last executing test programs: 5m35.274180349s ago: executing program 3 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read_default(0x2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x4c, r9, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 5m32.157676566s ago: executing program 3 (id=794): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) socket(0x9, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) clock_gettime(0x2, &(0x7f0000000040)) 5m31.191340082s ago: executing program 3 (id=796): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x5, 0x4) 5m30.161739942s ago: executing program 3 (id=799): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d00", 0x5, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000380)=0x8a7, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000f5c000/0x4000)=nil], &(0x7f00000000c0), 0xfffffffffffffffe, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000040)) recvfrom$l2tp(r0, 0x0, 0x0, 0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, 0x0, 0x0, 0x4000045) mmap(&(0x7f0000163000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r2, 0x42795000) 5m29.013436678s ago: executing program 3 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup(r6) getdents(r7, &(0x7f0000000040)=""/110, 0x6e) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c0001", @ANYRES32=r0, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) 5m28.108572333s ago: executing program 3 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket(0x2d, 0x2, 0x0) setsockopt(r7, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) sendmsg(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x90, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@nested={0x7c, 0xe, 0x0, 0x1, [@nested={0x78, 0x7d, 0x0, 0x1, [@nested={0x4, 0xa7}, @nested={0x4, 0xf8}, @typed={0x69, 0x12a, 0x0, 0x0, @binary="8ba16b15e76e7b77fb147c75174fac0b094e5099619de06a4a4b2ba7ca6236e6fa06999d55434b2d063e073838fb302cfa08582e952dcdbdd7f7730c2450099615c85601f2f7bc4f15c843ec032f724c84e4b78fcb88e79277f7278ac91bfaf0562f7d2453"}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8c811}, 0x4040840) 5m12.861494338s ago: executing program 32 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket(0x2d, 0x2, 0x0) setsockopt(r7, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) sendmsg(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x90, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@nested={0x7c, 0xe, 0x0, 0x1, [@nested={0x78, 0x7d, 0x0, 0x1, [@nested={0x4, 0xa7}, @nested={0x4, 0xf8}, @typed={0x69, 0x12a, 0x0, 0x0, @binary="8ba16b15e76e7b77fb147c75174fac0b094e5099619de06a4a4b2ba7ca6236e6fa06999d55434b2d063e073838fb302cfa08582e952dcdbdd7f7730c2450099615c85601f2f7bc4f15c843ec032f724c84e4b78fcb88e79277f7278ac91bfaf0562f7d2453"}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8c811}, 0x4040840) 5m7.148133123s ago: executing program 0 (id=840): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 5m4.817678572s ago: executing program 0 (id=845): socket(0x1e, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8, 0x9}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5m2.75590954s ago: executing program 0 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 4m57.276805997s ago: executing program 0 (id=854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd27, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800010000, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x800}], 0x2, 0xbff, 0x1e, 0x0, 0x48, 0x6e}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xa) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) semop(0x0, &(0x7f0000000200), 0x53) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 4m49.815003552s ago: executing program 0 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffffc2, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000140)=0x7, 0x4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x102) fallocate(r6, 0x0, 0x8e14, 0x8ffff) copy_file_range(r6, 0x0, r6, &(0x7f0000000500)=0xffff, 0x9, 0x0) 4m48.306844582s ago: executing program 0 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x402, 0x0) socket$inet6(0xa, 0x3, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e1f, 0x1}}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x4, 0x7}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0xa, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 4m32.5794127s ago: executing program 33 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x402, 0x0) socket$inet6(0xa, 0x3, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e1f, 0x1}}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x4, 0x7}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0xa, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 4m7.832253366s ago: executing program 5 (id=932): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x13}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x6, 0x2, 0x9, 0x6}, {0x6, 0x8, 0x0, 0xfffffffe}, {0xfbd3, 0x9, 0x1, 0x31cd}, {0x8, 0xda, 0x9, 0x3ff}]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000003e80)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4}, 0x38) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, &(0x7f00000000c0)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000100)='0', 0x1) 4m1.391904011s ago: executing program 5 (id=943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001600010028bdf100fedbdf350a107100", @ANYRES32, @ANYBLOB="08000900c000000014"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'hsr0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r8, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000001700)=ANY=[@ANYRES16=r7], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xe6, &(0x7f00000003c0)=""/230, 0x40f00, 0x28, '\x00', r6, @netfilter=0x2d, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[r2, r2, r2, r2, r2, r2, r10, r2, r2], &(0x7f00000005c0)=[{0x1, 0x4, 0x7, 0x9}, {0x3, 0x4, 0xe}, {0x2, 0x1, 0x3, 0x1}, {0x0, 0x5, 0xd, 0xb}, {0x5, 0x3, 0xc, 0x3}, {0x4, 0x2, 0x10, 0x8}, {0x2, 0x5, 0x1}, {0x2, 0x1, 0xe, 0x1}, {0x2, 0x3, 0x7, 0x3}], 0x10, 0xcdd}, 0x94) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m57.380632747s ago: executing program 5 (id=949): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setresgid(0xee00, 0x0, 0xee00) setregid(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r12 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r12, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) 3m54.519274128s ago: executing program 5 (id=953): openat(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x760a, &(0x7f0000000040)={0x0, 0x74d3, 0x400, 0x0, 0x24a}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0xa178, 0x0, 0x1, 0x100000000, 0x6, 0x6, 0x1]}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r7, 0x0, 0x69) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) socket$inet_tcp(0x2, 0x1, 0x6) 3m53.450730653s ago: executing program 5 (id=955): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x202) ioctl$I2C_TENBIT(r0, 0x704, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r7, 0x2) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xc5b, 0x7c5, 0x1, 0x2, 0xd59f80, 0x6, 0x5, 0x7fffffff, 0xb, 0x4, 0x722, 0x4, 0x9, 0x400, 0x2e, 0x8, {0x7, 0x4567e3ac}, 0x3, 0xed}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000b8f8733d3dc065bcda05dd3f980d0a010300000000000200000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m52.632206822s ago: executing program 5 (id=957): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) close(0x3) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x45b3577b}, &(0x7f0000000100)) r5 = dup(0xffffffffffffffff) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 3m52.159501415s ago: executing program 34 (id=957): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) close(0x3) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x45b3577b}, &(0x7f0000000100)) r5 = dup(0xffffffffffffffff) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 1m31.602489329s ago: executing program 6 (id=1478): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$TCSETS(r1, 0x545c, 0x0) 1m30.951506033s ago: executing program 2 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 1m30.664356378s ago: executing program 6 (id=1484): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="20100508"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x20, 0x8, 0x4, "7d5ac766"}, 0x0, 0x0, 0x0, 0x0}) 1m29.601804122s ago: executing program 2 (id=1487): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m26.486375791s ago: executing program 2 (id=1495): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xa6, 0xfc, 0x98, 0x10, 0x1608, 0x302, 0xff4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xa9, 0x5d, 0x2, 0x5f, 0x8e, 0xfc, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) eventfd2(0x0, 0x1) close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x23a000, 0x0) epoll_create1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x7, 0x0, 0x8, 0x1, [], [0x4, 0x1, 0x8, 0x2], [0x30, 0x0, 0x8, 0x2], [0x0, 0x89a5, 0x4, 0x291cfe7a]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) 1m26.249984584s ago: executing program 6 (id=1498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m26.129259747s ago: executing program 6 (id=1499): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m25.93019643s ago: executing program 6 (id=1501): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) 1m25.45110449s ago: executing program 6 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000740)="f7790066baa00064460f224466ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4a}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.266368491s ago: executing program 35 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000740)="f7790066baa00064460f224466ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4a}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.050889176s ago: executing program 2 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m24.756672691s ago: executing program 2 (id=1505): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 1m24.419903238s ago: executing program 2 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 1m23.942943689s ago: executing program 36 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 19.807079165s ago: executing program 4 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, r4, 0x0, 0x2, 0x2}, 0x0, 0x0, 0x2, 0xbb3, 0x2, 0x742, 0xfff, 0x1, 0xfff3, 0x380, 0x0, r0}) 18.849465629s ago: executing program 4 (id=1764): syz_open_dev$vim2m(0x0, 0x40003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.007609674s ago: executing program 9 (id=1766): socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x8c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 15.837930041s ago: executing program 9 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.447067705s ago: executing program 1 (id=1771): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) 14.248187538s ago: executing program 8 (id=1772): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000010027bd700402d4df", @ANYRES32=r6, @ANYBLOB="94e40700100c000064001288110001006272696467655f736c617665338700000c0005800800030001000000050021000000000005001b0070"], 0x84}}, 0x200088c2) 13.99229342s ago: executing program 1 (id=1773): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x50, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000dc2000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x3000}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) read$char_usb(r1, &(0x7f0000000140)=""/160, 0xa0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r0) 13.211803768s ago: executing program 8 (id=1775): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.288395362s ago: executing program 8 (id=1777): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 11.200969292s ago: executing program 8 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 10.528214984s ago: executing program 9 (id=1780): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) socket(0x2, 0x3, 0xff) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 10.230222356s ago: executing program 4 (id=1781): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xa}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) 10.0961521s ago: executing program 7 (id=1782): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 9.116321034s ago: executing program 4 (id=1783): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.985690535s ago: executing program 7 (id=1784): ptrace(0x10, 0x0) r0 = socket(0x1e, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8.605464733s ago: executing program 1 (id=1785): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xa6, 0xfc, 0x98, 0x10, 0x1608, 0x302, 0xff4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xa9, 0x5d, 0x2, 0x5f, 0x8e, 0xfc, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) eventfd2(0x0, 0x1) close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x23a000, 0x0) epoll_create1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x7, 0x0, 0x8, 0x1, [], [0x4, 0x1, 0x8, 0x2], [0x30, 0x0, 0x8, 0x2], [0x0, 0x89a5, 0x4, 0x291cfe7a]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 5.94036601s ago: executing program 7 (id=1786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 4.924827174s ago: executing program 9 (id=1787): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.62657525s ago: executing program 7 (id=1788): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x44011, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0, @local}, 0x14) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) sched_setaffinity(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x1) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8008b70d, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01072bbd7400002200000500000fee0e"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004055}, 0x2000c044) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x210300, 0x95) write(r5, &(0x7f0000000200)='dummy_hcd', 0x9) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3.116400635s ago: executing program 7 (id=1789): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt(r0, 0xfffffff7, 0x5, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x1) 3.015131571s ago: executing program 8 (id=1790): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x22a000, 0x1000, 0x0, 0x3}, 0x20) 2.266223515s ago: executing program 1 (id=1791): r0 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa18080045000028000400000006907864010108ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="077e6d306aa74cdc4d8e00000090787748"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ref_tracker/netns-7-4026531833-notrefcnt\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x80000001}], 0x18, 0x50}], 0x1, 0x40800) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x68a80) 2.265929461s ago: executing program 9 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="0412"], 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.637202771s ago: executing program 4 (id=1793): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) 1.492592909s ago: executing program 1 (id=1794): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 360.384596ms ago: executing program 7 (id=1795): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) close(r1) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x0) 