last executing test programs: 3m42.927946027s ago: executing program 3 (id=2238): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xfffffffffffffffe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) syz_io_uring_setup(0x7b6, &(0x7f0000000500)={0x0, 0x146, 0x0, 0x2, 0x400000}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x6, 0x4000, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/249, 0xf9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x7, 0x8000}, 0x10, r7, 0x0, 0x0, &(0x7f0000000840)=[r1, r5]}, 0x94) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, 0x0) gettid() r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x5, &(0x7f0000000000)={0x1f, "90f5000012f300800000000000049942a55e00"}}) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b000100b2499629c3ed9d36bbebf300000009040000018984aa0009050c9c0600ac5dfb0a717934ee6b3237215e9b584172b103d488b7609cc84df6dff8d5644f0f781ccc06398ec56433b0525bf9608a6f3a63062050cf0329d5c1a059698143f49bd13e284c07afb32bd9e0f118e2", @ANYRES16], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3m39.169923094s ago: executing program 3 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 3m37.131311825s ago: executing program 3 (id=2248): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000000100)=""/174, 0xae) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x5000003a, r7, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 3m36.959058512s ago: executing program 3 (id=2251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x3, 0x200, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x276) 3m34.959719217s ago: executing program 3 (id=2258): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r3, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m34.456280572s ago: executing program 3 (id=2259): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd518c38a055b2808) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000340)) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r4, 0x6) listen(r2, 0x0) setregid(0x0, 0xee01) socketpair(0x18, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x2, &(0x7f0000000240)={0x7, 0xd, 0x4, 0x7, 0x9, 0x8, 0x8c, 0x9, 0xb, 0x6e36, 0x2, 0x80, 0x0, 0x2, 0xff, 0xffffffffffffff16, 0x2, 0x34e3, 0x7, 0x0, 0x0, 0x4, 0x21, 0x7728, 0x98, 0x7}) syz_emit_ethernet(0x73, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x88000) r7 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x3, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r7, 0x396d, 0xd225, 0x2, 0x0, 0x0) splice(r0, 0x0, r6, 0x0, 0x7fff, 0x0) 3m34.332267046s ago: executing program 32 (id=2259): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd518c38a055b2808) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000340)) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r4, 0x6) listen(r2, 0x0) setregid(0x0, 0xee01) socketpair(0x18, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x2, &(0x7f0000000240)={0x7, 0xd, 0x4, 0x7, 0x9, 0x8, 0x8c, 0x9, 0xb, 0x6e36, 0x2, 0x80, 0x0, 0x2, 0xff, 0xffffffffffffff16, 0x2, 0x34e3, 0x7, 0x0, 0x0, 0x4, 0x21, 0x7728, 0x98, 0x7}) syz_emit_ethernet(0x73, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x88000) r7 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x3, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r7, 0x396d, 0xd225, 0x2, 0x0, 0x0) splice(r0, 0x0, r6, 0x0, 0x7fff, 0x0) 13.530074625s ago: executing program 0 (id=2950): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = landlock_create_ruleset(0x0, 0x24, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000008c0)={0x2, 0x7}, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) syz_open_dev$hiddev(0x0, 0x16e, 0x2) 13.12872667s ago: executing program 0 (id=2951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYRES8=r0, @ANYBLOB="12c7b73663d72c2d1e95e24967569272314918dcb276aa72007567bedcd34bda05c21e4124cdc173413e40e25908e11a96169c376b2f4e3bba998acaacf0de0b4c9076a500c758cffdfd1bf1243f56", @ANYRES16=0x0, @ANYRES8=r2, @ANYRESDEC=r1], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.583277464s ago: executing program 0 (id=2952): syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1, &(0x7f00000024c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240448c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2220018, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0xa) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) 11.746598239s ago: executing program 0 (id=2954): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xbb8, &(0x7f0000000280)={0x0, 0xdc48, 0x2, 0xfffffffd, 0x345}) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 10.016125204s ago: executing program 0 (id=2957): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x5, 0x3}, "", @value={0x8, 0x1, 0x0, 0x1, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x1e, "ad3959bce79f8673423f4a0b83f1de398e87d6c27c758e3c440527f9ced7"}, {@broadcast, @device_a, 0x1e, "7de5d3bb05c0f179444d5a14b588c166808c135ab78748bfcb22a9a2daf1"}]}, 0x76) rt_sigqueueinfo(0x0, 0x1d, &(0x7f0000000500)={0x0, 0x1, 0xfffffffa}) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x2878a81d0e412069, 0x1, 0x3, 0xc}, {0x9, 0x5, 0x4, 0x2, 0x10, 0xfd, 0xe, 0x60}, {0x9, 0x5, 0xd, 0x3, 0x5e7, 0x5, 0x1, 0x1}}}}}}]}}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 9.784493284s ago: executing program 2 (id=2958): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xed, ""/237}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x18, 0x0, 0x403, 0x5, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x10, 0xffffffffffffffff, 0x47083000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xffffffff) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 8.731010256s ago: executing program 2 (id=2963): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) listxattr(&(0x7f00000001c0)='./control\x00', &(0x7f00000002c0)=""/48, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf2402000000050001"], 0x1c}}, 0x8800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x28) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) 8.68239971s ago: executing program 4 (id=2964): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8.653494857s ago: executing program 1 (id=2965): connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)=ANY=[@ANYBLOB="141000002300090025bd7000ffd3df2502"], 0x1014}, 0x1, 0x0, 0x0, 0x4801}, 0x8410) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0, &(0x7f0000000000)) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x100000000000600d, 0x1) creat(0x0, 0xd4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000180)=0x3) setresuid(0xee01, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r6, 0x0, r6) 8.495882934s ago: executing program 4 (id=2966): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0x1000) semget(0x0, 0x2, 0x34) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948828", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c96258f3f94db4db53f98f3966993682b841fce7fe6e2491c8302e50b45", 0x36}, {&(0x7f0000000940)}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245428ba3000461e69a3967acc5", 0x66}], 0x3}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.439450994s ago: executing program 2 (id=2967): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xfffffffffffffffe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) syz_io_uring_setup(0x7b6, &(0x7f0000000500)={0x0, 0x146, 0x0, 0x2, 0x400000}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x6, 0x4000, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/249, 0xf9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x7, 0x8000}, 0x10, r6, 0x0, 0x0, &(0x7f0000000840)=[r1, r5], &(0x7f0000000880)}, 0x94) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) gettid() r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x5, &(0x7f0000000000)={0x1f, "90f5000012f300800000000000049942a55e00"}}) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b000100b2499629c3ed9d36bbebf300000009040000018984aa0009050c9c0600ac5dfb0a717934ee6b3237215e9b584172b103d488b7609cc84df6dff8d5644f0f781ccc06398ec56433b0525bf9608a6f3a63062050cf0329d5c1a059698143f49bd13e284c07afb32bd9e0f118e2", @ANYRES16], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 8.340660166s ago: executing program 4 (id=2968): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@empty}]}]}}, @timestamp}}}}, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 7.295504715s ago: executing program 4 (id=2971): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e0800459078000004000000000000001b628d2d3e03f2c33bfda76d59006490780200000003000000000000000002000000"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_pts(0xffffffffffffffff, 0x20800) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 6.956934078s ago: executing program 1 (id=2973): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xed, ""/237}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x18, 0x0, 0x403, 0x5, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x10, 0xffffffffffffffff, 0x47083000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xffffffff) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 6.793428982s ago: executing program 0 (id=2974): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x6}, 0x300, 0x2, 0x2, 0x9, 0x0, 0x7}, 0x20) ioperm(0x0, 0x6, 0x7) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, r1, 0xffffd000) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) 6.606217579s ago: executing program 5 (id=2975): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x24, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000008c0)={0x2, 0x7}, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) syz_open_dev$hiddev(0x0, 0x16e, 0x2) 6.263718591s ago: executing program 5 (id=2976): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x1d44, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d00, 0x3, 0x0, 0x1, [{0x7a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x81af8da}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x3a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x97, 0x1, "ae84f5bf857c5dc29348d26c239a1a0e36dad4f4045a2a2f5ca919ce1c5c14f8864ec764d5385959a682395583ee84af4f305a580daae2bbf29d34416fdf19b7fe8b56e1e5b6e2da1ead2524b5f56f999dd3e1eb562130f2cf85ff4680025398f0d8437b5c8c77c7c138e750e2535cf50c9f42fccd287c206a6dc9b32d709f4afc109f2e7575707a1e4d067daee63cc41da0c8"}, @NFTA_DATA_VALUE={0xd2, 0x1, "95a3272f8ab7ba93d5ed177086a0f018c39a6d920a6503a51837a679e6ee34b828b80648dea1beba46dc6fa3acd99de839b4276d7651932f2ee7e2495cc556c7949dceff84f360196ff545805eabc5d609cec0d8569f049eb9880405fee923865fcae19a235938ca815ede9ba726a9dd26952357c4f9f1dca791fda604b2f6875917ad9309218eeb88321e68695752c08c6ee0fd9954b8989e0517d2ef8fd7aac3f0d9a33b64031ee68c8a6dba0db6eaac2aa3aa39c438160788fc51661f1b86fad24ff8c7d106020d98bcbb97c5"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xd9, 0x1, "08e0d6019d16e5c621274697951711110f5f42712f7e248c061f40ed0eb3dcec535928036acd19fe6214d6dcd7faf226ee5fb65dfd53dabda0088cd384715bc82346ba0bba3f4853f0ccea61e27aa7a36b265c0bde8f496146396310e431a218fd04c00fc892445e0ce84ba4d9acae837e246a63dbb14912c65cef54afaab4bc104d068a422aed38c0f17fa683d5d7ae3aaf32ba0fbd051bb3c7f3c5908feb252aa50fc5b62c9fd9ed00f1f62b53dd09c4d824697ab6d67a039ecbf9557eb5db64f0160db42ff59f085ce190eda37b219fe3a9e1be"}]}, @NFTA_SET_ELEM_KEY={0x214, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "2cdac8e26e417297e7"}, @NFTA_DATA_VALUE={0x82, 0x1, "db9da0fcfaab49af4c3b9de751fb10db4da91a4f096d132ba4b00c7b06fbff0ca1c19013f46a066e3886ae9627942e6ccaa9ad645a431f0dfc36ca1019914918e00b39e5b37124dacfe90f3e798611be2b3df5e8b3ae6472f5449bdadccb4b4361cb30df77c65104c681b945a65efb03b81e7780a1d611f0e668dfc42767"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "f1d5f93e6042125ee563da9f8f714d716219d2b62ee5cb22507b87b02cb1e14b54664382e045e9fd5873086d536071bf4ee14b170e9214764ad0d624715afd851022977706f6886414630d85eeb643459d7cd4842239b554f4e972fa998ebb8680555dce169dbee0d4389f267a4899bc8d098716a8e3b780ef2e73e2683f341c377e2649873d1482512017b48a5ce3de31e949bcf62c5d8d25599d02d0c6de214c42a1317c8eac1726eec850dabd6f0c121761e8af1ffa9ef606a9ccd3db440d882410abcbb05e0a66d0d6842660706e8ae29a5739"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xdcb3}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "e341fb2e3402888f860399fd919e4b04b02066cefde24b96e9f3f010ce3b32ee644ac1cc50c538074ae84601f1bdcd0267b22e06da6d6c1fa98d92e238512e555d50cb03e73d09dd2564fe3f8c78f1d89043077a76b409a3e867d16985ea554e67302a9095e4bd0fbad77b20f5d1ed60bdee0769b09b3730874b3852290958013d32d4a4fed0d380e3dd56969b82fde49ed584efe5082a3ab5c07cbb2cce2df7d5c016c35e1df32418c20ac31df08b"}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x5d, 0x6, 0x1, 0x0, "27a743041cb2664152bd7727dece387b44c1c704747ed0e401f8b4c9885d4368e6df857575494b99b05bdae7735784347fe0fc99609f1e3d559cea936acd32514e82177d3502c3ca73f61ff4e0d5ad5cd05a8cdf5e4cebb02c"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}, {0x1554, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x1298, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "02923a2aa33f0c92003172dd4e0b2a99acee165084f43cc17a632af3835f7359a8f31c6c3f14b5ca56aed390a0404520730b3c8772b31b7ce4a7beabc11d36d7fe30dcc19dc3d182f8ef7f755e2a08786e723bff1867a58ba2ed561bdea3e41a9c0ad5bdbbf0eecca8eb94e10937fcc964cbf60efb792742935f466b8f97a7"}, @NFTA_DATA_VALUE={0xf5, 0x1, "9e71fd767017e64ef3c97bc7849eef3f1da141b9d02941f4b970a1f89d30617e58d73e1b9a0857c0cc1236fa3d590e61dc66787ed07a2669b268ae3e267e5d4b75444e1b2e88c5eae00aa662239bb4b67952403fe5809db5f2d04d638b148963403f08acba34bc9db6b314ab3b967cb7d48038e52533f31524b871b34122ad1f16a65b0ff431b64d50d83863bfa2f4011e5f0163ed922fcb5574db34e41f9d9cbd4766cbd2656826580371297b73ff4996ab504c5393726525302b299d45f247ef6f474a119e946cd8e094f4f154f484a886ee73831d72eb6c7b13b08d0ee680e2b5ab287018188c6685f915bc08484109"}, @NFTA_DATA_VALUE={0x11, 0x1, "d64fec97f9d9264841c73ed463"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "ef07180d7156af75ff81f2e2f51efd5e0195b44ec96eec83ede8999085c5b9bb3cc84ced92600e2aca6c4a9636d1612fdeee8f0d423e58c6c1501ac12bc17d9e29ff4eea3c213c60e4228ab0277aedb181548710d0786ebeb47d44f7083430b033252afff80a6e8cb40ad00df90895bbfb1cf7065ebc751198798c42346f426984d85e262c502c00aca6260b9313e14bd16ebc289c91b56d25f93c428a62b9570b9982deff587c395f37fa1d9dbf290dfd3ce1510df847c0433104"}]}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "8bcd946f35de4d0e3b8d1ae7af2afc507696fd1d098a31160b9bc7d577c314d3b11d4f06bb7876da9941f8f2698f9912ef5a708bdf42af5074a7a0b8362e25057732fe6caccdc5f40fbad15861d227c91ac8feae51fbbf178e4fcbe2f6a56e596b5a9aaa78f40b3b1ba26071e5968c2d73b4b96fc668572ed3e82168971148efd174ab7bf9b53107f575af6e9a5d98f603071b1779c05cf6153ccdebbadce01658029419b0d3e6989c04a8466f231f5a354670eb8bcbf1a2e390bca00880cf52f3a35011c2"}, @NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x76, 0x1, "15c9d872f3c8266f4bccc968c4e04ddec123c337db2d6bc6af30e952322aed7a343a88cb69ad0ed0f0dd1cfa7555adcbcb96bbe9ab0ee35b890a8fb2749335ffced8626a7ac3af95c198462576ba21cb9a49c4bdc87cf4b021f7f610bd458dcb8a5489010be0bd79e221d96a720f64842ae3"}]}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "0230aeb164b686a7cfeea679069d095bb57af3743d629f08a54f03dcef7cb24158ac51574170925db67f685f11dc352102c304136fab2f16c30eaaba64a12b844230069431f10cebcf54c9396d95a07900ede17aa8c3d2dd9ae0339e025c061acc6c0bdd9eecd92fe15da1b7a285054882d3fe6909ede7e37bb6eb67454458d8ef58ee776733e831bb02a093e1a6f4e4f67e5b0f80037dc0e3b72b2747c5d78c4e1f82d4ff4aa3d5f5683a7e"}]}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22eb}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x294, 0xb, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4e1}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x188, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x128, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x387bca65}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24f4000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f428000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed8d}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x21c0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = fanotify_init(0x8, 0x2) fanotify_mark(r2, 0x0, 0x8000000, r0, &(0x7f0000002380)='./file0\x00') r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000023c0), 0x100081, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002400)={0x7, 0x37c}) sendmsg$rds(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002440)=""/67, 0x43}, {&(0x7f00000024c0)=""/140, 0x8c}], 0x2, &(0x7f0000002640)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x7}, &(0x7f00000025c0)=0x8001, &(0x7f0000002600)=0xe7ba, 0xff, 0x1a, 0x6, 0x0, 0x2, 0x9}}], 0x58, 0x20040000}, 0x810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(r2, &(0x7f0000002700)=""/166, 0xa6, 0x3ff) bind$unix(r0, &(0x7f00000027c0)=@file={0x3, './file0\x00'}, 0x6e) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0xa0000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1b) ftruncate(r4, 0x2) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000002840), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x84, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0xffffff00, 0x7fffff80, 0x1b1df4f76e98e412], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip6gre0\x00', {0xff}, {}, 0x2, 0x9, 0x4}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000002c00)) r6 = syz_clone(0x2000, &(0x7f0000002c40)="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", 0x1000, &(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)="809961228012474243e3e0b29278277f316fdb333045eff57ab8604b406122a0264d719b566f47893ff116adaa77cd0856e7377528a3e380750bf6975d5fa468825aea950381ab33a63fa789cf9b799acf2d0a054df158df1556731090147bca8edce8c5deb9dd92f33fd0ac1ae74cff2d237324f65b56f8aecb49ff686bbebbf1e874bbdd2a41727210abadd7818a8bba37b3f8d8a2dc42e569c18407a0") ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000003d80)) ptrace(0x8, r6) readv(r5, &(0x7f0000003e80)=[{&(0x7f0000003dc0)=""/177, 0xb1}], 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000003ec0)={0x7}) read$fb(r0, &(0x7f0000003f00)=""/4096, 0x1000) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004f00), 0x321100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000004f40)={'wlan1\x00'}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000004f80)) ptrace(0x11, r6) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000005000), &(0x7f0000005040)=@sha1={0x1, "8d1c4709d05632cd4682aca332b54fa7cbb91bfd"}, 0x15, 0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000050c0)={0x48, 