last executing test programs: 2m37.060074859s ago: executing program 2 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x2000, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) flock(r6, 0x1) flock(r6, 0x2) close(r5) r9 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x4, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x20, &(0x7f00000002c0), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 2m34.215297119s ago: executing program 2 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000", @ANYRES8, @ANYBLOB="8e8e2fa8b73a7b7fcb996af15a2bea7cf9339085c5812164b4c4c77c95ac8f0dc3cce9f21132161728ea3a8515aad7258557b811c42f", @ANYBLOB="61ed0c31406a2e7f61ec3754846763e62a0eaa7e7f814ee230876d654409c5a18e21b28a944f38d47a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='scalable\x00', 0x9) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r3, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x24) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m29.890126706s ago: executing program 2 (id=699): syz_io_uring_setup(0x4663, &(0x7f0000000080)={0x0, 0x326, 0x2, 0x3, 0x67}, &(0x7f0000000100), &(0x7f0000000140)) (async) r0 = io_uring_setup(0x5a21, &(0x7f0000000500)={0x0, 0xb219, 0x48, 0x0, 0x255}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003704ce878892f9290128bd700000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e0000001000028008000c007500000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) r3 = syz_open_dev$media(&(0x7f0000002340), 0x40000a, 0xed07983fff27402c) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ca9bd410991100b098a80175c7296b0154284c00001000090d356d160be0eb74b5c08da1b80430020217b51b000905020200"], 0x0) (async, rerun: 32) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x3) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) write$qrtrtun(r5, &(0x7f0000000340)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@netkit={@void, @value}}, 0x1c) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5, 0x1}}, 0x30) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRESHEX=r4, @ANYRES16=r8, @ANYBLOB="01000700008000000200000000001f010000000000000000000000009425eef516e5a3da61675ae8b18c95891c7a4c5c820e86dfe4382d1ffcc346ac503e0180000000007f02560000cdc47114f662e391e451ea7f1459bb12aac16179cab6729c5f284c2189ccf590c200"/116], 0x50) r10 = fcntl$dupfd(r9, 0x0, r3) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) (rerun: 32) pwritev(r10, &(0x7f00000024c0), 0x0, 0x7f, 0x10) (async, rerun: 64) r11 = geteuid() (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002380), 0x80040, &(0x7f00000006c0)=ANY=[@ANYBLOB="687567653d6164766973652c67727071756f74615f696e6f64655f686172646c696d69743d3170367034302c75737271756f74615f626c6f636b5f686172646c696d69743d2500403625622c71756f74612c6e725f626c6f636b733d303633702c75737271756f74615f696e6f64655f686172646c696d69743d37253565336d2c73697a653d396d252c67727071756f74615f696e6f64655f686172646c696d69743d7878672d2c726f6f74636f6e746578743d73797361646d5f752c7375626a5f747970653d746d706673002c657569643c2ec29fab0c6fe118e2613a2ba32dfcc8f0144d718a97c07338f2aa0da9d28cba3000387ccc451aa4d4b4a3cc4c3b188b1b373a0a70a60d97eb3bebd117c41f884e7bfe8feeb4264639c1198eb36158aaf08706af4c63b6ad87bb852f705e623913887bf1ecd954f50c160946dafcc2df13918cc900c72c554f7dd74ae1d904f7b712f8c713da65bbfa21426527435ec111cb4f7ae8bb469bdcb66b9a", @ANYRESDEC=r11, @ANYBLOB=',\x00']) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) io_setup(0xc, &(0x7f0000000040)=0x0) (rerun: 32) io_pgetevents(r12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x100000000, &(0x7f0000000000)=0x1) 2m29.664983969s ago: executing program 2 (id=701): socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x20000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffd91, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x3, 0x92, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0x8001}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0xfffffffffffffec2, 0xd, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setrlimit(0x7, &(0x7f00000009c0)={0x7, 0x80000001}) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r6 = request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000200), 0x0, r6) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb9826", 0xe1}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809", 0x31}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e", 0xe7}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/85, 0x55}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c2", 0xc9}, {&(0x7f0000000e80)="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", 0x1b2}], 0x3}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000940)="45e7b74a59c30377c82ab9949747ba1db8998ce1f51778278a4df9e36fe6590935e7d0f46753a34de972bf8a1bc173", 0x2f}], 0x1, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x68}}, {{&(0x7f0000000ac0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b00)="26e7a0d64c168a0da56cb4319de3cdc14ea9f1b9e0bc31f436e7149a74e0832d99425713514a93119940d519201af5c40b7ebf035b30caf5", 0x38}, {&(0x7f0000000b40)="ae72165ec6a9f63da133a48e69eec8ac9bb47d0cd70ad2f89217012806361dd177110be64b2b6b00a98151b72b91ae7e9989e5287441c9c3379b680f339b43bb4b4e4660c32c1a7460f8b6072731ff75eadac9d1ba9a43adf26b60a58570843fd2c38ca5da8ba0bb1c59550b54aaf4a2e31af6781cfec5292d798f43566fef45a9cef86cb7331f262bde06f1cf", 0x8d}, {&(0x7f0000000c00)="96f8b7ddcb3b6114c38f6c979cf8c32c1edf6a472c5c8db6ef1260bef0febdc603d20d8c35d9c155d2f94e117ea4f2a6dd3e64503c9fac668052a8b10f76ec7ad063b700bd6599fdc434dd91e53d", 0x4e}, {&(0x7f0000000d40)="452b2eba746d909358658c74e236ef248e82a1ca6d373f3986890bbee221b4275dd3add8dbe7518abb53f05a2db78297cc75f2fc6c1e5e35fcf0dcc43e00b3e17b8005189aceb5552e3a9ba205caaf295669df92c7733c415ec2ad794cd9b7ece2feb276f18f50d78bea590001c76a3e2c5d6dcaa16a608fedf049e98869659f306a918b87606b79efa7968c261888851a8f70165b80c95d10f7695267", 0x9d}, {&(0x7f0000001040)="621c47f8cd96388b661da38efb6961b30c507dfd2fbfc32da4271faeca286da972948b9264ef1247df4473297804cf05de135b695cb1d1e534f917094ac2c13dccfdc621cd217c738a92dbf274bb6bcd688b5d33ab850570b53979a577ca8fc8bad5778ad8260c8127d924ad53c440d737da0576ce6f2492328eab4df4b7b6a7bf37f75b6ed41692f04fbc6e094e1a9b75550b283780725cad1f11fb7a5f100ba1a6ae18e30df4ab4c87fe8131f23250c4484254c28b8796115f2ed28919652409da9779d51e868e8bf1d346b921f3d706d8c3bef5b193ab0855e04e998e76dd558a", 0xe2}], 0x5}}, {{&(0x7f0000000c80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003400)=[{&(0x7f0000001140)="8f9a9100da9b815b2a4aafc822fa01e67d0ac78a9089c290cdd3f376513ed2b6b4affa6d14a918a420bbe3ac4e50ad40134873434e26d611e27da784cae4aeb8d6929184eee70917cd2a3b404ec2feeca5db34441ac5e6f64ef602cee94be2b96539c6d5439153d2b1e477a709347fc661887f98a0b2ebedea9cedbf751d707fe21f417e076104855e36f2f17faa0abbba89b54c6dd01dc3a610e101ce6061af2c59ffc592aad49e00c5055e2f88e7f53074c2a16314b2e1d22888dd6c3bd9b390787cf303b7c2521fe0fb9ed31109793df3a7aaa404b114570d1797b0b6676e4950abb4b19ea6473c4ffef8af0d051c25425248879134", 0xf7}, {&(0x7f0000001240)="840f409939651580", 0x8}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="1ee097a898d818ba312bcc5aa087124a42ae6f03a128856d5cc2014032dc8f18b6b5bc7c1620f3f17dc74c1ce075bbe813d1f3eeb95821b55b066808812f2efad9f6d212aae5f6bc2be363640e27398153e8e0d08bbae7d49918b2a46c4f400108623ba70e11bf8c761ae853a31ea9d92051683c64e1cc9f48638ad6c1574a89f0e2b7197df859310a6962cf28f56fe531b6cfcd12e453e3bc843f41ca8fafc6e84bc9d6ed3978dc8f64d4dc03e05b0f5ed1aa213e3a52f06eee52d41702b0ab23a6d411f21c71169aeadff8da", 0xcd}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="c8d98ae59886b8b5d6f2d9568cb928a573c16d94f98330aa99c8ef41c6548add8aabfb6d914bdbdb9508d15e579e3db6bbdf35d2e8074ffc7f83bd05a62b16dd", 0x40}], 0x7, &(0x7f0000003480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}}], 0x5, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x2f, 0x0, 0x0}) 2m28.328728406s ago: executing program 2 (id=702): pipe2(&(0x7f0000000040), 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) (fail_nth: 1) 2m27.906637541s ago: executing program 2 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x7fec}], 0x1, 0x8, 0x7, 0x4) 2m12.8760006s ago: executing program 32 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x7fec}], 0x1, 0x8, 0x7, 0x4) 7.002041972s ago: executing program 3 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="187fff0000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.495840547s ago: executing program 3 (id=1197): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(r1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x2}}}}, 0x11) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x1, 0x0, 0x3, 0x8, 0x1, 0x7}, 0x20) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000f00014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 6.34837133s ago: executing program 3 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r3, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x4000) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) 5.64319769s ago: executing program 5 (id=1202): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000001280)={&(0x7f0000000280)=""/4088, 0x80000000, 0xffffffffffffff14}, 0x0) sigaltstack(0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) preadv(r6, 0x0, 0x0, 0x6, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0xaac3, 0x1, 0x2, 0x0, 0x4, 0x9, 0xa, 0x2, 0x7, 0x8, 0x200, 0x10000, 0x1400, 0x10, 0x3d, {0x4, 0x5}, 0xff, 0x2d}}) 5.6213858s ago: executing program 0 (id=1203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.118943782s ago: executing program 3 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r3, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x4000) socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000280)={0x0, 0x20, 0x1}) 5.036107291s ago: executing program 4 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050b000000000000220000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='fscache_active\x00', r1, 0x0, 0x800009}, 0xffffffc6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f000043c000/0x400000)=nil) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="0706675823b8a37f19b37e0f9f120623b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0289ef98886eaac01b08aa753b8726d16773c98cd6a78c06b758941bb747b8ba9fd1c92b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2555da4ef9035cbfe8", 0xc0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x3}], 0x1c) sendto$inet6(r6, &(0x7f0000000740)="4f1100"/13, 0xd, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x10000}, 0xffffffffffffff05) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) 4.191411902s ago: executing program 0 (id=1207): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}]) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000002280)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, "09a72734"}, @main=@item_4={0x3, 0x0, 0xc, "165df38a"}, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r7 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r8}, 0x10) umount2(&(0x7f0000000680)='./file0\x00', 0x9) close_range(r3, r3, 0x2) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000140)='/dev/fuse\x00', &(0x7f00000001c0)='./file0\x00', r7) 3.429134862s ago: executing program 4 (id=1208): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) inotify_init1(0x0) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6d4640, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.397723996s ago: executing program 1 (id=1209): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 3.351955678s ago: executing program 5 (id=1210): mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000880)=[@uexit={0x0, 0x18, 0x100000001}, @code={0x1, 0x5c, {"410f46f9b805000000b963d600000f01d90f57f3c401bde56f7b0f32c4626593a41100080000660f3881800f000000c4a1505c79e366ba4000b000ee66baf80cb8f934e48cef66bafc0cec"}}, @cpuid={0x2, 0x18, {0x2, 0xb044}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x68, {"440fc7ae0080000064660fc776f90f01cbb9800000c00f3235000400000f300f0666ba6100b0b8ee0f01cf66660f2c9e05000000c7442400e8172033c74424021af7b914c7442406000000000f011c242e2e420f017600"}}, @cpuid={0x2, 0x18, {0x9, 0x2}}, @code={0x1, 0x74, {"66430fd434bcb8010000000f01d96dc461555fb30800000048b8b4000000000000000f23d80f21f835400000a00f23f8b8010000000f01d9c4c3397f3c03f766baf80cb84cd50e88ef66bafc0ced66b86c000f00d0b9800000c00f3235000100000f30"}}, @uexit={0x0, 0x18, 0x10001}, @cpuid={0x2, 0x18, {0xffffbc46, 0x7f}}, @cpuid={0x2, 0x18, {0x6, 0x4}}, @code={0x1, 0x4d, {"c483515c4800bbc4417c11c2c4e1f95459640f01bd0800000026660f3806a37100000036416d3e0f76f10f01bc7500000000e1f03666420fee441904"}}, @code={0x1, 0x65, {"470f875c00000066ba4300b8da9a0000ef652e660fc7b4b25d14138f660f3809f9c421f85aed66baf80cb8086d7085ef66bafc0cb800000100efc4c2c3f7520066ba2100b8f01f0000efc48225096a0064400f06"}}, @uexit={0x0, 0x18, 0x401}, @code={0x1, 0x52, {"460f01c866b818010f00d0430f090f6f6018c4a155768d85fffffff20f2cb53100000066ba4000ec41c035695a0000e0c443c5495502af40a30600000000000000"}}, @cpuid={0x2, 0x18, {0xb, 0x16e9b8c9}}, @code={0x1, 0x5c, {"66640fa06726430fc72940c20b0048b855690000000000000f23d00f21f8353000000b0f23f826410ffc3e0f786c588dc09cfe4a240000264b0fc79af634000066b892008ee866410fe4c9"}}, @code={0x1, 0x67, {"c74424000a000000c744240200000000c7442406000000000f011c24450f200140d3d666b805018ee80f01c966410f38805da666ba410066b8000066ef400f01cff36ec744240078000000c74424027f1cf91dff2c24"}}], 0x3d7}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x5, 0x0, [{0x40000000, 0x4, 0x2, 0x9, 0x9, 0x6, 0x7}, {0x0, 0xfffffff7, 0x1, 0x4, 0x5, 0xd498, 0xc000000}, {0x40000000, 0x5, 0x6, 0x0, 0x4, 0x3, 0x4}, {0xc0000001, 0x7, 0x2, 0x7, 0x80000000, 0x39, 0xfecd}, {0x40000000, 0x3, 0x1, 0x7f, 0x7, 0x0, 0x9}]}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 3.279516921s ago: executing program 4 (id=1211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000f00014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 2.850398533s ago: executing program 4 (id=1212): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001240), 0x2002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) close(r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000780)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) syz_io_uring_setup(0x3da9, &(0x7f0000000540)={0x0, 0x4314, 0x1, 0x3, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000001280)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read$alg(r4, &(0x7f0000000240)=""/4096, 0xfffffdef) 2.776223222s ago: executing program 0 (id=1213): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x1000000, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 2.775888498s ago: executing program 1 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) add_key(&(0x7f0000000300)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) symlink(&(0x7f0000001000)='.