audit(405.997:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.249473][ T30] audit: type=1326 audit(405.997:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.292542][ T30] audit: type=1326 audit(405.997:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.315987][ T30] audit: type=1326 audit(405.997:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 406.339344][ T30] audit: type=1326 audit(405.997:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2998d710 code=0x7ffc0000 [ 406.362083][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.268228][T11012] comedi comedi0: No channels found! [ 407.498304][T11016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.535806][T11021] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1436'. [ 408.152670][ T6998] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 408.210040][T10781] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 408.331573][ T6998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.341875][ T6998] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 408.350906][ T6998] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 408.359957][ T6998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.369063][ T6998] usb 2-1: config 0 descriptor?? [ 408.374383][T10781] usb 3-1: Using ep0 maxpacket: 16 [ 408.426134][ T6998] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 408.435056][ T6998] dvb-usb: bulk message failed: -22 (3/0) [ 408.444167][ T6998] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 408.455578][T10781] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 408.466721][ T6998] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 408.473917][T10781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.485327][ T6998] usb 2-1: media controller created [ 408.490573][T10781] usb 3-1: Product: syz [ 408.494812][T10781] usb 3-1: Manufacturer: syz [ 408.502197][ T6998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.513793][T10781] usb 3-1: SerialNumber: syz [ 408.525815][T10781] usb 3-1: config 0 descriptor?? [ 408.533204][ T6998] dvb-usb: bulk message failed: -22 (6/0) [ 408.554304][ T6998] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 408.567789][ T6998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 408.608802][ T6998] dvb-usb: schedule remote query interval to 150 msecs. [ 408.615798][ T6998] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 408.710570][T11019] dibusb: i2c wr: len=61 is too big! [ 408.710570][T11019] [ 408.727239][ T24] usb 2-1: USB disconnect, device number 31 [ 408.751355][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 408.971806][ T6998] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.080583][T10781] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 409.101001][T10781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.111247][T10781] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 409.119498][T10781] usb 3-1: media controller created [ 409.226219][T10781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.281232][T10781] zl10353_read_register: readreg error (reg=127, ret==0) [ 409.288572][T10781] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 409.297959][T10781] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 409.482145][T11049] ip6gretap0: entered promiscuous mode [ 409.508639][T11049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.590085][T11049] net_ratelimit: 13 callbacks suppressed [ 409.590107][T11049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.658079][ T6998] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 409.669697][T10781] usb 3-1: USB disconnect, device number 35 [ 409.697447][ T6998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.714085][ T6998] usb 6-1: Product: syz [ 409.723458][ T6998] usb 6-1: Manufacturer: syz [ 409.733494][T10781] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 409.747222][ T6998] usb 6-1: SerialNumber: syz [ 409.789599][T11054] fuse: Unknown parameter '*IpՍr5GZNhfh@c' [ 409.881138][T11054] team0 (unregistering): Port device team_slave_0 removed [ 409.889489][T11054] team0 (unregistering): Port device team_slave_1 removed [ 409.910026][T11060] overlayfs: failed to clone upperpath [ 410.055602][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.066398][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.100115][ T5887] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 410.310830][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 410.355578][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.426456][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.439083][ T5887] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 410.449662][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.511053][ T5887] usb 2-1: config 0 descriptor?? [ 411.983768][ T6998] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 412.024579][ T6998] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 412.085028][ T6998] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 412.124769][ T6998] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 412.170966][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 412.182028][ T6998] usb 6-1: USB disconnect, device number 6 [ 412.188408][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 412.271313][ T5887] usb 2-1: USB disconnect, device number 32 [ 412.562316][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 412.562342][ T30] audit: type=1400 audit(412.548:798): avc: denied { create } for pid=11103 comm="syz.5.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 412.717481][ T30] audit: type=1400 audit(412.548:799): avc: denied { bind } for pid=11103 comm="syz.5.