0x1, 0x0, 0x0, 0x4, 0x1}) 6.037428936s ago: executing program 2 (id=2977): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x6}, 0x300, 0x2, 0x2, 0x9, 0x0, 0x7}, 0x20) ioperm(0x0, 0x6, 0x7) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, r1, 0xffffd000) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e1e, 0x3, 'wlc\x00', 0x9, 0x10000004, 0xb}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) 5.875590653s ago: executing program 1 (id=2978): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x5, 0x3}, "", @value={0x8, 0x1, 0x0, 0x1, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x1e, "ad3959bce79f8673423f4a0b83f1de398e87d6c27c758e3c440527f9ced7"}, {@broadcast, @device_a, 0x23, "7de5d3bb05c0f179444d5a14b588c166808c135ab78748bfcb22a9a2daf1722783fa95"}]}, 0x7e) rt_sigqueueinfo(0x0, 0x1d, &(0x7f0000000500)={0x0, 0x1, 0xfffffffa}) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x2878a81d0e412069, 0x1, 0x3, 0xc}, {0x9, 0x5, 0x4, 0x2, 0x10, 0xfd, 0xe, 0x60}, {0x9, 0x5, 0xd, 0x3, 0x5e7, 0x5, 0x1, 0x1}}}}}}]}}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 5.779809482s ago: executing program 5 (id=2979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x1000) semget(0x0, 0x2, 0x34) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948828", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c96258f3f94db4db53f98f3966993682b841fce7fe6e2491c8302e50b45", 0x36}, {&(0x7f0000000940)}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245428ba3000461e69a3967acc5", 0x66}], 0x3}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.662301767s ago: executing program 5 (id=2980): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xfffffffffffffffe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) syz_io_uring_setup(0x7b6, &(0x7f0000000500)={0x0, 0x146, 0x0, 0x2, 0x400000}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x6, 0x4000, @fd, 0x8, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/249, 0xf9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x7, 0x8000}, 0x10, r7, 0x0, 0x0, &(0x7f0000000840)=[r1, r5], &(0x7f0000000880)}, 0x94) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, 0x0) gettid() r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x5, &(0x7f0000000000)={0x1f, "90f5000012f300800000000000049942a55e00"}}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4.421035574s ago: executing program 4 (id=2982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000552a5920240401c05faa0102030109021b0001000010000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000007c0)={0x24, &(0x7f0000000680)={0x0, 0x3, 0x1d, {0x1d, 0x3, "631476f022e647358d10bc9a622034fb9e2885f454b39f7e69be2f"}}, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000740)={0x0, 0x22, 0x20, {[@main=@item_012={0x2, 0x0, 0x0, "d967"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x5, "adf23a00"}, @local=@item_4={0x3, 0x2, 0x2, "53f3e118"}, @local=@item_4={0x3, 0x2, 0x8, "8e01cfb1"}, @local=@item_4={0x3, 0x2, 0x19, "61e65ef6"}, @local=@item_012={0x2, 0x2, 0x0, "8c05"}, @local=@item_4={0x3, 0x2, 0x4, "831e2b1d"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8c, 0x1, {0x22, 0x640}}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x33, "f1049ad4971fdf8acf980d28b607dcd3ec593610caf56d9ecf231a285a45ca644ed21471e56caab38fc3487aa19cb152e28c1d"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x23}, &(0x7f00000008c0)={0x20, 0x1, 0x96, "fbcd986d54565dbc35196737ea5a53665e68762c9ab7adc4e64531292c5119170ec1a9d157d82b58687c683428a4a34dab962aeb3fb309f145ae2cc807e948311b80dd16f7a5ab6afb409189532e0640f33ac76c7a71da31f7ddadb03138b8286a430f75b338d5e891d6f4431cb1ff4f56dddd5f761fc3b2ca8f34e75cb83428ea0e61e4fc400a31246cdc18049c92ddde311fc40be0"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0xff}}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c000600010000"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x8000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x5e031) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mkdirat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)="d7592aebf64976fced39de018bd3d369e17aa566f79a4339fa853827df327db49b2ff613e3f86083967dab08ee7c637539ee49fcad78b5f6b1cf6cd91547be0788435bfe00fb5a57fb604c07cef5c3c6e9e8f44a789a7f2cdcbf7bac161424577a766f37acf91d5b52381b08dba15fd9bf8f296a9b354257", 0x78}, {&(0x7f0000000200)="9f27fec956cd9f25f2148ab12d34fa845ddbac3cea03ee56329d6e65508358d2c8eb91675c8b476b3031d4", 0x2b}, {&(0x7f0000000240)="a2ba3fdc0d86dd8d7513452ee4ecd24cc1da74feef3db6fd51d2b3", 0x1b}, {&(0x7f0000000300)="a86a2a138eccdb16084a0a5c807a750173eefb987274d2207dc3300fe922f6f385f69eabb88b78824a25cc8af4fb98559fa50b685a11147db39b281876d317e176bd2130bfbd9897", 0x48}, {&(0x7f0000000380)="322af86c7874bac6085eb185c1bc9a65471fc8ce6c649f9802ac6d578ce6a5328248799424222b0e18e94aab984a986b637ea777d5a69688cc1117ab54a31962a61498b5de6d961542ef148d1590e228919a113effb8835af2ed8e4f9bad258daa9e383dbe90801b07124722f544113541dcaa9887a11e3e8633e22c51cb5f61d64dcb63440970d6def47e7c0f2d7306f9d6cda2bc2fae8f7cab265c9b6d0df6a34821d4cd4162ca1d03b9eec09b5dc065f3ba61507e66e8a9fbc76a8ab6dfaeaacf0cc3da847d69", 0xc8}, {&(0x7f0000000480)="ff311287204cdacd529a07ed524ba69e1a9d40682fbb218b8315ce62fd8510feaf10ab2cfd5a776afe83c9fbee1686b36ce9f662da3e2752bab60ae7105ba9de4c699521e843baec0c5d88e5099aeae4e47061a19fccd9aac1bf6c07923f176e3b2fbb8abdcac83f892af0da3d87", 0x6e}, {&(0x7f0000000500)="511eb9fb2d710f6ec9f079b754ba087b232bfd434d9d5d0eb2cca77517cec3e7f7f70b878f88355578f93dbc82d1200b0436dd1ba08e9798c1550e2c23f58eaa982f325b32ef555f8f39718a189c7ba034d90fbb5fd74926bb3f69bddeacea4142f816685072714dcf98ef2a3b93c04ab315e37c2e50423f30207a7ed2f8a418c77f2b862a0029fcb88ed99188d1f990c1575505a0be", 0x96}], 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="2800000000e88085", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="10000000000000000100000001000000"], 0x38, 0xc0}, 0x40041) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e", 0x3a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a", 0x2d}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xd, 0xf1, 0x5, 0xf9, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x52}, {0x5000, 0x2, 0x0, 0x9, 0x8, 0x3, 0xb, 0xb, 0x2, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xc, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x9, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x0, 0x0, 0x9, 0x3, 0x9, 0xd, 0x6, 0xd, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x8, 0x84, 0xfd, 0x7d, 0xa6, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0xeeef0000, 0xfec00000, 0x0, 0x9d, 0x3, 0x2, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x8, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0x6000, 0x7}, {0xdddd0000, 0x9}, 0x40030000, 0x0, 0x30000, 0x700, 0xc, 0xe901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc4]}) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.34720025s ago: executing program 5 (id=2983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_hwaddr=@broadcast}) unshare(0x4020400) open_tree(0xffffffffffffff9c, 0x0, 0x9801) unshare(0x2c020400) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 2.829459757s ago: executing program 2 (id=2984): io_setup(0x6, &(0x7f0000001380)=0x0) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x2088, &(0x7f0000000180)={0x0, 0x50a5, 0x8, 0x2, 0x3be}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", '\x00', "a0ca05f400"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_pgetevents(r0, 0x400, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x7fffffff]}, 0x8}) r5 = socket$inet6(0xa, 0xa, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f00000001c0)={0x0, 0x2, 0x7, 0x1, 0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0) socket(0x10, 0x3, 0x0) 2.485468675s ago: executing program 1 (id=2985): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000014000000000000002900000034000000000000000000000018000000000058002900000036ff00005e0000000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000280000000000000029000000390000003a02027000000000ff020000000000000000000000000001c38f538a604522f900d7db69f836b35f5a290b2c2a42846b775cb2ecc1b02639f34fbb2e3dc804353597c7"], 0xc0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) sendto(r2, &(0x7f0000000880)="952eee7167dffc34c52a3b59d2d770ff27409082f2f2522ff73572b303538866784ac1334dc0294cb7512fef08e3f3c5cb7fe292c65c9212dedd7025bb8e3219fa19eaed2a1513cda61aacd034181c7c97d436d43c66bedcd09b87254ee81ca6f0509dc68d6b200f9ccf4f5f9e9a451dbc90e35d76424d1db29a16f4ac5f80143cd6feb4048be370c703be0d5086ba433bf7d5da3664b925e28f78dd47a714ae5d4c7eea482b64c1e8b4d64a11db1329e644efbfeacb6cc69ec2e2fbb35026ece3", 0xc1, 0x1040, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000440)={0x8, 0x0, [{0x5, 0xffffff2a, 0x5, 0x88fa, 0xfffffffd, 0xa7, 0x6}, {0xa, 0x5, 0x5, 0x1, 0x80, 0xa13}, {0x4, 0x1, 0x2, 0x5932, 0x5}, {0xb, 0x100, 0x1, 0x1, 0x8, 0x8, 0x25}, {0x1, 0x5, 0x1, 0xfffffffb, 0x3, 0x1, 0xec9}, {0xd, 0xb65, 0x2, 0x50, 0x6, 0x1, 0x3ff}, {0x4, 0x6, 0x5, 0x800003, 0x8, 0x8001, 0xff}, {0xb, 0xa192, 0x2, 0x7, 0x8002, 0x7, 0x80000200}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105800) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0xf8ba) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040), 0x0, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) bind$netlink(r8, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.764616877s ago: executing program 1 (id=2986): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOC_PR_PREEMPT(r0, 0x40026102, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket(0x28, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000d00)={0x0, 'veth0_vlan\x00', {0x8}, 0xa}) syz_emit_ethernet(0xe, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) tkill(r4, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 1.157396063s ago: executing program 4 (id=2987): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="09002abd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) r8 = io_uring_setup(0x98e, &(0x7f0000000180)={0x0, 0x9c2f, 0x10, 0x2, 0xfffffffc}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept4(r9, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMSET(r11, 0x5418, &(0x7f0000000200)=0xd) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000380)=""/11, &(0x7f00000003c0)=0xb) 739.877003ms ago: executing program 1 (id=2988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = io_uring_setup(0x80000669, &(0x7f00000002c0)={0x0, 0x4b7f, 0x4, 0x2, 0x22c}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd2b, 0x0, {{@in6=@remote, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x10000, 0x6, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3, 0x3}, 0x401, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x81}]}]}, 0xfc}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000005c0)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 106.671529ms ago: executing program 2 (id=2989): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getregs(0xc, r1, 0x8000, &(0x7f00000000c0)=""/46) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_rr_get_interval(r0, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) write(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 0s ago: executing program 5 (id=2990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x1000) semget(0x0, 0x2, 0x34) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948828", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c96258f3f94db4db53f98f3966993682b841fce7fe6e2491c8302e50b45", 0x36}, {&(0x7f0000000940)}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245428ba3000461e69a3967acc5", 0x66}], 0x3}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): T9] em28xx 3-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 824.205873][ T9] em28xx 3-1:0.0: failed to read eeprom (err=-5) [ 824.219349][ T9] em28xx 3-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 824.304102][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 824.318577][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 824.330937][ T5895] em28xx 3-1:0.0: Binding DVB extension [ 824.362532][ T9] usb 3-1: USB disconnect, device number 35 [ 824.384243][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 824.392644][ T5895] em28xx 3-1:0.0: Registering input extension [ 824.412796][ T9] em28xx 3-1:0.0: Closing input extension [ 824.437133][ T9] em28xx 3-1:0.0: Freeing device [ 824.468640][T15037] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 824.486279][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 824.509134][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 824.528354][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 824.539996][ T5896] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 824.552647][ T5896] usb 2-1: USB disconnect, device number 43 [ 824.826765][T15051] syzkaller0: entered promiscuous mode [ 824.902536][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 825.073628][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 825.086201][ T9] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 825.108675][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 825.127051][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.143203][ T9] usb 6-1: Product: syz [ 825.153626][ T9] usb 6-1: Manufacturer: syz [ 825.165242][ T9] usb 6-1: SerialNumber: syz [ 825.185804][ T9] usb 6-1: config 0 descriptor?? [ 825.200677][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 825.249076][ T9] usb 6-1: setting power ON [ 825.321867][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 825.480243][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 825.512664][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.546185][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 825.559906][T15062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.588166][ T9] usb 6-1: media controller created [ 825.627101][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.661263][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 825.675462][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.702812][ T9] usb 6-1: selecting invalid altsetting 6 [ 825.709110][ T5895] usb 3-1: config 0 has no interface number 0 [ 825.728592][ T9] usb 6-1: digital interface selection failed (-22) [ 825.738989][ T5895] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 825.753048][T15068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.763621][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 825.774152][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.790937][ T9] usb 6-1: setting power OFF [ 825.797548][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 825.808123][ T5895] usb 3-1: Product: syz [ 825.814171][ T5895] usb 3-1: Manufacturer: syz [ 825.822517][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 825.837110][ T5895] usb 3-1: SerialNumber: syz [ 825.849666][ T9] (NULL device *): no alternate interface [ 825.861499][ T5895] usb 3-1: config 0 descriptor?? [ 825.933296][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 825.950198][ T9] usb 6-1: USB disconnect, device number 16 [ 826.690464][ T5838] Bluetooth: Frame is too long (len 12, expected len 4) [ 827.250126][T15083] bond1: option arp_interval: invalid value (18446744073709551615) [ 827.307318][T15083] bond1: option arp_interval: allowed values 0 - 2147483647 [ 827.346466][T15090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.383711][T15083] bond1 (unregistering): Released all slaves [ 827.800108][T15092] wg1 speed is unknown, defaulting to 1000 [ 827.919455][ T5895] usb 3-1: selecting invalid altsetting 1 [ 827.944544][ T5895] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 827.982232][ T5895] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 828.009070][ T5895] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 828.058788][ T5895] usb 3-1: USB disconnect, device number 36 [ 828.215942][T14679] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 828.407532][T14679] usb 1-1: Using ep0 maxpacket: 16 [ 828.456416][T14679] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.468252][T14679] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 828.507401][T15108] hpfs: Bad magic ... probably not HPFS [ 828.517972][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'. [ 828.526875][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 828.535958][ T1232] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 828.546909][T14679] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 828.556977][T14679] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 828.596101][T14679] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.609967][T14679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 828.618076][T14679] usb 1-1: SerialNumber: syz [ 828.640813][T15100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 828.651516][T15100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 828.717551][ T1232] usb 2-1: Using ep0 maxpacket: 32 [ 828.724896][T14679] hub 1-1:1.0: bad descriptor, ignoring hub [ 828.750176][ T1232] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 828.751897][T15111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.976145][T14679] hub 1-1:1.0: probe with driver hub failed with error -5 [ 829.003897][ T1232] usb 2-1: config 0 has no interface number 0 [ 829.023310][ T1232] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 829.042598][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.065768][ T1232] usb 2-1: Product: syz [ 829.090734][ T1232] usb 2-1: Manufacturer: syz [ 829.098404][T15113] syzkaller0: entered promiscuous mode [ 829.105790][ T1232] usb 2-1: SerialNumber: syz [ 829.137290][ T1232] usb 2-1: config 0 descriptor?? [ 829.207830][T15100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 829.224026][T15100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 829.277138][T15118] bond2: option arp_interval: invalid value (18446744073709551615) [ 829.292832][T15118] bond2: option arp_interval: allowed values 0 - 2147483647 [ 829.304493][T15118] bond2 (unregistering): Released all slaves [ 829.491569][T15127] FAULT_INJECTION: forcing a failure. [ 829.491569][T15127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.504971][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.4.2634 Not tainted syzkaller #0 PREEMPT(full) [ 829.504996][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 829.505007][T15127] Call Trace: [ 829.505015][T15127] [ 829.505026][T15127] dump_stack_lvl+0x100/0x190 [ 829.505054][T15127] should_fail_ex.cold+0x5/0xa [ 829.505080][T15127] _copy_to_user+0x32/0xd0 [ 829.505106][T15127] simple_read_from_buffer+0xcb/0x170 [ 829.505130][T15127] proc_fail_nth_read+0x1af/0x230 [ 829.505160][T15127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.505191][T15127] ? rw_verify_area+0xce/0x6d0 [ 829.505216][T15127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.505245][T15127] vfs_read+0x1e4/0xb30 [ 829.505267][T15127] ? __pfx_vfs_read+0x10/0x10 [ 829.505284][T15127] ? __fget_files+0x215/0x3d0 [ 829.505310][T15127] ? __fget_files+0x21f/0x3d0 [ 829.505338][T15127] ksys_read+0x12a/0x250 [ 829.505356][T15127] ? __pfx_ksys_read+0x10/0x10 [ 829.505376][T15127] ? rcu_is_watching+0x12/0xc0 [ 829.505406][T15127] do_syscall_64+0x10b/0xf80 [ 829.505425][T15127] ? clear_bhb_loop+0x40/0x90 [ 829.505447][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.505466][T15127] RIP: 0033:0x7ff1cbf5d04e [ 829.505482][T15127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 829.505501][T15127] RSP: 002b:00007ff1ca1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 829.505519][T15127] RAX: ffffffffffffffda RBX: 00007ff1ca1f66c0 RCX: 00007ff1cbf5d04e [ 829.505532][T15127] RDX: 000000000000000f RSI: 00007ff1ca1f60a0 RDI: 0000000000000003 [ 829.505543][T15127] RBP: 00007ff1ca1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 829.505554][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.505565][T15127] R13: 00007ff1cc216038 R14: 00007ff1cc215fa0 R15: 00007fff3c161b98 [ 829.505590][T15127] [ 829.615114][ T5895] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 829.756824][T15107] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 829.780783][ T1232] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 829.792916][ T1232] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 829.802550][ T1232] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 829.867422][ T1232] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 830.286200][ T1232] usb 2-1: USB disconnect, device number 44 [ 830.485381][ T5895] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 830.520622][ T5895] usb 6-1: config 8 has no interface number 0 [ 830.578219][ T5895] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 830.623739][ T5895] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 830.640969][ T5895] usb 6-1: config 8 interface 177 has no altsetting 0 [ 830.662867][ T5895] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 830.709334][T15145] Cannot find del_set index 1 as target [ 830.738452][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.996006][T15123] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 831.032402][T15123] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 831.081717][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 831.260890][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 831.421298][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 831.432215][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 831.441460][ T9] usb 5-1: config 0 has no interface number 0 [ 831.459370][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 831.468535][ T5896] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 831.486299][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.504840][ T9] usb 5-1: Product: syz [ 831.516132][ T9] usb 5-1: Manufacturer: syz [ 831.528308][ T9] usb 5-1: SerialNumber: syz [ 831.543234][ T9] usb 5-1: config 0 descriptor?? [ 831.624233][ T5895] ir_toy 6-1:8.177: could not write reset command: -110 [ 831.634749][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 831.650208][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 831.662557][ T5895] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 831.686428][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 831.697692][ T5895] usb 6-1: USB disconnect, device number 17 [ 831.711369][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.732855][ T5896] usb 3-1: Product: syz [ 831.744957][ T5896] usb 3-1: Manufacturer: syz [ 831.761299][ T5896] usb 3-1: SerialNumber: syz [ 831.796211][ T5896] usb 3-1: config 0 descriptor?? [ 831.837763][ T5896] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 831.866760][T14679] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 831.886566][ T5896] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 831.913834][T14679] usb 1-1: USB disconnect, device number 47 [ 832.137080][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 832.268360][T15150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.296093][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 832.321720][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 832.359669][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 832.396667][ T9] usb 5-1: USB disconnect, device number 25 [ 832.567982][ T5896] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 833.021573][ T5895] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 833.421836][T15184] Cannot find add_set index 0 as target [ 833.462982][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 833.510274][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 833.596656][ T5896] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 833.606202][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 833.668886][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.678921][ T5896] em28xx 3-1:0.0: board has no eeprom [ 833.698043][ T5895] usb 1-1: Product: syz [ 833.722411][ T5895] usb 1-1: Manufacturer: syz [ 833.736069][ T5895] usb 1-1: SerialNumber: syz [ 833.761247][ T5896] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 834.027891][ T5895] usb 1-1: config 0 descriptor?? [ 834.036881][ T5896] em28xx 3-1:0.0: dvb set to bulk mode. [ 834.048312][ T988] em28xx 3-1:0.0: Binding DVB extension [ 834.055226][ T5895] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 834.078766][ T5895] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 834.100402][ T5896] usb 3-1: USB disconnect, device number 37 [ 834.127225][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 834.185890][ T988] em28xx 3-1:0.0: Registering input extension [ 834.209230][ T5896] em28xx 3-1:0.0: Closing input extension [ 834.261824][ T5896] em28xx 3-1:0.0: Freeing device [ 834.370605][ T1232] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 834.721345][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'. [ 834.730346][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 834.739341][T15204] netlink: 'syz.1.2657': attribute type 13 has an invalid length. [ 834.747381][T15204] netlink: 'syz.1.2657': attribute type 12 has an invalid length. [ 835.018366][T15202] misc userio: The device must be registered before sending interrupts [ 835.026868][ T5895] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 835.034159][ T1232] usb 6-1: Using ep0 maxpacket: 16 [ 835.047167][ T1232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 835.065020][ T1232] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 835.075977][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.084077][ T1232] usb 6-1: Product: syz [ 835.090347][ T1232] usb 6-1: Manufacturer: syz [ 835.095007][ T1232] usb 6-1: SerialNumber: syz [ 835.112394][ T1232] usb 6-1: config 0 descriptor?? [ 835.128097][ T1232] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 835.137930][ T1232] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 835.182805][ T5896] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 835.370042][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.388086][ T5896] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 835.398402][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.413884][ T5896] usb 3-1: config 0 descriptor?? [ 835.536816][T15208] netlink: 'syz.1.2658': attribute type 6 has an invalid length. [ 835.549934][T15208] netlink: 'syz.1.2658': attribute type 6 has an invalid length. [ 835.775640][ T988] usb 3-1: USB disconnect, device number 38 [ 835.971384][ T1232] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 836.111486][ T5895] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 836.122526][ T5895] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 836.128969][ T5895] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 836.197717][ T5895] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 836.205623][ T5895] em28xx 1-1:0.0: dvb set to bulk mode. [ 836.211263][T13863] em28xx 1-1:0.0: Binding DVB extension [ 836.224446][ T5895] usb 1-1: USB disconnect, device number 48 [ 836.233649][ T988] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 836.246607][ T5895] em28xx 1-1:0.0: Disconnecting em28xx [ 836.252690][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 836.277291][T13863] em28xx 1-1:0.0: Registering input extension [ 836.287356][ T5895] em28xx 1-1:0.0: Closing input extension [ 836.298629][ T5895] em28xx 1-1:0.0: Freeing device [ 836.422134][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 836.431449][ T988] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 836.448189][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.465106][ T988] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 836.480610][ T5896] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 836.489815][ T988] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 836.500666][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.508740][ T988] usb 5-1: config 220 has no interface number 2 [ 836.516059][ T988] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 836.530259][ T5896] usb 3-1: config 0 descriptor?? [ 836.535424][ T988] usb 5-1: config 220 interface 0 has no altsetting 0 [ 836.544640][ T5896] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 836.553256][ T988] usb 5-1: config 220 interface 76 has no altsetting 0 [ 836.560165][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 836.565997][ T988] usb 5-1: config 220 interface 1 has no altsetting 0 [ 836.575417][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 836.586351][ T988] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 836.595651][ T5896] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 836.604749][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.612804][ T5896] usb 3-1: media controller created [ 836.618133][ T988] usb 5-1: Product: syz [ 836.622507][ T988] usb 5-1: Manufacturer: syz [ 836.634198][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.636254][ T1232] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 836.642622][ T988] usb 5-1: SerialNumber: syz [ 836.683226][ T1232] em28xx 6-1:0.0: board has no eeprom [ 836.700269][T14679] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 836.716871][ T30] audit: type=1400 audit(1776746456.916:2354): avc: denied { read } for pid=15218 comm="syz.0.2663" path="socket:[76518]" dev="sockfs" ino=76518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 836.743713][ T30] audit: type=1400 audit(1776746456.953:2355): avc: denied { setopt } for pid=15218 comm="syz.0.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 836.753366][ T1232] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 836.775274][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 836.781338][ T1232] em28xx 6-1:0.0: dvb set to bulk mode. [ 836.795910][ T24] em28xx 6-1:0.0: Binding DVB extension [ 836.815498][ T5896] DVB: Unable to find symbol mt352_attach() [ 836.819820][ T1232] usb 6-1: USB disconnect, device number 18 [ 836.822197][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 836.852917][ T5896] zl10353_read_register: readreg error (reg=127, ret==-121) [ 836.856265][ T1232] em28xx 6-1:0.0: Disconnecting em28xx [ 836.868847][T14679] usb 2-1: Using ep0 maxpacket: 16 [ 836.872568][ T30] audit: type=1400 audit(1776746457.056:2356): avc: denied { getopt } for pid=15218 comm="syz.0.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 836.900220][ T5896] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 836.926159][T14679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 836.938065][ T988] usb 5-1: selecting invalid altsetting 0 [ 836.942352][ T24] em28xx 6-1:0.0: Registering input extension [ 836.957769][ T988] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 836.979811][ T1232] em28xx 6-1:0.0: Closing input extension [ 836.986803][T14679] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 836.996260][ T988] uvcvideo 5-1:220.0: No valid video chain found. [ 837.003486][ T30] audit: type=1400 audit(1776746457.187:2357): avc: denied { create } for pid=15199 comm="syz.2.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 837.053052][T14679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.063462][ T5896] rc_core: IR keymap rc-dvico-mce not found [ 837.210430][T14679] usb 2-1: Product: syz [ 837.216845][ T988] usb 5-1: selecting invalid altsetting 0 [ 837.221224][T14679] usb 2-1: Manufacturer: syz [ 837.225028][ T5896] Registered IR keymap rc-empty [ 837.230055][ T1232] em28xx 6-1:0.0: Freeing device [ 837.238676][T14679] usb 2-1: SerialNumber: syz [ 837.255208][ T988] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 837.419187][ T5896] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 837.470755][ T988] usb 5-1: USB disconnect, device number 26 [ 837.472678][T14679] usb 2-1: config 0 descriptor?? [ 837.495004][T14679] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 837.505328][T14679] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 837.507209][ T5896] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input116 [ 837.571919][ T5896] dvb-usb: schedule remote query interval to 100 msecs. [ 837.587069][ T5896] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 837.621022][ T5896] usb 3-1: USB disconnect, device number 39 [ 837.705801][ T5896] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 837.875447][T13863] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 838.124424][T13863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 838.142608][T13863] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 838.168256][T13863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.170239][T14679] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 838.187996][T13863] usb 1-1: config 0 descriptor?? [ 838.203907][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 838.228293][T15240] lo: entered promiscuous mode [ 838.234689][T15240] lo: entered allmulticast mode [ 838.246163][T15240] tunl0: entered promiscuous mode [ 838.251696][T15240] tunl0: entered allmulticast mode [ 838.258679][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'. [ 838.265399][T15240] gre0: entered promiscuous mode [ 838.273074][T15240] gre0: entered allmulticast mode [ 838.281035][T15240] gretap0: entered promiscuous mode [ 838.287848][T15240] gretap0: entered allmulticast mode [ 838.297245][T15240] erspan0: entered promiscuous mode [ 838.302488][T15240] erspan0: entered allmulticast mode [ 838.311247][T15240] ip_vti0: entered promiscuous mode [ 838.317287][T15240] ip_vti0: entered allmulticast mode [ 838.323700][T15240] ip6_vti0: entered promiscuous mode [ 838.339807][T15240] ip6_vti0: entered allmulticast mode [ 838.353115][T15240] sit0: entered promiscuous mode [ 838.361579][T15240] sit0: entered allmulticast mode [ 838.373644][T15240] ip6tnl0: entered promiscuous mode [ 838.379085][T15240] ip6tnl0: entered allmulticast mode [ 838.385766][T15240] ip6gre0: entered promiscuous mode [ 838.394812][T15240] ip6gre0: entered allmulticast mode [ 838.414035][T15240] ip6gretap0: entered promiscuous mode [ 838.419646][T15240] ip6gretap0: entered allmulticast mode [ 838.432785][T15240] vcan0: entered promiscuous mode [ 838.438046][T15240] vcan0: entered allmulticast mode [ 838.451341][T15240] bond0: entered promiscuous mode [ 838.456723][T15240] bond_slave_0: entered promiscuous mode [ 838.466505][T15240] bond_slave_1: entered promiscuous mode [ 838.475734][T15240] bond0: entered allmulticast mode [ 838.482629][T15240] bond_slave_0: entered allmulticast mode [ 838.490958][T15240] bond_slave_1: entered allmulticast mode [ 838.502238][T15240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.509838][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 838.519186][T15240] team0: entered promiscuous mode [ 838.526523][T15240] team_slave_0: entered promiscuous mode [ 838.534016][T15240] team_slave_1: entered promiscuous mode [ 838.540872][T15240] team0: entered allmulticast mode [ 838.551904][T15240] team_slave_0: entered allmulticast mode [ 838.558230][T15240] team_slave_1: entered allmulticast mode [ 838.571906][T15240] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.582129][T15245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.582580][T15240] dummy0: entered promiscuous mode [ 838.596918][T15240] dummy0: entered allmulticast mode [ 838.620558][T15240] nlmon0: entered promiscuous mode [ 838.628617][T15240] nlmon0: entered allmulticast mode [ 838.646816][T15240] caif0: entered promiscuous mode [ 838.652285][T15240] caif0: entered allmulticast mode [ 838.661720][T15240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.684217][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 838.696060][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 838.707766][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.765816][ T5895] usb 6-1: config 0 descriptor?? [ 838.770605][T15242] team_slave_0: left promiscuous mode [ 838.795878][T13863] (null): keene_cmd_main failed (-110) [ 838.798575][T15242] team_slave_0: left allmulticast mode [ 838.819243][T13863] video4linux radio48: keene_cmd_main failed (-32) [ 838.829374][T13863] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 838.857991][T15242] team0 (unregistering): Port device team_slave_0 removed [ 838.913866][T15242] team_slave_1: left promiscuous mode [ 838.961951][T15242] team_slave_1: left allmulticast mode [ 838.996576][T14679] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 839.018903][T14679] em28xx 2-1:0.0: board has no eeprom [ 839.026786][T15242] team0 (unregistering): Port device team_slave_1 removed [ 839.115228][T14679] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 839.141396][T14679] em28xx 2-1:0.0: dvb set to bulk mode. [ 839.161096][ T29] em28xx 2-1:0.0: Binding DVB extension [ 839.195887][T14679] usb 2-1: USB disconnect, device number 45 [ 839.226311][T14679] em28xx 2-1:0.0: Disconnecting em28xx [ 839.298199][ T1232] usb 1-1: USB disconnect, device number 49 [ 839.366235][ T5895] (null): keene_cmd_main failed (-110) [ 839.407182][ T5895] video4linux radio48: keene_cmd_main failed (-32) [ 839.428427][ T29] em28xx 2-1:0.0: Registering input extension [ 839.462444][ T5895] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 839.484082][T14679] em28xx 2-1:0.0: Closing input extension [ 839.535378][T15252] misc userio: The device must be registered before sending interrupts [ 839.554399][T14679] em28xx 2-1:0.0: Freeing device [ 839.716573][ T1232] usb 6-1: USB disconnect, device number 19 [ 840.597955][T15263] xt_TCPMSS: Only works on TCP SYN packets [ 840.993463][T15275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.023501][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 841.702148][ T30] audit: type=1400 audit(1776746461.586:2358): avc: denied { accept } for pid=15278 comm="syz.5.