\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0x0) fchdir(r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x700}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0xfffffe61) 2.743997859s ago: executing program 0 (id=1215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0xce, 0x23b) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r7 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f0000000540), &(0x7f0000000800)=r5}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 2.334984279s ago: executing program 5 (id=1216): r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x10010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.055189162s ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/158, 0x9e}], 0x1, 0x0, 0x52}, 0x2}], 0x1, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x9, 0xca97}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x10003, 0x1, 0xeeee8000, 0x1000, &(0x7f0000ff8000/0x1000)=nil, 0x4, r4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20000050) 1.484609487s ago: executing program 5 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)="0cdaebdfb7de9d2d315df28ceb7b84e9d0ed39df6fa7dc3acf6e1e050812b4d3710907d89f8e14902116fede3848941946242b0c376c62834c22a3568a1cafb45e61bc198d3cbf2f84c4f545e284a2eb7f107bceaa4f3268dd74a31d9dc7abc0f946904b319f2cf8f2ee1e32404a969a169f09510edcfdf67bd6063e76bf58967b26f34a27c61f3edc79ccc1fddc8797af7c1f2d77f983110c551eba31f0687d62b7ca37631fe8ae18bff7fef9623360047f7eb2add7e5a80cc0c883c9cc5574199beca0efd2fd2e4046b6db47eaf35ef5fb325b141431315c5880d696065cc1899c87d8", 0xe4}, {&(0x7f0000000340)="0854dd0b5dc89fdae253585c6d119e96ace19fa6923531a1096dab22b5324fcb78cd8b7a65eebb7a0b97faaa5bad8efc36cf4c78f06f9816b96a490655b81494a6845e34d8e0", 0x46}, {&(0x7f00000003c0)="05856493e89cd45061dcc0fc0e40dadddb6c52c9940f6415f57234a020c62a945a5581d0f8e367c5e704a9cfb29a50", 0x2f}, {&(0x7f0000000600)="8319507e440d6372dc54860feceacecff05498d096a0d70123aea08b5994345cd429da381ec33f19b05aad8a0e5bff8bd6eb1f23be0e15879e04820b33cebf3f5efc256196d114de0b024da1685da8bb5b05b1f3486821a2bbc1dd6dbc4d9de72eb35bf5ddd9cab6bbaf121acc98276b54110e7b8b5b6243fdb6b25d09894ef634522d23a7fa7968f94b45bf2b71704a52915355fee6ce74d9f0451adc5d5fd8d4f1797b3054eb2881fb351154a7fb19a2f7ce56557e2cc2", 0xb8}, {&(0x7f00000006c0)="b7484f88f89f92ce106fa45202a046c5b9562a5c680a2b78ef78266227a6cf78344b8152d5cecd68fd131a04af579ccab28a1a9f9ab17b726a2476a0671a614ea9aa366e453539af95109822d991944b3684200e3497f3c02db9147b8277e5663ae25ef4d5a890e3ac61b8b7d5e05bf734a49fb960690c953cbc6be6e3703b765d3e6cbcbba56428df5242d30acc808825f6b2df3b0e084b57ca7445b7fca8c9f96261a339068da4ddeb3b573fd5", 0xae}], 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101840, 0x23) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r4]) read$FUSE(r4, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x500000, 0x403}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000240)={0x10, 0x0, r6}, 0x10) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2b, &(0x7f0000002640), 0x42) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) 1.482089638s ago: executing program 4 (id=1219): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050b000000000000220000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='fscache_active\x00', r1, 0x0, 0x800009}, 0xffffffc6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f000043c000/0x400000)=nil) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="0706675823b8a37f19b37e0f9f120623b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0289ef98886eaac01b08aa753b8726d16773c98cd6a78c06b758941bb747b8ba9fd1c92b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2555da4ef9035cbfe8", 0xc0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x3}], 0x1c) sendto$inet6(r6, &(0x7f0000000740)="4f1100"/13, 0xd, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x10000}, 0xffffffffffffff05) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) 1.412243381s ago: executing program 0 (id=1220): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001240), 0x2002, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef) 1.028446317s ago: executing program 1 (id=1221): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@bcast, @rose, @rose, @default, @default, @bcast, @null, @rose]}, &(0x7f00000002c0)=0x48) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 361.66967ms ago: executing program 1 (id=1222): write(0xffffffffffffffff, &(0x7f0000000000)="dbc5f13ab6c65eb558797b777b45d3d7bd97c9829e47b4eab5d8b32ab52a3608b972c0dc88ed7e4dbd720ac824dbfa7bc599bea5d13a1b4b795e", 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000d3000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ac000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 346.133355ms ago: executing program 3 (id=1223): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000f00014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 319.062493ms ago: executing program 5 (id=1224): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 268.105133ms ago: executing program 3 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 255.759226ms ago: executing program 1 (id=1226): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x3001, 0x0, 0xe, 0x7, 0x1, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) unshare(0x22020600) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) unshare(0x64000400) sendmmsg$inet6(r2, &(0x7f0000003a00), 0x0, 0x68034) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000042584500d43911d6b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) 255.1848ms ago: executing program 0 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r5, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0xba, 0x4, 0xfd7, 0x6, 0x6}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r5, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0xba, 0x4, 0xfd7, 0x6, 0x6}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) (async) 147.751172ms ago: executing program 5 (id=1228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000", @ANYRES8, @ANYBLOB="8e8e2fa8b73a7b7fcb996af15a2bea7cf9339085c5812164b4c4c77c95ac8f0dc3cce9f21132161728ea3a8515aad7258557b811c42f", @ANYBLOB="61ed0c31406a2e7f61ec3754846763e62a0eaa7e7f814ee230876d654409c5"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='scalable\x00', 0x9) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r4, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x24) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=1229): rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1000000001]}, 0x8, 0x0) accept4$x25(r0, 0x0, &(0x7f0000000140), 0x0) faccessat2(r0, &(0x7f0000001400)='\x00', 0x0, 0x1100) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000340)={0x2, @win={{0x2, 0x0, 0x0, 0xfd}, 0x9, 0x0, 0x0, 0xfffffffd, 0x0}}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x1ff, 0x2, 0x40}, 0x5}, 0x20, 0x1, 0x0) r2 = io_uring_setup(0x5e6d, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x0, 0x1a4}) syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x40b02) r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r2, 0x200}], 0x1, 0x6) kernel console output (not intermixed with test programs): th an inconsistent configuration, please check. [ 257.270549][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 258.816943][ T7728] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 259.422604][ T24] usb 2-1: USB disconnect, device number 9 [ 259.929021][ T7735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.481'. [ 260.290328][ T7746] ptrace attach of "./syz-executor exec"[5826] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 260.433531][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 261.670584][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 261.677323][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 261.701652][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 261.747195][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 261.793206][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.826805][ T5899] usb 4-1: Product: syz [ 261.910780][ T5899] usb 4-1: Manufacturer: syz [ 261.925569][ T5899] usb 4-1: SerialNumber: syz [ 261.953300][ T5899] usb 4-1: config 0 descriptor?? [ 262.150732][ T48] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 262.195422][ T5899] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 262.299243][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.676416][ T5899] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 262.697998][ T5899] usb 4-1: USB disconnect, device number 11 [ 262.704056][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 262.733508][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.747723][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.759083][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.769800][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.793647][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.809017][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.819469][ T48] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.828456][ T48] usb 5-1: Manufacturer: syz [ 262.996664][ T7759] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.004479][ T7759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.172714][ T48] usb 5-1: config 0 descriptor?? [ 263.204144][ T48] usb 5-1: can't set config #0, error -71 [ 263.228347][ T48] usb 5-1: USB disconnect, device number 7 [ 264.331431][ T7769] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.081192][ T7781] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 266.802718][ T7798] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 266.815414][ T7798] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.975529][ T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 267.412759][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 267.430447][ T48] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 267.456102][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 267.546833][ T7804] ptrace attach of "./syz-executor exec"[5817] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 267.964406][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 268.184636][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.192893][ T48] usb 1-1: Product: syz [ 268.802835][ T7814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.829887][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 268.847449][ T48] usb 1-1: Manufacturer: syz [ 268.852145][ T48] usb 1-1: SerialNumber: syz [ 268.861518][ T48] usb 1-1: config 0 descriptor?? [ 268.893163][ T48] usb 1-1: can't set config #0, error -71 [ 268.916070][ T48] usb 1-1: USB disconnect, device number 14 [ 269.122496][ T7819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.506'. [ 270.176941][ T7829] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 270.717239][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 271.285542][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.512'. [ 272.356978][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'. [ 272.827863][ T7872] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 272.835475][ T7872] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.488178][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 274.101758][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 274.126936][ T5899] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 274.147673][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.156278][ T5899] usb 5-1: Product: syz [ 274.287220][ T5899] usb 5-1: Manufacturer: syz [ 274.304302][ T5899] usb 5-1: SerialNumber: syz [ 274.461879][ T5899] usb 5-1: config 0 descriptor?? [ 274.594226][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.936610][ T5899] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.185387][ T5899] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 278.209945][ T5899] usb 5-1: USB disconnect, device number 8 [ 278.507925][ T7920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.531'. [ 279.993514][ T7927] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 280.001134][ T7927] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.431589][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 282.688023][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 283.172663][ T7968] ptrace attach of "./syz-executor exec"[5813] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 285.939293][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.4.544'. [ 287.196187][ T7996] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.203960][ T7996] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.790882][ T8002] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 289.459318][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 290.560151][ T8025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.575614][ T8026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.472209][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 292.679538][ T8052] 8021q: adding VLAN 0 to HW filter on device team1 [ 293.212939][ T8060] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 293.220717][ T8060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.748917][ T8069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.570'. [ 294.035747][ T8075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'. [ 295.106230][ T8092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.540402][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 295.552250][ T8097] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 295.702217][ T8099] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 295.709734][ T8099] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.930620][ T8097] netlink: 224 bytes leftover after parsing attributes in process `syz.3.574'. [ 295.943320][ T8097] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 296.000484][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 296.013229][ T5871] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.030547][ T5871] usb 5-1: config 0 has no interface number 0 [ 296.045600][ T5871] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 296.086695][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.113015][ T5871] usb 5-1: Product: syz [ 296.127705][ T5871] usb 5-1: Manufacturer: syz [ 296.133428][ T5871] usb 5-1: SerialNumber: syz [ 296.156291][ T5871] usb 5-1: config 0 descriptor?? [ 296.165759][ T5871] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 296.175016][ T5869] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.193409][ T5871] usb 5-1: selecting invalid altsetting 1 [ 296.210544][ T5871] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 296.239242][ T5871] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.325029][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 296.356136][ T5871] usb 5-1: media controller created [ 296.378894][ T5869] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 296.401795][ T5869] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 296.438695][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.450790][ T5869] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 296.479121][ T5869] usb 4-1: config 220 has no interface number 2 [ 296.506361][ T5869] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 296.519906][ T5869] usb 4-1: config 220 interface 0 has no altsetting 0 [ 296.527259][ T5871] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 296.535123][ T5869] usb 4-1: config 220 interface 76 has no altsetting 0 [ 296.542722][ T5871] zl10353_read_register: readreg error (reg=127, ret==-71) [ 296.550851][ T5869] usb 4-1: config 220 interface 1 has no altsetting 0 [ 296.570092][ T5871] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 296.579099][ T5869] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 296.588641][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.614065][ T5869] usb 4-1: Product: syz [ 296.631993][ T5869] usb 4-1: Manufacturer: syz [ 296.647427][ T5869] usb 4-1: SerialNumber: syz [ 296.689750][ T5871] usb 5-1: USB disconnect, device number 9 [ 297.053482][ T5869] usb 4-1: selecting invalid altsetting 0 [ 297.084229][ T5869] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 297.109525][ T5869] usb 4-1: No valid video chain found. [ 297.161989][ T5869] usb 4-1: selecting invalid altsetting 0 [ 297.201465][ T5869] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 297.238218][ T5869] usb 4-1: USB