169.289513ms ago: executing program 8 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x11, 0x0, 0x7, 0x2b6, 0x3, 0xc}, {0x7, 0x1, 0x3ff, 0x1, 0x3, 0x3}, 0x2, 0x9, 0x1d4b}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 83.761071ms ago: executing program 9 (id=1797): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 23.31303ms ago: executing program 1 (id=1798): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xe800) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x58d2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 0s ago: executing program 4 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="0412"], 0x2, 0x1) modify_ldt$write2(0x11, &(0x7f0000000040)={0x400, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000080)=""/217, 0xd9) kernel console output (not intermixed with test programs): otrend TT Connect S2-3600' in warm state. [ 630.117179][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 630.117179][ T10] [ 630.126129][ T10] usb 5-1: selecting invalid altsetting 3 [ 630.132975][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 630.132975][ T10] [ 630.152032][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 630.180852][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.196744][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 630.206870][ T10] usb 5-1: media controller created [ 630.212593][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 630.221056][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 630.230877][ T10] dvb-usb: MAC address reading failed. [ 630.243079][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.274845][ T10] DVB: Unable to find symbol stb0899_attach() [ 630.280911][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 630.323523][T11886] dvb-usb: bulk message failed: -22 (7/0) [ 630.331314][T11886] pctv452e: I2C error -22; AA 02 10 00 00 -> aa 02 31 03 10 00 00 [ 630.349205][ T10] rc_core: IR keymap rc-tt-1500 not found [ 630.359741][T11886] Invalid ELF header type: 2 != 1 [ 630.360221][ T10] Registered IR keymap rc-empty [ 630.373295][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 630.384480][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23 [ 630.397107][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 630.405362][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 630.405362][ T10] [ 630.412811][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 630.429463][ T10] usb 5-1: USB disconnect, device number 28 [ 630.434002][ T5703] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 630.494460][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 630.593682][ T5703] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.602856][ T5696] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 630.611551][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.632087][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.641952][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.654978][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.665595][ T5703] usb 3-1: config 0 descriptor?? [ 630.763635][ T5696] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 630.780936][ T5696] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 630.785068][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 630.789626][ T5696] usb 7-1: config 0 has no interface number 0 [ 630.800393][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 630.815874][ T5696] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.816437][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5ef8 instead [ 630.837818][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xdcb8 instead [ 630.840579][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.848430][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 630.858809][ T5696] usb 7-1: Product: syz [ 630.867684][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 630.874848][ T5696] usb 7-1: Manufacturer: syz [ 630.881779][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 630.888535][ T5696] usb 7-1: SerialNumber: syz [ 630.896702][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 630.904263][ T5696] usb 7-1: config 0 descriptor?? [ 630.911752][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 630.927211][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 630.928652][ T5696] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 630.937795][T11903] jffs2: Further such events for this erase block will not be printed [ 630.957901][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 630.968703][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 630.979299][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5ef8 instead [ 630.989868][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xdcb8 instead [ 631.000543][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 631.011195][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 631.022202][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 631.060021][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 631.082962][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 631.099362][ T5703] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 631.111969][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 631.150034][T11903] jffs2: Further such events for this erase block will not be printed [ 631.174793][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 631.212826][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 631.251130][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5ef8 instead [ 631.256984][ T5703] usb 7-1: USB disconnect, device number 15 [ 631.287097][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1787 instead [ 631.301110][ T5696] usb 3-1: USB disconnect, device number 30 [ 631.309453][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 631.311465][ T5703] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 631.342712][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 631.366398][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5ef8 instead [ 631.399490][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1787 instead [ 631.424340][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 631.449043][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 631.465202][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5ef8 instead [ 631.476059][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1787 instead [ 631.486597][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 631.497179][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 631.507986][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5ef8 instead [ 631.518597][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1787 instead [ 631.542916][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 631.562805][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 631.584455][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5ef8 instead [ 631.610685][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1787 instead [ 631.634491][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 631.652155][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 631.664687][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5ef8 instead [ 631.676048][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1787 instead [ 631.708076][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 631.735379][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 631.771926][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5ef8 instead [ 631.785439][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1787 instead [ 631.796844][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 631.807474][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 631.829119][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5ef8 instead [ 631.863636][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1787 instead [ 631.906625][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 631.933018][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 631.944168][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5ef8 instead [ 631.955191][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1787 instead [ 631.965890][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 631.999855][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 632.027653][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5ef8 instead [ 632.055581][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1787 instead [ 632.086838][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 632.126312][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 632.157263][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5ef8 instead [ 632.196737][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1787 instead [ 632.237932][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 632.288750][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 632.326656][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5ef8 instead [ 632.347277][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1787 instead [ 632.381218][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 632.391012][ T5696] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 632.392639][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 632.412678][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 632.438850][ T5696] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 632.449478][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5ef8 instead [ 632.500120][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1787 instead [ 632.535856][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 632.565166][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 632.576013][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 632.583588][ T10] usb 3-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 632.609302][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5ef8 instead [ 632.620801][ T10] usb 3-1: config 0 has no interfaces? [ 632.627503][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1787 instead [ 632.641540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.649943][ T10] usb 3-1: Product: syz [ 632.659656][ T10] usb 3-1: Manufacturer: syz [ 632.667471][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 632.678513][ T10] usb 3-1: SerialNumber: syz [ 632.687642][ T10] usb 3-1: config 0 descriptor?? [ 632.697113][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 632.719257][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5ef8 instead [ 632.744474][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1787 instead [ 632.755536][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 632.768164][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 632.779184][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5ef8 instead [ 632.792611][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1787 instead [ 632.803960][ T1668] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 632.812229][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 632.825365][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 632.836123][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5ef8 instead [ 632.846739][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1787 instead [ 632.859881][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 632.870596][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 632.881928][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5ef8 instead [ 632.894788][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1787 instead [ 632.905463][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 632.916782][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 632.927367][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5ef8 instead [ 632.945442][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1787 instead [ 632.957990][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 632.969829][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 632.982065][ T1668] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 632.990611][ T30] audit: type=1400 audit(1787492447.031:1139): avc: denied { connect } for pid=11954 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 633.004958][ T10] usb 3-1: USB disconnect, device number 31 [ 633.019452][ T1668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.030070][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5ef8 instead [ 633.050407][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1787 instead [ 633.061916][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 633.077451][ T1668] usb 7-1: config 0 descriptor?? [ 633.085247][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 633.098233][ T1668] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 633.106211][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5ef8 instead [ 633.119516][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1787 instead [ 633.131494][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 633.142523][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 633.154981][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5ef8 instead [ 633.165835][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1787 instead [ 633.177071][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 633.188396][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 633.200251][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5ef8 instead [ 633.211877][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1787 instead [ 633.222616][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 633.235808][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 633.246562][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5ef8 instead [ 633.257213][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1787 instead [ 633.269820][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 633.282262][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 633.295191][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5ef8 instead [ 633.313883][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1787 instead [ 633.325359][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 633.335976][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 633.349179][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5ef8 instead [ 633.359967][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1787 instead [ 633.371747][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 633.383444][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 633.394017][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5ef8 instead [ 633.405154][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1787 instead [ 633.416505][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 633.427629][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 633.438325][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5ef8 instead [ 633.448998][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1787 instead [ 633.459749][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 633.470394][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 633.480937][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5ef8 instead [ 633.491383][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1787 instead [ 633.503188][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 633.516054][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 633.526978][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5ef8 instead [ 