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 841.824794][T15283] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 841.835383][ T30] audit: type=1326 audit(1776746461.707:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 841.916014][ T30] audit: type=1326 audit(1776746461.726:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 841.969112][T15290] wg1 speed is unknown, defaulting to 1000 [ 841.974970][ T30] audit: type=1326 audit(1776746461.726:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.078418][ T30] audit: type=1326 audit(1776746461.726:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.123834][ T30] audit: type=1326 audit(1776746461.726:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.149366][ T30] audit: type=1326 audit(1776746461.726:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.176488][ T30] audit: type=1326 audit(1776746461.726:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.200969][ T30] audit: type=1326 audit(1776746461.726:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.224867][ T30] audit: type=1326 audit(1776746461.726:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.566423][ T30] audit: type=1326 audit(1776746461.726:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.662795][ T30] audit: type=1326 audit(1776746461.726:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.746799][ T30] audit: type=1326 audit(1776746461.726:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.823634][ T30] audit: type=1326 audit(1776746461.726:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.5.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ced9c819 code=0x7ffc0000 [ 842.919223][ T5895] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 843.090324][ T5895] usb 1-1: device descriptor read/64, error -71 [ 843.425026][ T5838] Bluetooth: Frame is too long (len 12, expected len 4) [ 843.669484][ T5895] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 843.728375][T15308] FAULT_INJECTION: forcing a failure. [ 843.728375][T15308] name failslab, interval 1, probability 0, space 0, times 0 [ 843.742109][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.4.2687 Not tainted syzkaller #0 PREEMPT(full) [ 843.742134][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 843.742144][T15308] Call Trace: [ 843.742151][T15308] [ 843.742158][T15308] dump_stack_lvl+0x100/0x190 [ 843.742186][T15308] should_fail_ex.cold+0x5/0xa [ 843.742210][T15308] ? tomoyo_realpath_from_path+0xb6/0x690 [ 843.742233][T15308] should_failslab+0xc2/0x120 [ 843.742254][T15308] __kmalloc_noprof+0xe0/0x850 [ 843.742278][T15308] ? kfree+0x1dd/0x6c0 [ 843.742305][T15308] tomoyo_realpath_from_path+0xb6/0x690 [ 843.742333][T15308] tomoyo_path_number_perm+0x23c/0x580 [ 843.742350][T15308] ? tomoyo_path_number_perm+0x22e/0x580 [ 843.742370][T15308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 843.742387][T15308] ? rcu_is_watching+0x12/0xc0 [ 843.742413][T15308] ? kfree+0x1dd/0x6c0 [ 843.742457][T15308] ? current_check_access_path+0x269/0x430 [ 843.742485][T15308] ? __pfx_current_check_access_path+0x10/0x10 [ 843.742508][T15308] ? do_raw_spin_unlock+0x145/0x1e0 [ 843.742535][T15308] ? _raw_spin_unlock+0x28/0x50 [ 843.742566][T15308] ? lookup_one_qstr_excl+0xaf/0x250 [ 843.742595][T15308] tomoyo_path_mkdir+0x9b/0xe0 [ 843.742618][T15308] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 843.742649][T15308] security_path_mkdir+0x154/0x2e0 [ 843.742674][T15308] filename_mkdirat+0x168/0x5e0 [ 843.742699][T15308] ? __pfx_filename_mkdirat+0x10/0x10 [ 843.742721][T15308] ? strncpy_from_user+0x19d/0x2d0 [ 843.742747][T15308] ? do_getname+0x191/0x390 [ 843.742779][T15308] __x64_sys_mkdir+0x6b/0x90 [ 843.742802][T15308] do_syscall_64+0x10b/0xf80 [ 843.742820][T15308] ? clear_bhb_loop+0x40/0x90 [ 843.742841][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.742859][T15308] RIP: 0033:0x7ff1cbf9c819 [ 843.742875][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.742891][T15308] RSP: 002b:00007ff1ca1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 843.742909][T15308] RAX: ffffffffffffffda RBX: 00007ff1cc216180 RCX: 00007ff1cbf9c819 [ 843.742920][T15308] RDX: 0000000000000000 RSI: 000000000000013b RDI: 0000200000000100 [ 843.742930][T15308] RBP: 00007ff1ca1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 843.742941][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.742951][T15308] R13: 00007ff1cc216218 R14: 00007ff1cc216180 R15: 00007fff3c161b98 [ 843.742976][T15308] [ 843.743001][T15308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 844.430201][ T5895] usb 1-1: device descriptor read/64, error -71 [ 844.582628][ T5895] usb usb1-port1: attempt power cycle [ 844.960269][ T5895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 844.993524][ T5895] usb 1-1: device descriptor read/8, error -71 [ 845.261138][T13863] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 845.439682][ T5895] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 845.463159][ T5895] usb 1-1: device descriptor read/8, error -71 [ 845.539335][T13863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 845.551933][T13863] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 845.570991][T13863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.580689][ T5895] usb usb1-port1: unable to enumerate USB device [ 845.590997][T13863] usb 3-1: config 0 descriptor?? [ 845.612250][ T5896] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 845.826030][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 846.064871][ T5896] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 846.090181][ T5896] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.129620][ T5896] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 846.155692][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.175798][ T5896] usb 6-1: Product: syz [ 846.182072][ T5896] usb 6-1: Manufacturer: syz [ 846.186845][T13863] (null): keene_cmd_main failed (-110) [ 846.193256][ T5896] usb 6-1: SerialNumber: syz [ 846.204472][T13863] video4linux radio48: keene_cmd_main failed (-32) [ 846.214419][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 846.227501][ T5896] usb 6-1: config 0 descriptor?? [ 846.234653][T13863] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 846.255272][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 846.277774][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 846.296107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.315043][ T9] usb 2-1: Product: syz [ 846.321130][ T9] usb 2-1: Manufacturer: syz [ 846.333717][ T9] usb 2-1: SerialNumber: syz [ 846.351758][ T9] usb 2-1: config 0 descriptor?? [ 846.388603][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 846.412539][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 846.929437][ T5838] Bluetooth: Frame is too long (len 12, expected len 4) [ 846.956356][ T5896] usb 6-1: USB disconnect, device number 20 [ 847.104413][T14679] usb 3-1: USB disconnect, device number 40 [ 847.237925][T15342] tc_dump_action: action bad kind [ 847.383221][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 848.464882][T15364] SELinux: failed to load policy [ 848.583574][ T5896] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 848.787208][ T5895] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 848.823046][ T9] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 848.835247][ T9] em28xx 2-1:0.0: board has no eeprom [ 848.849024][ T5838] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 848.903456][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 848.922154][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 848.929841][ T988] em28xx 2-1:0.0: Binding DVB extension [ 848.949255][ T9] usb 2-1: USB disconnect, device number 46 [ 848.968994][ T988] em28xx 2-1:0.0: Registering input extension [ 848.984167][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 848.992085][ T9] em28xx 2-1:0.0: Closing input extension [ 849.000151][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 849.005287][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 849.014157][ T5896] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 849.022838][ T5895] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 849.037202][ T5895] usb 5-1: config 0 has no interface number 0 [ 849.044142][ T9] em28xx 2-1:0.0: Freeing device [ 849.050303][ T5896] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 849.060223][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.068399][ T5895] usb 5-1: config 0 interface 12 has no altsetting 0 [ 849.077588][ T5896] usb 6-1: Product: syz [ 849.083176][ T5896] usb 6-1: Manufacturer: syz [ 849.090739][ T5895] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 849.109291][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.119147][ T5896] usb 6-1: SerialNumber: syz [ 849.138782][ T5896] usb 6-1: config 0 descriptor?? [ 849.147436][ T5895] usb 5-1: Product: syz [ 849.151770][ T988] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 849.165820][ T5895] usb 5-1: Manufacturer: syz [ 849.180407][ T5896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 849.192454][ T5895] usb 5-1: SerialNumber: syz [ 849.209773][ T5896] usb 6-1: setting power ON [ 849.217517][ T5895] usb 5-1: config 0 descriptor?? [ 849.229592][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 849.274533][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 849.291891][ T5896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 849.300549][ T988] usb 1-1: device descriptor read/64, error -71 [ 849.306976][ T5896] usb 6-1: media controller created [ 849.322424][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 849.374110][ T5896] usb 6-1: selecting invalid altsetting 6 [ 849.390231][ T5896] usb 6-1: digital interface selection failed (-22) [ 849.424748][ T5896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 849.476156][ T5896] usb 6-1: setting power OFF [ 849.511740][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 849.555267][ T988] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 849.564609][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 849.634553][ T5896] (NULL device *): no alternate interface [ 849.737603][ T988] usb 1-1: device descriptor read/64, error -71 [ 849.750826][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 849.783456][ T5896] usb 6-1: USB disconnect, device number 21 [ 849.910235][ T988] usb usb1-port1: attempt power cycle [ 850.247812][ T5838] Bluetooth: Frame is too long (len 12, expected len 4) [ 850.539717][ T5895] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 850.571740][ T5895] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 850.600203][ T5895] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 850.629617][ T5895] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 850.663308][ T5895] usb 5-1: USB disconnect, device number 27 [ 850.818737][ T988] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 851.032036][ T988] usb 1-1: device descriptor read/8, error -71 [ 851.080481][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 851.080499][ T30] audit: type=1400 audit(1776746470.363:2407): avc: denied { listen } for pid=15394 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 851.126857][ T30] audit: type=1400 audit(1776746470.391:2408): avc: denied { accept } for pid=15394 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 851.150072][T15396] syzkaller1: entered promiscuous mode [ 851.155555][T15396] syzkaller1: entered allmulticast mode [ 851.265300][ T9] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 851.297803][ T988] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 851.319186][ T988] usb 1-1: device descriptor read/8, error -71 [ 851.437497][ T988] usb usb1-port1: unable to enumerate USB device [ 851.445639][ T9] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 851.455899][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 851.466654][ T9] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 851.475810][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.483960][ T9] usb 6-1: Product: syz [ 851.488159][ T9] usb 6-1: Manufacturer: syz [ 851.492813][ T9] usb 6-1: SerialNumber: syz [ 851.501990][ T9] usb 6-1: config 0 descriptor?? [ 851.534137][ T30] audit: type=1400 audit(1776746470.794:2409): avc: denied { ioctl } for pid=15402 comm="syz.4.2716" path="socket:[76959]" dev="sockfs" ino=76959 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 851.660466][T14679] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 851.741413][ T9] usb 6-1: USB disconnect, device number 22 [ 851.855043][T14679] usb 3-1: config 0 interface 0 has no altsetting 0 [ 851.868283][T14679] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 851.887199][T14679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.906242][T14679] usb 3-1: config 0 descriptor?? [ 852.166078][T15411] IPv6: NLM_F_CREATE should be specified when creating new route [ 852.377124][T15413] bond1: option arp_interval: invalid value (18446744073709551615) [ 852.385134][T15413] bond1: option arp_interval: allowed values 0 - 2147483647 [ 852.401160][T15413] bond1 (unregistering): Released all slaves [ 852.499115][T14679] (null): keene_cmd_main failed (-110) [ 852.541236][T14679] video4linux radio48: keene_cmd_main failed (-32) [ 852.560092][T14679] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 852.694195][ T988] usb 3-1: USB disconnect, device number 41 [ 852.803987][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 852.975520][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 853.005376][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 853.030183][ T9] usb 6-1: config 0 has no interface number 0 [ 853.040301][T15429] Cannot find del_set index 1 as target [ 853.044336][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 853.056812][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.067784][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 853.080226][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.092851][ T9] usb 6-1: Product: syz [ 853.097602][ T9] usb 6-1: Manufacturer: syz [ 853.157034][ T9] usb 6-1: SerialNumber: syz [ 853.180033][ T1232] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 853.326049][ T9] usb 6-1: config 0 descriptor?? [ 853.403626][ T1232] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 853.429150][ T1232] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.458705][ T1232] usb 1-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 853.484325][ T1232] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 853.504099][ T1232] usb 1-1: Product: syz [ 853.512790][ T1232] usb 1-1: Manufacturer: syz [ 853.555155][ T1232] hub 1-1:4.0: bad descriptor, ignoring hub [ 853.562217][ T1232] hub 1-1:4.0: probe with driver hub failed with error -5 [ 853.570762][ T1232] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 853.782039][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 853.794337][ T5896] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 853.802014][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 853.811165][ T988] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 853.821817][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 853.833073][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 853.843628][ T9] usb 6-1: USB disconnect, device number 23 [ 853.861879][ T5895] usb 1-1: USB disconnect, device number 58 [ 853.979395][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 853.985061][ T5896] usb 5-1: no configurations [ 853.989714][ T5896] usb 5-1: can't read configurations, error -22 [ 853.997942][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 854.006566][ T988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.016809][ T988] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 854.028003][ T988] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 854.037183][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.045283][ T988] usb 3-1: Product: syz [ 854.049450][ T988] usb 3-1: Manufacturer: syz [ 854.054100][ T988] usb 3-1: SerialNumber: syz [ 854.128893][ T5896] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 854.299912][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 854.310992][ T5896] usb 5-1: no configurations [ 854.317259][ T5896] usb 5-1: can't read configurations, error -22 [ 854.328024][ T5896] usb usb5-port1: attempt power cycle [ 854.335284][T15442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15442 comm=syz.2.2730 [ 854.802119][ T988] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 854.820735][T15445] Scaler: ================= START STATUS ================= [ 854.828482][T15445] Scaler: ================== END STATUS ================== [ 854.910000][ T5896] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 854.941560][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 854.952353][ T5896] usb 5-1: no configurations [ 854.961841][ T5896] usb 5-1: can't read configurations, error -22 [ 854.978629][ T988] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 855.000824][ T988] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 855.023105][ T988] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 855.038054][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.046383][ T988] usb 1-1: Product: syz [ 855.051489][ T988] usb 1-1: Manufacturer: syz [ 855.056200][ T988] usb 1-1: SerialNumber: syz [ 855.069749][ T988] usb 1-1: config 0 descriptor?? [ 855.112229][ T5896] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 855.146359][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 855.156657][ T5896] usb 5-1: no configurations [ 855.161516][ T5896] usb 5-1: can't read configurations, error -22 [ 855.169218][ T5896] usb usb5-port1: unable to enumerate USB device [ 855.305867][ T988] usb 1-1: USB disconnect, device number 59 [ 855.909115][ T30] audit: type=1400 audit(1776746474.883:2410): avc: denied { getopt } for pid=15461 