disconnect, device number 12 [ 298.538926][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.027954][ T8151] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 299.035628][ T8151] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.844782][ T8161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'. [ 300.641163][ T8167] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.130369][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.805885][ T8188] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 301.820241][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 301.830935][ T5871] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 301.842586][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.870358][ T8188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.598'. [ 301.879553][ T5871] usb 1-1: Product: syz [ 301.886202][ T5871] usb 1-1: Manufacturer: syz [ 301.893743][ T5871] usb 1-1: SerialNumber: syz [ 301.900374][ T8188] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 301.912924][ T5871] usb 1-1: config 0 descriptor?? [ 302.010468][ T5869] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 302.102035][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.124979][ T5871] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 302.806062][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 302.818565][ T5869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.824581][ T5899] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.828172][ T5869] usb 3-1: config 0 has no interface number 0 [ 302.867031][ T5869] usb 3-1: string descriptor 0 read error: -71 [ 302.914971][ T5869] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 302.918588][ T5899] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 302.953172][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.966027][ T5869] usb 3-1: config 0 descriptor?? [ 303.019615][ T5899] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 303.031481][ T5869] usb 3-1: can't set config #0, error -71 [ 303.079501][ T5899] usb 4-1: config 220 has no interface number 2 [ 303.079801][ T5869] usb 3-1: USB disconnect, device number 12 [ 303.088491][ T5899] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.491442][ T5869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 303.704995][ T5899] usb 4-1: config 220 interface 0 has no altsetting 0 [ 303.711945][ T5899] usb 4-1: config 220 interface 76 has no altsetting 0 [ 303.718892][ T5899] usb 4-1: config 220 interface 1 has no altsetting 0 [ 303.728633][ T5899] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.745957][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.758941][ T5899] usb 4-1: Product: syz [ 303.769240][ T5899] usb 4-1: Manufacturer: syz [ 303.774895][ T5899] usb 4-1: SerialNumber: syz [ 303.872769][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 303.883966][ T5869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.904418][ T5869] usb 3-1: config 0 has no interface number 0 [ 304.153705][ T5899] usb 4-1: selecting invalid altsetting 0 [ 304.159962][ T5899] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 304.166525][ T5899] usb 4-1: No valid video chain found. [ 304.228523][ T5869] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 304.243995][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.245169][ T5899] usb 4-1: selecting invalid altsetting 0 [ 304.252215][ T5869] usb 3-1: Product: syz [ 304.252235][ T5869] usb 3-1: Manufacturer: syz [ 304.252248][ T5869] usb 3-1: SerialNumber: syz [ 304.254533][ T5869] usb 3-1: config 0 descriptor?? [ 304.824196][ T5869] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 304.834281][ T5869] usb 3-1: selecting invalid altsetting 1 [ 304.840990][ T5869] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 304.849746][ T5869] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.860161][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 304.883242][ T5869] usb 3-1: media controller created [ 304.891220][ T5871] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 304.911377][ T8208] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.918786][ T8208] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.963032][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.970495][ T5899] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 305.015514][ T5899] usb 4-1: USB disconnect, device number 13 [ 305.229983][ T5869] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 305.242970][ T5869] zl10353_read_register: readreg error (reg=127, ret==-71) [ 306.110770][ T5899] usb 1-1: USB disconnect, device number 15 [ 306.132909][ T5869] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 306.196589][ T5869] usb 3-1: USB disconnect, device number 13 [ 306.347370][ T8221] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 306.355042][ T8221] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.882010][ T8231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.740404][ T5869] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 309.990542][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 310.100797][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 310.361414][ T5869] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.374657][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.383387][ T5869] usb 3-1: Product: syz [ 310.388756][ T5869] usb 3-1: Manufacturer: syz [ 310.396655][ T5869] usb 3-1: SerialNumber: syz [ 310.406140][ T5869] usb 3-1: config 0 descriptor?? [ 310.534428][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 310.554707][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 310.576666][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.623803][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 310.640634][ T5869] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.661155][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.735516][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 310.777615][ T5871] usb 5-1: Product: syz [ 310.785313][ T5871] usb 5-1: Manufacturer: syz [ 310.789979][ T5871] usb 5-1: SerialNumber: syz [ 310.798415][ T5871] usb 5-1: config 0 descriptor?? [ 311.204919][ T5871] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 311.205877][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 311.234173][ T5871] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 311.237121][ T8265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.620'. [ 311.258778][ T48] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 311.278407][ T5871] usb 5-1: USB disconnect, device number 10 [ 311.286931][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 311.318401][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 311.333071][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.343768][ T48] usb 1-1: Product: syz [ 311.348392][ T48] usb 1-1: Manufacturer: syz [ 311.355741][ T48] usb 1-1: SerialNumber: syz [ 311.384935][ T48] usb 1-1: config 0 descriptor?? [ 311.676535][ T8269] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.684384][ T8269] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.750895][ T48] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 312.044434][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 312.101427][ T48] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 312.250565][ T5871] usb 1-1: USB disconnect, device number 16 [ 313.815794][ T5869] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 314.222528][ T5869] usb 3-1: USB disconnect, device number 14 [ 315.975887][ T8299] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 316.380380][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 317.441751][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.622892][ T5869] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 317.633539][ T5869] usb 2-1: config 0 has no interface number 0 [ 317.640618][ T5869] usb 2-1: config 0 interface 98 has no altsetting 0 [ 317.661985][ T5869] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 317.673325][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.826287][ T30] audit: type=1400 audit(1748844055.684:335): avc: denied { create } for pid=8317 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.141516][ T5869] usb 2-1: Product: syz [ 318.145740][ T5869] usb 2-1: Manufacturer: syz [ 318.166464][ T5869] usb 2-1: SerialNumber: syz [ 318.201993][ T30] audit: type=1400 audit(1748844055.694:336): avc: denied { bind } for pid=8317 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.249695][ T5869] usb 2-1: config 0 descriptor?? [ 318.716114][ T5869] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 319.039819][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.772594][ T5869] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 320.780387][ T5869] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 320.793511][ T5869] usb 2-1: USB disconnect, device number 10 [ 320.951372][ T5871] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 320.962288][ T5871] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 320.972217][ T5871] kobject: kobject_add_internal failed for firmware (error: -2 parent: 2-1) [ 320.977115][ T30] audit: type=1400 audit(1748844058.914:337): avc: denied { firmware_load } for pid=5871 comm="kworker/0:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 321.001758][ T5871] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 321.001896][ T5871] usb 2-1: [UEAGLE-ATM] firmware is not available [ 321.990944][ T8356] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 325.050673][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.698732][ T8408] syz.1.654: attempt to access beyond end of device [ 327.698732][ T8408] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 327.711577][ T8408] qnx6: unable to read the first superblock [ 327.717658][ T8408] syz.1.654: attempt to access beyond end of device [ 327.717658][ T8408] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 327.730397][ T8408] qnx6: unable to read the first superblock [ 327.737547][ T8408] qnx6: unable to read the first superblock [ 327.810405][ T8411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.589727][ T8438] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 330.597476][ T8438] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 332.471813][ T8453] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 332.517083][ T8453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.667'. [ 332.528961][ T8453] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 333.919324][ T8464] netlink: 44 bytes leftover after parsing attributes in process `syz.2.670'. [ 333.991635][ T5871] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 334.178279][ T5871] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 334.207888][ T5871] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 334.232512][ T5871] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 334.244730][ T5871] usb 1-1: config 220 has no interface number 2 [ 334.254949][ T5871] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 334.280622][ T5871] usb 1-1: config 220 interface 0 has no altsetting 0 [ 334.318146][ T5871] usb 1-1: config 220 interface 76 has no altsetting 0 [ 334.346312][ T5871] usb 1-1: config 220 interface 1 has no altsetting 0 [ 334.367585][ T5871] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 334.406414][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.437071][ T5871] usb 1-1: Product: syz [ 334.467524][ T5871] usb 1-1: Manufacturer: syz [ 334.487775][ T5871] usb 1-1: SerialNumber: syz [ 334.741841][ T5871] usb 1-1: selecting invalid altsetting 0 [ 334.805732][ T5869] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 334.970075][ T5871] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 334.989486][ T5871] usb 1-1: No valid video chain found. [ 335.004019][ T30] audit: type=1400 audit(1748844072.924:338): avc: denied { open } for pid=8471 comm="syz.1.673" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 335.074682][ T5871] usb 1-1: selecting invalid altsetting 0 [ 335.080576][ T5871] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 335.100256][ T5871] usb 1-1: USB disconnect, device number 17 [ 335.140703][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 335.169055][ T5869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.182818][ T5869] usb 3-1: config 0 has no interface number 0 [ 335.289423][ T5869] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 335.308865][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.334406][ T5869] usb 3-1: Product: syz [ 335.338614][ T5869] usb 3-1: Manufacturer: syz [ 335.403249][ T5869] usb 3-1: SerialNumber: syz [ 335.793502][ T5869] usb 3-1: config 0 descriptor?? [ 335.805348][ T5869] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 335.828695][ T5869] usb 3-1: selecting invalid altsetting 1 [ 335.834637][ T5869] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 335.854448][ T5869] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 335.963630][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 335.972372][ T5869] usb 3-1: media controller created [ 335.987478][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.025852][ T5869] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 336.567076][ T5869] zl10353_read_register: readreg error (reg=127, ret==-71) [ 336.576481][ T5869] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 336.859517][ T5869] usb 3-1: USB disconnect, device number 15 [ 339.964110][ T8535] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 340.150375][ T8535] netlink: 224 bytes leftover after parsing attributes in process `syz.3.685'. [ 341.009327][ T8535] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 341.370444][ T5869] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 342.068699][ T5869] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 342.093730][ T8553] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 342.126154][ T5869] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 342.139336][ T5869] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 342.152524][ T5869] usb 4-1: config 220 has no interface number 2 [ 342.270635][ T5869] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 342.351054][ T5869] usb 4-1: config 220 interface 0 has no altsetting 0 [ 342.503683][ T5869] usb 4-1: config 220 interface 76 has no altsetting 0 [ 342.520581][ T5869] usb 4-1: config 220 interface 1 has no altsetting 0 [ 342.532734][ T5869] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 342.542165][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.550169][ T5869] usb 4-1: Product: syz [ 342.560375][ T5871] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 342.605802][ T5869] usb 4-1: Manufacturer: syz [ 342.622533][ T5869] usb 4-1: SerialNumber: syz [ 342.703257][ T5869] usb 4-1: can't set config #220, error -71 [ 342.733447][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 342.902168][ T5871] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.013950][ T5869] usb 4-1: USB disconnect, device number 14 [ 343.191182][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.244349][ T5871] usb 1-1: Product: syz [ 343.248562][ T5871] usb 1-1: Manufacturer: syz [ 343.283804][ T5871] usb 1-1: SerialNumber: syz [ 343.463602][ T5871] usb 1-1: config 0 descriptor?? [ 344.082192][ T5871] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 345.210511][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 345.290852][ T5868] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 345.372529][ T8595] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 345.380186][ T8595] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.590448][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 345.618385][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 345.630662][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 345.661788][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 345.689023][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.708838][ T5869] usb 2-1: Product: syz [ 345.717797][ T5869] usb 2-1: Manufacturer: syz [ 345.723378][ T30] audit: type=1400 audit(1748844083.674:339): avc: denied { ioctl } for pid=8596 comm="syz.2.699" path="socket:[17441]" dev="sockfs" ino=17441 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 345.750933][ T5869] usb 2-1: SerialNumber: syz [ 345.763740][ T5869] usb 2-1: config 0 descriptor?? [ 345.772306][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 345.784964][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.824765][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.837080][ T5868] usb 5-1: Product: syz [ 345.845500][ T5868] usb 5-1: Manufacturer: syz [ 345.855035][ T5868] usb 5-1: SerialNumber: syz [ 345.864268][ T8605] netlink: 72 bytes leftover after parsing attributes in process `syz.2.701'. [ 345.921460][ T5868] usb 5-1: config 0 descriptor?? [ 346.354528][ T5869] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 346.373902][ T5868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.385785][ T5869] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 346.979079][ T8609] netlink: 'syz.3.700': attribute type 8 has an invalid length. [ 347.000453][ T30] audit: type=1400 audit(1748844084.944:340): avc: denied { ioctl } for pid=8604 comm="syz.2.701" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 347.028698][ T8608] binder: 8604:8608 ioctl c0306201 200000000300 returned -14 [ 347.037250][ T30] audit: type=1400 audit(1748844084.974:341): avc: denied { set_context_mgr } for pid=8604 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 347.058509][ T30] audit: type=1400 audit(1748844084.984:342): avc: denied { name_bind } for pid=8602 comm="syz.3.700" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 347.080499][ T5871] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 347.104847][ T48] usb 2-1: USB disconnect, device number 11 [ 347.233383][ T8613] FAULT_INJECTION: forcing a failure. [ 347.233383][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 347.247098][ T8613] CPU: 1 UID: 0 PID: 8613 Comm: syz.2.702 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(full) [ 347.247124][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.247133][ T8613] Call Trace: [ 347.247139][ T8613] [ 347.247146][ T8613] dump_stack_lvl+0x16c/0x1f0 [ 347.247170][ T8613] should_fail_ex+0x512/0x640 [ 347.247188][ T8613] ? fs_reclaim_acquire+0xae/0x150 [ 347.247207][ T8613] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.247228][ T8613] should_failslab+0xc2/0x120 [ 347.247250][ T8613] __kmalloc_noprof+0xd2/0x510 [ 347.247275][ T8613] tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.247301][ T8613] ? tomoyo_profile+0x47/0x60 [ 347.247314][ T8613] tomoyo_path_number_perm+0x245/0x580 [ 347.247328][ T8613] ? tomoyo_path_number_perm+0x237/0x580 [ 347.247344][ T8613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.247360][ T8613] ? find_held_lock+0x2b/0x80 [ 347.247398][ T8613] ? find_held_lock+0x2b/0x80 [ 347.247413][ T8613] ? hook_file_ioctl_common+0x145/0x410 [ 347.247436][ T8613] ? __fget_files+0x20e/0x3c0 [ 347.247455][ T8613] security_file_ioctl+0x9b/0x240 [ 347.247473][ T8613] __x64_sys_ioctl+0xb7/0x210 [ 347.247492][ T8613] do_syscall_64+0xcd/0x4c0 [ 347.247509][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.247527][ T8613] RIP: 0033:0x7f3d21b8e969 [ 347.247541][ T8613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.247557][ T8613] RSP: 002b:00007f3d22948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.247573][ T8613] RAX: ffffffffffffffda RBX: 00007f3d21db5fa0 RCX: 00007f3d21b8e969 [ 347.247584][ T8613] RDX: 0000200000000040 RSI: 0000000000004b52 RDI: 0000000000000006 [ 347.247593][ T8613] RBP: 00007f3d22948090 R08: 0000000000000000 R09: 0000000000000000 [ 347.247599][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.247605][ T8613] R13: 0000000000000000 R14: 00007f3d21db5fa0 R15: 00007fff63d24118 [ 347.247621][ T8613] [ 347.247626][ T8613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.523497][ T48] usb 1-1: USB disconnect, device number 18 [ 347.815832][ T30] audit: type=1400 audit(1748844085.764:343): avc: denied { setattr } for pid=8616 comm="syz.2.705" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 348.425297][ T30] audit: type=1400 audit(1748844086.364:344): avc: denied { write } for pid=8616 comm="syz.2.705" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 348.446523][ T30] audit: type=1400 audit(1748844086.364:345): avc: denied { open } for pid=8616 comm="syz.2.705" path="/138/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.335712][ T8631] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 349.343943][ T8631] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.451771][ T5868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 349.946918][ T8637] xt_HMARK: proto mask must be zero with L3 mode [ 350.043731][ T5868] usb 5-1: USB disconnect, device number 11 [ 352.405184][ T8657] Cannot find del_set index 2 as target [ 352.410643][ T30] audit: type=1400 audit(1748844090.354:346): avc: denied { attach_queue } for pid=8655 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 352.453173][ T8657] capability: warning: `syz.0.715' uses 32-bit capabilities (legacy support in use) [ 352.488039][ T30] audit: type=1400 audit(1748844090.434:347): avc: denied { ioctl } for pid=8654 comm="syz.3.714" path="socket:[17186]" dev="sockfs" ino=17186 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.520552][ T30] audit: type=1400 audit(1748844090.464:348): avc: denied { shutdown } for pid=8654 comm="syz.3.714" laddr=fe80::12 lport=50395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.011399][ T8668] syz.0.717: attempt to access beyond end of device [ 353.011399][ T8668] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 353.024243][ T8668] qnx6: unable to read the first superblock [ 353.030842][ T8668] syz.0.717: attempt to access beyond end of device [ 353.030842][ T8668] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 353.044331][ T8668] qnx6: unable to read the first superblock [ 353.050218][ T8668] qnx6: unable to read the first superblock [ 353.459259][ T8673] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 353.466870][ T8673] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 354.000225][ T8678] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.008414][ T8678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 354.620227][ T8689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.725'. [ 354.694706][ T8695] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 354.712454][ T8695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.726'. [ 354.755325][ T8695] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 354.795314][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 354.963888][ T30] audit: type=1800 audit(1748844092.894:349): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.727" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 355.060458][ T5868] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 355.213824][ T5868] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 355.222435][ T5868] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 355.231495][ T5868] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 355.241984][ T5869] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 355.249859][ T5868] usb 1-1: config 220 has no interface number 2 [ 355.256415][ T5868] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 355.269711][ T5871] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 355.278265][ T5868] usb 1-1: config 220 interface 0 has no altsetting 0 [ 355.287484][ T5868] usb 1-1: config 220 interface 76 has no altsetting 0 [ 355.295192][ T5868] usb 1-1: config 220 interface 1 has no altsetting 0 [ 355.305855][ T5868] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.315194][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.323290][ T5868] usb 1-1: Product: syz [ 355.327551][ T5868] usb 1-1: Manufacturer: syz [ 355.332241][ T5868] usb 1-1: SerialNumber: syz [ 355.422292][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.433593][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 355.439391][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.448969][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.461737][ T5869] usb 4-1: config 0 descriptor?? [ 355.466848][ T5871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.490609][ T5871] usb 2-1: config 0 has no interface number 0 [ 355.523208][ T5871] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 355.532477][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.541016][ T5871] usb 2-1: Product: syz [ 355.561340][ T5871] usb 2-1: Manufacturer: syz [ 355.566527][ T5868] usb 1-1: selecting invalid altsetting 0 [ 355.572376][ T5871] usb 2-1: SerialNumber: syz [ 355.579174][ T5868] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 355.588640][ T5871] usb 2-1: config 0 descriptor?? [ 355.594267][ T5868] usb 1-1: No valid video chain found. [ 355.604756][ T5871] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 355.614181][ T5871] usb 2-1: selecting invalid altsetting 1 [ 355.623657][ T5871] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 355.633589][ T5868] usb 1-1: selecting invalid altsetting 0 [ 355.639406][ T5868] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 355.651920][ T5871] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.666180][ T5868] usb 1-1: USB disconnect, device number 19 [ 355.672540][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 355.687635][ T5871] usb 2-1: media controller created [ 355.729125][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 355.735577][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 355.763147][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.772158][ T5869] usb 4-1: USB disconnect, device number 15 [ 355.843199][ T5871] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 355.852144][ T5871] zl10353_read_register: readreg error (reg=127, ret==-71) [ 355.859989][ T5871] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 355.887375][ T5871] usb 2-1: USB disconnect, device number 12 [ 356.230371][ T5869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 356.430485][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 356.440912][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.455122][ T5869] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 356.465809][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.483053][ T5869] usb 4-1: config 0 descriptor?? [ 356.516420][ T5869] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 356.544129][ T5869] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 356.769149][ T8716] syz.1.731: attempt to access beyond end of device [ 356.769149][ T8716] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 356.782541][ T8716] qnx6: unable to read the first superblock [ 356.790236][ T8716] syz.1.731: attempt to access beyond end of device [ 356.790236][ T8716] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 356.803427][ T8716] qnx6: unable to read the first superblock [ 356.809358][ T8716] qnx6: unable to read the first superblock [ 358.137683][ T8731] input: syz0 as /devices/virtual/input/input14 [ 358.465612][ T8729] Illegal XDP return value 4294967294 on prog (id 150) dev N/A, expect packet loss! [ 358.594405][ T30] audit: type=1400 audit(1748844096.534:350): avc: denied { write } for pid=8728 comm="syz.1.733" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 359.671388][ T8748] fuse: Bad value for 'fd' [ 359.856371][ T30] audit: type=1400 audit(1748844097.804:351): avc: denied { read } for pid=8749 comm="syz.4.736" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 359.917861][ T30] audit: type=1400 audit(1748844097.804:352): avc: denied { open } for pid=8749 comm="syz.4.736" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 359.958883][ T30] audit: type=1400 audit(1748844097.804:353): avc: denied { ioctl } for pid=8749 comm="syz.4.736" path="" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 360.118063][ T8752] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 360.126890][ T8752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.738'. [ 360.136255][ T8752] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 361.704995][ T5899] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 361.814286][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.092581][ T8703] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 362.216542][ T48] usb 4-1: USB disconnect, device number 16 [ 362.236751][ T48] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 362.334342][ T5899] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.353537][ T5899] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.370300][ T5899] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 362.393518][ T5899] usb 5-1: config 220 has no interface number 2 [ 362.414077][ T5899] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.445051][ T5899] usb 5-1: config 220 interface 0 has no altsetting 0 [ 362.460329][ T5899] usb 5-1: config 220 interface 76 has no altsetting 0 [ 362.480367][ T5899] usb 5-1: config 220 interface 1 has no altsetting 0 [ 362.503979][ T5899] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 362.513346][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.521708][ T5899] usb 5-1: Product: syz [ 362.526211][ T5899] usb 5-1: Manufacturer: syz [ 362.531383][ T5899] usb 5-1: SerialNumber: syz [ 362.789124][ T5899] usb 5-1: selecting invalid altsetting 0 [ 362.821458][ T5899] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 362.848804][ T5899] usb 5-1: No valid video chain found. [ 362.895810][ T5899] usb 5-1: selecting invalid altsetting 0 [ 362.910315][ T5899] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 362.951059][ T5899] usb 5-1: USB disconnect, device number 12 [ 363.155442][ T8791] ptrace attach of "./syz-executor exec"[5817] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 363.872881][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.980706][ T30] audit: type=1400 audit(1748844101.824:354): avc: denied { ioctl } for pid=8798 comm="syz-executor" path="socket:[17725]" dev="sockfs" ino=17725 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.999953][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.021028][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.028837][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.036611][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.096807][ T30] audit: type=1400 audit(1748844102.004:355): avc: denied { mounton } for pid=8798 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 364.749937][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 364.921886][ T8823] cgroup: Unknown subsys name 'cpuset' [ 365.395626][ T30] audit: type=1400 audit(1748844103.004:356): avc: denied { recv } for pid=8818 comm="syz.0.755" saddr=10.128.0.169 src=35416 daddr=10.128.1.76 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 366.056558][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.140372][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.163633][ T51] Bluetooth: hci5: command tx timeout [ 