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 412.887811][T10786] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 413.109826][T11114] comedi comedi0: No channels found! [ 413.137016][T10786] usb 3-1: Using ep0 maxpacket: 16 [ 413.315342][T10786] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 413.329211][T10786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.349119][T10786] usb 3-1: Product: syz [ 413.355416][T10786] usb 3-1: Manufacturer: syz [ 413.360328][T10786] usb 3-1: SerialNumber: syz [ 413.367132][T10786] usb 3-1: config 0 descriptor?? [ 413.909670][T10786] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 414.202950][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'. [ 414.777616][ T5833] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 415.737318][ T5837] usb 3-1: USB disconnect, device number 36 [ 416.884773][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 416.899503][T11165] macvlan3: left allmulticast mode [ 416.904671][T11165] macvlan3: left promiscuous mode [ 416.955039][T11165] bridge0: port 4(macvlan3) entered disabled state [ 417.036367][T11165] macvlan2: left allmulticast mode [ 417.042696][T11165] macvlan2: left promiscuous mode [ 417.047971][T11165] bridge0: port 3(macvlan2) entered disabled state [ 417.188138][T11165] bridge_slave_1: left allmulticast mode [ 417.194599][T11165] bridge_slave_1: left promiscuous mode [ 417.201749][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.389974][ T6998] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 417.683368][T11165] bridge_slave_0: left allmulticast mode [ 417.689093][T11165] bridge_slave_0: left promiscuous mode [ 417.695358][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.812031][ T6998] usb 3-1: Using ep0 maxpacket: 16 [ 417.821429][ T6998] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 417.832040][ T6998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.939414][ T6998] usb 3-1: Product: syz [ 417.946668][ T6998] usb 3-1: Manufacturer: syz [ 417.951596][ T6998] usb 3-1: SerialNumber: syz [ 417.976177][ T6998] usb 3-1: config 0 descriptor?? [ 418.169728][T10786] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 418.188578][ T6998] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 418.205386][ T6998] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 418.322385][T10786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.347877][T10786] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 418.390691][T11172] raw_sendmsg: syz.2.1480 forgot to set AF_INET. Fix it! [ 418.459417][ T30] audit: type=1400 audit(418.388:800): avc: denied { getopt } for pid=11171 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.515664][T10786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.549220][T10786] usb 6-1: config 0 descriptor?? [ 418.975056][T10786] aquacomputer_d5next 0003:0C70:F00B.0008: unknown main item tag 0x0 [ 418.983731][T10786] aquacomputer_d5next 0003:0C70:F00B.0008: item fetching failed at offset 3/7 [ 419.005596][T10786] aquacomputer_d5next 0003:0C70:F00B.0008: probe with driver aquacomputer_d5next failed with error -22 [ 419.165924][T10786] usb 6-1: USB disconnect, device number 7 [ 419.336886][T11206] erspan0 speed is unknown, defaulting to 1000 [ 420.411177][ T6998] usb 3-1: USB disconnect, device number 37 [ 421.572487][T11247] Bluetooth: MGMT ver 1.23 [ 421.591521][ T30] audit: type=1400 audit(421.578:801): avc: denied { append } for pid=11239 comm="syz.2.1503" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 423.159526][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 423.316614][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 423.652007][T11284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.374638][T11310] comedi comedi0: No channels found! [ 425.710323][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.760754][ T30] audit: type=1326 audit(425.728:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.790281][ T30] audit: type=1326 audit(425.728:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.813347][ T30] audit: type=1326 audit(425.728:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.836990][ T30] audit: type=1326 audit(425.728:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.861240][ T30] audit: type=1326 audit(425.728:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.884906][ T30] audit: type=1326 audit(425.728:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.929498][ T30] audit: type=1326 audit(425.728:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 425.959254][ T30] audit: type=1326 audit(425.728:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 426.157137][T11324] veth3: entered promiscuous mode [ 426.274739][ T30] audit: type=1326 audit(425.728:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 426.380471][ T30] audit: type=1326 audit(425.728:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x7ffc0000 [ 426.618653][T11347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.635020][T11347] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 426.808961][ T6998] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 427.029119][ T6998] usb 2-1: Using ep0 maxpacket: 16 [ 427.059831][ T6998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.251106][ T6998] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 427.265805][ T6998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.292407][ T6998] usb 2-1: config 0 descriptor?? [ 427.860243][ T6998] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 428.683399][ T6998] usb 2-1: USB disconnect, device number 33 [ 428.716411][T11373] tipc: Enabling of bearer rejected, failed to enable media [ 428.982416][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1539'. [ 428.991663][T11380] netlink: 'syz.2.1539': attribute type 7 has an invalid length. [ 429.018857][T11380] netlink: 'syz.2.1539': attribute type 8 has an invalid length. [ 429.044680][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 429.201749][T11380] bridge0: entered promiscuous mode [ 429.207862][T11380] batadv_slave_1: entered promiscuous mode [ 429.237757][T11380] erspan0: entered promiscuous mode [ 429.357967][ T6998] erspan0 speed is unknown, defaulting to 1000 [ 429.904240][ T8909] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 430.041557][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 430.119562][ T8909] usb 3-1: Using ep0 maxpacket: 16 [ 430.415262][ T8909] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 430.548016][ T8909] usb 3-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 430.571213][ T8909] usb 3-1: config 0 has no interface number 0 [ 430.583470][ T8909] usb 3-1: config 0 interface 110 altsetting 2 bulk endpoint 0xB has invalid maxpacket 8 [ 430.594904][ T8909] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 