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 856.092537][T15466] SET target dimension over the limit! [ 856.561034][T15478] nbd: must specify a size in bytes for the device [ 856.618833][ T1232] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 856.736579][ T988] usb 3-1: USB disconnect, device number 42 [ 856.814195][ T1232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 856.815896][ T5896] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 856.822760][ T1232] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 856.884101][ T1232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.932043][ T1232] usb 2-1: config 0 descriptor?? [ 856.958200][T15480] bond3: option arp_interval: invalid value (18446744073709551615) [ 856.988231][T15480] bond3: option arp_interval: allowed values 0 - 2147483647 [ 857.009763][T15480] bond3 (unregistering): Released all slaves [ 857.046998][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 857.061973][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 857.079841][ T5896] usb 1-1: config 0 has no interface number 0 [ 857.088131][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 857.097711][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.106334][ T5896] usb 1-1: Product: syz [ 857.125115][ T5896] usb 1-1: Manufacturer: syz [ 857.129779][ T5896] usb 1-1: SerialNumber: syz [ 857.150078][ T5896] usb 1-1: config 0 descriptor?? [ 857.434835][T15492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.549437][ T1232] (null): keene_cmd_main failed (-110) [ 857.843561][ T1232] video4linux radio48: keene_cmd_main failed (-32) [ 857.917257][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 857.925814][ T1232] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 857.972420][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 857.982647][ T988] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 858.026428][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 858.040449][ T5896] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 858.059668][ T5896] usb 1-1: USB disconnect, device number 60 [ 858.159247][ T988] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 858.183364][ T988] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.388575][T15503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.497335][ T1232] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 858.508472][ T988] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 858.521956][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.538824][ T988] usb 5-1: Product: syz [ 858.558926][ T30] audit: type=1400 audit(1776746477.363:2411): avc: denied { read } for pid=15505 comm="syz.0.2751" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 858.692992][ T1232] usb 3-1: Using ep0 maxpacket: 16 [ 858.722622][ T1232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 858.903424][ T1232] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 858.942405][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.955573][ T988] usb 5-1: Manufacturer: syz [ 858.961512][ T1232] usb 3-1: Product: syz [ 858.971143][ T1232] usb 3-1: Manufacturer: syz [ 858.974668][ T988] usb 5-1: SerialNumber: syz [ 858.981145][ T24] usb 2-1: USB disconnect, device number 47 [ 858.993804][ T1232] usb 3-1: SerialNumber: syz [ 859.003507][ T1232] usb 3-1: config 0 descriptor?? [ 859.010543][ T1232] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 859.022036][ T1232] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 859.033145][ T988] usb 5-1: config 0 descriptor?? [ 859.103213][T15511] input: syz0 as /devices/virtual/input/input120 [ 859.116766][T15511] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 859.130669][T15512] dvmrp1: entered allmulticast mode [ 859.138819][T15511] dvmrp1: left allmulticast mode [ 859.282374][ T988] usb 5-1: USB disconnect, device number 32 [ 859.682879][ T1232] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 860.198881][ T29] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 860.375668][T15526] Cannot find del_set index 1 as target [ 860.417428][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 860.537610][ T29] usb 1-1: no configurations [ 860.587620][ T29] usb 1-1: can't read configurations, error -22 [ 860.661465][ T1232] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 860.682462][ T1232] em28xx 3-1:0.0: board has no eeprom [ 860.735112][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 860.756371][ T1232] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 860.769566][ T1232] em28xx 3-1:0.0: dvb set to bulk mode. [ 860.780472][T14679] em28xx 3-1:0.0: Binding DVB extension [ 860.817040][ T1232] usb 3-1: USB disconnect, device number 43 [ 860.818844][ T29] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 860.834650][ T1232] em28xx 3-1:0.0: Disconnecting em28xx [ 860.898988][T14679] em28xx 3-1:0.0: Registering input extension [ 860.908629][ T1232] em28xx 3-1:0.0: Closing input extension [ 860.939687][ T1232] em28xx 3-1:0.0: Freeing device [ 861.292059][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 861.310746][ T29] usb 1-1: no configurations [ 861.320605][ T29] usb 1-1: can't read configurations, error -22 [ 861.359420][ T29] usb usb1-port1: attempt power cycle [ 861.473747][T15542] sit1: entered promiscuous mode [ 861.479076][T15542] sit1: entered allmulticast mode [ 861.694626][ T1232] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 861.748167][ T29] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 861.791371][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 861.803927][ T29] usb 1-1: no configurations [ 861.809110][ T29] usb 1-1: can't read configurations, error -22 [ 861.855040][ T1232] usb 3-1: Using ep0 maxpacket: 32 [ 861.861971][ T1232] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 861.870181][ T1232] usb 3-1: config 0 has no interface number 0 [ 861.878918][ T1232] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 861.888679][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.896697][ T1232] usb 3-1: Product: syz [ 861.901593][ T1232] usb 3-1: Manufacturer: syz [ 861.906201][ T1232] usb 3-1: SerialNumber: syz [ 861.915748][ T1232] usb 3-1: config 0 descriptor?? [ 861.951188][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 861.973611][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 861.979384][ T29] usb 1-1: no configurations [ 861.984094][ T29] usb 1-1: can't read configurations, error -22 [ 861.991896][ T29] usb usb1-port1: unable to enumerate USB device [ 862.036688][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 862.208000][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 862.253586][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 862.294687][T15550] Cannot find del_set index 1 as target [ 862.318239][ T24] usb 6-1: config 0 has no interface number 0 [ 862.407378][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 862.483847][ T1232] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 862.524355][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.558596][ T24] usb 6-1: Product: syz [ 862.565343][ T1232] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 862.581414][ T24] usb 6-1: Manufacturer: syz [ 862.588944][ T24] usb 6-1: SerialNumber: syz [ 862.594116][ T1232] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 862.607609][ T24] usb 6-1: config 0 descriptor?? [ 862.619573][ T1232] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 862.653699][ T1232] usb 3-1: USB disconnect, device number 44 [ 862.827395][ T29] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 863.740123][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 863.751109][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 863.765422][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 863.789372][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 863.810076][ T24] usb 6-1: USB disconnect, device number 24 [ 863.848377][ T30] audit: type=1400 audit(1776746482.314:2412): avc: denied { name_connect } for pid=15557 comm="syz.2.2768" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 863.892702][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 863.917889][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 863.951423][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 863.964674][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.973664][ T29] usb 2-1: Product: syz [ 863.978141][ T29] usb 2-1: Manufacturer: syz [ 863.995491][ T29] usb 2-1: SerialNumber: syz [ 864.120200][ T29] usb 2-1: config 0 descriptor?? [ 864.318421][ T29] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 864.336850][ T29] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 864.341550][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 864.358963][T15565] bond2: option arp_interval: invalid value (18446744073709551615) [ 864.367072][T15565] bond2: option arp_interval: allowed values 0 - 2147483647 [ 864.377856][T15565] bond2 (unregistering): Released all slaves [ 864.395339][T15561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2768'. [ 864.445261][T15561] geneve2: entered promiscuous mode [ 864.471263][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 864.601245][ T5896] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 864.993964][ T29] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 865.060277][T15570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.080164][ T5896] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 865.119273][ T5896] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.191724][ T5896] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 865.224677][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.253083][ T5896] usb 1-1: Product: syz [ 865.268138][ T5896] usb 1-1: Manufacturer: syz [ 865.288180][ T5896] usb 1-1: SerialNumber: syz [ 865.427507][ T988] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 865.684532][ T5896] usb 1-1: config 0 descriptor?? [ 865.764609][ T988] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 865.802212][T15580] wg1 speed is unknown, defaulting to 1000 [ 865.808628][ T988] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.844995][T15578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.859462][ T988] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 865.898732][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.964528][ T5896] usb 1-1: USB disconnect, device number 65 [ 865.972356][ T988] usb 6-1: Product: syz [ 866.010042][ T988] usb 6-1: Manufacturer: syz [ 866.030632][ T988] usb 6-1: SerialNumber: syz [ 866.068346][ T988] usb 6-1: config 0 descriptor?? [ 866.161113][ T29] em28xx 2-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 866.195876][ T30] audit: type=1326 audit(1776746484.503:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.232964][ T29] em28xx 2-1:0.0: failed to read eeprom (err=-5) [ 866.253262][ T29] em28xx 2-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 866.295049][ T30] audit: type=1326 audit(1776746484.503:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.323338][ T30] audit: type=1326 audit(1776746484.503:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.354031][ T30] audit: type=1326 audit(1776746484.503:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.380070][ T30] audit: type=1326 audit(1776746484.503:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.405980][ T30] audit: type=1326 audit(1776746484.503:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.444294][ T29] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 866.453517][ T29] em28xx 2-1:0.0: dvb set to bulk mode. [ 866.459805][ T24] em28xx 2-1:0.0: Binding DVB extension [ 866.503916][ T30] audit: type=1326 audit(1776746484.503:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.705976][ T30] audit: type=1326 audit(1776746484.503:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 866.740494][ T29] usb 2-1: USB disconnect, device number 48 [ 867.527585][ T30] audit: type=1326 audit(1776746484.503:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 867.556867][ T29] em28xx 2-1:0.0: Disconnecting em28xx [ 867.607329][ T30] audit: type=1326 audit(1776746484.503:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbf9c819 code=0x7ffc0000 [ 867.699637][ T24] em28xx 2-1:0.0: Registering input extension [ 867.767012][ T29] em28xx 2-1:0.0: Closing input extension [ 867.874865][ T29] em28xx 2-1:0.0: Freeing device [ 867.905762][ T988] usb 6-1: USB disconnect, device number 25 [ 868.022074][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 868.216623][ T5896] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 868.309280][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 868.426953][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 868.662566][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 868.944975][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 869.077055][ T5896] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.092989][ T24] usb 5-1: no configurations [ 869.097479][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.131757][ T5896] usb 1-1: Product: syz [ 869.133071][ T24] usb 5-1: can't read configurations, error -22 [ 869.201607][ T5896] usb 1-1: Manufacturer: syz [ 869.224153][ T5896] usb 1-1: SerialNumber: syz [ 869.270770][ T5896] usb 1-1: config 0 descriptor?? [ 869.286104][ T5896] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 869.299550][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 869.315969][ T5896] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 869.584882][T15610] SET target dimension over the limit! [ 869.639272][T15608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.751425][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 869.760962][ T24] usb 5-1: no configurations [ 869.768769][ T24] usb 5-1: can't read configurations, error -22 [ 869.776209][ T24] usb usb5-port1: attempt power cycle [ 869.912189][ T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 870.074211][ T29] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 870.082259][ T29] usb 6-1: config 1 has no interface number 0 [ 870.088577][ T29] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 870.100511][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 870.111268][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 870.121412][ T29] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 1511, setting to 1024 [ 870.135558][ T5896] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 870.135692][ T29] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 870.143152][ T988] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 870.151233][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 870.151349][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.151370][ T29] usb 6-1: Product: syz [ 870.151385][ T29] usb 6-1: Manufacturer: syz [ 870.151400][ T29] usb 6-1: SerialNumber: syz [ 870.155696][T15612] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 870.198976][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 870.204395][T15612] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 870.212550][ T24] usb 5-1: no configurations [ 870.217349][ T24] usb 5-1: can't read configurations, error -22 [ 870.229169][T15612] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 870.238753][ T29] usb 6-1: Error in usbnet_get_endpoints (-22) [ 870.361071][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 870.373270][ T988] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 870.383015][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 870.385793][ T988] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.389001][ T24] usb 5-1: no configurations [ 870.405716][ T988] usb 2-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 870.406335][ T24] usb 5-1: can't read configurations, error -22 [ 870.416140][ T988] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 870.422255][ T24] usb usb5-port1: unable to enumerate USB device [ 870.431226][ T988] usb 2-1: Product: syz [ 870.441601][ T988] usb 2-1: Manufacturer: syz [ 870.453429][ T988] hub 2-1:4.0: bad descriptor, ignoring hub [ 870.460161][ T988] hub 2-1:4.0: probe with driver hub failed with error -5 [ 870.470141][ T988] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 870.494401][ T24] usb 6-1: USB disconnect, device number 26 [ 870.789765][ T24] usb 2-1: USB disconnect, device number 49 [ 871.058049][T15617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.201057][ T5896] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 871.224199][ T5896] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 871.252626][ T5896] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 871.409266][ T5896] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 871.676545][ T5896] em28xx 1-1:0.0: dvb set to bulk mode. [ 871.728627][ T5896] usb 1-1: USB disconnect, device number 66 [ 871.737967][ T5896] em28xx 1-1:0.0: Disconnecting em28xx [ 871.743812][ T988] em28xx 1-1:0.0: Binding DVB extension [ 871.938300][ T988] em28xx 1-1:0.0: Registering input extension [ 871.948205][ T5896] em28xx 1-1:0.0: Closing input extension [ 871.975981][ T9] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 872.048676][ T5896] em28xx 1-1:0.0: Freeing device [ 872.158780][ T9] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 872.265723][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.289377][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 872.311374][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.321394][ T9] usb 2-1: Product: syz [ 872.326054][ T9] usb 2-1: Manufacturer: syz [ 872.332910][ T9] usb 2-1: SerialNumber: syz [ 872.356240][ T9] usb 2-1: config 0 descriptor?? [ 872.511710][T15640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.562459][ T29] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 872.602920][ T9] usb 2-1: USB disconnect, device number 50 [ 872.637558][ T5896] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 872.745594][ T29] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 872.761720][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.789626][ T29] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 872.800341][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.808798][ T29] usb 6-1: Product: syz [ 872.814167][ T29] usb 6-1: Manufacturer: syz [ 872.821491][ T29] usb 6-1: SerialNumber: syz [ 872.857535][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 872.866074][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 872.866718][ T29] usb 6-1: config 0 descriptor?? [ 