366.288827][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.334601][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.348582][ T8798] bridge_slave_0: entered allmulticast mode [ 366.371828][ T8798] bridge_slave_0: entered promiscuous mode [ 366.380978][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.388745][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.398106][ T8798] bridge_slave_1: entered allmulticast mode [ 366.436672][ T8798] bridge_slave_1: entered promiscuous mode [ 366.490078][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.513055][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.570615][ T8798] team0: Port device team_slave_0 added [ 366.577963][ T8798] team0: Port device team_slave_1 added [ 366.599985][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.607228][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.650979][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.401329][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 367.469717][ T8844] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 367.573406][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.620604][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.650485][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 367.660954][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 367.675687][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.684113][ T5871] usb 2-1: Product: syz [ 367.688278][ T5871] usb 2-1: Manufacturer: syz [ 367.706806][ T5871] usb 2-1: SerialNumber: syz [ 367.716308][ T5871] usb 2-1: config 0 descriptor?? [ 367.747885][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.841483][ T8798] hsr_slave_0: entered promiscuous mode [ 367.848223][ T8798] hsr_slave_1: entered promiscuous mode [ 367.859233][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.867895][ T8798] Cannot create hsr debugfs directory [ 367.878394][ T8853] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 367.886460][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 367.899988][ T8855] 9pnet_fd: Insufficient options for proto=fd [ 367.929418][ T5871] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 368.124117][ T48] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 368.253602][ T51] Bluetooth: hci5: command tx timeout [ 369.120335][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 369.415194][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 369.445007][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.459667][ T48] usb 5-1: Product: syz [ 369.464247][ T48] usb 5-1: Manufacturer: syz [ 369.474135][ T48] usb 5-1: SerialNumber: syz [ 369.489786][ T48] usb 5-1: config 0 descriptor?? [ 369.506707][ T8798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.532376][ T8798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.545184][ T8798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.558133][ T8798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.730239][ T48] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.767626][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.819405][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.847161][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.854358][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.035182][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.042333][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.130340][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.352228][ T51] Bluetooth: hci5: command tx timeout [ 370.432897][ T8798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.909468][ T8798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.051670][ T5871] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 371.466165][ T5899] usb 2-1: USB disconnect, device number 13 [ 372.348270][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 372.414302][ T48] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 372.420402][ T51] Bluetooth: hci5: command tx timeout [ 372.502128][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.674070][ T8901] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 372.697551][ T8901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.774'. [ 372.722598][ T8901] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 372.748127][ T5899] usb 5-1: USB disconnect, device number 13 [ 372.977023][ T8798] veth0_vlan: entered promiscuous mode [ 373.057630][ T51] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 373.065371][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 373.098567][ T8798] veth1_vlan: entered promiscuous mode [ 373.146978][ T8798] veth0_macvtap: entered promiscuous mode [ 373.159022][ T8798] veth1_macvtap: entered promiscuous mode [ 373.199512][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.319564][ T5869] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 373.438749][ T5869] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 373.541082][ T5869] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 373.603958][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.615374][ T8798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.624213][ T8798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.639988][ T5869] usb 2-1: config 220 has no interface number 2 [ 373.649652][ T5869] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 373.650326][ T8798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.666180][ T5869] usb 2-1: config 220 interface 0 has no altsetting 0 [ 373.678750][ T5869] usb 2-1: config 220 interface 76 has no altsetting 0 [ 373.687769][ T5869] usb 2-1: config 220 interface 1 has no altsetting 0 [ 373.698057][ T5869] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 373.698791][ T8798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.707421][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.707443][ T5869] usb 2-1: Product: syz [ 373.707457][ T5869] usb 2-1: Manufacturer: syz [ 373.707472][ T5869] usb 2-1: SerialNumber: syz [ 374.005758][ T5869] usb 2-1: selecting invalid altsetting 0 [ 374.021604][ T5869] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 374.027988][ T5869] usb 2-1: No valid video chain found. [ 374.158839][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.159171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.180471][ T5869] usb 2-1: selecting invalid altsetting 0 [ 374.190918][ T5869] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 374.282935][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.317469][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.753226][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.769725][ T5869] usb 2-1: USB disconnect, device number 14 [ 375.467406][ T30] audit: type=1400 audit(1748844113.414:357): avc: denied { mount } for pid=8798 comm="syz-executor" name="/" dev="gadgetfs" ino=6647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 376.047348][ T8937] 9pnet_fd: Insufficient options for proto=fd [ 377.882914][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 377.891509][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 377.899606][ T7101] Bluetooth: hci0: hardware error 0x00 [ 377.963728][ T8957] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 378.199139][ T30] audit: type=1326 audit(1748844116.134:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 378.222391][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.280143][ T30] audit: type=1326 audit(1748844116.134:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 378.335136][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.461870][ T8964] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 378.469433][ T8964] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 378.495971][ T30] audit: type=1326 audit(1748844116.134:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 378.711612][ T30] audit: type=1326 audit(1748844116.134:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 379.086688][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.271382][ T30] audit: type=1326 audit(1748844116.134:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 379.299297][ T30] audit: type=1326 audit(1748844116.174:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 379.322444][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.397986][ T30] audit: type=1326 audit(1748844116.174:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 379.421275][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.428633][ T30] audit: type=1326 audit(1748844116.174:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 379.460885][ T30] audit: type=1326 audit(1748844116.174:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7ffc0000 [ 380.177097][ T7101] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.068064][ T8985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.795'. [ 382.176544][ T8998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.258179][ T8999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 382.695036][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 382.695050][ T30] audit: type=1400 audit(1748844120.644:430): avc: denied { bind } for pid=9005 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 382.721436][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.731118][ T5869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 383.384048][ T9012] ptrace attach of "./syz-executor exec"[5821] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 383.791729][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 384.300831][ T9015] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 384.308824][ T9015] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.418531][ T5869] usb 2-1: device descriptor read/all, error -71 [ 384.512965][ T9022] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 384.564878][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 384.590934][ T9022] netlink: 224 bytes leftover after parsing attributes in process `syz.4.805'. [ 384.630878][ T9022] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 384.820660][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 385.421869][ T5871] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 385.748504][ T5871] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 386.001178][ T5871] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 386.012744][ T5871] usb 5-1: config 220 has no interface number 2 [ 386.019058][ T5871] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 386.041169][ T5871] usb 5-1: config 220 interface 0 has no altsetting 0 [ 386.047969][ T5871] usb 5-1: config 220 interface 76 has no altsetting 0 [ 386.097121][ T5871] usb 5-1: config 220 interface 1 has no altsetting 0 [ 386.123525][ T5871] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 386.142442][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.150998][ T5871] usb 5-1: Product: syz [ 386.155451][ T5871] usb 5-1: Manufacturer: syz [ 386.160408][ T5871] usb 5-1: SerialNumber: syz [ 386.734639][ T5871] usb 5-1: selecting invalid altsetting 0 [ 386.790552][ T5871] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 386.807557][ T5871] usb 5-1: No valid video chain found. [ 386.827992][ T5871] usb 5-1: selecting invalid altsetting 0 [ 386.838163][ T30] audit: type=1400 audit(1748844124.784:431): avc: denied { checkpoint_restore } for pid=9048 comm="syz.5.812" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 386.850309][ T5871] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 386.957616][ T5871] usb 5-1: USB disconnect, device number 14 [ 387.022321][ T9051] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.030668][ T9051] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.853401][ T9065] ptrace attach of "./syz-executor exec"[5813] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 388.124816][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.5.819'. [ 388.320542][ T9072] netlink: 76 bytes leftover after parsing attributes in process `syz.5.819'. [ 388.344330][ T30] audit: type=1400 audit(1748844126.254:432): avc: denied { create } for pid=9068 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.400561][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 388.414197][ T30] audit: type=1400 audit(1748844126.264:433): avc: denied { getopt } for pid=9068 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.670346][ T24] usb 6-1: device descriptor read/64, error -71 [ 390.266013][ T9111] netlink: 'syz.5.829': attribute type 1 has an invalid length. [ 390.349891][ T9117] ptrace attach of "./syz-executor exec"[5813] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 390.374731][ T9116] ptrace attach of "./syz-executor exec"[5817] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 390.590731][ T9111] netlink: 224 bytes leftover after parsing attributes in process `syz.5.829'. [ 390.703173][ T9111] netlink: 'syz.5.829': attribute type 1 has an invalid length. [ 390.707390][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 392.604067][ T9142] syz.1.838: attempt to access beyond end of device [ 392.604067][ T9142] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 392.616936][ T9142] qnx6: unable to read the first superblock [ 392.623252][ T9142] syz.1.838: attempt to access beyond end of device [ 392.623252][ T9142] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 392.636039][ T9142] qnx6: unable to read the first superblock [ 392.641981][ T9142] qnx6: unable to read the first superblock [ 392.840944][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 392.992529][ T9159] 9pnet_fd: Insufficient options for proto=fd [ 393.000399][ T30] audit: type=1400 audit(1748844130.944:434): avc: denied { bind } for pid=9158 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.038445][ T24] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.070337][ T24] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 393.079242][ T24] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 393.210226][ T24] usb 6-1: config 220 has no interface number 2 [ 393.217418][ T24] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.799793][ T5871] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 393.803612][ T24] usb 6-1: config 220 interface 0 has no altsetting 0 [ 393.817463][ T9159] could not allocate digest TFM handle tgr128-generic [ 393.825855][ T24] usb 6-1: config 220 interface 76 has no altsetting 0 [ 393.833165][ T24] usb 6-1: config 220 interface 1 has no altsetting 0 [ 393.884225][ T24] usb 6-1: string descriptor 0 read error: -71 [ 394.115556][ T9172] ptrace attach of "./syz-executor exec"[8798] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 394.147993][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 394.220354][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 394.287984][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.410612][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.423959][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.433195][ T24] usb 6-1: can't set config #220, error -71 [ 394.436581][ T5871] usb 2-1: Product: syz [ 394.759223][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.956768][ T5871] usb 2-1: Manufacturer: syz [ 395.044148][ T24] usb 6-1: USB disconnect, device number 4 [ 395.054334][ T5871] usb 2-1: SerialNumber: syz [ 395.084757][ T5871] usb 2-1: config 0 descriptor?? [ 396.012853][ T5871] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.129468][ T9193] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 397.221447][ T10] IPVS: starting estimator thread 0... [ 397.337682][ T9221] IPVS: using max 72 ests per chain, 172800 per kthread [ 398.642380][ T5871] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 