430.620827][ T8909] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 430.640887][ T8909] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 430.660401][ T8909] usb 3-1: config 0 interface 110 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 430.712349][ T8909] usb 3-1: config 0 interface 110 has no altsetting 0 [ 431.182839][T11410] comedi comedi0: No channels found! [ 431.390922][ T8909] usb 3-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=75.54 [ 431.401761][ T8909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.410653][ T8909] usb 3-1: Product: syz [ 431.427852][ T8909] usb 3-1: Manufacturer: syz [ 431.460444][ T8909] usb 3-1: SerialNumber: syz [ 431.523516][ T8909] usb 3-1: config 0 descriptor?? [ 431.548321][T11384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.565741][ T8909] cp210x 3-1:0.110: cp210x converter detected [ 432.085889][ T8909] cp210x 3-1:0.110: failed to get vendor val 0x370b size 1: -71 [ 432.093618][ T8909] cp210x 3-1:0.110: querying part number failed [ 432.126261][ T8909] usb 3-1: cp210x converter now attached to ttyUSB0 [ 432.136545][ T8909] usb 3-1: USB disconnect, device number 38 [ 432.184778][ T8909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 432.201445][ T8909] cp210x 3-1:0.110: device disconnected [ 432.287790][T11429] ubi31: attaching mtd0 [ 432.294166][T11429] ubi31: scanning is finished [ 432.298932][T11429] ubi31: empty MTD device detected [ 432.326173][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 432.326186][ T30] audit: type=1400 audit(432.279:823): avc: denied { connect } for pid=11424 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.354472][T11431] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1550'. [ 432.409700][T11432] fuse: Unknown parameter 'user_i00000000000000000000' [ 432.465798][T11429] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 432.473536][T11429] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 432.481038][T11429] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 432.488061][T11429] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 432.495566][T11429] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 432.502460][T11429] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 432.510816][T11429] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1662712445 [ 432.520900][T11429] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 432.536928][T11434] ubi31: background thread "ubi_bgt31d" started, PID 11434 [ 433.624624][T11454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1559'. [ 434.343344][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 434.366737][T11463] openvswitch: : Dropping previously announced user features [ 434.380871][T11461] netlink: 'syz.4.1561': attribute type 10 has an invalid length. [ 434.436180][T11465] fuse: Unknown parameter 'user_i00000000000000000000' [ 434.531860][T11472] netlink: 'syz.0.1566': attribute type 39 has an invalid length. [ 434.815088][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 435.328553][T10786] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 435.772009][T10786] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 435.781208][T10786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.790262][T10786] usb 2-1: Product: syz [ 435.796631][T11480] binder: 11479:11480 ioctl c0306201 200000000640 returned -22 [ 435.805353][T10786] usb 2-1: Manufacturer: syz [ 435.809994][T10786] usb 2-1: SerialNumber: syz [ 436.027415][T11467] vxcan1: tx address claim with different name [ 436.035195][T10786] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 436.051592][T10786] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 436.080174][T10786] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 436.112399][T10786] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 436.128901][T10786] usb 2-1: USB disconnect, device number 34 [ 436.266930][ T6998] erspan0 speed is unknown, defaulting to 1000 [ 436.312948][ T30] audit: type=1400 audit(436.309:824): avc: denied { bind } for pid=11495 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 436.344067][ T30] audit: type=1400 audit(436.339:825): avc: denied { connect } for pid=11495 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 436.364839][ T30] audit: type=1400 audit(436.349:826): avc: denied { connect } for pid=11495 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 437.746838][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 437.902547][T11520] binder: 11517:11520 ioctl c0306201 200000000640 returned -22 [ 438.278454][ T6998] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 438.498379][ T6998] usb 2-1: device descriptor read/64, error -71 [ 438.790575][ T6998] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 439.210993][ T6998] usb 2-1: device descriptor read/64, error -71 [ 439.318209][T10786] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 439.334265][ T30] audit: type=1400 audit(439.299:827): avc: denied { mounton } for pid=11544 comm="syz.5.1587" path="/newroot/proc/203/ns/mnt" dev="proc" ino=34184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 439.468424][ T6998] usb usb2-port1: attempt power cycle [ 439.479866][T10786] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 439.491741][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.498008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.809260][ T6998] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 439.809341][T11564] binder: 11560:11564 ioctl c0306201 200000000640 returned -22 [ 439.872346][ T6998] usb 2-1: device descriptor read/8, error -71 [ 439.926217][T11570] erspan0 speed is unknown, defaulting to 1000 [ 440.132374][ T6998] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 440.151945][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1599'. [ 440.171219][ T6998] usb 2-1: device descriptor read/8, error -71 [ 440.298927][ T6998] usb usb2-port1: unable to enumerate USB device [ 440.593962][T11592] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1606'. [ 440.645884][T11594] bpf: Bad value for 'mode' [ 441.598936][T10786] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 441.631371][T10786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.647495][T10786] usb 