872.908338][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.939626][ T5896] usb 3-1: config 0 descriptor?? [ 873.053994][ T988] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 873.325230][ T988] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 873.412593][ T988] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.959010][ T5896] (null): keene_cmd_main failed (-110) [ 874.335683][ T988] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 874.347144][ T5896] video4linux radio48: keene_cmd_main failed (-32) [ 874.354875][ T5896] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 874.364779][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.374651][ T29] usb 6-1: USB disconnect, device number 27 [ 874.375924][ T988] usb 1-1: Product: syz [ 874.387504][ T988] usb 1-1: Manufacturer: syz [ 874.392541][ T988] usb 1-1: SerialNumber: syz [ 874.402282][ T988] usb 1-1: config 0 descriptor?? [ 874.798032][ T29] usb 3-1: USB disconnect, device number 45 [ 875.164825][ T988] usb 1-1: USB disconnect, device number 67 [ 876.521376][T15668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.773620][T15677] SET target dimension over the limit! [ 876.975776][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 876.988555][T15673] Cannot find del_set index 1 as target [ 877.213630][T15661] misc userio: The device must be registered before sending interrupts [ 877.689448][T15692] SET target dimension over the limit! [ 878.197461][T15691] syzkaller0: entered promiscuous mode [ 878.386251][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 878.548589][ T9] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 878.560557][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.596420][ T9] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 878.624515][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.645898][ T9] usb 3-1: Product: syz [ 878.661900][ T9] usb 3-1: Manufacturer: syz [ 878.675180][ T9] usb 3-1: SerialNumber: syz [ 878.704671][ T9] usb 3-1: config 0 descriptor?? [ 878.948429][ T9] usb 3-1: USB disconnect, device number 46 [ 879.765639][ T29] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 879.848535][T15712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.959280][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 879.966329][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 879.983097][T15717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 879.994838][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 880.025176][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.042944][ T24] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 880.066458][ T29] usb 2-1: Product: syz [ 880.079419][ T29] usb 2-1: Manufacturer: syz [ 880.084910][ T29] usb 2-1: SerialNumber: syz [ 880.109467][ T29] usb 2-1: config 0 descriptor?? [ 880.123439][ T29] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 880.135524][ T29] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 880.215898][ T24] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 880.226525][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.284828][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 880.312993][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.325006][ T24] usb 5-1: Product: syz [ 880.330062][ T24] usb 5-1: Manufacturer: syz [ 880.377977][ T24] usb 5-1: SerialNumber: syz [ 880.412144][ T24] usb 5-1: config 0 descriptor?? [ 880.622336][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 880.732329][T15726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.883425][ T29] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 880.950902][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 881.286965][ T24] usb 5-1: USB disconnect, device number 37 [ 881.302512][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 881.369636][ T9] usb 3-1: config 0 has no interface number 0 [ 881.399262][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 881.428192][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.442822][ T9] usb 3-1: Product: syz [ 881.447727][ T9] usb 3-1: Manufacturer: syz [ 881.473855][ T9] usb 3-1: SerialNumber: syz [ 881.501651][ T9] usb 3-1: config 0 descriptor?? [ 881.821875][ T29] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 881.850444][ T29] em28xx 2-1:0.0: board has no eeprom [ 881.923309][ T29] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 881.934263][ T29] em28xx 2-1:0.0: dvb set to bulk mode. [ 881.972339][ T24] em28xx 2-1:0.0: Binding DVB extension [ 882.103447][ T29] usb 2-1: USB disconnect, device number 51 [ 882.133110][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 882.229911][ T29] em28xx 2-1:0.0: Disconnecting em28xx [ 882.354943][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 882.417661][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 882.430529][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 882.440599][ T24] em28xx 2-1:0.0: Registering input extension [ 882.445754][ T9] usb 3-1: USB disconnect, device number 47 [ 882.453465][ T29] em28xx 2-1:0.0: Closing input extension [ 882.558333][ T29] em28xx 2-1:0.0: Freeing device [ 882.610435][T15746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.672781][T14679] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 882.690056][T15750] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 882.843993][T14679] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 882.860984][T14679] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.878784][T14679] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 882.916246][T14679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.951713][T14679] usb 5-1: Product: syz [ 882.959896][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 882.974314][T14679] usb 5-1: Manufacturer: syz [ 882.989743][T14679] usb 5-1: SerialNumber: syz [ 883.015463][T14679] usb 5-1: config 0 descriptor?? [ 883.143449][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 883.156848][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 883.180762][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 883.195074][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.214059][ T24] usb 1-1: Product: syz [ 883.251406][ T24] usb 1-1: Manufacturer: syz [ 883.275086][T14679] usb 5-1: USB disconnect, device number 38 [ 883.286892][ T24] usb 1-1: SerialNumber: syz [ 883.342621][ T24] usb 1-1: config 0 descriptor?? [ 883.389122][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 883.409582][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 883.539682][T15763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.124356][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 884.314862][T15770] wg1 speed is unknown, defaulting to 1000 [ 884.777761][ T9] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 884.840128][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 884.851496][ T5896] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 884.940099][ T24] em28xx 1-1:0.0: board has no eeprom [ 884.981486][ T9] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 885.026479][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 885.068886][ T5896] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 885.095733][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 885.120223][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 885.120293][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 885.145339][ T9] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 885.165488][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.220294][ T29] em28xx 1-1:0.0: Binding DVB extension [ 885.239960][ T24] usb 1-1: USB disconnect, device number 68 [ 885.249429][ T5896] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 885.263856][ T9] usb 3-1: Product: syz [ 885.271887][ T9] usb 3-1: Manufacturer: syz [ 885.318282][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 885.400806][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.413811][ T9] usb 3-1: SerialNumber: syz [ 885.432390][ T9] usb 3-1: config 0 descriptor?? [ 885.437579][ T5896] usb 5-1: Product: syz [ 885.451547][ T5896] usb 5-1: Manufacturer: syz [ 885.475777][ T5896] usb 5-1: SerialNumber: syz [ 885.503841][ T5896] usb 5-1: config 0 descriptor?? [ 885.539630][ T29] em28xx 1-1:0.0: Registering input extension [ 885.571843][ T24] em28xx 1-1:0.0: Closing input extension [ 885.648820][ T24] em28xx 1-1:0.0: Freeing device [ 886.112352][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 886.168705][ T5896] usb 5-1: USB disconnect, device number 39 [ 886.216632][ T9] usb 3-1: USB disconnect, device number 48 [ 886.273625][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 886.286263][ T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 886.298125][ T29] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 886.314691][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 886.324891][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.336738][ T24] usb 1-1: Product: syz [ 886.342855][ T24] usb 1-1: Manufacturer: syz [ 886.347918][ T24] usb 1-1: SerialNumber: syz [ 886.358975][ T24] usb 1-1: config 0 descriptor?? [ 886.367468][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 886.377786][ T24] usb 1-1: setting power ON [ 886.383151][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 886.398180][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 886.449213][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 886.465457][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 886.471311][ T24] usb 1-1: media controller created [ 886.479349][ T29] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 886.495775][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 886.506181][ T29] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 886.515817][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.530862][ T29] usb 2-1: Product: syz [ 886.539411][ T29] usb 2-1: Manufacturer: syz [ 886.545120][ T24] usb 1-1: selecting invalid altsetting 6 [ 886.551374][ T29] usb 2-1: SerialNumber: syz [ 886.556008][ T24] usb 1-1: digital interface selection failed (-22) [ 886.565198][ T29] usb 2-1: config 0 descriptor?? [ 886.573673][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 886.586012][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 886.600864][ T24] usb 1-1: setting power OFF [ 886.609323][ T29] usb 2-1: setting power ON [ 886.611347][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 886.611361][ T30] audit: type=1400 audit(1776746503.612:2460): avc: denied { name_bind } for pid=15789 comm="syz.5.2834" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 886.615718][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 886.650361][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 886.658608][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 886.668633][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 886.678316][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 886.687022][ T29] usb 2-1: media controller created [ 886.692342][ T24] (NULL device *): no alternate interface [ 886.743676][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 886.780244][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 886.806586][ T29] usb 2-1: selecting invalid altsetting 6 [ 886.824359][ T24] usb 1-1: USB disconnect, device number 69 [ 886.844589][ T29] usb 2-1: digital interface selection failed (-22) [ 886.879510][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 886.916441][ T29] usb 2-1: setting power OFF [ 886.929301][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 887.011434][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 887.042434][ T29] (NULL device *): no alternate interface [ 887.425253][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 887.429576][T15802] netlink: 'syz.5.2835': attribute type 27 has an invalid length. [ 887.469125][ T29] usb 2-1: USB disconnect, device number 52 [ 887.672397][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 888.107263][ T24] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 888.158164][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.221543][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 888.277302][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.312598][T15808] wg1 speed is unknown, defaulting to 1000 [ 888.343079][ T24] usb 5-1: Product: syz [ 888.372038][ T24] usb 5-1: Manufacturer: syz [ 888.397765][ T24] usb 5-1: SerialNumber: syz [ 888.501167][ T24] usb 5-1: config 0 descriptor?? [ 888.756193][T15825] Cannot find del_set index 1 as target [ 888.972545][ T24] usb 5-1: USB disconnect, device number 40 [ 890.030176][T15838] wg1 speed is unknown, defaulting to 1000 [ 890.435812][T15842] Mount JFS Failure: -22 [ 890.440356][T15842] jfs_mount failed w/return code = -22 [ 890.721273][T15841] 9p: Could not find request transport: fd0x000000000000000b [ 892.694952][ T29] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 892.705680][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 892.984387][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 893.002762][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 893.033275][ T29] usb 5-1: config 0 has no interface number 0 [ 893.062619][ T29] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 893.116799][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.151647][ T29] usb 5-1: Product: syz [ 893.188412][ T29] usb 5-1: Manufacturer: syz [ 893.214459][ T29] usb 5-1: SerialNumber: syz [ 893.256777][ T29] usb 5-1: config 0 descriptor?? [ 893.565867][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2854'. [ 895.496029][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 896.133939][ T9] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 896.262292][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 896.404565][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 896.669680][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.360165][ T9] usb 2-1: Product: syz [ 897.365107][ T9] usb 2-1: Manufacturer: syz [ 897.394103][ T9] usb 2-1: SerialNumber: syz [ 897.412322][ T9] usb 2-1: config 0 descriptor?? [ 897.742280][ T9] usb 2-1: USB disconnect, device number 53 [ 897.804430][ T29] usb 5-1: selecting invalid altsetting 1 [ 897.820787][ T29] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 897.832770][T15898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.890021][ T29] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 897.922284][ T29] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 897.985480][ T29] usb 5-1: USB disconnect, device number 41 [ 898.207907][T15901] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 899.097053][ T5838] Bluetooth: Frame is too long (len 12, expected len 4) [ 899.134673][T15910] misc userio: The device must be registered before sending interrupts [ 899.556118][ T29] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 899.680643][T15915] bond1: option arp_interval: invalid value (18446744073709551615) [ 899.695311][T15915] bond1: option arp_interval: allowed values 0 - 2147483647 [ 899.904603][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.932703][T15915] bond1 (unregistering): Released all slaves [ 899.939106][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 900.096576][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.153206][ T29] usb 3-1: config 0 descriptor?? [ 900.448569][ T29] (null): keene_cmd_main failed (-71) [ 900.496224][ T29] video4linux radio48: keene_cmd_main failed (-71) [ 900.503419][T15933] wg1 speed is unknown, defaulting to 1000 [ 900.529230][ T29] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 900.586517][ T29] usb 3-1: USB disconnect, device number 49 [ 900.609231][T15932] wg1 speed is unknown, defaulting to 1000 [ 901.094569][T15942] Cannot find del_set index 1 as target [ 902.245770][T13863] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 902.376486][ T29] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 902.431919][T13863] usb 1-1: Using ep0 maxpacket: 8 [ 902.447644][T13863] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 902.459152][T13863] usb 1-1: config 179 has no interface number 0 [ 902.474950][T13863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 902.501152][T13863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 902.523069][T13863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 902.540787][T13863] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 902.558286][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 902.616511][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 18) [ 902.651721][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.668061][T15969] misc userio: The device must be registered before sending interrupts [ 902.682208][T13863] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 902.698916][T13863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.706056][ T29] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 902.763166][ T29] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 902.764060][T15955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.818998][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.850477][ T29] usb 5-1: Product: syz [ 902.876197][ T29] usb 5-1: Manufacturer: syz [ 902.901613][ T29] usb 5-1: SerialNumber: syz [ 903.750103][ T29] usb 5-1: USB disconnect, device number 42 [ 903.799172][ T5938] usb 1-1: USB disconnect, device number 70 [ 903.799208][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 903.813660][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 903.964048][T15975] xt_hashlimit: size too large, truncated to 1048576 [ 904.304807][T15981] dlm: Unknown command passed to DLM device : 3 [ 904.304807][T15981] [ 904.397217][ T29] hid_parser_main: 28 callbacks suppressed [ 904.397238][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.416340][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.424880][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.433191][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.443204][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.451096][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.451598][T15981] could not allocate digest TFM handle sha224-generic [ 904.462145][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.474827][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.484198][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.492765][ T29] hid-generic 01AE:0009:0006.0021: unknown main item tag 0x0 [ 904.522383][ T29] hid-generic 01AE:0009:0006.0021: hidraw0: HID v0.08 Device [syz0] on syz0 [ 905.167624][ T29] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 