398.864776][ T5899] usb 2-1: USB disconnect, device number 17 [ 399.426697][ T9238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.481515][ T9241] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.405586][ T9259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.873'. [ 403.632199][ T9280] fuse: Bad value for 'user_id' [ 403.646559][ T9280] fuse: Bad value for 'user_id' [ 403.716636][ T30] audit: type=1400 audit(1748844397.665:435): avc: denied { mounton } for pid=9281 comm="syz.5.878" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 404.605664][ T9291] Invalid source name [ 404.803877][ T9302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.811276][ T9302] IPv6: NLM_F_CREATE should be set when creating new route [ 404.820865][ T9302] lo: entered allmulticast mode [ 404.859715][ T9302] tunl0: entered allmulticast mode [ 404.871366][ T9302] gre0: entered allmulticast mode [ 404.894292][ T9302] gretap0: entered allmulticast mode [ 404.906914][ T9302] erspan0: entered allmulticast mode [ 404.914987][ T9302] ip_vti0: entered allmulticast mode [ 404.925731][ T9302] ip6_vti0: entered allmulticast mode [ 404.933528][ T9302] sit0: entered allmulticast mode [ 404.949775][ T9302] ip6tnl0: entered allmulticast mode [ 404.957996][ T9302] ip6gre0: entered allmulticast mode [ 404.970389][ T30] audit: type=1400 audit(1748844398.915:436): avc: denied { getopt } for pid=9278 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.002486][ T9302] syz_tun: entered allmulticast mode [ 405.013624][ T9302] ip6gretap0: entered allmulticast mode [ 405.022942][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.031453][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.040554][ T9302] bridge0: entered allmulticast mode [ 405.051323][ T9302] vcan0: entered allmulticast mode [ 405.059023][ T9302] bond0: entered allmulticast mode [ 405.064224][ T9302] bond_slave_0: entered allmulticast mode [ 405.069957][ T9302] bond_slave_1: entered allmulticast mode [ 405.080909][ T9302] team0: entered allmulticast mode [ 405.086064][ T9302] team_slave_0: entered allmulticast mode [ 405.092080][ T9302] team_slave_1: entered allmulticast mode [ 405.101149][ T9302] dummy0: entered allmulticast mode [ 405.114729][ T9302] nlmon0: entered allmulticast mode [ 405.121468][ T9302] caif0: entered allmulticast mode [ 405.127170][ T9302] batadv0: entered allmulticast mode [ 405.135463][ T9302] vxcan0: entered allmulticast mode [ 405.142248][ T9302] vxcan1: entered allmulticast mode [ 405.152868][ T9302] veth0: entered allmulticast mode [ 405.184216][ T9302] veth1: entered allmulticast mode [ 405.204616][ T9302] wg0: entered allmulticast mode [ 405.215770][ T9302] wg1: entered allmulticast mode [ 405.225084][ T9302] wg2: entered allmulticast mode [ 405.234245][ T9302] veth0_to_bridge: entered allmulticast mode [ 405.247249][ T9302] veth1_to_bridge: entered allmulticast mode [ 405.259980][ T9302] veth0_to_bond: entered allmulticast mode [ 405.269866][ T9302] veth1_to_bond: entered allmulticast mode [ 405.281438][ T9302] veth0_to_team: entered allmulticast mode [ 405.292741][ T9302] veth1_to_team: entered allmulticast mode [ 405.303164][ T9302] veth0_to_batadv: entered allmulticast mode [ 405.312241][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.320167][ T9302] batadv_slave_0: entered allmulticast mode [ 405.328680][ T9302] veth1_to_batadv: entered allmulticast mode [ 405.336579][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.344511][ T9302] batadv_slave_1: entered allmulticast mode [ 405.353040][ T9302] xfrm0: entered allmulticast mode [ 405.361874][ T9302] veth0_to_hsr: entered allmulticast mode [ 405.369654][ T9302] hsr_slave_0: entered allmulticast mode [ 405.376999][ T9302] veth1_to_hsr: entered allmulticast mode [ 405.385065][ T9302] hsr_slave_1: entered allmulticast mode [ 405.393927][ T9302] hsr0: entered allmulticast mode [ 405.401419][ T9302] veth1_virt_wifi: entered allmulticast mode [ 405.409703][ T9302] veth0_virt_wifi: entered allmulticast mode [ 405.417818][ T9302] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 405.425924][ T9302] veth1_vlan: entered allmulticast mode [ 405.432594][ T9302] veth0_vlan: entered allmulticast mode [ 405.448383][ T9302] vlan0: entered allmulticast mode [ 405.453766][ T9302] vlan1: entered allmulticast mode [ 405.460427][ T9302] macvlan0: entered allmulticast mode [ 405.471346][ T9302] macvlan1: entered allmulticast mode [ 405.477747][ T9302] ipvlan0: entered allmulticast mode [ 405.483495][ T9302] ipvlan1: entered allmulticast mode [ 405.489535][ T9302] veth1_macvtap: entered allmulticast mode [ 405.498762][ T9302] veth0_macvtap: entered allmulticast mode [ 405.517785][ T9302] macvtap0: entered allmulticast mode [ 405.531216][ T9302] macsec0: entered allmulticast mode [ 405.539791][ T9302] geneve0: entered allmulticast mode [ 405.547854][ T9302] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.557150][ T9302] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.569479][ T9302] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.578409][ T9302] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.760407][ T9302] geneve1: entered allmulticast mode [ 405.860850][ T9302] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 405.890702][ T9302] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 405.926537][ T9302] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 405.938587][ T9302] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 406.050674][ T9302] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 406.065102][ T9302] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 406.075597][ T9302] team1: entered allmulticast mode [ 406.081539][ T9302] ': entered allmulticast mode [ 406.086404][ T9302] veth0_to_hsr.4: entered allmulticast mode [ 406.965156][ T9336] PKCS7: Unknown OID: [4] 0.0 [ 406.977971][ T30] audit: type=1400 audit(1748844400.905:437): avc: denied { write } for pid=9332 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 407.000019][ T9336] PKCS7: Only support pkcs7_signedData type [ 408.504244][ T30] audit: type=1400 audit(1748844402.445:438): avc: denied { ioctl } for pid=9360 comm="syz.0.898" path="socket:[20517]" dev="sockfs" ino=20517 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.528886][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.855665][ T9366] vivid-002: disconnect [ 409.482507][ T9362] vivid-002: reconnect [ 409.499753][ T30] audit: type=1400 audit(1748844402.595:439): avc: denied { listen } for pid=9362 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 409.534620][ T30] audit: type=1326 audit(1748844403.385:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.557863][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.567852][ T30] audit: type=1326 audit(1748844403.385:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.590997][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.598073][ T30] audit: type=1326 audit(1748844403.385:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.621395][ T48] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 409.629979][ T30] audit: type=1326 audit(1748844403.385:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.663277][ T30] audit: type=1326 audit(1748844403.385:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.688998][ T30] audit: type=1326 audit(1748844403.385:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.689815][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 409.712199][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.733560][ T30] audit: type=1326 audit(1748844403.385:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.806282][ T30] audit: type=1326 audit(1748844403.385:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.829482][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.830329][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 409.841970][ T30] audit: type=1326 audit(1748844403.385:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523738e969 code=0x7fc00000 [ 409.997071][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.719823][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.731891][ T48] usb 5-1: Product: syz [ 411.458264][ T48] usb 5-1: Manufacturer: syz [ 411.494492][ T48] usb 5-1: SerialNumber: syz [ 411.519583][ T48] usb 5-1: config 0 descriptor?? [ 411.540035][ T48] usb 5-1: can't set config #0, error -71 [ 411.666194][ T48] usb 5-1: USB disconnect, device number 15 [ 413.233031][ T9412] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.663518][ T9412] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.298437][ T9460] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 418.306314][ T9460] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 421.417099][ T9492] syz.1.930 uses obsolete (PF_INET,SOCK_PACKET) [ 423.415960][ T9513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.872963][ T9515] ptrace attach of "./syz-executor exec"[5821] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 423.995977][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 423.995993][ T30] audit: type=1400 audit(1748844417.945:507): avc: denied { associate } for pid=9521 comm="syz.3.942" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 424.121066][ T9522] fuse: Bad value for 'fd' [ 424.129663][ T30] audit: type=1400 audit(1748844418.075:508): avc: denied { mounton } for pid=9521 comm="syz.3.942" path="/file0" dev="rootfs" ino=20301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 424.196042][ T5868] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 424.637388][ T9527] fuse: Bad value for 'fd' [ 424.690454][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 424.699327][ T5868] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.709757][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.729473][ T5868] usb 6-1: Product: syz [ 424.748203][ T5868] usb 6-1: Manufacturer: syz [ 424.753218][ T5868] usb 6-1: SerialNumber: syz [ 424.775499][ T5868] usb 6-1: config 0 descriptor?? [ 424.996387][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 424.998442][ T5868] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.716427][ T9549] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 427.161167][ T9568] ptrace attach of "./syz-executor exec"[5821] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 427.333674][ T9572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.628386][ T5868] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 427.863048][ T5868] usb 6-1: USB disconnect, device number 5 [ 428.251051][ T9582] 9pnet_fd: Insufficient options for proto=fd [ 428.257363][ T9583] 9pnet_fd: Insufficient options for proto=fd [ 428.346938][ T30] audit: type=1400 audit(1748844422.285:509): avc: denied { create } for pid=9586 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 428.445007][ T30] audit: type=1400 audit(1748844422.285:510): avc: denied { setopt } for pid=9586 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 428.514930][ T30] audit: type=1400 audit(1748844422.465:511): avc: denied { write } for pid=9586 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.617204][ T9600] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 428.663928][ T9600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.964'. [ 428.676111][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 428.770895][ T30] audit: type=1400 audit(1748844422.625:512): avc: denied { getopt } for pid=9603 comm="syz.0.966" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.793105][ T9600] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 430.214707][ T5868] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 430.921991][ T5868] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 430.934364][ T5868] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 430.950806][ T5868] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 430.965797][ T5868] usb 2-1: config 220 has no interface number 2 [ 430.976760][ T5868] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 431.031231][ T5868] usb 2-1: config 220 interface 0 has no altsetting 0 [ 431.153643][ T5868] usb 2-1: config 220 interface 76 has no altsetting 0 [ 431.177709][ T5868] usb 2-1: config 220 interface 1 has no altsetting 0 [ 431.639020][ T9633] veth0_to_team: entered promiscuous mode [ 431.640140][ T5868] usb 2-1: string descriptor 0 read error: -71 [ 431.644897][ T9633] veth0_to_team: entered allmulticast mode [ 431.660152][ T5868] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 431.768068][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.797010][ T5868] usb 2-1: can't set config #220, error -71 [ 431.908233][ T5868] usb 2-1: USB disconnect, device number 18 [ 432.333222][ T30] audit: type=1400 audit(1748844426.275:513): avc: denied { getopt } for pid=9645 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.864031][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.254936][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.979'. [ 434.271459][ T9672] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 434.281841][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.829035][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 434.869272][ T30] audit: type=1400 audit(1748844428.775:514): avc: denied { shutdown } for pid=9661 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.896957][ T30] audit: type=1400 audit(1748844428.775:515): avc: denied { connect } for pid=9661 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.204752][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 435.480344][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 435.493865][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.506734][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.518872][ T5868] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 435.530051][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.566184][ T5868] usb 6-1: config 0 descriptor?? [ 436.090439][ T9696] trusted_key: encrypted_key: insufficient parameters specified [ 436.104084][ T30] audit: type=1400 audit(1748844430.035:516): avc: denied { ioctl } for pid=9694 comm="syz.1.990" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 437.210684][ T9698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.551776][ T5868] kye 0003:0458:5016.0002: control desc unexpectedly large [ 437.573920][ T5868] kye 0003:0458:5016.0002: control desc unexpectedly large [ 437.632031][ T5868] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0002/input/input16 [ 438.451904][ T5868] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 439.908870][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.046624][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 440.416680][ T9743] netlink: 'syz.5.1003': attribute type 1 has an invalid length. [ 440.538274][ T9743] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1003'. [ 440.548022][ T9743] netlink: 'syz.5.1003': attribute type 1 has an invalid length. [ 441.180898][ T5899] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 441.191332][ T5899] usb 6-1: device reset changed ep0 maxpacket size! [ 441.202818][ T48] usb 6-1: USB disconnect, device number 6 [ 441.403277][ T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.562755][ T48] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 441.579512][ T48] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 441.599169][ T48] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 441.623312][ T48] usb 6-1: config 220 has no interface number 2 [ 441.634007][ T48] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 441.647436][ T48] usb 