3-1: config 0 descriptor?? [ 441.696861][T10786] usb 3-1: can't set config #0, error -71 [ 441.706322][T11615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 441.736029][T10786] usb 3-1: USB disconnect, device number 39 [ 441.968394][T11622] overlayfs: failed to clone upperpath [ 442.139649][T11627] binder: 11623:11627 ioctl c0306201 2000000003c0 returned -14 [ 442.945370][ T30] audit: type=1400 audit(524730.184:828): avc: denied { bind } for pid=11621 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 443.068190][ T5901] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 443.314439][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 443.326425][ T5901] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 443.338501][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.790946][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 443.798430][ T5901] pvrusb2: ********** [ 443.806531][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 443.869166][ T5901] pvrusb2: Important functionality might not be entirely working. [ 443.914882][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 443.974703][ T5901] pvrusb2: ********** [ 443.999325][ T2334] pvrusb2: Invalid write control endpoint [ 444.204323][T11632] pvrusb2: Invalid write control endpoint [ 444.211447][ T5901] usb 6-1: USB disconnect, device number 8 [ 444.225829][T11657] fuse: Unknown parameter 'user_id00000000000000000000' [ 444.234472][ T2334] pvrusb2: Invalid write control endpoint [ 444.241520][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 444.266292][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 444.274143][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 444.286777][ T2334] pvrusb2: Device being rendered inoperable [ 444.295394][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 444.305776][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 444.338040][ T2334] pvrusb2: Attached sub-driver cx25840 [ 444.344994][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 444.356571][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 445.075155][ T30] audit: type=1400 audit(524732.922:829): avc: denied { write } for pid=11668 comm="syz.5.1628" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 445.300399][T11680] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 445.632689][T11689] overlayfs: workdir and upperdir must be separate subtrees [ 446.017289][T11695] fuse: Bad value for 'fd' [ 446.017806][ T30] audit: type=1326 audit(524733.772:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 446.069863][ T30] audit: type=1326 audit(524733.772:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 446.092900][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.118114][ T30] audit: type=1326 audit(524733.889:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 446.141075][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.175338][T11700] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.201536][ T30] audit: type=1400 audit(524733.938:833): avc: denied { write } for pid=11687 comm="syz.5.1634" path="socket:[34478]" dev="sockfs" ino=34478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 446.533882][T11693] pim6reg: entered allmulticast mode [ 446.539181][ T30] audit: type=1400 audit(524734.006:834): avc: denied { accept } for pid=11699 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 446.592104][ T30] audit: type=1326 audit(524734.388:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 446.720173][ T30] audit: type=1326 audit(524734.388:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ae18eec9 code=0x7ffc0000 [ 447.595249][T11722] binder: 11721:11722 ioctl c0306201 2000000003c0 returned -14 [ 447.612005][ T30] audit: type=1400 audit(524735.397:837): avc: denied { getopt } for pid=11731 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 447.686794][T11736] fuse: Bad value for 'fd' [ 448.014750][T11727] sctp: [Deprecated]: syz.5.1640 (pid 11727) Use of int in maxseg socket option. [ 448.014750][T11727] Use struct sctp_assoc_value instead [ 448.620359][ T30] audit: type=1400 audit(524736.377:838): avc: denied { write } for pid=11748 comm="syz.2.1652" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 448.643160][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.000707][T11773] overlayfs: failed to clone lowerpath [ 450.339987][T11785] fuse: Bad value for 'fd' [ 450.446239][T11794] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 450.502489][T11794] overlayfs: missing 'lowerdir' [ 450.641944][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 451.365183][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 451.365198][ T30] audit: type=1326 audit(524739.090:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11812 comm="syz.4.1671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8eec9 code=0x0 [ 451.393713][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.457089][T11817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.466749][T11819] 9pnet_fd: Insufficient options for proto=fd [ 451.498389][T11817] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 451.573315][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 451.695339][ T3154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 452.714040][T11834] fuse: Unknown parameter '0x0000000000000003' [ 453.197447][T10786] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 453.303952][T11850] lo speed is unknown, defaulting to 1000 [ 453.310171][T11850] lo speed is unknown, defaulting to 1000 [ 453.321521][T11850] lo speed is unknown, defaulting to 1000 [ 453.346079][T11850] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 453.390131][T11850] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 453.527156][ T30] audit: type=1400 audit(524741.198:842): avc: denied { connect } for pid=11842 comm="syz.1.