633.547053][T11903] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1787 instead [ 633.558697][T11903] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 633.568747][T11903] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 633.598312][T11964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1448'. [ 633.614847][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 633.636722][ T30] audit: type=1400 audit(1787492447.681:1140): avc: denied { read } for pid=11965 comm="syz.1.1449" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 633.694170][T10435] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 633.709179][ T30] audit: type=1400 audit(1787492447.681:1141): avc: denied { open } for pid=11965 comm="syz.1.1449" path="/300/config" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 633.742924][ T30] audit: type=1400 audit(1787492447.681:1142): avc: denied { read } for pid=11965 comm="syz.1.1449" name="g1" dev="configfs" ino=8824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 633.765534][ T30] audit: type=1400 audit(1787492447.681:1143): avc: denied { read } for pid=11965 comm="syz.1.1449" name="bcdUSB" dev="configfs" ino=38915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 633.788957][ T30] audit: type=1800 audit(1787492447.681:1144): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1449" name="bcdUSB" dev="configfs" ino=38915 res=0 errno=0 [ 633.794193][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1452'. [ 633.824716][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1452'. [ 633.834771][T11972] netlink: 'syz.1.1452': attribute type 32 has an invalid length. [ 633.842615][T11972] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1452'. [ 633.893499][T10435] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 633.904750][T10435] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.914894][T10435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.927822][T10435] idmouse 5-1:1.0: Unable to find bulk-in endpoint. [ 633.945880][ T1668] gspca_stv06xx: I2C: Read error writing address: -71 [ 633.958796][ T1668] usb 7-1: USB disconnect, device number 16 [ 634.003084][ T5717] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 634.132949][ T5696] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 634.153937][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 634.159663][ T5717] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 634.170271][ T5717] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 634.180811][ T5717] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 634.192998][ T5717] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.204334][ T5717] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 634.219251][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.227333][ T5717] usb 3-1: Product: syz [ 634.231507][ T5717] usb 3-1: Manufacturer: syz [ 634.236200][ T5717] usb 3-1: SerialNumber: syz [ 634.250109][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 634.266020][ T5717] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input24 [ 634.283288][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 634.292013][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.300218][ T5696] usb 2-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 634.312440][ T5696] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 634.320961][ T5696] usb 2-1: config 1 has no interface number 0 [ 634.327276][ T5696] usb 2-1: config 1 interface 169 has no altsetting 0 [ 634.336864][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.344933][ T5696] usb 2-1: Product: syz [ 634.349096][ T5696] usb 2-1: Manufacturer: syz [ 634.353929][ T5696] usb 2-1: SerialNumber: syz [ 634.472903][ T5717] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 634.493598][ T5717] (id 0x00) [ 634.572948][ T5717] rc_core: IR keymap rc-imon-pad not found [ 634.585110][ T5696] io_ti 2-1:1.169: required endpoints missing [ 634.586742][ T5717] Registered IR keymap rc-empty [ 634.609777][ T5717] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 634.622501][ T5696] usb 2-1: USB disconnect, device number 37 [ 634.623166][ T5717] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 634.665367][ T5717] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 634.688998][ T5717] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input25 [ 634.718895][ T5717] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:32> initialized [ 634.882205][T11970] imon:vfd_write: invalid payload size [ 634.890203][ T5717] usb 3-1: USB disconnect, device number 32 [ 634.962877][T10435] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 635.133555][T10435] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 635.143917][T10435] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.155964][T10435] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 635.166144][T10435] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.181485][T10435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.189699][T10435] usb 7-1: Product: syz [ 635.194169][T10435] usb 7-1: Manufacturer: syz [ 635.198775][T10435] usb 7-1: SerialNumber: syz [ 635.423845][ T5717] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 635.592850][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 635.600142][ T5717] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 635.610252][ T5717] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 635.619101][T11985] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 635.619682][ T5717] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.638289][ T5717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.648424][ T5717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.658409][ T5717] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.671424][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.890387][ T5717] usb 2-1: GET_CAPABILITIES returned 0 [ 635.896028][ T5717] usbtmc 2-1:16.0: can't read capabilities [ 636.029760][T10435] ATM dev 0: failed to start ADSL synchronisation: -71 [ 636.037842][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803703a500 failed (-71)! [ 636.045815][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803703a100 failed (-71)! [ 636.053741][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803703ab00 failed (-71)! [ 636.061683][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803703aa00 failed (-71)! [ 636.079218][T10435] usb 7-1: USB disconnect, device number 17 [ 636.129726][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 636.147992][ T5717] usb 2-1: USB disconnect, device number 38 [ 636.467198][T10435] usb 5-1: USB disconnect, device number 29 [ 636.624011][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1470'. [ 636.649088][T12012] team0 (unregistering): Port device team_slave_0 removed [ 636.669219][T12012] team0 (unregistering): Port device team_slave_1 removed [ 636.688587][T12014] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 636.703341][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1470'. [ 636.729103][T12014] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 636.737314][T12014] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 636.758543][T12014] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 637.153723][T10435] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 637.172961][ T1668] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 637.305471][T10435] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.327770][T10435] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.346749][T10435] usb 5-1: config 1 interface 0 altsetting 13 bulk endpoint 0x2 has invalid maxpacket 0 [ 637.352783][ T1668] usb 2-1: Using ep0 maxpacket: 16 [ 637.367651][T10435] usb 5-1: config 1 interface 0 has no altsetting 0 [ 637.378576][ T1668] usb 2-1: unable to get BOS descriptor or descriptor too short [ 637.387216][T10435] usb 5-1: string descriptor 0 read error: -22 [ 637.396190][T10435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.396203][ T1668] usb 2-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 637.461871][ T1668] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 637.489194][ T1668] usb 2-1: config 1 has no interface number 0 [ 637.509567][ T1668] usb 2-1: config 1 interface 169 has no altsetting 0 [ 637.530207][ T1668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.548551][ T1668] usb 2-1: Product: syz [ 637.560523][ T1668] usb 2-1: Manufacturer: syz [ 637.573239][ T1668] usb 2-1: SerialNumber: syz [ 637.576813][T12044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.834274][ T1668] io_ti 2-1:1.169: required endpoints missing [ 637.852566][T10435] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 637.879000][ T1668] usb 2-1: USB disconnect, device number 39 [ 637.917035][T10435] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.000E/input/input26 [ 638.118490][T10435] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 638.140836][T10435] usb 5-1: USB disconnect, device number 30 [ 638.186609][T12052] fido_id[12052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 638.352826][ T5717] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 638.874569][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 640.034046][T10435] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 640.204180][ T5330] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 640.211610][ T5717] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 640.226217][T10435] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 640.240024][T10435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.260543][T10435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.296169][T10435] usb 5-1: config 0 descriptor?? [ 640.357228][T10435] pwc: Askey VC010 type 2 USB webcam detected. [ 640.418519][ T5330] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 640.468739][ T5330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.511806][ T5330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 640.567080][ T5330] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 640.610503][ T5330] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.643637][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.680082][ T5717] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 640.688387][ T5717] usb 7-1: config 0 has no interface number 0 [ 640.694620][ T5717] usb 7-1: config 0 interface 184 has no altsetting 0 [ 640.703787][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.711832][ T5717] usb 7-1: Product: syz [ 640.716530][ T5717] usb 7-1: Manufacturer: syz [ 640.722043][ T5717] usb 7-1: SerialNumber: syz [ 640.729602][ T5717] usb 7-1: config 0 descriptor?? [ 640.833582][T10435] pwc: recv_control_msg error -32 req 02 val 2b00 [ 640.844016][T10435] pwc: recv_control_msg error -32 req 02 val 2700 [ 640.852196][T10435] pwc: recv_control_msg error -32 req 02 val 2c00 [ 641.068930][T10435] pwc: recv_control_msg error -71 req 04 val 1300 [ 641.086251][T10435] pwc: recv_control_msg error -71 req 04 val 1400 [ 641.095103][T10435] pwc: recv_control_msg error -71 req 02 val 2000 [ 641.102938][T10435] pwc: recv_control_msg error -71 req 02 val 2100 [ 641.114567][T10435] pwc: recv_control_msg error -71 req 04 val 1500 [ 641.121384][T10435] pwc: recv_control_msg error -71 req 02 val 2500 [ 641.128533][T10435] pwc: recv_control_msg error -71 req 02 val 2400 [ 641.135960][T10435] pwc: recv_control_msg error -71 req 02 val 2600 [ 641.144072][T10435] pwc: recv_control_msg error -71 req 02 val 2900 [ 641.151371][T10435] pwc: recv_control_msg error -71 req 02 val 2800 [ 641.159636][T10435] pwc: recv_control_msg error -71 req 04 val 1100 [ 641.166663][T10435] pwc: recv_control_msg error -71 req 04 val 1200 [ 641.174892][T10435] pwc: Registered as video103. [ 641.184969][T10435] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 641.231174][T10435] usb 5-1: USB disconnect, device number 31 [ 641.513878][ T5330] gud 3-1:1.0: Failed to get connectors (error=-5) [ 641.520689][ T5330] gud 3-1:1.0: probe with driver gud failed with error -5 [ 641.692879][ T1668] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 641.749818][ T10] usb 3-1: USB disconnect, device number 33 [ 641.853574][ T1668] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.864330][ T1668] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 641.875594][ T1668] usb 2-1: config 0 interface 0 has no altsetting 0 [ 641.885300][ T1668] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 641.893721][ T1668] usb 2-1: Product: syz [ 641.897938][ T1668] usb 2-1: Manufacturer: syz [ 641.902551][ T1668] usb 2-1: SerialNumber: syz [ 641.910278][ T1668] usb 2-1: config 0 descriptor?? [ 641.918918][ T1668] usb 2-1: selecting invalid altsetting 0 [ 641.968654][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 641.996264][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 642.013542][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 642.024522][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 642.035579][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 642.046005][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 642.055846][ T5717] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 642.067237][ T5717] usb 7-1: USB disconnect, device number 18 [ 642.192856][T10435] usb 2-1: USB disconnect, device number 40 [ 642.192904][ C0] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 642.208456][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 642.583134][ T5330] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 642.677202][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 642.677219][ T30] audit: type=1400 audit(1787492456.721:1153): avc: denied { read } for pid=12090 comm="syz.6.1499" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 642.709197][ T30] audit: type=1400 audit(1787492456.721:1154): avc: denied { open } for pid=12090 comm="syz.6.1499" path="/108/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 642.763029][ T5330] usb 3-1: Using ep0 maxpacket: 16 [ 642.770644][ T5330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 642.780685][ T5330] usb 3-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 642.791378][ T5330] usb 3-1: config 1 has an invalid interface number: 169 but max is 0 [ 642.801111][ T5330] usb 3-1: config 1 has no interface number 0 [ 642.807601][ T5330] usb 3-1: config 1 interface 169 has no altsetting 0 [ 642.817266][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.825823][ T5330] usb 3-1: Product: syz [ 642.830349][ T5330] usb 3-1: Manufacturer: syz [ 642.834623][ T5717] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 642.835739][ T5330] usb 3-1: SerialNumber: syz [ 642.853340][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 642.853775][ T30] audit: type=1400 audit(1787492456.891:1155): avc: denied { unlink } for pid=9730 comm="syz-executor" name="comedi1_subd3" dev="devtmpfs" ino=3196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 642.875521][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 642.900283][ T30] audit: type=1400 audit(1787492456.941:1156): avc: denied { unlink } for pid=9730 comm="syz-executor" name="nullb1" dev="devtmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 642.925516][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5ef8 instead [ 642.936786][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xdcb8 instead [ 642.948847][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 642.960022][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 