6-1: config 220 interface 0 has no altsetting 0 [ 441.655715][ T48] usb 6-1: config 220 interface 76 has no altsetting 0 [ 441.663021][ T48] usb 6-1: config 220 interface 1 has no altsetting 0 [ 441.672599][ T48] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 441.682210][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.691950][ T48] usb 6-1: Product: syz [ 441.696558][ T48] usb 6-1: Manufacturer: syz [ 441.771917][ T48] usb 6-1: SerialNumber: syz [ 442.022867][ T48] usb 6-1: selecting invalid altsetting 0 [ 442.044994][ T48] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 442.086483][ T48] usb 6-1: No valid video chain found. [ 442.127956][ T48] usb 6-1: selecting invalid altsetting 0 [ 442.147165][ T48] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 442.300035][ T48] usb 6-1: USB disconnect, device number 7 [ 443.712331][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 443.837542][ T9805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1024'. [ 444.189911][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 445.171533][ T9822] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 445.179309][ T9822] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1028'. [ 445.212274][ T9822] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 446.693182][ T30] audit: type=1400 audit(1748844440.645:517): avc: denied { connect } for pid=9837 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.780331][ T48] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.164375][ T30] audit: type=1400 audit(1748844441.115:518): avc: denied { create } for pid=9839 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.245740][ T9841] ubi31: attaching mtd0 [ 447.253417][ T9841] ubi31: scanning is finished [ 447.258114][ T9841] ubi31: empty MTD device detected [ 447.272097][ T48] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 447.280729][ T48] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 447.352041][ T48] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 447.480593][ T48] usb 6-1: config 220 has no interface number 2 [ 447.486926][ T48] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 447.550932][ T48] usb 6-1: config 220 interface 0 has no altsetting 0 [ 447.570478][ T48] usb 6-1: config 220 interface 76 has no altsetting 0 [ 447.577351][ T48] usb 6-1: config 220 interface 1 has no altsetting 0 [ 447.596957][ T48] usb 6-1: string descriptor 0 read error: -71 [ 447.610852][ T48] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 447.637368][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1036'. [ 447.650826][ T9849] vlan2: entered promiscuous mode [ 447.655860][ T9849] bond0: entered promiscuous mode [ 447.660953][ T9849] bond_slave_0: entered promiscuous mode [ 447.666671][ T9849] bond_slave_1: entered promiscuous mode [ 447.680741][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.707183][ T48] usb 6-1: can't set config #220, error -71 [ 447.737243][ T48] usb 6-1: USB disconnect, device number 8 [ 447.815585][ T9855] overlayfs: failed to clone lowerpath [ 447.823671][ T30] audit: type=1400 audit(1748844441.765:519): avc: denied { mount } for pid=9852 comm="syz.3.1037" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 447.846845][ T9855] overlayfs: failed to clone lowerpath [ 447.901837][ T9841] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 447.909656][ T9841] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 447.920702][ T9841] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 447.927796][ T9841] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 447.938328][ T9841] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 447.945499][ T9841] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 447.988532][ T9841] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2658464439 [ 448.013396][ T9841] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 448.038661][ T9858] ubi31: background thread "ubi_bgt31d" started, PID 9858 [ 448.193372][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 448.742704][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 448.758475][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 448.850079][ T30] audit: type=1400 audit(1748844442.795:520): avc: denied { write } for pid=9869 comm="syz.5.1043" name="mouse0" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 448.896136][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 449.249430][ T30] audit: type=1400 audit(1748844443.195:521): avc: denied { mount } for pid=9877 comm="syz.0.1044" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 449.273939][ T9878] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1044'. [ 449.325593][ T9880] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1045'. [ 449.663237][ T30] audit: type=1400 audit(1748844443.615:522): avc: denied { listen } for pid=9885 comm="syz.4.1048" lport=45251 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 450.648153][ T30] audit: type=1400 audit(1748844444.595:523): avc: denied { accept } for pid=9902 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 450.750325][ T48] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 450.770369][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 450.911967][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 450.922287][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.932346][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 450.942939][ T48] usb 2-1: config 0 descriptor?? [ 450.956971][ T5868] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.963760][ T48] cp210x 2-1:0.0: cp210x converter detected [ 450.981429][ T5868] usb 6-1: config 0 has no interface number 0 [ 450.999912][ T5868] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 451.013017][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.026825][ T5868] usb 6-1: Product: syz [ 451.037427][ T5868] usb 6-1: Manufacturer: syz [ 451.043362][ T5868] usb 6-1: SerialNumber: syz [ 451.058250][ T5868] usb 6-1: config 0 descriptor?? [ 451.076024][ T5868] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 451.086274][ T5868] usb 6-1: selecting invalid altsetting 1 [ 451.094226][ T5868] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 451.133537][ T5868] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 451.152550][ T5868] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 451.203768][ T5868] usb 6-1: media controller created [ 451.295848][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.792329][ T5868] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 451.814710][ T5868] zl10353_read_register: readreg error (reg=127, ret==-71) [ 451.829969][ T5868] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 451.981525][ T5868] usb 6-1: USB disconnect, device number 9 [ 452.180950][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 452.257113][ T9920] tipc: Started in network mode [ 452.262597][ T9920] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 452.272021][ T9920] tipc: Enabling of bearer rejected, failed to enable media [ 452.674890][ T9921] ptrace attach of "./syz-executor exec"[5817] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 453.013984][ T9923] 9pnet_fd: Insufficient options for proto=fd [ 453.157821][ T30] audit: type=1400 audit(1748844447.105:524): avc: denied { execheap } for pid=9922 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 453.202531][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 453.224983][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 453.526357][ T48] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 453.534784][ T48] cp210x 2-1:0.0: querying part number failed [ 453.555157][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 453.566126][ T48] usb 2-1: USB disconnect, device number 19 [ 453.592988][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 453.614318][ T48] cp210x 2-1:0.0: device disconnected [ 453.800288][ T30] audit: type=1400 audit(1748844447.595:525): avc: denied { read write } for pid=9944 comm="syz.1.1065" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 453.827927][ T30] audit: type=1400 audit(1748844447.595:526): avc: denied { open } for pid=9944 comm="syz.1.1065" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 453.881301][ T9949] fuse: Unknown parameter '0000000000000000000500000000000000000000004' [ 454.830936][ T9958] ptrace attach of "./syz-executor exec"[5821] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 455.850689][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 456.281224][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.286291][ T9992] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 456.300701][ T9992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1077'. [ 456.309776][ T9992] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 456.318636][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.358023][ T10] usb 6-1: Product: syz [ 456.368017][ T10] usb 6-1: Manufacturer: syz [ 456.387729][ T10] usb 6-1: SerialNumber: syz [ 456.759695][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 456.774796][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 456.823046][ T30] audit: type=1400 audit(1748844450.775:527): avc: denied { firmware_load } for pid=5869 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 456.831953][ T5869] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.177165][ T48] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 457.331520][ T30] audit: type=1400 audit(1748844451.275:528): avc: denied { ioctl } for pid=9967 comm="syz.5.1070" path="socket:[21422]" dev="sockfs" ino=21422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 457.359344][ T9971] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 457.621163][ T48] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 457.664918][ T48] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 458.000775][ T5869] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 458.008227][ T5869] ath9k_htc: Failed to initialize the device [ 458.037348][ T48] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 458.104735][ T48] usb 2-1: config 220 has no interface number 2 [ 461.760583][ T5868] usb 6-1: USB disconnect, device number 10 [ 461.780250][ C0] sched: DL replenish lagged too much [ 461.820675][ T48] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 461.842832][ T5868] usb 6-1: ath9k_htc: USB layer deinitialized [ 461.852796][ T48] usb 2-1: config 220 interface 0 has no altsetting 0 [ 461.863262][ T48] usb 2-1: config 220 interface 76 has no altsetting 0 [ 461.877600][ T48] usb 2-1: config 220 interface 1 has no altsetting 0 [ 461.924186][ T48] usb 2-1: string descriptor 0 read error: -71 [ 461.958996][ T48] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 461.992556][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.125787][T10036] overlayfs: failed to clone upperpath [ 462.180489][ T48] usb 2-1: can't set config #220, error -71 [ 462.208930][ T48] usb 2-1: USB disconnect, device number 20 [ 463.587592][T10049] lo speed is unknown, defaulting to 1000 [ 463.594619][T10049] lo speed is unknown, defaulting to 1000 [ 463.612899][T10049] lo speed is unknown, defaulting to 1000 [ 463.627003][T10049] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 463.641710][T10049] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 463.928169][T10049] lo speed is unknown, defaulting to 1000 [ 463.936672][T10049] lo speed is unknown, defaulting to 1000 [ 463.944902][T10049] lo speed is unknown, defaulting to 1000 [ 463.951692][T10049] lo speed is unknown, defaulting to 1000 [ 463.958135][T10049] lo speed is unknown, defaulting to 1000 [ 463.964606][T10049] lo speed is unknown, defaulting to 1000 [ 464.088631][T10053] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 464.096516][T10053] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 464.223676][ T48] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 464.835795][ T48] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 464.859950][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.898200][ T48] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 464.922733][ T48] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 464.941628][ T48] usb 2-1: Manufacturer: syz [ 464.946527][ T30] audit: type=1400 audit(1748844458.895:529): avc: denied { ioctl } for pid=10069 comm="syz.5.1101" path="/dev/sg0" dev="devtmpfs" ino=783 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.980126][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 465.098592][ T48] usb 2-1: config 0 descriptor?? [ 465.107515][ T48] usb 2-1: can't set config #0, error -71 [ 465.115692][ T48] usb 2-1: USB disconnect, device number 21 [ 466.513789][T10087] overlayfs: failed to clone lowerpath [ 469.696165][T10128] netlink: 'syz.5.1118': attribute type 1 has an invalid length. [ 469.715678][T10128] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1118'. [ 469.740598][T10128] netlink: 'syz.5.1118': attribute type 1 has an invalid length. [ 469.781728][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 470.609442][T10025] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 470.965105][T10138] __vm_enough_memory: pid: 10138, comm: syz.3.1121, bytes: 4115879641088 not enough memory for the allocation [ 471.012699][T10025] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 471.024975][T10025] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 471.036173][T10025] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 471.057091][T10025] usb 6-1: config 220 has no interface number 2 [ 471.067302][T10025] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 471.102998][T10025] usb 6-1: config 220 interface 0 has no altsetting 0 [ 471.134345][T10025] usb 6-1: config 220 interface 76 has no altsetting 0 [ 471.153614][T10025] usb 6-1: config 220 interface 1 has no altsetting 0 [ 471.186230][T10025] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 471.201217][T10025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.209746][T10025] usb 6-1: Product: syz [ 471.651207][T10025] usb 6-1: Manufacturer: syz [ 471.657427][T10025] usb 6-1: SerialNumber: syz [ 472.603908][T10025] usb 6-1: selecting invalid altsetting 0 [ 472.623675][T10025] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 472.635984][T10025] usb 6-1: No valid video chain found. [ 472.665955][ T30] audit: type=1400 audit(1748844466.615:530): avc: denied { create } for pid=10156 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 472.687035][T10025] usb 6-1: selecting invalid altsetting 0 [ 472.695770][T10025] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 472.708984][T10025] usb 6-1: USB disconnect, device number 11 [ 472.745774][ T30] audit: type=1400 audit(1748844466.695:531): avc: denied { module_request } for pid=10156 comm="syz.1.1126" kmod="block-major-0-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 473.638749][ T30] audit: type=1326 audit(1748844467.585:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10175 comm="syz.5.1132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11d0f8e969 code=0x0 [ 474.054848][T10181] lo speed is unknown, defaulting to 1000 [ 474.737357][T10151] delete_channel: no stack [ 474.840188][T10188] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 474.849387][T10188] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 474.895092][T10193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1136'. [ 475.136556][T10196] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 475.144454][T10196] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.806025][T10207] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 