905.198853][ T30] audit: type=1326 audit(1776746521.009:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5fb9c819 code=0x7fc00000 [ 905.337378][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 905.403643][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 905.473246][ T29] usb 1-1: config 0 has no interface number 0 [ 905.511165][ T29] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 905.546470][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.571651][ T29] usb 1-1: Product: syz [ 905.592710][ T29] usb 1-1: Manufacturer: syz [ 905.612751][ T29] usb 1-1: SerialNumber: syz [ 905.647762][ T29] usb 1-1: config 0 descriptor?? [ 905.775693][T15994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.084493][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 906.258650][ T24] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 906.294964][ T24] usb 5-1: config 1 has no interface number 0 [ 906.321256][ T24] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 906.369263][ T24] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 906.382899][ T24] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 906.413185][ T24] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 1511, setting to 1024 [ 906.478145][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 906.496949][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.534339][ T24] usb 5-1: Product: syz [ 906.550227][ T24] usb 5-1: Manufacturer: syz [ 906.567788][ T24] usb 5-1: SerialNumber: syz [ 906.586837][ T5938] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 906.613171][T15994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 906.648551][T15994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 906.677402][T15994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 906.719481][ T24] usb 5-1: Error in usbnet_get_endpoints (-22) [ 906.791676][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.820894][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 906.867219][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.914734][ T5938] usb 2-1: config 0 descriptor?? [ 907.032757][T16011] tmpfs: Bad value for 'mpol' [ 907.081812][T16010] misc userio: The device must be registered before sending interrupts [ 907.100390][ T24] usb 5-1: USB disconnect, device number 43 [ 907.170610][ T5938] (null): keene_cmd_main failed (-71) [ 907.237509][ T5938] video4linux radio48: keene_cmd_main failed (-71) [ 907.271185][ T5938] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 907.314154][ T5938] usb 2-1: USB disconnect, device number 54 [ 907.675322][ T29] usb 1-1: selecting invalid altsetting 1 [ 907.696041][ T29] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 907.734173][ T29] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 907.765541][ T29] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 907.817066][ T29] usb 1-1: USB disconnect, device number 71 [ 908.061512][T13863] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 908.232475][T13863] usb 5-1: Using ep0 maxpacket: 16 [ 908.239720][T13863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.248428][T13863] usb 5-1: config 0 has no interface number 0 [ 908.257261][T13863] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 908.266965][T13863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.275433][T13863] usb 5-1: Product: syz [ 908.279810][T13863] usb 5-1: Manufacturer: syz [ 908.284563][T13863] usb 5-1: SerialNumber: syz [ 908.291443][T13863] usb 5-1: config 0 descriptor?? [ 908.361226][ T29] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 908.446482][ T5938] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 908.531808][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 908.645110][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 908.707388][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 908.729831][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 908.742257][ T5938] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 908.779154][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.793790][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.828006][ T29] usb 2-1: Product: syz [ 908.864053][ T29] usb 2-1: Manufacturer: syz [ 908.877721][ T29] usb 2-1: SerialNumber: syz [ 908.889141][ T5938] usb 6-1: config 0 descriptor?? [ 908.898082][ T29] usb 2-1: config 0 descriptor?? [ 908.941315][ T29] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 908.988212][ T29] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 909.129222][ T5938] (null): keene_cmd_main failed (-71) [ 909.191069][ T5938] video4linux radio48: keene_cmd_main failed (-71) [ 909.225252][ T5938] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 909.275537][ T5938] usb 6-1: USB disconnect, device number 28 [ 909.644535][ T29] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 910.047424][ T30] audit: type=1326 audit(1776746525.538:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.0.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79c39c819 code=0x7ffc0000 [ 910.095581][T13863] usb 5-1: selecting invalid altsetting 1 [ 910.104517][T13863] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 910.108762][ T30] audit: type=1326 audit(1776746525.538:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.0.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79c39c819 code=0x7ffc0000 [ 910.195586][T13863] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 910.224315][T13863] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 910.295082][T13863] usb 5-1: USB disconnect, device number 44 [ 910.360702][ T29] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 910.373474][ T29] em28xx 2-1:0.0: board has no eeprom [ 910.415933][T16042] bridge1: entered promiscuous mode [ 910.421513][T16042] bridge1: entered allmulticast mode [ 910.450191][T16042] team0: Port device bridge1 added [ 910.466292][ T29] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 910.474430][ T29] em28xx 2-1:0.0: dvb set to bulk mode. [ 910.480343][ T5938] em28xx 2-1:0.0: Binding DVB extension [ 910.528523][ T29] usb 2-1: USB disconnect, device number 55 [ 910.572113][ T5938] em28xx 2-1:0.0: Registering input extension [ 910.581354][ T29] em28xx 2-1:0.0: Disconnecting em28xx [ 910.611981][T16042] bridge0: port 3(team0) entered blocking state [ 910.619100][ T29] em28xx 2-1:0.0: Closing input extension [ 910.638676][ T29] em28xx 2-1:0.0: Freeing device [ 910.645465][T16042] bridge0: port 3(team0) entered disabled state [ 910.662016][T16042] team0: entered allmulticast mode [ 910.667911][T16042] team_slave_0: entered allmulticast mode [ 910.683137][T16042] team_slave_1: entered allmulticast mode [ 910.712806][T16042] team0: entered promiscuous mode [ 910.719311][T16042] team_slave_0: entered promiscuous mode [ 910.743745][T16042] team_slave_1: entered promiscuous mode [ 911.131810][T16046] bond3: option arp_interval: invalid value (18446744073709551615) [ 911.141090][T16046] bond3: option arp_interval: allowed values 0 - 2147483647 [ 911.153783][T16049] Cannot find del_set index 1 as target [ 911.183980][T16046] bond3 (unregistering): Released all slaves [ 911.545995][T13863] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 911.716208][T13863] usb 1-1: Using ep0 maxpacket: 32 [ 911.744504][T13863] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 911.764989][T13863] usb 1-1: config 0 has no interface number 0 [ 911.813780][T13863] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 911.849567][T13863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.897193][T16075] misc userio: The device must be registered before sending interrupts [ 911.932101][T13863] usb 1-1: Product: syz [ 911.940817][T13863] usb 1-1: Manufacturer: syz [ 911.961612][T13863] usb 1-1: SerialNumber: syz [ 912.039033][T13863] usb 1-1: config 0 descriptor?? [ 912.934362][T13863] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 913.053234][T13863] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 913.154960][T13863] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 913.302411][T13863] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 913.351178][ T29] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 913.355255][T13863] usb 1-1: USB disconnect, device number 72 [ 913.534301][ T29] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 913.544673][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.557848][ T29] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 913.567871][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.576467][ T29] usb 5-1: Product: syz [ 913.580816][ T29] usb 5-1: Manufacturer: syz [ 913.585431][ T29] usb 5-1: SerialNumber: syz [ 913.594963][ T29] usb 5-1: config 0 descriptor?? [ 913.596846][ T5896] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 913.714509][T14679] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 913.822952][T16093] Cannot find del_set index 1 as target [ 913.843217][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 913.928131][T14679] usb 3-1: Using ep0 maxpacket: 16 [ 914.093515][T14679] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 914.108921][ T29] usb 5-1: USB disconnect, device number 45 [ 914.116510][T14679] usb 3-1: config 0 has no interface number 0 [ 914.129985][T14679] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 914.140476][T14679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.149819][T14679] usb 3-1: Product: syz [ 914.154450][T14679] usb 3-1: Manufacturer: syz [ 914.154690][ T5896] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 914.159172][T14679] usb 3-1: SerialNumber: syz [ 914.161119][T14679] usb 3-1: config 0 descriptor?? [ 914.204153][ T5896] usb 2-1: config 0 has no interface number 0 [ 914.241649][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 914.266548][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.283138][ T5896] usb 2-1: Product: syz [ 914.287970][ T5896] usb 2-1: Manufacturer: syz [ 914.293901][ T5896] usb 2-1: SerialNumber: syz [ 914.306320][ T5896] usb 2-1: config 0 descriptor?? [ 914.778014][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 914.864945][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 914.946860][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 915.024032][ T5896] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 915.165986][ T5896] usb 2-1: USB disconnect, device number 56 [ 915.402908][ T29] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 915.589411][T16122] misc userio: The device must be registered before sending interrupts [ 915.633008][ T29] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 915.683014][ T29] usb 5-1: config 8 has no interface number 0 [ 915.718267][ T29] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 915.777381][ T29] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 915.827855][ T29] usb 5-1: config 8 interface 177 has no altsetting 0 [ 915.859210][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 915.913846][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.977087][T16123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 916.021304][T16123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 916.097587][ C1] ir_toy 5-1:8.177: out urb status: -71 [ 916.141838][T16128] syzkaller0: entered promiscuous mode [ 916.438159][T14679] usb 3-1: selecting invalid altsetting 1 [ 916.469376][T14679] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 916.510705][T14679] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 916.541133][T14679] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 916.581524][T14679] usb 3-1: USB disconnect, device number 50 [ 916.669419][ T29] ir_toy 5-1:8.177: could not write reset command: -110 [ 916.759869][T16141] SET target dimension over the limit! [ 916.972256][ T29] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110 [ 917.013111][ T29] usb 5-1: USB disconnect, device number 46 [ 917.626522][ T30] audit: type=1400 audit(1776746532.631:2464): avc: denied { append } for pid=16149 comm="syz.0.2926" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 918.275596][T16159] Cannot find del_set index 1 as target [ 918.849581][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 918.856231][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.575699][T16168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.734621][T14679] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 919.884658][T16178] misc userio: The device must be registered before sending interrupts [ 919.901577][T14679] usb 3-1: Using ep0 maxpacket: 8 [ 920.831241][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 920.939783][T14679] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 921.864705][T14679] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 921.878486][T14679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.896278][T14679] usb 3-1: Product: syz [ 921.913227][T14679] usb 3-1: Manufacturer: syz [ 921.917872][T14679] usb 3-1: SerialNumber: syz [ 921.924706][T14679] usb 3-1: config 0 descriptor?? [ 921.932472][T14679] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 921.940511][T14679] usb 3-1: setting power ON [ 921.945275][T14679] dvb-usb: bulk message failed: -22 (2/0) [ 921.953276][T14679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 921.971445][T14679] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 921.980209][T14679] usb 3-1: media controller created [ 921.998838][T14679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.019359][T14679] usb 3-1: selecting invalid altsetting 6 [ 922.028076][T14679] usb 3-1: digital interface selection failed (-22) [ 922.037310][T14679] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 922.046651][T14679] usb 3-1: setting power OFF [ 922.051429][T14679] dvb-usb: bulk message failed: -22 (2/0) [ 922.057182][T14679] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 922.069849][T14679] (NULL device *): no alternate interface [ 922.098378][T14679] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 924.852553][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.356616][ T29] usb 3-1: USB disconnect, device number 51 [ 925.441825][T16207] Cannot find del_set index 1 as target [ 925.784367][ T30] audit: type=1400 audit(1776746540.230:2465): avc: denied { write } for pid=16206 comm="syz.0.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 926.512224][ T30] audit: type=1400 audit(1776746540.240:2466): avc: denied { append } for pid=16206 comm="syz.0.2941" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 927.328574][T14679] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 927.490824][T14679] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 927.499720][T14679] usb 3-1: config 8 has no interface number 0 [ 927.506265][T14679] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 927.519572][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 927.555464][T14679] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 927.612802][T14679] usb 3-1: config 8 interface 177 has no altsetting 0 [ 927.623640][T16239] misc userio: The device must be registered before sending interrupts [ 927.652671][T14679] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 927.681787][T14679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.704152][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 927.730113][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.740958][T16225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 927.771728][ T29] usb 6-1: config 0 has no interface number 0 [ 927.779714][T16225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 927.808537][ T29] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 927.825995][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 927.840959][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.852517][ T29] usb 6-1: Product: syz [ 927.857064][ T29] usb 6-1: Manufacturer: syz [ 927.861758][ T29] usb 6-1: SerialNumber: syz [ 927.906171][ T29] usb 6-1: config 0 descriptor?? [ 928.176988][ T5840] Bluetooth: Frame is too long (len 12, expected len 4) [ 928.383760][T14679] ir_toy 3-1:8.177: could not write reset command: -110 [ 928.409171][T14679] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 928.472575][T14679] usb 3-1: USB disconnect, device number 52 [ 929.251848][ T5938] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 929.434018][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 929.452966][ T5938] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 929.483403][ T5938] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 929.513928][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.552368][ T5938] usb 2-1: Product: syz [ 929.569016][ T5938] usb 2-1: Manufacturer: syz [ 929.589591][ T5938] usb 2-1: SerialNumber: syz [ 929.619593][ T5938] usb 2-1: config 0 descriptor?? [ 929.659754][ T5938] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 929.702951][ T5938] usb 2-1: setting power ON [ 929.725837][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 929.767943][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 929.819219][ T5938] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 929.862315][ T5938] usb 2-1: media controller created [ 929.888457][T16254] Cannot find del_set index 1 as target [ 929.977199][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.147105][ T5938] usb 2-1: selecting invalid altsetting 6 [ 930.383564][ T5938] usb 2-1: digital interface selection failed (-22) [ 930.424469][ T5938] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 930.803597][ T30] audit: type=1400 audit(1776746544.937:2467): avc: denied { ioctl } for pid=16257 comm="syz.2.2956" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 930.828988][ T5938] usb 2-1: setting power OFF [ 930.833733][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 930.839539][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 930.848892][ T5938] (NULL device *): no alternate interface [ 931.019193][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 931.172506][ T29] usb 6-1: selecting invalid altsetting 1 [ 931.201724][ T29] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 931.267770][ T29] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 931.306937][ T29] speedtch 6-1:0.1: probe with driver speedtch failed with error -22 [ 931.355792][ T29] usb 6-1: USB disconnect, device number 29 [ 931.480121][ T5896] usb 2-1: USB disconnect, device number 57 [ 931.522459][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.818363][T16281] misc userio: The device must be registered before sending interrupts [ 931.832951][ T5896] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 932.257332][ T5896] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 932.271896][ T5896] usb 1-1: config 1 has no interface number 0 [ 932.275582][T16284] PKCS8: Unsupported PKCS#8 version [ 932.328311][ T5896] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 932.354333][ T5896] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 932.382374][ T5896] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 932.406369][ T5896] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 1511, setting to 1024 [ 932.453462][ T5896] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 932.476715][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.491600][ T5896] usb 1-1: Product: syz [ 932.496250][ T5896] usb 1-1: Manufacturer: syz [ 932.503041][ T5896] usb 1-1: SerialNumber: syz [ 932.517872][T16268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 932.551632][T16268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 932.563925][T16292] Cannot find del_set index 1 as target [ 932.622081][T16268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 932.661219][T16293] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2965'. [ 932.686031][ T5896] usb 1-1: Error in usbnet_get_endpoints (-22) [ 933.005898][ T30] audit: type=1400 audit(1776746547.033:2468): avc: denied { connect } for pid=16289 comm="syz.1.