642.972255][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 642.982870][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 642.993674][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 643.005812][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 643.016392][T12094] jffs2: Further such events for this erase block will not be printed [ 643.033225][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 643.039399][ T5717] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 643.052812][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 643.052840][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5ef8 instead [ 643.052857][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xdcb8 instead [ 643.052872][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 643.087833][ T5717] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 643.095257][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 643.114158][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 643.127647][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.138858][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 643.151916][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 643.163966][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 643.168028][ T5330] io_ti 3-1:1.169: required endpoints missing [ 643.174876][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.189361][ T5717] usb 5-1: Product: syz [ 643.194493][ T5717] usb 5-1: Manufacturer: syz [ 643.199209][ T5717] usb 5-1: SerialNumber: syz [ 643.201917][ T5330] usb 3-1: USB disconnect, device number 34 [ 643.216842][T12094] jffs2: Further such events for this erase block will not be printed [ 643.220960][ T5717] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input28 [ 643.227163][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 643.248720][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 643.263256][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5ef8 instead [ 643.274094][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1787 instead [ 643.298315][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 643.321046][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 643.353658][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5ef8 instead [ 643.366674][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1787 instead [ 643.377572][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 643.388467][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 643.399256][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5ef8 instead [ 643.410066][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1787 instead [ 643.435127][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 643.449626][ T6565] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.461759][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 643.474673][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5ef8 instead [ 643.486468][ T6565] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.488762][ T4949] bcm5974 5-1:1.0: could not read from device [ 643.503346][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1787 instead [ 643.514188][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 643.525633][ T4949] bcm5974 5-1:1.0: could not read from device [ 643.537837][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 643.558781][ T5717] bcm5974 5-1:1.0: could not read from device [ 643.572820][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5ef8 instead [ 643.589366][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1787 instead [ 643.609652][ T5717] input: failed to attach handler mousedev to device input28, error: -5 [ 643.624158][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 643.647679][ T5717] usb 5-1: USB disconnect, device number 32 [ 643.651949][ T4949] bcm5974 5-1:1.0: could not read from device [ 643.663138][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 643.706974][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5ef8 instead [ 643.721557][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1787 instead [ 643.736551][ T6565] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.759815][ T6565] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.782188][ T4949] bcm5974 5-1:1.0: could not read from device [ 643.782291][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 643.809555][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 643.825028][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5ef8 instead [ 643.861832][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.872534][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1787 instead [ 643.887422][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.896654][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.905706][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.908655][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 643.914170][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.937138][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 644.006985][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5ef8 instead [ 644.104806][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1787 instead [ 644.133469][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 644.135235][ T6565] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.145351][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 644.154561][ T6565] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.176136][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5ef8 instead [ 644.187342][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1787 instead [ 644.224752][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 644.244311][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 644.359235][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5ef8 instead [ 644.382187][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1787 instead [ 644.402225][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 644.415554][ T6565] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.426979][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 644.437877][ T6565] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.448997][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5ef8 instead [ 644.469863][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1787 instead [ 644.480879][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 644.492551][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 644.503295][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5ef8 instead [ 644.521686][T12100] lo speed is unknown, defaulting to 1000 [ 644.527846][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1787 instead [ 644.527900][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 644.527933][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 644.527950][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5ef8 instead [ 644.527967][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1787 instead [ 644.528013][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 644.528035][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 644.528052][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5ef8 instead [ 644.528070][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1787 instead [ 644.528115][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 644.682449][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 644.693658][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5ef8 instead [ 644.704119][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1787 instead [ 644.715176][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 644.725750][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 644.736445][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5ef8 instead [ 644.746986][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1787 instead [ 644.757604][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 644.768265][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 644.778831][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5ef8 instead [ 644.789407][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1787 instead [ 644.800242][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 644.810884][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 644.883906][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5ef8 instead [ 644.922175][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1787 instead [ 644.932861][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 644.955583][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 644.971470][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5ef8 instead [ 644.985516][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1787 instead [ 644.997587][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 645.010961][ T6565] bridge_slave_1: left allmulticast mode [ 645.017232][ T6565] bridge_slave_1: left promiscuous mode [ 645.023919][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.031503][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 645.043068][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5ef8 instead [ 645.055932][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1787 instead [ 645.067622][ T6565] bridge_slave_0: left allmulticast mode [ 645.073515][ T6565] bridge_slave_0: left promiscuous mode [ 645.084394][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.093735][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 645.113744][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 645.130161][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5ef8 instead [ 645.153473][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1787 instead [ 645.173991][ T5717] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 645.192660][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 645.215776][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 645.235777][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.236209][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5ef8 instead [ 645.254535][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1787 instead [ 645.258081][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.265416][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 645.265443][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 645.265460][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5ef8 instead [ 645.265477][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1787 instead [ 645.265520][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 645.265536][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 645.265552][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5ef8 instead [ 645.265569][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1787 instead [ 645.265614][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 645.284154][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.333145][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 645.377324][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.392826][ T5717] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.412918][ T5717] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 645.425047][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.425410][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.445291][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 645.446174][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5ef8 instead [ 645.464431][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.465345][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1787 instead [ 645.486195][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 645.516581][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 645.539684][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.548507][ T5717] usb 5-1: Product: syz [ 645.549314][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5ef8 instead [ 645.558800][ T5717] usb 5-1: Manufacturer: syz [ 645.570205][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1787 instead [ 645.581149][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 645.593230][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 645.610812][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5ef8 instead [ 645.611993][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 645.623528][ T30] audit: type=1400 audit(1787492459.651:1157): avc: denied { write } for pid=12118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.628386][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 645.657058][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1787 instead [ 645.667749][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 645.690599][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 645.703223][ T5717] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 645.709577][ T5717] cdc_wdm 5-1:1.0: Unknown control protocol [ 645.717312][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5ef8 instead [ 645.730939][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1787 instead [ 645.743175][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 645.778897][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 645.782522][ T30] audit: type=1400 audit(1787492459.821:1158): avc: denied { write } for pid=12133 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.789842][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5ef8 instead [ 645.830041][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1787 instead [ 645.864991][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 645.871276][ T5717] usb 5-1: USB disconnect, device number 33 [ 645.889919][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 645.902389][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5ef8 instead [ 645.915819][ T6565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.926006][T12094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1787 instead [ 645.937576][T12094] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 645.947629][T12094] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 645.957863][ T6565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.968013][ T6565] bond0 (unregistering): Released all slaves [ 645.996405][ T9737] Bluetooth: hci4: command tx timeout [ 646.014571][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 646.313438][ T5717] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 646.387032][ T30] audit: type=1400 audit(1787492460.421:1159): avc: denied { setopt } for pid=12151 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 646.487835][ T5717] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.515991][ T5717] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.539387][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.570621][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.597631][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.603043][T12121] lo speed is unknown, defaulting to 1000 [ 646.630544][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.644333][ T5717] usb 5-1: Product: syz [ 646.653450][ T5717] usb 5-1: Manufacturer: syz [ 646.721250][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 646.731252][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 646.814931][ T5717] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 646.821531][ T5717] cdc_wdm 5-1:1.0: Unknown control protocol [ 646.947006][ T30] audit: type=1400 audit(1787492460.991:1160): avc: denied { write } for pid=12150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.054009][ T6565] hsr_slave_0: left promiscuous mode [ 647.080411][ T6565] hsr_slave_1: left promiscuous mode [ 647.096811][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.123106][ T6565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.147333][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.165047][ T6565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.167255][ T30] audit: type=1400 audit(1787492461.211:1161): avc: denied { write } for pid=12174 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.232253][ T6565] veth1_macvtap: left promiscuous mode [ 647.248718][ T6565] veth0_macvtap: left promiscuous mode [ 647.262915][ T6565] veth1_vlan: left promiscuous mode [ 647.268852][ T6565] veth0_vlan: left promiscuous mode [ 647.428067][T12183] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 647.442870][ T1668] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 647.456135][T12183] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 647.590713][ T6565] team0 (unregistering): Port device team_slave_1 removed [ 647.600152][ T9737] Bluetooth: hci0: command tx timeout [ 647.618200][ T1668] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 647.632591][ T1668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.644214][ T1668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.646274][ T5330] usb 5-1: USB disconnect, device number 34 [ 647.656013][ T1668] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 647.668278][ T1668] usb 2-1: Product: syz [ 647.675183][ T1668] usb 2-1: config 0 descriptor?? [ 647.681101][ T6565] team0 (unregistering): Port device team_slave_0 removed [ 647.682492][ T1668] hub 2-1:0.0: USB hub found [ 647.814643][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.821811][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.829459][T12100] bridge_slave_0: entered allmulticast mode [ 647.846192][T12100] bridge_slave_0: entered promiscuous mode [ 647.872345][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 647.908601][ T1668] hub 2-1:0.0: 1 port detected [ 647.916057][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.924271][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.933217][T12100] bridge_slave_1: entered allmulticast mode [ 647.946303][T12100] bridge_slave_1: entered promiscuous mode [ 648.031505][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.047950][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.076304][ T9737] Bluetooth: hci4: command tx timeout [ 648.107443][T12100] team0: Port device team_slave_0 added [ 648.151474][T12100] team0: Port device team_slave_1 added [ 648.352146][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.386553][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.446967][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.467042][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.478229][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.509681][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.579400][ T30] audit: type=1400 audit(1787492462.611:1162): avc: denied { write } for pid=12196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.669920][ T1668] hub 2-1:0.0: activate --> -90 [ 648.738593][ T30] audit: type=1400 audit(1787492462.781:1163): avc: denied { relabelfrom } for pid=12213 comm="syz.4.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 648.798051][T12100] hsr_slave_0: entered promiscuous mode [ 648.810919][ T30] audit: type=1400 audit(1787492462.781:1164): avc: denied { relabelto } for pid=12213 comm="syz.4.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 648.823116][T12100] hsr_slave_1: entered promiscuous mode [ 648.853161][ T30] audit: type=1400 audit(1787492462.831:1165): avc: denied { write } for pid=12216 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.859666][T12100] debugfs: 'hsr0' already exists in 'hsr' [ 648.893551][T12100] Cannot create hsr debugfs directory [ 648.986583][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 649.096749][ T1668] usb 2-1-port1: cannot disable (err = -71) [ 649.097392][ T5330] usb 2-1: USB disconnect, device number 41 [ 649.505387][T12121] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.512664][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.522018][T12121] bridge_slave_0: entered allmulticast mode [ 649.530801][T12121] bridge_slave_0: entered promiscuous mode [ 649.539074][T12121] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.546387][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.553978][T12121] bridge_slave_1: entered allmulticast mode [ 649.561243][T12121] bridge_slave_1: entered promiscuous mode [ 649.674685][ T9737] Bluetooth: hci0: command tx timeout [ 649.829942][T12121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.881093][ T30] audit: type=1400 audit(1787492463.911:1166): avc: denied { write } for pid=12235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.975481][ T30] audit: type=1400 audit(1787492464.011:1167): avc: denied { write } for pid=12255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.069385][T12121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.145620][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 650.153508][ T9737] Bluetooth: hci4: command tx timeout [ 650.228098][T12121] team0: Port device team_slave_0 added [ 650.252478][T12121] team0: Port device team_slave_1 added [ 650.317157][T12121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.329532][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.355741][T12121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.422155][T12121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.432357][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.458945][T10435] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 650.468293][T12121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.501340][T12100] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.512708][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.521605][T12100] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.530465][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.549946][T12100] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.559113][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.589371][T12100] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.598186][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.612687][T12121] hsr_slave_0: entered promiscuous mode [ 650.623094][T12121] hsr_slave_1: entered promiscuous mode [ 650.629088][T12121] debugfs: 'hsr0' already exists in 'hsr' [ 650.635118][T12121] Cannot create hsr debugfs directory [ 650.640936][T10435] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 650.655570][T10435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 650.679790][T10435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.705882][T10435] usb 5-1: config 0 descriptor?? [ 650.718362][T12263] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 650.825113][ T7299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.840773][ T7299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.850200][ T7299] bond0 (unregistering): Released all slaves [ 650.861069][ T7299] bond1 (unregistering): (slave veth3): Releasing active interface [ 650.875232][ T7299] bond1 (unregistering): Released all slaves [ 650.988963][ T7299] tipc: Disabling bearer [ 650.997912][ T7299] tipc: Left network mode [ 651.154100][T10435] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 651.164343][T10435] cm6533_jd 0003:0D8C:0022.000F: item fetching failed at offset 3/5 [ 651.196428][T10435] cm6533_jd 0003:0D8C:0022.000F: parse failed [ 651.218366][T10435] cm6533_jd 0003:0D8C:0022.000F: probe with driver cm6533_jd failed with error -22 [ 651.334916][ T30] audit: type=1400 audit(1787492465.381:1168): avc: denied { write } for pid=12274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.369717][T12100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.413347][T10435] usb 5-1: USB disconnect, device number 35 [ 651.451134][T12100] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.510100][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.517271][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.527151][ T30] audit: type=1400 audit(1787492465.571:1169): avc: denied { write } for pid=12290 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.627612][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.634793][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.645698][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 651.736371][ T7299] hsr_slave_0: left promiscuous mode [ 651.749792][ T7299] hsr_slave_1: left promiscuous mode [ 651.755411][ T9737] Bluetooth: hci0: command tx timeout [ 651.762550][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.776328][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.784406][ T7299] batman_adv: batadv0: Removing interface: dummy0 [ 652.156894][T12296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 652.243189][ T9737] Bluetooth: hci4: command tx timeout [ 652.280745][T12121] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 652.307101][T12121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.351216][T12121] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 652.369233][T12121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.457179][T12121] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 652.524801][T12121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.533100][T12121] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 652.572544][T12121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.648031][ T7299] IPVS: stop unused estimator thread 0... [ 652.662248][ T30] audit: type=1400 audit(1787492466.701:1170): avc: denied { lock } for pid=12321 comm="syz.1.1542" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 652.694600][ T1668] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 652.805397][T12121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.858505][T12121] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.883850][ T1668] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.886232][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.900107][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.904375][ T1668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.925377][ T1668] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.940382][ T30] audit: type=1400 audit(1787492466.971:1171): avc: denied { write } for pid=12305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.952104][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.969641][ T1668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.970636][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.979207][ T1668] usb 5-1: Product: syz [ 652.992248][ T1668] usb 5-1: Manufacturer: syz [ 653.017364][ T1668] usb 5-1: SerialNumber: syz [ 653.037002][ T1668] cdc_ncm 5-1:1.0: skipping garbage [ 653.051690][ T1668] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 653.064329][ T5703] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 653.070115][ T1668] cdc_ncm 5-1:1.0: bind() failure [ 653.102270][ T1668] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 653.127079][ T1668] cdc_ncm 5-1:1.1: bind() failure [ 653.189702][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 653.217037][ T5703] usb 2-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 653.235831][ T5703] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 653.282210][ T5703] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 653.285089][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.315784][ T5703] usb 2-1: config 0 interface 0 has no altsetting 0 [ 653.322494][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.347450][ T5703] usb 2-1: config 0 descriptor?? [ 653.363065][ T5717] usb 5-1: USB disconnect, device number 36 [ 653.684699][T12121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.792438][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 653.792454][ T30] audit: type=1400 audit(1787492467.831:1173): avc: denied { write } for pid=12348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.819092][ T5703] wacom 0003:056A:0013.0010: ignoring exceeding usage max [ 653.843114][ T9737] Bluetooth: hci0: command tx timeout [ 653.861886][T12100] veth0_vlan: entered promiscuous mode [ 653.885108][ T5703] wacom 0003:056A:0013.0010: ignoring exceeding usage max [ 653.902604][T12100] veth1_vlan: entered promiscuous mode [ 653.906888][ T5703] wacom 0003:056A:0013.0010: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 653.933529][ T5703] wacom 0003:056A:0013.0010: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.1-1/input0 [ 653.974978][ T30] audit: type=1400 audit(1787492468.011:1174): avc: denied { write } for pid=12376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.993928][ T5703] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0013.0010/input/input29 [ 654.040686][T12100] veth0_macvtap: entered promiscuous mode [ 654.065979][T12100] veth1_macvtap: entered promiscuous mode [ 654.143120][T12100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.174298][T12100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.219461][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 654.273152][ T5703] usb 2-1: USB disconnect, device number 42 [ 654.368531][T12121] veth0_vlan: entered promiscuous mode [ 654.406462][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.506124][T12121] veth1_vlan: entered promiscuous mode [ 654.554353][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.570927][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.651504][T12121] veth0_macvtap: entered promiscuous mode [ 654.677529][T12121] veth1_macvtap: entered promiscuous mode [ 654.686632][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.702475][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.734777][T12121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.792457][T12121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.874130][ T1104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.905170][ T1104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.974827][ T5719] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 655.067878][ T7299] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.105994][ T30] audit: type=1400 audit(1787492469.141:1175): avc: denied { write } for pid=12390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.179736][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 655.209221][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.248632][ T7297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.256834][ T7297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.261199][ T5719] usb 5-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 655.264563][ T7297] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.283086][ T7297] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.313095][ T6567] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.326335][ T6567] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.362046][ T5719] usb 5-1: config 1 has an invalid interface number: 169 but max is 0 [ 655.396248][ T5719] usb 5-1: config 1 has no interface number 0 [ 655.413665][ T5719] usb 5-1: config 1 interface 169 has no altsetting 0 [ 655.432200][ T30] audit: type=1400 audit(1787492469.461:1176): avc: denied { write } for