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 453.568859][T11850] lo speed is unknown, defaulting to 1000 [ 453.582460][T11850] lo speed is unknown, defaulting to 1000 [ 453.615027][T11850] lo speed is unknown, defaulting to 1000 [ 453.622609][T11850] lo speed is unknown, defaulting to 1000 [ 453.629688][T11850] lo speed is unknown, defaulting to 1000 [ 453.739512][T10786] usb 6-1: Using ep0 maxpacket: 8 [ 453.948105][T10786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.462019][T10786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.475254][T10786] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 454.484442][T10786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.518960][T10786] usb 6-1: config 0 descriptor?? [ 454.824758][T11874] fuse: Unknown parameter '0x0000000000000003' [ 454.900420][ T5901] IPVS: starting estimator thread 0... [ 455.021706][T11878] IPVS: using max 42 ests per chain, 100800 per kthread [ 455.094430][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 455.407578][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 455.530883][T11883] Error: Driver 'c6xdigio' is already registered, aborting... [ 455.967136][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 455.974559][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 455.981710][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 455.988838][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 455.996493][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 456.006240][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 456.013365][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 456.097903][T10786] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 456.217517][T10786] hid-rmi 0003:06CB:81A7.000A: unbalanced collection at end of report description [ 456.409925][T10786] hid-rmi 0003:06CB:81A7.000A: parse failed [ 456.506501][T10786] hid-rmi 0003:06CB:81A7.000A: probe with driver hid-rmi failed with error -22 [ 456.903876][ T5901] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 457.463719][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 457.650386][ T5901] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 457.842054][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.898530][ T24] usb 6-1: USB disconnect, device number 9 [ 457.954431][ T5901] usb 3-1: Product: syz [ 457.976540][ T5901] usb 3-1: Manufacturer: syz [ 457.993231][ T5901] usb 3-1: SerialNumber: syz [ 458.022583][ T5901] usb 3-1: config 0 descriptor?? [ 458.070006][ T5901] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 459.009459][T11906] autofs: Bad value for 'fd' [ 460.760705][ T5901] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 460.769177][ T5901] visor 3-1:0.0: probe with driver visor failed with error -71 [ 461.136978][ T5901] usb 3-1: USB disconnect, device number 40 [ 461.206448][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 461.942450][T11924] loop9: detected capacity change from 0 to 7 [ 461.966844][ T6039] Dev loop9: unable to read RDB block 7 [ 461.973621][ T6039] loop9: AHDI p1 p2 [ 461.977569][ T6039] loop9: partition table partially beyond EOD, truncated [ 461.987967][ T6039] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 462.119317][T11924] Dev loop9: unable to read RDB block 7 [ 462.162770][T11924] loop9: AHDI p1 p2 [ 462.166901][T11924] loop9: partition table partially beyond EOD, truncated [ 462.188183][T11924] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 462.553534][ T6039] udevd[6039]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 462.587323][ T6039] udevd[6039]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 462.642690][ T5901] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 463.156352][ T30] audit: type=1326 audit(524750.620:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.2.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 463.191101][ T5901] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 463.239216][ T30] audit: type=1326 audit(524750.620:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.2.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2998eec9 code=0x7ffc0000 [ 463.334511][ T30] audit: type=1400 audit(524750.937:845): avc: denied { append } for pid=11944 comm="syz.0.1707" name="video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 463.730719][T11963] kvm: pic: non byte read [ 463.742927][T11963] kvm: pic: level sensitive irq not supported [ 463.742982][T11963] kvm: pic: non byte read [ 463.769315][T11963] kvm: pic: level sensitive irq not supported [ 463.769369][T11963] kvm: pic: non byte read [ 463.780118][T11953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11953 comm=syz.5.1709 [ 463.780134][T11963] kvm: pic: level sensitive irq not supported [ 463.792884][T11963] kvm: pic: non byte read [ 463.806374][T11963] kvm: pic: level sensitive irq not supported [ 463.811832][T11963] kvm: pic: non byte read [ 463.837851][T11963] kvm: pic: level sensitive irq not supported [ 463.844400][T11963] kvm: pic: non byte read [ 464.497847][ T30] audit: type=1400 audit(524751.950:846): avc: denied { map } for pid=11968 comm="syz.2.1712" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 464.808153][ T30] audit: type=1400 audit(524751.950:847): avc: denied { execute } for pid=11968 comm="syz.2.1712" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 465.032255][ T5901] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 465.307714][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.377073][ T30] audit: type=1400 audit(524752.943:848): avc: denied { watch_mount } for pid=11977 comm="syz.2.1715" path="/307/file1" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 465.399800][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.522238][ T5901] usb 2-1: config 0 descriptor?? [ 465.554066][ T5901] usb 2-1: can't set config #0, error -71 [ 465.582184][ T5901] usb 2-1: USB disconnect, device number 39 [ 466.614285][ T5901] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 466.774941][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 467.207588][ T5901] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 467.276572][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.316580][ T5901] usb 3-1: config 0 descriptor?? [ 467.990038][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 468.006467][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 468.023709][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 468.040462][ T5901] usb 3-1: media controller created [ 468.085710][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.213312][ T5901] az6027: usb out operation failed. (-71) [ 