475.813723][T10207] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.765697][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 478.106744][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.578193][T10251] ptrace attach of "./syz-executor exec"[5826] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 481.076611][T10252] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 481.189601][T10252] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 481.516825][T10257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1158'. [ 481.761411][T10265] random: crng reseeded on system resumption [ 481.767599][ T30] audit: type=1400 audit(1748844475.715:533): avc: denied { write } for pid=10264 comm="syz.5.1161" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 481.880711][ T30] audit: type=1400 audit(1748844475.715:534): avc: denied { open } for pid=10264 comm="syz.5.1161" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 481.983073][ T30] audit: type=1400 audit(1748844475.765:535): avc: denied { ioctl } for pid=10264 comm="syz.5.1161" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.579068][T10274] lo speed is unknown, defaulting to 1000 [ 483.182236][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 483.253432][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 483.360510][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 483.417260][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.430279][ T24] usb 2-1: config 0 has no interface number 0 [ 483.438755][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 483.458181][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.514075][ T24] usb 2-1: Product: syz [ 483.518285][ T24] usb 2-1: Manufacturer: syz [ 483.543484][ T24] usb 2-1: SerialNumber: syz [ 483.563215][ T24] usb 2-1: config 0 descriptor?? [ 483.721934][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 483.731211][ T24] usb 2-1: selecting invalid altsetting 1 [ 483.737029][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 483.746620][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 483.756997][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 483.766093][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'. [ 483.775123][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'. [ 483.780630][T10291] fuse: Bad value for 'fd' [ 483.821322][ T30] audit: type=1400 audit(1748844477.745:536): avc: denied { setopt } for pid=10288 comm="syz.5.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 483.830307][ T24] usb 2-1: media controller created [ 483.906899][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.972122][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 483.979234][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 484.008078][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 484.040427][T10025] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 484.121799][ T24] usb 2-1: USB disconnect, device number 22 [ 484.181239][T10025] usb 6-1: device descriptor read/64, error -71 [ 484.236810][T10305] fuse: Bad value for 'fd' [ 484.440677][T10025] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 484.810323][T10025] usb 6-1: device descriptor read/64, error -71 [ 484.849617][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 484.898293][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 484.930689][T10025] usb usb6-port1: attempt power cycle [ 484.953670][ T30] audit: type=1400 audit(1748844478.895:537): avc: denied { ioctl } for pid=10318 comm="syz.0.1179" path="socket:[22418]" dev="sockfs" ino=22418 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 484.980167][ T30] audit: type=1400 audit(1748844478.895:538): avc: denied { write } for pid=10318 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 485.024952][T10321] fuse: Bad value for 'fd' [ 485.417774][T10335] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 485.426862][T10335] netlink: 'syz.3.1185': attribute type 2 has an invalid length. [ 485.426941][T10025] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 485.462767][T10025] usb 6-1: device descriptor read/8, error -71 [ 485.513458][T10337] lo speed is unknown, defaulting to 1000 [ 486.463631][T10025] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 486.553310][T10025] usb 6-1: device descriptor read/8, error -71 [ 486.555186][T10288] delete_channel: no stack [ 486.571764][ T6160] wlan0: Trigger new scan to find an IBSS to join [ 486.709313][T10025] usb usb6-port1: unable to enumerate USB device [ 486.726144][T10352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1188'. [ 488.411583][ T5816] Bluetooth: hci5: command 0x0405 tx timeout [ 488.663893][T10377] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 488.672412][T10377] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 489.095532][T10382] netlink: 'syz.3.1197': attribute type 15 has an invalid length. [ 489.305796][T10025] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 489.337090][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 489.880680][T10025] usb 2-1: Using ep0 maxpacket: 32 [ 489.894721][T10025] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.988790][T10025] usb 2-1: config 0 has no interface number 0 [ 490.253342][T10405] 8021q: VLANs not supported on sit0 [ 490.555638][T10025] usb 2-1: string descriptor 0 read error: -71 [ 490.563587][T10025] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 491.092897][T10025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.105181][T10025] usb 2-1: config 0 descriptor?? [ 491.139249][T10025] usb 2-1: can't set config #0, error -71 [ 491.157373][T10025] usb 2-1: USB disconnect, device number 23 [ 491.759587][ T36] wlan0: Trigger new scan to find an IBSS to join [ 492.625467][T10436] netlink: 'syz.4.1211': attribute type 15 has an invalid length. [ 493.291143][ T3476] wlan0: Creating new IBSS network, BSSID 86:4d:16:ba:d9:80 [ 493.303974][T10449] 9pnet_fd: Insufficient options for proto=fd [ 494.295099][T10461] fuse: Bad value for 'fd' [ 494.513085][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 495.325322][T10482] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 495.326574][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.519567][ T31] INFO: task syz.2.705:8619 blocked for more than 143 seconds. [ 495.546064][ T31] Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 [ 495.990272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.000425][ T31] task:syz.2.705 state:D stack:26488 pid:8619 tgid:8616 ppid:5827 task_flags:0x400140 flags:0x00004006 [ 496.012792][ T31] Call Trace: [ 496.013216][T10482] bond1: entered promiscuous mode [ 496.016360][ T31] [ 496.024148][ T31] __schedule+0x116a/0x5de0 [ 496.028665][ T31] ? add_lock_to_list+0x9d/0x130 [ 496.040410][T10482] bond1: entered allmulticast mode [ 496.045608][ T31] ? __lock_acquire+0x622/0x1c90 [ 496.054897][ T31] ? __pfx___schedule+0x10/0x10 [ 496.066644][ T31] ? find_held_lock+0x2b/0x80 [ 496.075980][ T31] ? schedule+0x2d7/0x3a0 [ 496.086216][ T31] schedule+0xe7/0x3a0 [ 496.103626][ T31] bit_wait+0x15/0xe0 [ 496.111563][ T31] __wait_on_bit+0x62/0x180 [ 496.120617][ T31] ? __pfx_bit_wait+0x10/0x10 [ 496.129675][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 496.135822][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 496.147227][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 496.159910][ T31] ? netfs_create_write_req+0x511/0x880 [ 496.167993][ T31] netfs_unbuffered_write_iter_locked+0xaa7/0xd40 [ 496.174764][ T31] netfs_unbuffered_write_iter+0x414/0x6d0 [ 496.180931][ T31] v9fs_file_write_iter+0xbf/0x100 [ 496.187596][ T31] do_iter_readv_writev+0x556/0x820 [ 496.193141][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 496.198910][ T31] vfs_writev+0x35f/0xde0 [ 496.203688][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 496.208583][ T31] ? __lock_acquire+0x622/0x1c90 [ 496.216004][ T31] ? __fget_files+0x20e/0x3c0 [ 496.221997][ T31] ? bpf_trace_run2+0x170/0x590 [ 496.226908][ T31] ? do_pwritev+0x1a6/0x270 [ 496.233691][ T31] do_pwritev+0x1a6/0x270 [ 496.319884][ T31] ? __pfx_do_pwritev+0x10/0x10 [ 496.325560][ T31] ? find_held_lock+0x2b/0x80 [ 496.339720][ T31] ? syscall_trace_enter+0x1cb/0x260 [ 496.345215][ T31] __x64_sys_pwritev2+0xef/0x160 [ 496.353326][ T31] do_syscall_64+0xcd/0x4c0 [ 496.357896][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.363960][ T31] RIP: 0033:0x7f3d21b8e969 [ 496.368411][ T31] RSP: 002b:00007f3d22948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 496.379982][ T31] RAX: ffffffffffffffda RBX: 00007f3d21db5fa0 RCX: 00007f3d21b8e969 [ 496.393265][ T31] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 000000000000000a [ 496.401441][ T31] RBP: 00007f3d21c10ab1 R08: 0000000000000007 R09: 0000000000000004 [ 496.409434][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 496.421469][ T31] R13: 0000000000000000 R14: 00007f3d21db5fa0 R15: 00007fff63d24118 [ 496.429515][ T31] [ 496.435504][ T31] [ 496.435504][ T31] Showing all locks held in the system: [ 496.446562][ T31] 1 lock held by khungtaskd/31: [ 496.454358][ T31] #0: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 496.469148][ T31] 3 locks held by kworker/u8:2/36: [ 496.478408][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 496.494263][ T31] #1: ffffc90000ac7d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 496.504829][ T31] #2: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 496.517113][ T31] 2 locks held by kworker/u8:8/4518: [ 496.523002][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 496.537451][ T31] #1: ffffc9000e817d10 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 496.549508][ T31] 2 locks held by dhcpcd/5480: [ 496.555298][ T31] #0: ffff8880350926d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 496.566615][ T31] #1: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 496.576175][ T31] 2 locks held by getty/5581: [ 496.580995][ T31] #0: ffff888032a310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 496.590868][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 496.603203][ T31] 4 locks held by kworker/1:6/5899: [ 496.608442][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 496.622228][ T31] #1: ffffc90005407d10 (ser_release_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 496.633479][ T31] #2: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: ser_release+0x10e/0x280 [ 496.646127][ T31] #3: ffffffff8e5d0338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 496.657765][ T31] 2 locks held by syz.2.705/8619: [ 496.665706][ T31] #0: ffff888076dea428 (sb_writers#19){.+.+}-{0:0}, at: do_pwritev+0x1a6/0x270 [ 496.677034][ T31] #1: ffff888056c80148 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 496.691482][ T31] 3 locks held by kworker/u8:14/9066: [ 496.699542][ T31] #0: ffff888031ab1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 496.713809][ T31] #1: ffffc9000becfd10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 496.727033][ T31] #2: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 496.740957][ T31] 3 locks held by syz.1.1226/10481: [ 496.746203][ T31] #0: ffffffff903eb750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.757698][ T31] #1: ffffffff903eb808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 496.767630][ T31] #2: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device+0xce/0x1360 [ 496.782972][ T31] 2 locks held by syz.0.1227/10487: [ 496.788307][ T31] #0: ffffffff90a7f800 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 496.803592][ T31] #1: ffffffff90346fa8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 496.812922][ T31] 2 locks held by syz.0.1227/10490: [ 496.818135][ T31] #0: ffffffff903eb750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.829465][ T31] #1: ffffffff903eb808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 496.838635][ T31] 2 locks held by syz.4.1229/10493: [ 496.846955][ T31] [ 496.849324][ T31] ============================================= [ 496.849324][ T31] [ 496.859340][ T31] NMI backtrace for cpu 0 [ 496.859356][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(full) [ 496.859376][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.859386][ T31] Call Trace: [ 496.859392][ T31] [ 496.859399][ T31] dump_stack_lvl+0x116/0x1f0 [ 496.859427][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 496.859444][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 496.859467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.859489][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 496.859509][ T31] watchdog+0xf70/0x12c0 [ 496.859538][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.859561][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 496.859585][ T31] ? __kthread_parkme+0x19e/0x250 [ 496.859607][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.859632][ T31] kthread+0x3c5/0x780 [ 496.859656][ T31] ? __pfx_kthread+0x10/0x10 [ 496.859688][ T31] ? rcu_is_watching+0x12/0xc0 [ 496.859706][ T31] ? __pfx_kthread+0x10/0x10 [ 496.859730][ T31] ret_from_fork+0x5d7/0x6f0 [ 496.859749][ T31] ? __pfx_kthread+0x10/0x10 [ 496.859772][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.859802][ T31] [ 496.859809][ T31] Sending NMI from CPU 0 to CPUs 1: [ 496.985655][ C1] NMI backtrace for cpu 1 [ 496.985669][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(full) [ 496.985687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.985695][ C1] RIP: 0033:0x7f523829ab78 [ 496.985707][ C1] Code: fa 0f 0f 87 c3 00 00 00 44 89 d1 b8 01 00 00 00 4c 8d 0d 9b 94 ff ff d3 e0 89 c1 81 e1 83 08 00 00 0f 84 d2 00 00 00 45 8b 01 <41> f6 c0 01 0f 85 b0 00 00 00 41 8b 41 04 83 f8 01 0f 85 81 00 00 [ 496.985721][ C1] RSP: 002b:00007ffeefa1c400 EFLAGS: 00000202 [ 496.985732][ C1] RAX: 0000000000000002 RBX: 0000000000000376 RCX: 0000000000000002 [ 496.985741][ C1] RDX: 0000000000000000 RSI: 00007ffeefa1c4f0 RDI: 0000000000000001 [ 496.985749][ C1] RBP: 00007ffeefa1c440 R08: 00000000000178ce R09: 00007f5238294000 [ 496.985757][ C1] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000001388 [ 496.985765][ C1] R13: 00000000000927c0 R14: 0000000000079204 R15: 00007ffeefa1c4f0 [ 496.985773][ C1] FS: 000055555b076500 GS: 0000000000000000 [ 496.986733][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 496.986745][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(full) [ 496.986764][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.986773][ T31] Call Trace: [ 496.986779][ T31] [ 496.986785][ T31] dump_stack_lvl+0x3d/0x1f0 [ 496.986809][ T31] panic+0x71c/0x800 [ 496.986829][ T31] ? __pfx_panic+0x10/0x10 [ 496.986847][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 496.986870][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.986888][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 496.986908][ T31] ? watchdog+0xdda/0x12c0 [ 496.986931][ T31] ? watchdog+0xdcd/0x12c0 [ 496.986957][ T31] watchdog+0xdeb/0x12c0 [ 496.986984][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.987006][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 496.987027][ T31] ? __kthread_parkme+0x19e/0x250 [ 496.987046][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.987068][ T31] kthread+0x3c5/0x780 [ 496.987090][ T31] ? __pfx_kthread+0x10/0x10 [ 496.987111][ T31] ? rcu_is_watching+0x12/0xc0 [ 496.987128][ T31] ? __pfx_kthread+0x10/0x10 [ 496.987149][ T31] ret_from_fork+0x5d7/0x6f0 [ 496.987166][ T31] ? __pfx_kthread+0x10/0x10 [ 496.987186][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.987213][ T31] [ 497.218781][ T31] Kernel Offset: disabled [ 497.223083][ T31] Rebooting in 86400 seconds..