pid=12418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.479386][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.493014][ T5719] usb 5-1: Product: syz [ 655.498890][ T5719] usb 5-1: Manufacturer: syz [ 655.533046][ T5719] usb 5-1: SerialNumber: syz [ 655.592551][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 655.602152][ T6567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.613657][ T6567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.849073][ T5719] io_ti 5-1:1.169: required endpoints missing [ 655.876593][ T5719] usb 5-1: USB disconnect, device number 37 [ 656.012607][T12442] tipc: Started in network mode [ 656.020850][T12442] tipc: Node identity 7271719900b3, cluster identity 4711 [ 656.031335][T12442] tipc: Enabled bearer , priority 0 [ 656.045669][T12442] syzkaller0: MTU too low for tipc bearer [ 656.051736][T12442] tipc: Disabling bearer [ 656.418329][ T30] audit: type=1400 audit(1787492470.461:1177): avc: denied { set_context_mgr } for pid=12462 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 656.421797][T12463] binder: 12462:12463 ioctl c0306201 200000000040 returned -14 [ 656.536241][T12463] binder: 12462:12463 ioctl c0306201 200000000640 returned -22 [ 656.566773][T12467] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1563'. [ 657.062971][ T5703] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 657.143487][T12449] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 657.213772][ T5703] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 657.225216][ T5703] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.237516][ T5703] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 657.250154][ T5703] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 657.261554][ T5703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.272353][T12481] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 657.280459][ T5330] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 657.289723][ T981] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 657.312812][T12449] usb 2-1: Using ep0 maxpacket: 16 [ 657.319616][T12449] usb 2-1: unable to get BOS descriptor or descriptor too short [ 657.327452][T12449] usb 2-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 657.337735][T12449] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 657.346449][T12449] usb 2-1: config 1 has no interface number 0 [ 657.352584][T12449] usb 2-1: config 1 interface 169 has no altsetting 0 [ 657.362250][T12449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.370880][T12449] usb 2-1: Product: syz [ 657.375104][T12449] usb 2-1: Manufacturer: syz [ 657.379924][T12449] usb 2-1: SerialNumber: syz [ 657.453329][ T5330] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.462856][ T981] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.473727][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.484955][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.495906][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.506037][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.518196][ T5330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.531266][ T981] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.544402][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.552778][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.562592][ T5330] usb 5-1: config 0 descriptor?? [ 657.579147][ T981] usb 9-1: config 0 descriptor?? [ 657.610619][T12449] io_ti 2-1:1.169: required endpoints missing [ 657.620426][T12449] usb 2-1: USB disconnect, device number 43 [ 657.990953][ T5330] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 658.041229][ T981] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 658.252280][ T10] usb 5-1: USB disconnect, device number 38 [ 658.261580][ T5330] usb 9-1: USB disconnect, device number 2 [ 658.959212][T12513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.383933][ T981] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 659.435095][ T5703] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 659.449669][ T5703] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input32 [ 659.475011][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 659.505627][ T5703] usb 10-1: USB disconnect, device number 2 [ 659.511646][ C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 659.542843][ T981] usb 9-1: Using ep0 maxpacket: 16 [ 659.557554][ T981] usb 9-1: unable to get BOS descriptor or descriptor too short [ 659.589048][ T981] usb 9-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 659.616508][ T981] usb 9-1: config 1 has an invalid interface number: 169 but max is 0 [ 659.628135][ T981] usb 9-1: config 1 has no interface number 0 [ 659.634666][ T981] usb 9-1: config 1 interface 169 has no altsetting 0 [ 659.644838][ T981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.644902][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 659.653255][ T981] usb 9-1: Product: syz [ 659.667670][ T981] usb 9-1: Manufacturer: syz [ 659.672650][ T981] usb 9-1: SerialNumber: syz [ 659.700940][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.720811][ T9] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 039 [ 659.919266][ T981] io_ti 9-1:1.169: required endpoints missing [ 659.935167][T12524] tmpfs: Unknown parameter 'usrquota1Æ' [ 659.953055][ T981] usb 9-1: USB disconnect, device number 3 [ 660.278772][ T30] audit: type=1400 audit(1787492474.321:1178): avc: denied { write } for pid=12535 comm="syz.1.1589" name="functions" dev="configfs" ino=8825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.307530][ T30] audit: type=1400 audit(1787492474.351:1179): avc: denied { write } for pid=12535 comm="syz.1.1589" name="header" dev="configfs" ino=42517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.331614][ T30] audit: type=1400 audit(1787492474.351:1180): avc: denied { write } for pid=12535 comm="syz.1.1589" name="fs" dev="configfs" ino=42524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.338569][T12536] sound umpC3D1: No UMP Group is found in FB [ 660.364536][T12536] sound umpC3D2: No UMP Group is found in FB [ 660.364594][ T9] i2c i2c-1: failure reading functionality [ 660.375183][ T30] audit: type=1400 audit(1787492474.351:1181): avc: denied { write } for pid=12535 comm="syz.1.1589" name="fs" dev="configfs" ino=42524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.379033][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 660.458834][ T30] audit: type=1400 audit(1787492474.351:1182): avc: denied { write } for pid=12535 comm="syz.1.1589" name="c.1" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.536983][ T30] audit: type=1400 audit(1787492474.351:1183): avc: denied { write } for pid=12535 comm="syz.1.1589" name="c.1" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 660.633400][ T5330] usb 5-1: USB disconnect, device number 39 [ 661.649682][T12536] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 662.009377][ T30] audit: type=1400 audit(1787492476.031:1184): avc: denied { load_policy } for pid=12553 comm="syz.9.1592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 662.046611][T12556] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 662.120092][T12556] SELinux: failed to load policy [ 662.211608][ T30] audit: type=1400 audit(1787492476.251:1185): avc: denied { associate } for pid=12559 comm="syz.4.1593" name=331979 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 662.343675][ T30] audit: type=1400 audit(1787492476.371:1186): avc: denied { bind } for pid=12567 comm="syz.9.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 662.426126][ T30] audit: type=1400 audit(1787492476.371:1187): avc: denied { setopt } for pid=12567 comm="syz.9.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 662.534424][ T5330] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 662.715324][ T5330] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 662.720137][T12536] udc usbip-vudc.0: failed to start g1: -19 [ 662.727749][ T5330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.758454][ T5330] usb 9-1: config 0 descriptor?? [ 662.767049][T12536] UDC core: g1: couldn't find an available UDC or it's busy [ 662.863642][ T5703] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 662.986733][ T9737] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 663.053513][ T5703] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.066545][ T5703] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 663.082785][ T5703] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 663.104646][ T5703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 663.142826][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 663.172794][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 663.217837][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.256321][ T5703] usb 5-1: Product: syz [ 663.274751][ T5703] usb 5-1: Manufacturer: syz [ 663.310407][ T5703] cdc_wdm 5-1:1.0: skipping garbage [ 663.324510][ T5703] cdc_wdm 5-1:1.0: skipping garbage [ 663.340110][ T5703] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 663.360171][ T5703] cdc_wdm 5-1:1.0: Unknown control protocol [ 664.015171][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 664.022292][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.029104][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.035618][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.042208][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.048605][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.055199][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.061645][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.068247][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.074660][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.081256][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.087564][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.094164][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.100881][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.107483][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.114104][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.120701][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.127017][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.133615][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.139948][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.146545][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.158725][ T5719] usb 5-1: USB disconnect, device number 40 [ 664.158828][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 664.528524][ T5330] usb 9-1: Cannot set autoneg [ 664.546280][ T5330] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 664.600110][ T5330] usb 9-1: USB disconnect, device number 4 [ 665.312959][ T5703] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 665.347252][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 665.347268][ T30] audit: type=1400 audit(1787492479.391:1193): avc: denied { map } for pid=12665 comm="syz.9.1622" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.386799][ T30] audit: type=1400 audit(1787492479.431:1194): avc: denied { call } for pid=12665 comm="syz.9.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 665.416082][ T5330] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 665.503873][ T5703] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 665.529193][ T5703] usb 5-1: config 0 has no interfaces? [ 665.550393][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.568694][ T5703] usb 5-1: Product: syz [ 665.584757][ T5330] usb 9-1: Using ep0 maxpacket: 16 [ 665.590346][ T5703] usb 5-1: Manufacturer: syz [ 665.605761][ T5330] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 665.614930][ T5703] usb 5-1: SerialNumber: syz [ 665.622044][ T5703] usb 5-1: config 0 descriptor?? [ 665.632022][ T5330] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 665.645430][ T5330] usb 9-1: config 1 has no interface number 0 [ 665.665352][ T5330] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 665.678591][ T5330] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 665.695851][ T5330] usb 9-1: config 1 interface 105 has no altsetting 0 [ 665.712522][ T5330] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 665.721673][ T5330] usb 9-1: Product: syz [ 665.726920][ T5330] usb 9-1: Manufacturer: syz [ 665.731554][ T5330] usb 9-1: SerialNumber: syz [ 665.748163][T12660] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 665.760606][T12660] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 665.819487][ T30] audit: type=1400 audit(1787492479.861:1195): avc: denied { write } for pid=12666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.890304][T12360] usb 5-1: USB disconnect, device number 41 [ 665.897129][ T30] audit: type=1400 audit(1787492479.931:1196): avc: denied { map } for pid=12680 comm="syz.7.1623" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 665.962518][ T30] audit: type=1400 audit(1787492479.931:1197): avc: denied { execute } for pid=12680 comm="syz.7.1623" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 666.019650][ T30] audit: type=1400 audit(1787492480.051:1198): avc: denied { write } for pid=12686 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.072405][ T30] audit: type=1400 audit(1787492480.061:1199): avc: denied { bind } for pid=12684 comm="syz.9.