468.230764][ T5901] az6027: usb out operation failed. (-71) [ 468.243405][ T5901] stb0899_attach: Driver disabled by Kconfig [ 468.256719][ T5901] az6027: no front-end attached [ 468.256719][ T5901] [ 468.271752][ T5901] az6027: usb out operation failed. (-71) [ 468.351693][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 468.405634][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 468.598886][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 468.620565][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.717646][ T5901] usb 3-1: USB disconnect, device number 41 [ 469.484574][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 470.585077][ T5901] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 470.720799][T12070] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 470.738822][ T30] audit: type=1400 audit(524758.274:849): avc: denied { audit_write } for pid=12036 comm="syz.0.1726" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 470.759586][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.770382][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 470.831535][ T5901] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 470.872540][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.895221][ T5901] usb 3-1: Product: syz [ 470.904251][ T5901] usb 3-1: Manufacturer: syz [ 470.923086][ T5901] usb 3-1: SerialNumber: syz [ 471.078207][ T5901] usb 3-1: config 0 descriptor?? [ 471.666732][ T5901] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 471.717175][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.733598][ T5901] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 471.742087][ T5901] usb 3-1: media controller created [ 472.142014][T12055] dtv5100: wlen = 0, aborting. [ 472.319229][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.449211][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 472.472383][ T5901] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 472.500817][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 472.542137][ T5901] usb 3-1: USB disconnect, device number 42 [ 473.004370][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 473.385600][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1741'. [ 473.485799][ T30] audit: type=1400 audit(524760.993:850): avc: denied { bind } for pid=12101 comm="syz.1.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 473.504729][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.619683][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 473.761162][ T5901] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 474.408217][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 474.729258][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 474.741111][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 474.756451][ T5901] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 474.767839][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.779934][ T5901] usb 3-1: Product: syz [ 474.790992][ T5901] usb 3-1: Manufacturer: syz [ 474.798341][ T5901] usb 3-1: SerialNumber: syz [ 474.890880][ T5901] usb 3-1: config 0 descriptor?? [ 475.124394][T12106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.137375][ T5901] usb 3-1: ucan: probing device on interface #0 [ 475.145834][ T5901] usb 3-1: ucan: invalid endpoint configuration [ 475.162319][ T5901] usb 3-1: ucan: probe failed; try to update the device firmware [ 475.390886][ T8909] usb 3-1: USB disconnect, device number 43 [ 477.191097][T12143] syzkaller1: entered promiscuous mode [ 477.196553][T12143] syzkaller1: entered allmulticast mode [ 477.513955][ T6998] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 477.693962][ T6998] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 477.703143][ T6998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.714890][ T6998] usb 3-1: Product: syz [ 477.721789][ T6998] usb 3-1: Manufacturer: syz [ 477.734923][ T6998] usb 3-1: SerialNumber: syz [ 477.750935][ T6998] usb 3-1: config 0 descriptor?? [ 477.873723][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 477.964030][ T5837] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 477.995760][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 478.132652][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 478.158556][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.172037][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.185303][ T5837] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 478.195452][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.310098][ T5837] usb 2-1: config 0 descriptor?? [ 478.402718][T12177] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 478.782565][T12167] sctp: [Deprecated]: syz.0.1761 (pid 12167) Use of int in maxseg socket option. [ 478.782565][T12167] Use struct sctp_assoc_value instead [ 479.073615][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.085118][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.092159][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.100317][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.107691][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.114724][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.125528][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.132561][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.191500][T12182] ip6gretap0: entered promiscuous mode [ 479.205597][ T5837] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 479.325091][ T5837] hid-rmi 0003:06CB:81A7.000B: unbalanced collection at end of report description [ 479.375238][ T5837] hid-rmi 0003:06CB:81A7.000B: parse failed [ 479.408523][ T5837] hid-rmi 0003:06CB:81A7.000B: probe with driver hid-rmi failed with error -22 [ 479.494690][ T5837] usb 2-1: USB disconnect, device number 40 [ 479.806933][ T5887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 479.957495][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 479.966407][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.007780][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.017584][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.047535][ T5837] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 480.050168][ T6998] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 