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 933.167938][ T30] audit: type=1400 audit(1776746547.183:2469): avc: denied { getopt } for pid=16289 comm="syz.1.2965" lport=59330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 933.259241][ T5938] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 933.533311][ T29] usb 1-1: USB disconnect, device number 73 [ 933.669136][ T5938] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 933.724371][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 933.795547][ T5938] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 933.807240][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.816357][ T5938] usb 3-1: Product: syz [ 933.820787][ T5938] usb 3-1: Manufacturer: syz [ 933.827325][ T5938] usb 3-1: SerialNumber: syz [ 933.886895][ T5938] usb 3-1: config 0 descriptor?? [ 934.288734][ T5938] usb 3-1: USB disconnect, device number 53 [ 934.579452][T16325] misc userio: The device must be registered before sending interrupts [ 934.744480][ T5938] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 934.832043][ T30] audit: type=1400 audit(1776746548.737:2470): avc: denied { ioctl } for pid=16326 comm="syz.5.2976" path="socket:[81822]" dev="sockfs" ino=81822 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 934.947498][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 934.964304][ T5938] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 934.975917][ T5938] usb 1-1: config 0 has no interface number 0 [ 934.995135][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 935.012764][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.030402][ T5938] usb 1-1: Product: syz [ 935.042592][ T5938] usb 1-1: Manufacturer: syz [ 935.062370][ T5938] usb 1-1: SerialNumber: syz [ 935.085006][ T5938] usb 1-1: config 0 descriptor?? [ 935.281574][T16334] Cannot find del_set index 1 as target [ 935.310228][ T29] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 935.388388][T16332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.492597][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 935.795291][ T29] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 935.806862][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 935.826321][ T29] usb 3-1: config 0 has no interface number 0 [ 935.840884][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 935.863159][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 935.874477][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 935.887917][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.896937][ T5938] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 935.906712][ T29] usb 3-1: Product: syz [ 935.923364][ T29] usb 3-1: Manufacturer: syz [ 935.928185][ T5938] usb 1-1: USB disconnect, device number 74 [ 935.941297][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 935.949567][ T29] usb 3-1: SerialNumber: syz [ 935.980288][ T29] usb 3-1: config 0 descriptor?? [ 936.124813][ T24] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 936.134649][ T24] usb 2-1: config 1 has no interface number 0 [ 936.149724][ T24] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 936.176396][ T24] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 936.197849][ T24] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 936.229830][ T24] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 1511, setting to 1024 [ 936.265999][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 936.275414][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.293956][ T24] usb 2-1: Product: syz [ 936.298216][ T24] usb 2-1: Manufacturer: syz [ 936.306579][ T24] usb 2-1: SerialNumber: syz [ 936.322434][T16332] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 936.336809][T16332] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 936.347717][T16332] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 936.361036][ T24] usb 2-1: Error in usbnet_get_endpoints (-22) [ 936.472671][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 936.507636][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 936.536238][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 936.566482][ T29] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 937.518907][ T29] usb 3-1: USB disconnect, device number 54 [ 937.811250][T13863] usb 2-1: USB disconnect, device number 58 [ 937.824803][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.840420][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.850988][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.865797][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.883351][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.956679][T16341] wg1 speed is unknown, defaulting to 1000 [ 938.025453][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 938.217474][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 938.225134][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.246798][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 938.265049][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.282353][ T24] usb 5-1: Product: syz [ 938.288534][ T24] usb 5-1: Manufacturer: syz [ 938.293219][ T24] usb 5-1: SerialNumber: syz [ 938.311748][ T24] usb 5-1: config 0 descriptor?? [ 938.637504][T16340] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2982'. [ 938.771825][T16361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.875315][T16341] chnl_net:caif_netlink_parms(): no params data found [ 938.943211][T16350] wg1 speed is unknown, defaulting to 1000 [ 939.039564][T13863] usb 5-1: USB disconnect, device number 47 [ 939.924679][T16341] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.955794][T16341] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.992174][T16341] bridge_slave_0: entered allmulticast mode [ 940.027619][T16341] bridge_slave_0: entered promiscuous mode [ 940.066227][ T5840] Bluetooth: hci4: command tx timeout [ 940.233447][T16341] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.287609][T16341] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.309332][T16341] bridge_slave_1: entered allmulticast mode [ 940.334000][T16341] bridge_slave_1: entered promiscuous mode [ 940.916259][T16341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.946382][T16341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.097186][ T30] audit: type=1400 audit(1776746554.595:2471): avc: denied { listen } for pid=16371 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 941.118586][T16372] fuse: Bad value for 'user_id' [ 941.123635][T16372] fuse: Bad value for 'user_id' [ 941.136104][T16382] Cannot find del_set index 1 as target [ 995.291766][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1053.380805][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1053.387790][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16381/1:b..l P6604/1:b..l [ 1053.397365][ C1] rcu: (detected by 1, t=10502 jiffies, g=123829, q=318 ncpus=2) [ 1053.405158][ C1] task:udevd state:R running task stack:24600 pid:6604 tgid:6604 ppid:5195 task_flags:0x400140 flags:0x00080000 [ 1053.419135][ C1] Call Trace: [ 1053.422414][ C1] [ 1053.425340][ C1] __schedule+0x10e9/0x6820 [ 1053.429849][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1053.435482][ C1] ? arch_stack_walk+0x88/0xf0 [ 1053.440249][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1053.445186][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.450041][ C1] ? mark_held_locks+0x40/0x70 [ 1053.454801][ C1] preempt_schedule_irq+0x50/0x90 [ 1053.459815][ C1] irqentry_exit+0x1fe/0x790 [ 1053.464400][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.470371][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1053.475565][ C1] Code: 05 3b 62 2e 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 a3 f6 0e 0f 82 a4 02 00 00 8b 35 ce d6 f6 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 61 2e 12 0f 85 ed 02 00 00 48 83 c4 [ 1053.495166][ C1] RSP: 0018:ffffc90003cc7248 EFLAGS: 00000206 [ 1053.501227][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1053.509190][ C1] RDX: 0000000000000000 RSI: ffffffff8df3258a RDI: ffffffff8c1c1f00 [ 1053.517150][ C1] RBP: ffffffff8e7e5460 R08: 00000000af707c8b R09: 0000000000000007 [ 1053.525122][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1053.533082][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.541058][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1053.546258][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1053.551455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1053.557601][ C1] unwind_next_frame+0xd1/0x2090 [ 1053.562536][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1053.567641][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1053.572659][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1053.578802][ C1] arch_stack_walk+0x94/0xf0 [ 1053.583392][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1053.588411][ C1] stack_trace_save+0x8e/0xc0 [ 1053.593077][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1053.598451][ C1] ? irqentry_exit+0x246/0x790 [ 1053.603207][ C1] kasan_save_stack+0x30/0x50 [ 1053.607882][ C1] ? kasan_save_stack+0x30/0x50 [ 1053.612729][ C1] ? kasan_save_track+0x14/0x30 [ 1053.617575][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1053.622638][ C1] kasan_save_track+0x14/0x30 [ 1053.627312][ C1] __kasan_slab_alloc+0x89/0x90 [ 1053.632158][ C1] kmem_cache_alloc_lru_noprof+0x246/0x6e0 [ 1053.637961][ C1] ? __d_alloc+0x34/0xa80 [ 1053.642292][ C1] __d_alloc+0x34/0xa80 [ 1053.646448][ C1] d_alloc_parallel+0x111/0x14e0 [ 1053.651386][ C1] ? find_held_lock+0x2b/0x80 [ 1053.656055][ C1] ? __d_lookup+0x25c/0x4a0 [ 1053.660551][ C1] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1053.665916][ C1] ? __d_lookup+0x266/0x4a0 [ 1053.670413][ C1] lookup_open.isra.0+0x57c/0x11b0 [ 1053.675521][ C1] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1053.681071][ C1] ? lookup_fast+0x2da/0x600 [ 1053.685653][ C1] path_openat+0xa98/0x31a0 [ 1053.690157][ C1] ? __pfx_path_openat+0x10/0x10 [ 1053.695093][ C1] do_file_open+0x20e/0x430 [ 1053.699592][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1053.704626][ C1] ? alloc_fd+0x476/0x790 [ 1053.708951][ C1] ? do_getname+0x191/0x390 [ 1053.713451][ C1] do_sys_openat2+0x10d/0x1e0 [ 1053.718125][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1053.723319][ C1] ? __fput+0x692/0xb50 [ 1053.727475][ C1] __x64_sys_openat+0x12d/0x210 [ 1053.732319][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 1053.737690][ C1] ? rcu_is_watching+0x12/0xc0 [ 1053.742457][ C1] do_syscall_64+0x10b/0xf80 [ 1053.747046][ C1] ? clear_bhb_loop+0x40/0x90 [ 1053.751718][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.757607][ C1] RIP: 0033:0x7f75f14a7407 [ 1053.762013][ C1] RSP: 002b:00007fff5a7927c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1053.770422][ C1] RAX: ffffffffffffffda RBX: 00007f75f1bd1880 RCX: 00007f75f14a7407 [ 1053.778381][ C1] RDX: 0000000000080000 RSI: 00007fff5a792930 RDI: ffffffffffffff9c [ 1053.786339][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1053.794298][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563b8ff6d7f5 [ 1053.802267][ C1] R13: 0000563b8ff6d7f5 R14: 0000000000000001 R15: 0000563b8ff88140 [ 1053.810256][ C1] [ 1053.813271][ C1] task:syz.5.2990 state:R running task stack:26888 pid:16381 tgid:16381 ppid:13694 task_flags:0x40004c flags:0x00080000 [ 1053.826754][ C1] Call Trace: [ 1053.830025][ C1] [ 1053.832948][ C1] __schedule+0x10e9/0x6820 [ 1053.837457][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1053.842661][ C1] ? __pfx___schedule+0x10/0x10 [ 1053.847515][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1053.852887][ C1] preempt_schedule_common+0x42/0xc0 [ 1053.858166][ C1] preempt_schedule_thunk+0x16/0x30 [ 1053.863375][ C1] _raw_spin_unlock+0x3e/0x50 [ 1053.868052][ C1] __zap_vma_range+0x1791/0x4bf0 [ 1053.873005][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1053.878286][ C1] ? find_held_lock+0x2b/0x80 [ 1053.882961][ C1] unmap_vmas+0x299/0x5f0 [ 1053.887288][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1053.892132][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1053.897077][ C1] exit_mmap+0x1ef/0xa10 [ 1053.901322][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1053.906084][ C1] ? trace_contention_end+0x122/0x170 [ 1053.911455][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1053.916565][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1053.921680][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1053.926620][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1053.932253][ C1] __mmput+0x12a/0x410 [ 1053.936319][ C1] mmput+0x67/0x80 [ 1053.940039][ C1] do_exit+0x833/0x2a60 [ 1053.944188][ C1] ? __pfx_do_exit+0x10/0x10 [ 1053.948775][ C1] do_group_exit+0xd5/0x2a0 [ 1053.953283][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1053.958299][ C1] x64_sys_call+0x102c/0x1530 [ 1053.962979][ C1] do_syscall_64+0x10b/0xf80 [ 1053.967558][ C1] ? clear_bhb_loop+0x40/0x90 [ 1053.972232][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.978114][ C1] RIP: 0033:0x7f13ced9c819 [ 1053.982517][ C1] RSP: 002b:00007ffd2ac0fce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1053.990919][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f13ced9c819 [ 1053.998882][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1054.006841][ C1] RBP: 00007ffd2ac0fd4c R08: 0000000000000000 R09: 00000000000927c0 [ 1054.014797][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000008d [ 1054.022754][ C1] R13: 00000000000927c0 R14: 00000000000d7be0 R15: 00007ffd2ac0fda0 [ 1054.030728][ C1] [ 1054.033735][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g123829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1054.045012][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1054.054984][ C1] rcu: RCU grace-period kthread stack dump: [ 1054.060869][ C1] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1054.074359][ C1] Call Trace: [ 1054.077629][ C1] [ 1054.080557][ C1] __schedule+0x10e9/0x6820 [ 1054.085080][ C1] ? __pfx___schedule+0x10/0x10 [ 1054.089933][ C1] ? find_held_lock+0x2b/0x80 [ 1054.094598][ C1] ? schedule+0x2bf/0x390 [ 1054.098931][ C1] schedule+0xdd/0x390 [ 1054.104214][ C1] schedule_timeout+0x127/0x280 [ 1054.109084][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1054.114472][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1054.119755][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1054.125562][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1054.131023][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1054.135786][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1054.141070][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1054.146005][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1054.151199][ C1] rcu_gp_kthread+0x179/0x230 [ 1054.155888][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1054.161078][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1054.166891][ C1] ? __kthread_parkme+0x18c/0x230 [ 1054.171918][ C1] ? kthread+0x13a/0x450 [ 1054.176153][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1054.181343][ C1] kthread+0x370/0x450 [ 1054.185405][ C1] ? __pfx_kthread+0x10/0x10 [ 1054.189993][ C1] ret_from_fork+0x72b/0xd50 [ 1054.194579][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1054.199684][ C1] ? __switch_to+0x800/0x1100 [ 1054.204359][ C1] ? __pfx_kthread+0x10/0x10 [ 1054.208946][ C1] ret_from_fork_asm+0x1a/0x30 [ 1054.213716][ C1] [ 1054.216725][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1054.223037][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1054.231960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1054.242005][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1054.247631][ C1] Code: 36 87 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 d0 11 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1054.267228][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1054.273285][ C1] RAX: 000000000553d307 RBX: ffff88801e2da500 RCX: ffffffff8b99c045 [ 1054.281249][ C1] RDX: 0000000000000000 RSI: ffffffff8df57ad3 RDI: ffffffff8c1c1f00 [ 1054.289206][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 1054.297175][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 1054.305148][ C1] R13: ffffed1003c5b4a0 R14: 0000000000000001 R15: ffffffff90dc0150 [ 1054.313117][ C1] FS: 0000000000000000(0000) GS:ffff8881243e4000(0000) knlGS:0000000000000000 [ 1054.322052][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.328632][ C1] CR2: 0000001b30b04ff8 CR3: 000000003eeed000 CR4: 00000000003526f0 [ 1054.336593][ C1] Call Trace: [ 1054.339861][ C1] [ 1054.342782][ C1] default_idle+0x9/0x10 [ 1054.347023][ C1] default_idle_call+0x6c/0xb0 [ 1054.351778][ C1] do_idle+0x464/0x590 [ 1054.355839][ C1] ? __pfx_do_idle+0x10/0x10 [ 1054.360417][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 1054.366317][ C1] cpu_startup_entry+0x4f/0x60 [ 1054.371071][ C1] start_secondary+0x21d/0x2d0 [ 1054.375833][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1054.381121][ C1] common_startup_64+0x13e/0x148 [ 1054.386066][ C1]