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.205414][T12660] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 666.966767][T12660] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 666.976125][ T5330] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 666.987914][ T5330] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 667.009057][ T5330] aqc111 9-1:1.105 eth22: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ea:32:38:60:a9:27 [ 667.039029][ T9737] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 667.049218][ T9737] Bluetooth: hci0: Injecting HCI hardware error event [ 667.064008][ T5605] Bluetooth: hci0: hardware error 0x00 [ 667.313666][ T5330] usb 9-1: USB disconnect, device number 5 [ 667.406699][ T30] audit: type=1400 audit(1787492481.451:1200): avc: denied { write } for pid=12708 comm="syz.9.1633" name="functions" dev="configfs" ino=8825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.430882][ T5330] aqc111 9-1:1.105 eth22: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 667.464165][ T30] audit: type=1400 audit(1787492481.501:1201): avc: denied { write } for pid=12708 comm="syz.9.1633" name="c.1" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.487743][ T30] audit: type=1400 audit(1787492481.501:1202): avc: denied { write } for pid=12708 comm="syz.9.1633" name="c.1" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.567134][ T5330] aqc111 9-1:1.105 eth22 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 667.595048][ T5330] aqc111 9-1:1.105 eth22 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 667.621740][ T5330] aqc111 9-1:1.105 eth22 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 667.692914][ T5717] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 667.843842][ T5717] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 667.864639][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.873965][ T5717] usb 5-1: Product: syz [ 667.878178][ T5717] usb 5-1: Manufacturer: syz [ 667.883405][ T5717] usb 5-1: SerialNumber: syz [ 667.892421][ T5717] usb 5-1: config 0 descriptor?? [ 668.118702][ T5717] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 668.633076][T10435] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 668.794684][T10435] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 668.813215][T10435] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 668.821910][T10435] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.832151][T10435] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 668.841639][T10435] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.855302][T10435] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 668.863401][T10435] usb 9-1: Product: syz [ 668.867602][T10435] usb 9-1: Manufacturer: syz [ 668.878361][T10435] cdc_wdm 9-1:1.0: skipping garbage [ 668.886103][T10435] cdc_wdm 9-1:1.0: skipping garbage [ 668.897872][T10435] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 668.904718][T10435] cdc_wdm 9-1:1.0: Unknown control protocol [ 669.110488][T10435] usb 9-1: USB disconnect, device number 6 [ 669.433108][ T5605] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 669.533016][ T5717] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 669.544667][ T5717] usb 5-1: USB disconnect, device number 42 [ 669.563007][T10435] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 669.713477][T10435] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 669.723580][T10435] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 669.733531][T10435] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.743744][T10435] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 669.752763][T10435] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.765016][T10435] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 669.773081][T10435] usb 9-1: Product: syz [ 669.777231][T10435] usb 9-1: Manufacturer: syz [ 669.786684][T10435] cdc_wdm 9-1:1.0: skipping garbage [ 669.791979][T10435] cdc_wdm 9-1:1.0: skipping garbage [ 669.799107][T10435] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 669.805282][T10435] cdc_wdm 9-1:1.0: Unknown control protocol [ 670.622509][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 670.622524][ T30] audit: type=1400 audit(1787492484.661:1214): avc: denied { bind } for pid=12804 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 670.727936][T12806] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 670.751257][T12806] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 670.767701][T12811] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 671.327039][ T30] audit: type=1400 audit(1787492485.371:1215): avc: denied { transfer } for pid=12815 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 671.346757][T12817] binder: 12815:12817 unknown command 0 [ 671.352403][T12817] binder: 12815:12817 ioctl c0306201 2000000001c0 returned -22 [ 671.885109][ C1] wdm_int_callback: 29 callbacks suppressed [ 671.885133][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 671.897610][ C1] wdm_int_callback: 29 callbacks suppressed [ 671.897622][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 671.909870][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 671.910720][ T1668] usb 9-1: USB disconnect, device number 7 [ 671.916459][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 671.916478][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 673.343574][T12837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 673.369245][T12840] netlink: 'syz.8.1654': attribute type 1 has an invalid length. [ 673.606629][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1654'. [ 673.736085][T12842] ipvlan0: entered promiscuous mode [ 673.756261][T12842] ipvlan0: entered allmulticast mode [ 673.798793][T12842] veth0_vlan: entered allmulticast mode [ 674.823370][ T30] audit: type=1400 audit(1787492488.861:1216): avc: denied { write } for pid=12860 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.933147][T12360] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 675.082883][T12360] usb 10-1: Using ep0 maxpacket: 16 [ 675.098475][T12360] usb 10-1: unable to get BOS descriptor or descriptor too short [ 675.107897][T12360] usb 10-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 675.119699][T12360] usb 10-1: config 1 has an invalid interface number: 169 but max is 0 [ 675.132498][T12360] usb 10-1: config 1 has no interface number 0 [ 675.139411][T12360] usb 10-1: config 1 interface 169 has no altsetting 0 [ 675.151140][T12360] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.160035][T12360] usb 10-1: Product: syz [ 675.164446][T12360] usb 10-1: Manufacturer: syz [ 675.169211][T12360] usb 10-1: SerialNumber: syz [ 675.398238][T12360] io_ti 10-1:1.169: required endpoints missing [ 675.459295][T12360] usb 10-1: USB disconnect, device number 3 [ 675.812288][ T30] audit: type=1400 audit(1787492489.851:1217): avc: denied { append } for pid=12880 comm="syz.1.1670" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 675.927026][ T30] audit: type=1804 audit(1787492489.961:1218): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1667" name="/newroot/361/file0" dev="fuse" ino=1 res=1 errno=0 [ 676.132972][T12360] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 676.304082][T12360] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 676.351538][T12360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.391789][T12360] usb 9-1: Product: syz [ 676.415960][T12360] usb 9-1: Manufacturer: syz [ 676.431064][T12360] usb 9-1: SerialNumber: syz [ 676.926598][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 676.974941][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 678.703444][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 678.761773][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 678.797977][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 678.848570][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 678.888819][T12922] UDC core: g1: couldn't find an available UDC or it's busy [ 678.947199][ T30] audit: type=1400 audit(1787492492.991:1219): avc: denied { mounton } for pid=12921 comm="syz.7.1680" path="/109/my_configfs/usb_gadget/g1/functions/midi2.usb0" dev="configfs" ino=9851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 679.009716][T12360] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 679.086874][T12360] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 679.149185][T12360] usb 9-1: USB disconnect, device number 8 [ 679.264852][T12449] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 679.443486][T12449] usb 5-1: Using ep0 maxpacket: 16 [ 679.469785][T12449] usb 5-1: unable to get BOS descriptor or descriptor too short [ 679.501409][T12449] usb 5-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 679.555592][T12449] usb 5-1: config 1 has an invalid interface number: 169 but max is 0 [ 679.567945][T12940] syzkaller0: entered promiscuous mode [ 679.584978][T12940] syzkaller0: entered allmulticast mode [ 679.590755][T12449] usb 5-1: config 1 has no interface number 0 [ 679.641786][T12449] usb 5-1: config 1 interface 169 has no altsetting 0 [ 679.678242][T12449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.719609][T12449] usb 5-1: Product: syz [ 679.728628][ T30] audit: type=1400 audit(1787492493.771:1220): avc: denied { write } for pid=12944 comm="syz.7.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.747508][T12449] usb 5-1: Manufacturer: syz [ 679.795666][T12449] usb 5-1: SerialNumber: syz [ 680.593192][T12449] io_ti 5-1:1.169: required endpoints missing [ 680.978785][T12449] usb 5-1: USB disconnect, device number 43 [ 681.951676][T12961] syzkaller0: entered promiscuous mode [ 681.968926][T12961] syzkaller0: entered allmulticast mode [ 683.819113][T12972] fuse: Bad value for 'fd' [ 685.943044][ T5703] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 686.193068][ T5703] usb 10-1: Using ep0 maxpacket: 16 [ 686.211664][ T5703] usb 10-1: unable to get BOS descriptor or descriptor too short [ 686.238236][ T5703] usb 10-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 686.279693][ T5703] usb 10-1: config 1 has an invalid interface number: 169 but max is 0 [ 686.280263][ T30] audit: type=1400 audit(1787492500.321:1221): avc: denied { append } for pid=12994 comm="syz.7.1704" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 686.298278][ T5703] usb 10-1: config 1 has no interface number 0 [ 686.356119][ T5703] usb 10-1: config 1 interface 169 has no altsetting 0 [ 686.441349][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.457597][ T5703] usb 10-1: Product: syz [ 686.469132][ T5703] usb 10-1: Manufacturer: syz [ 686.480696][ T5703] usb 10-1: SerialNumber: syz [ 686.629205][T13002] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 686.691341][T13002] kvm: pic: non byte read [ 686.706325][T13002] kvm: pic: level sensitive irq not supported [ 686.706515][T13002] kvm: pic: non byte read [ 686.730244][T13002] kvm: pic: level sensitive irq not supported [ 686.730407][T13002] kvm: pic: non byte read [ 686.749391][T13002] kvm: pic: level sensitive irq not supported [ 686.749533][T13002] kvm: pic: non byte read [ 686.784316][ T5703] io_ti 10-1:1.169: required endpoints missing [ 686.804180][ T5703] usb 10-1: USB disconnect, device number 4 [ 687.133496][ T30] audit: type=1400 audit(1787492501.171:1222): avc: denied { rename } for pid=13007 comm="syz.4.1699" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 687.192332][ T30] audit: type=1400 audit(1787492501.231:1223): avc: denied { unlink } for pid=13007 comm="syz.4.1699" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 688.771800][T13004] syzkaller0: entered promiscuous mode [ 688.793041][T13004] syzkaller0: entered allmulticast mode [ 689.525989][ T30] audit: type=1400 audit(1787492503.571:1224): avc: denied { read } for pid=13024 comm="syz.8.1713" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 689.570325][ T30] audit: type=1400 audit(1787492503.571:1225): avc: denied { open } for pid=13024 comm="syz.8.1713" path="/31/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 690.987198][T13027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 692.025530][T13025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 692.043335][T13027] block device autoloading is deprecated and will be removed. [ 692.092994][T13025] block device autoloading is deprecated and will be removed. [ 693.128093][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.174106][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.293003][ T7297] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.323399][ T7297] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.352853][ T7297] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.381686][ T7297] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.729943][ T30] audit: type=1800 audit(1787492508.771:1226): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1727" name="memory_backed" dev="configfs" ino=46333 res=0 errno=0 [ 694.763294][T12449] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 694.822915][ T30] audit: type=1800 audit(1787492508.811:1227): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1727" name="zone_nr_conv" dev="configfs" ino=46334 res=0 errno=0 [ 694.856796][ T30] audit: type=1800 audit(1787492508.811:1228): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1727" name="power" dev="configfs" ino=46335 res=0 errno=0 [ 694.932808][T12449] usb 2-1: Using ep0 maxpacket: 32 [ 694.938900][T12449] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 694.970805][T12449] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 694.986744][T12449] usb 2-1: config 0 has no interface number 0 [ 694.997030][T12449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.005482][T12449] usb 2-1: Product: syz [ 695.012095][T12449] usb 2-1: Manufacturer: syz [ 695.027244][T12449] usb 2-1: SerialNumber: syz [ 695.107887][T12449] usb 2-1: config 0 descriptor?? [ 695.440627][ T6563] IPVS: starting estimator thread 0... [ 695.542806][T13082] IPVS: using max 77 ests per chain, 184800 per kthread [ 695.557362][T12449] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 695.602237][T12449] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.889193][ T30] audit: type=1400 audit(1787492510.761:1229): avc: denied { map } for pid=13084 comm="syz.8.1731" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 699.576377][T12449] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 699.589351][T12449] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 699.610985][T12449] usb 2-1: USB disconnect, device number 44 [ 700.333082][T12449] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 700.513443][T12449] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 700.542670][T12449] usb 2-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 700.605241][T12449] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.652813][T12449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.717251][T12449] usb 2-1: config 0 descriptor?? [ 701.001340][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1742'. [ 701.217158][ T30] audit: type=1400 audit(1787492515.261:1230): avc: denied { watch } for pid=13133 comm="syz.4.1737" path="/373" dev="tmpfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 701.445452][ T5703] usb 2-1: USB disconnect, device number 45 [ 701.523730][T12449] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 701.692824][T12449] usb 5-1: Using ep0 maxpacket: 32 [ 701.711295][T12449] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 701.741120][T12449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.777089][T12449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.821177][T12449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.887227][T12449] usb 5-1: config 0 descriptor?? [ 702.137955][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.556657][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.892555][T12449] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0 [ 703.320734][T12449] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0 [ 703.328363][T12449] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0 [ 703.335819][T12449] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0 [ 703.344675][T12449] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0 [ 703.376262][T12449] koneplus 0003:1E7D:2D51.