480.070562][ T6998] asix 3-1:0.0: probe with driver asix failed with error -71 [ 480.075481][ T5887] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.087832][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.092751][ T6998] usb 3-1: USB disconnect, device number 44 [ 480.106503][ T5887] usb 6-1: config 0 descriptor?? [ 480.207881][ T5837] usb 2-1: device descriptor read/64, error -71 [ 480.219904][T12197] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1771'. [ 480.273563][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 480.341648][T12193] binder: 12192:12193 ioctl c0306201 0 returned -14 [ 480.672992][ T5837] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 480.677729][T12198] binder: 12192:12198 ioctl c0306201 200000000640 returned -22 [ 480.702014][ T5887] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000C/input/input19 [ 480.728136][ T5887] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 480.819374][ T5837] usb 2-1: device descriptor read/64, error -71 [ 480.893250][ T30] audit: type=1400 audit(524768.410:851): avc: denied { listen } for pid=12183 comm="syz.5.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.921397][ T5901] usb 6-1: USB disconnect, device number 10 [ 480.937701][ T30] audit: type=1400 audit(524768.440:852): avc: denied { name_bind } for pid=12183 comm="syz.5.1766" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 480.965958][ T5837] usb usb2-port1: attempt power cycle [ 481.291699][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 481.435851][T12217] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.481137][ T5837] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 481.513008][ T5837] usb 2-1: device descriptor read/8, error -71 [ 481.849036][ T5837] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 481.983345][ T5837] usb 2-1: device descriptor read/8, error -71 [ 482.182974][ T5837] usb usb2-port1: unable to enumerate USB device [ 482.193329][T12247] sctp: [Deprecated]: syz.4.1781 (pid 12247) Use of int in maxseg socket option. [ 482.193329][T12247] Use struct sctp_assoc_value instead [ 483.104731][T12257] binder: 12248:12257 ioctl c0306201 200000000640 returned -22 [ 484.309806][T12287] erspan0 speed is unknown, defaulting to 1000 [ 484.525142][T12287] lo speed is unknown, defaulting to 1000 [ 485.512147][T12301] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 485.870420][T12303] vlan2: entered promiscuous mode [ 485.878857][T12303] vlan2: entered allmulticast mode [ 485.884107][T12303] hsr_slave_1: entered allmulticast mode [ 486.139452][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 486.600022][T12311] batman_adv: batadv0: Removing interface: team0 [ 486.625765][T12311] team0 (unregistering): Port device team_slave_0 removed [ 486.657129][T12311] team0 (unregistering): Port device team_slave_1 removed [ 486.868105][ T30] audit: type=1400 audit(524774.378:853): avc: denied { bind } for pid=12322 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.892638][ T30] audit: type=1400 audit(524774.398:854): avc: denied { write } for pid=12322 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 487.366371][ T5901] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 487.629917][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.682450][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.708750][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.724295][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.761535][T12334] autofs: Unknown parameter 'fd0x0000000000000000' [ 487.943428][ T5901] usb 3-1: GET_CAPABILITIES returned b6 [ 487.967167][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 488.145780][ T5901] usb 3-1: USB disconnect, device number 45 [ 489.289759][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1816'. [ 489.538451][T12367] nbd: couldn't find device at index -1 [ 491.498589][T12399] autofs: Unknown parameter 'fd0x0000000000000000' [ 492.039009][ T30] audit: type=1326 audit(524785.540:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.5.1827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d4f8eec9 code=0x0 [ 493.902687][T12432] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1834'. [ 494.294188][ T8909] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 494.539874][T12441] netlink: 5864 bytes leftover after parsing attributes in process `syz.1.1836'. [ 494.663601][ T8909] usb 3-1: Using ep0 maxpacket: 16 [ 494.683568][ T8909] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 494.692826][ T8909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.741750][ T8909] usb 3-1: Product: syz [ 494.784298][ T8909] usb 3-1: Manufacturer: syz [ 494.896361][ T8909] usb 3-1: SerialNumber: syz [ 495.714020][T12444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.772761][ T8909] usb 3-1: config 0 descriptor?? [ 495.826781][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 495.958749][T12450] autofs: Unknown parameter 'fd0x0000000000000000' [ 496.223596][ T8909] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 496.311407][ T8909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.325675][ T8909] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 496.341608][ T8909] usb 3-1: media controller created [ 496.763985][T12464] ------------[ cut here ]------------ [ 496.769479][T12464] usb 3-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0 [ 496.779954][T12464] WARNING: CPU: 0 PID: 12464 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13a7/0x1770 [ 496.789803][T12464] Modules linked in: [ 496.794234][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 496.803643][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.813115][ T8909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.813726][T12464] RIP: 0010:usb_submit_urb+0x13a7/0x1770 [ 496.813771][T12464] Code: e8 be 32 be fa 48 8b 7c 24 40 e8 54 59 d4 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 c0 e3 2d 8c e8 aa bd 7c fa 90 <0f> 0b 90 90 e9 a0 ef ff ff e8 8b 32 be fa 0f b6 2d e5 10 4b 09 31 [ 496.813790][T12464] RSP: 0018:ffffc9000decf9a8 EFLAGS: 00010282 [ 496.813808][T12464] RAX: 0000000000000000 RBX: ffff88814cfe0500 RCX: ffffc9000eae0000 [ 496.813821][T12464] RDX: 0000000000080000 