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 703.415140][T12449] koneplus 0003:1E7D:2D51.0013: couldn't init struct koneplus_device [ 703.425131][T12449] koneplus 0003:1E7D:2D51.0013: couldn't install mouse [ 703.436919][T12449] koneplus 0003:1E7D:2D51.0013: probe with driver koneplus failed with error -71 [ 703.532199][T12449] usb 5-1: USB disconnect, device number 44 [ 704.229424][T13161] netlink: 'syz.7.1749': attribute type 9 has an invalid length. [ 704.705651][T13158] fido_id[13158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 704.899661][ T30] audit: type=1400 audit(1787492518.941:1231): avc: denied { ioctl } for pid=13168 comm="syz.4.1752" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 707.293112][ T30] audit: type=1326 audit(1787492521.331:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c9019e0d9 code=0x0 [ 707.457834][T13193] netlink: 880 bytes leftover after parsing attributes in process `syz.4.1757'. [ 707.457901][T13193] netlink: 880 bytes leftover after parsing attributes in process `syz.4.1757'. [ 708.952833][ T5717] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 710.003519][ T5717] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 710.036393][ T5717] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.112346][ T5717] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 710.188217][ T5717] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.255042][ T5717] usb 10-1: config 0 descriptor?? [ 710.299380][ T5717] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 710.351121][ T5717] dvb-usb: bulk message failed: -22 (3/0) [ 710.418612][ T5717] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 710.456473][ T5717] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 710.499759][ T5717] usb 10-1: media controller created [ 710.631586][T13212] dibusb: i2c wr: len=1116 is too big! [ 710.631586][T13212] [ 710.696137][ T5703] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 710.903038][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 710.911896][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.949644][ T5703] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 2.a8 [ 711.028981][ T5703] usb 2-1: config 3 has an invalid interface number: 4 but max is 0 [ 711.074968][ T5703] usb 2-1: config 3 has no interface number 0 [ 711.120408][ T5703] usb 2-1: config 3 interface 4 has no altsetting 0 [ 711.165746][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.195997][ T5703] usb 2-1: Product: syz [ 711.231539][ T5703] usb 2-1: Manufacturer: syz [ 711.261922][ T5703] usb 2-1: SerialNumber: syz [ 711.687122][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.819822][ T5717] dvb-usb: bulk message failed: -22 (6/0) [ 711.864186][T13214] syzkaller0: entered promiscuous mode [ 711.876241][ T5717] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 711.896138][T13214] syzkaller0: entered allmulticast mode [ 711.936389][T13216] tipc: Started in network mode [ 711.958005][T13216] tipc: Node identity 5e3b5f63c6c8, cluster identity 4711 [ 712.938419][T13216] tipc: Enabled bearer , priority 0 [ 712.965917][ T5717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input33 [ 712.975861][ T5703] apple-mfi-fastcharge 2-1: USB disconnect, device number 46 [ 713.018843][T13214] tipc: Resetting bearer [ 713.166866][ T5717] dvb-usb: schedule remote query interval to 150 msecs. [ 713.182462][T13213] tipc: Resetting bearer [ 713.216960][ T5717] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 713.287231][ T5717] usb 10-1: USB disconnect, device number 5 [ 713.346178][T13213] tipc: Disabling bearer [ 713.603932][ T5717] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 714.574770][ T30] audit: type=1400 audit(1787492528.621:1233): avc: denied { write } for pid=13234 comm="syz.1.1771" name="subsystems" dev="configfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 714.642487][T13235] nvmet: adding nsid 1 to subsystem testsubsys [ 714.678676][ T30] audit: type=1400 audit(1787492528.661:1234): avc: denied { write } for pid=13234 comm="syz.1.1771" name="namespaces" dev="configfs" ino=47149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 715.782332][ T30] audit: type=1400 audit(1787492529.821:1235): avc: denied { connect } for pid=13248 comm="syz.7.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.462833][ T5717] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 717.538013][ T30] audit: type=1400 audit(1787492531.111:1236): avc: denied { mounton } for pid=13254 comm="syz.8.1777" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 717.569046][T13253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 717.612817][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 717.636782][T13253] kvm: pic: non byte read [ 717.641907][ T5717] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 717.668220][T13253] kvm: pic: level sensitive irq not supported [ 717.668275][T13253] kvm: pic: non byte read [ 717.691690][ T5717] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 717.706812][T13253] kvm: pic: level sensitive irq not supported [ 717.706875][T13253] kvm: pic: non byte read [ 717.719396][ T5717] usb 2-1: config 0 has no interface number 0 [ 717.732823][ T5717] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 717.748010][T13253] kvm: pic: level sensitive irq not supported [ 717.748071][T13253] kvm: pic: non byte read [ 717.772439][ T5717] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 717.811785][ T5717] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 717.840986][ T5717] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 717.872625][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.150155][ T5717] usb 2-1: config 0 descriptor?? [ 718.227437][ T5717] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 718.666833][ T5717] usb 2-1: USB disconnect, device number 47 [ 718.666969][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 719.634558][T13242] ldusb: No device or device unplugged -19 [ 719.646729][ T5717] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 720.056451][ T30] audit: type=1400 audit(1787492534.061:1237): avc: denied { read } for pid=13273 comm="syz.7.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 723.122811][ T1668] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 723.148495][ T30] audit: type=1400 audit(1787492537.191:1238): avc: denied { write } for pid=13282 comm="syz.7.1786" path="socket:[46785]" dev="sockfs" ino=46785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 725.156266][ T1668] usb 2-1: Using ep0 maxpacket: 16 [ 725.173371][ T1668] usb 2-1: unable to get BOS descriptor or descriptor too short [ 725.181554][ T1668] usb 2-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 725.192047][ T1668] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 725.205021][ T1668] usb 2-1: config 1 has no interface number 0 [ 725.211220][ T1668] usb 2-1: config 1 interface 169 has no altsetting 0 [ 725.213300][T13295] syzkaller0: entered promiscuous mode [ 725.220738][ T1668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.242019][ T1668] usb 2-1: Product: syz [ 725.248126][ T1668] usb 2-1: Manufacturer: syz [ 725.254590][ T1668] usb 2-1: SerialNumber: syz [ 725.279365][T13295] syzkaller0: entered allmulticast mode [ 725.490282][ T1668] io_ti 2-1:1.169: required endpoints missing [ 725.511227][ T1668] usb 2-1: USB disconnect, device number 48 [ 727.046814][T13315] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1790'. [ 727.870301][T13329] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 728.723266][ T30] audit: type=1400 audit(1787492542.771:1239): avc: denied { write } for pid=13335 comm="syz.7.1795" name="strings" dev="configfs" ino=8827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 728.824731][T13336] [ 728.827083][T13336] ====================================================== [ 728.834106][T13336] WARNING: possible circular locking dependency detected [ 728.841126][T13336] syzkaller #0 Tainted: G L [ 728.847094][T13336] ------------------------------------------------------ [ 728.854094][T13336] syz.7.1795/13336 is trying to acquire lock: [ 728.860150][T13336] ffffffff903eb228 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 728.872744][T13336] [ 728.872744][T13336] but task is already holding lock: [ 728.880109][T13336] ffff888034f88670 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 728.882865][ T30] audit: type=1400 audit(1787492542.811:1240): avc: denied { write } for pid=13335 comm="syz.7.1795" name="0x409" dev="configfs" ino=47423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 728.889390][T13336] [ 728.889390][T13336] which lock already depends on the new lock. [ 728.889390][T13336] [ 728.889398][T13336] [ 728.889398][T13336] the existing dependency chain (in reverse order) is: [ 728.889404][T13336] [ 728.889404][T13336] -> #3 (&p->frag_sem){++++}-{4:4}: [ 728.889434][T13336] lock_acquire+0x1b9/0x370 [ 728.943734][T13336] down_write_killable+0x93/0x240 [ 728.949262][T13336] configfs_rmdir+0x3fa/0x950 [ 728.954439][T13336] vfs_rmdir+0x328/0x8a0 [ 728.959192][T13336] filename_rmdir+0x31a/0x5c0 [ 728.964374][T13336] __x64_sys_unlinkat+0xf5/0x130 [ 728.969826][T13336] do_syscall_64+0x123/0x790 [ 728.974921][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.981325][T13336] [ 728.981325][T13336] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 728.989991][T13336] lock_acquire+0x1b9/0x370 [ 728.995009][T13336] down_write+0x8b/0x1f0 [ 728.999756][T13336] configfs_depend_item_unlocked+0xf3/0x6a0 [ 729.006152][T13336] usbg_make_tpg+0x261/0x620 [ 729.011245][T13336] target_fabric_make_tpg+0xab/0x8c0 [ 729.017029][T13336] configfs_mkdir+0x51e/0xb70 [ 729.022206][T13336] vfs_mkdir+0x364/0x850 [ 729.026949][T13336] filename_mkdirat+0x48b/0x5e0 [ 729.032293][T13336] __x64_sys_mkdir+0x6b/0x90 [ 729.037375][T13336] do_syscall_64+0x123/0x790 [ 729.042465][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.048850][T13336] [ 729.048850][T13336] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 729.056463][T13336] lock_acquire+0x1b9/0x370 [ 729.061466][T13336] __mutex_lock+0x1a4/0x1bc0 [ 729.066567][T13336] tcm_set_name+0x29/0xb0 [ 729.071403][T13336] function_make+0x21c/0x3f0 [ 729.076658][T13336] configfs_mkdir+0x51e/0xb70 [ 729.081830][T13336] vfs_mkdir+0x364/0x850 [ 729.086575][T13336] filename_mkdirat+0x48b/0x5e0 [ 729.091919][T13336] __x64_sys_mkdir+0x6b/0x90 [ 729.097000][T13336] do_syscall_64+0x123/0x790 [ 729.102088][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.108473][T13336] [ 729.108473][T13336] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 729.116693][T13336] check_prev_add+0xeb/0xe60 [ 729.121785][T13336] __lock_acquire+0x1492/0x1ec0 [ 729.127151][T13336] lock_acquire+0x1b9/0x370 [ 729.132165][T13336] __mutex_lock+0x1a4/0x1bc0 [ 729.137263][T13336] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.145306][T13336] configfs_write_iter+0x302/0x4e0 [ 729.150917][T13336] vfs_write+0x6af/0x1050 [ 729.155750][T13336] ksys_write+0x12a/0x250 [ 729.160610][T13336] do_syscall_64+0x123/0x790 [ 729.165795][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.172185][T13336] [ 729.172185][T13336] other info that might help us debug this: [ 729.172185][T13336] [ 729.182387][T13336] Chain exists of: [ 729.182387][T13336] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#24 --> &p->frag_sem [ 729.182387][T13336] [ 729.196794][T13336] Possible unsafe locking scenario: [ 729.196794][T13336] [ 729.204221][T13336] CPU0 CPU1 [ 729.209561][T13336] ---- ---- [ 729.214908][T13336] rlock(&p->frag_sem); [ 729.219121][T13336] lock(&sb->s_type->i_mutex_key#24); [ 729.227076][T13336] lock(&p->frag_sem); [ 729.233725][T13336] lock(gadget_subsys.su_mutex); [ 729.238721][T13336] [ 729.238721][T13336] *** DEADLOCK *** [ 729.238721][T13336] [ 729.246834][T13336] locks held by syz.7.1795/13336: 4, last CPU#0: [ 729.253131][T13336] #0: ffff8880798a7970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 729.262158][T13336] #1: ffff88801eb12460 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 729.271180][T13336] #2: ffff888059f16e80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 729.280978][T13336] #3: ffff888034f88670 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 729.290688][T13336] [ 729.290688][T13336] stack backtrace: [ 729.296554][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.7.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.296572][T13336] Tainted: [L]=SOFTLOCKUP [ 729.296576][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 729.296583][T13336] Call Trace: [ 729.296587][T13336] [ 729.296592][T13336] dump_stack_lvl+0x100/0x190 [ 729.296609][T13336] print_circular_bug.cold+0x178/0x1be [ 729.296628][T13336] check_noncircular+0x146/0x160 [ 729.296646][T13336] check_prev_add+0xeb/0xe60 [ 729.296663][T13336] __lock_acquire+0x1492/0x1ec0 [ 729.296682][T13336] lock_acquire+0x1b9/0x370 [ 729.296698][T13336] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.296716][T13336] ? __pfx___might_resched+0x10/0x10 [ 729.296733][T13336] __mutex_lock+0x1a4/0x1bc0 [ 729.296750][T13336] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.296767][T13336] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.296784][T13336] ? _kstrtoull+0x13c/0x1f0 [ 729.296795][T13336] ? __pfx__kstrtoull+0x10/0x10 [ 729.296805][T13336] ? __pfx___mutex_lock+0x10/0x10 [ 729.296821][T13336] ? __might_fault+0xc5/0x140 [ 729.296836][T13336] ? __pfx_kstrtouint+0x10/0x10 [ 729.296847][T13336] ? __pfx___might_resched+0x10/0x10 [ 729.296864][T13336] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.296880][T13336] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 729.296897][T13336] ? __pfx_uvcg_frame_dw_max_video_frame_buffer_size_store+0x10/0x10 [ 729.296914][T13336] ? configfs_write_iter+0x388/0x4e0 [ 729.296927][T13336] configfs_write_iter+0x302/0x4e0 [ 729.296940][T13336] vfs_write+0x6af/0x1050 [ 729.296954][T13336] ? __pfx_configfs_write_iter+0x10/0x10 [ 729.296967][T13336] ? __pfx_vfs_write+0x10/0x10 [ 729.296980][T13336] ? find_held_lock+0x2b/0x80 [ 729.296996][T13336] ksys_write+0x12a/0x250 [ 729.297010][T13336] ? __pfx_ksys_write+0x10/0x10 [ 729.297025][T13336] do_syscall_64+0x123/0x790 [ 729.297042][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.297053][T13336] RIP: 0033:0x7f747bb9e0d9 [ 729.297063][T13336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.297074][T13336] RSP: 002b:00007f747ca78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.297084][T13336] RAX: ffffffffffffffda RBX: 00007f747be25fa0 RCX: 00007f747bb9e0d9 [ 729.297091][T13336] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000005 [ 729.297097][T13336] RBP: 00007f747bc35024 R08: 0000000000000000 R09: 0000000000000000 [ 729.297104][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.297110][T13336] R13: 00007f747be26038 R14: 00007f747be25fa0 R15: 00007fffa11c8fc8 [ 729.297120][T13336] [ 729.568184][ T30] audit: type=1400 audit(1787492542.811:1241): avc: denied { create } for pid=13335 comm="syz.7.1795" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 730.343587][T12449] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 730.611388][ T30] audit: type=1400 audit(1787492542.851:1242): avc: denied { write } for pid=13335 comm="syz.7.1795" name="uncompressed" dev="configfs" ino=42518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.689951][ T30] audit: type=1400 audit(1787492542.851:1243): avc: denied { write } for pid=13335 comm="syz.7.1795" name="yuyv" dev="configfs" ino=47427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.733569][T12449] usb 2-1: Using ep0 maxpacket: 16 [ 730.743249][T12449] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 730.765328][ T30] audit: type=1400 audit(1787492542.861:1244): avc: denied { write } for pid=13335 comm="syz.7.1795" name="720p" dev="configfs" ino=47428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.789804][ T30] audit: type=1400 audit(1787492542.861:1245): avc: denied { write } for pid=13335 comm="syz.7.1795" name="720p" dev="configfs" ino=47428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.803121][T12449] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.827441][T12449] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.843332][T12449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.851404][T12449] usb 2-1: Product: syz [ 730.855779][T12449] usb 2-1: Manufacturer: syz [ 730.860426][T12449] usb 2-1: SerialNumber: syz [ 730.867097][T12449] usb 2-1: config 0 descriptor?? [ 731.645743][T13352] SET target dimension over the limit! [ 732.846047][T12449] usb 2-1: USB disconnect, device number 49