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 496.813834][T12464] RBP: ffff888057c86058 R08: 0000000000000001 R09: 0000000000000000 [ 496.813846][T12464] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880320327a0 [ 496.813857][T12464] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080002e80 [ 496.894429][T12464] FS: 00007f6c2a83d6c0(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 496.903334][T12464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.909966][T12464] CR2: 00002000001c1030 CR3: 000000007d428000 CR4: 00000000003526f0 [ 496.918105][T12464] Call Trace: [ 496.921432][T12464] [ 496.924357][T12464] ? lockdep_set_lock_cmp_fn+0x70/0xe0 [ 496.929793][T12464] ? __init_swait_queue_head+0xca/0x150 [ 496.935370][T12464] usb_start_wait_urb+0x104/0x4b0 [ 496.940426][T12464] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 496.946142][T12464] ? __asan_memset+0x23/0x50 [ 496.950711][T12464] usb_control_msg+0x326/0x4a0 [ 496.955470][T12464] ? __pfx_usb_control_msg+0x10/0x10 [ 496.960731][T12464] dtv5100_i2c_msg+0x1d8/0x320 [ 496.965516][T12464] dtv5100_i2c_xfer+0x1e0/0x420 [ 496.970353][T12464] __i2c_transfer+0x6b6/0x2190 [ 496.975291][T12464] ? lockdep_hardirqs_on+0x7c/0x110 [ 496.980465][T12464] ? __pfx___i2c_transfer+0x10/0x10 [ 496.985670][T12464] ? rt_mutex_slowtrylock+0xc9/0x100 [ 496.990940][T12464] i2c_transfer+0x1da/0x380 [ 496.995452][T12464] i2cdev_ioctl_rdwr+0x373/0x710 [ 497.000366][T12464] i2cdev_ioctl+0x5ff/0x820 [ 497.005024][T12464] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 497.010020][T12464] ? selinux_file_ioctl+0x180/0x270 [ 497.015225][T12464] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 497.020231][T12464] __x64_sys_ioctl+0x18b/0x210 [ 497.025062][T12464] do_syscall_64+0xcd/0x4e0 [ 497.029543][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.035612][T12464] RIP: 0033:0x7f6c2998eec9 [ 497.040003][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.059688][T12464] RSP: 002b:00007f6c2a83d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.068262][T12464] RAX: ffffffffffffffda RBX: 00007f6c29be6090 RCX: 00007f6c2998eec9 [ 497.076244][T12464] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004 [ 497.084216][T12464] RBP: 00007f6c29a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.092158][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.100288][T12464] R13: 00007f6c29be6128 R14: 00007f6c29be6090 R15: 00007fff93fa9e28 [ 497.108258][T12464] [ 497.111251][T12464] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.118514][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 497.127855][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.137881][T12464] Call Trace: [ 497.141134][T12464] [ 497.144036][T12464] dump_stack_lvl+0x3d/0x1f0 [ 497.148603][T12464] vpanic+0x6e8/0x7a0 [ 497.152558][T12464] ? __pfx_vpanic+0x10/0x10 [ 497.157044][T12464] ? usb_submit_urb+0x13a7/0x1770 [ 497.162041][T12464] panic+0xca/0xd0 [ 497.165731][T12464] ? __pfx_panic+0x10/0x10 [ 497.170132][T12464] check_panic_on_warn+0xab/0xb0 [ 497.175043][T12464] __warn+0xf6/0x3c0 [ 497.178907][T12464] ? usb_submit_urb+0x13a7/0x1770 [ 497.183903][T12464] report_bug+0x3c3/0x580 [ 497.188215][T12464] ? usb_submit_urb+0x13a7/0x1770 [ 497.193210][T12464] handle_bug+0x184/0x210 [ 497.197513][T12464] exc_invalid_op+0x17/0x50 [ 497.201993][T12464] asm_exc_invalid_op+0x1a/0x20 [ 497.206813][T12464] RIP: 0010:usb_submit_urb+0x13a7/0x1770 [ 497.212415][T12464] Code: e8 be 32 be fa 48 8b 7c 24 40 e8 54 59 d4 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 c0 e3 2d 8c e8 aa bd 7c fa 90 <0f> 0b 90 90 e9 a0 ef ff ff e8 8b 32 be fa 0f b6 2d e5 10 4b 09 31 [ 497.231991][T12464] RSP: 0018:ffffc9000decf9a8 EFLAGS: 00010282 [ 497.238030][T12464] RAX: 0000000000000000 RBX: ffff88814cfe0500 RCX: ffffc9000eae0000 [ 497.245972][T12464] RDX: 0000000000080000 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 497.253914][T12464] RBP: ffff888057c86058 R08: 0000000000000001 R09: 0000000000000000 [ 497.261855][T12464] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880320327a0 [ 497.269797][T12464] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080002e80 [ 497.277743][T12464] ? __warn_printk+0x1a5/0x350 [ 497.282477][T12464] ? usb_submit_urb+0x13a6/0x1770 [ 497.287475][T12464] ? lockdep_set_lock_cmp_fn+0x70/0xe0 [ 497.292906][T12464] ? __init_swait_queue_head+0xca/0x150 [ 497.298424][T12464] usb_start_wait_urb+0x104/0x4b0 [ 497.303422][T12464] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 497.308942][T12464] ? __asan_memset+0x23/0x50 [ 497.313515][T12464] usb_control_msg+0x326/0x4a0 [ 497.318265][T12464] ? __pfx_usb_control_msg+0x10/0x10 [ 497.323537][T12464] dtv5100_i2c_msg+0x1d8/0x320 [ 497.328287][T12464] dtv5100_i2c_xfer+0x1e0/0x420 [ 497.333113][T12464] __i2c_transfer+0x6b6/0x2190 [ 497.337849][T12464] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.343019][T12464] ? __pfx___i2c_transfer+0x10/0x10 [ 497.348185][T12464] ? rt_mutex_slowtrylock+0xc9/0x100 [ 497.353446][T12464] i2c_transfer+0x1da/0x380 [ 497.357927][T12464] i2cdev_ioctl_rdwr+0x373/0x710 [ 497.362839][T12464] i2cdev_ioctl+0x5ff/0x820 [ 497.367312][T12464] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 497.372305][T12464] ? selinux_file_ioctl+0x180/0x270 [ 497.377476][T12464] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 497.382471][T12464] __x64_sys_ioctl+0x18b/0x210 [ 497.387210][T12464] do_syscall_64+0xcd/0x4e0 [ 497.391686][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.397552][T12464] RIP: 0033:0x7f6c2998eec9 [ 497.401939][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.421516][T12464] RSP: 002b:00007f6c2a83d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.429907][T12464] RAX: ffffffffffffffda RBX: 00007f6c29be6090 RCX: 00007f6c2998eec9 [ 497.437847][T12464] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004 [ 497.445787][T12464] RBP: 00007f6c29a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.453729][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.461668][T12464] R13: 00007f6c29be6128 R14: 00007f6c29be6090 R15: 00007fff93fa9e28 [ 497.469616][T12464] [ 497.472795][T12464] Kernel Offset: disabled [ 497.477091][T12464] Rebooting in 86400 seconds..