last executing test programs: 14m46.387990465s ago: executing program 2 (id=853): openat(0xffffffffffffff9c, &(0x7f0000002280)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 14m46.293865197s ago: executing program 2 (id=855): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000119991261116598cfb9baf40556ce111eea901e5405393b160ab8989851c7981e7838e88901d90532fa2a36bbd920483b5f3693148e6312ef8715ca43f80728110eab1c64135421d94d4abf417", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="ebfb141ad6c7d285f86c75798f7b5a7ce5119aee90417f97a6ae1b41d20d05712d1a530bf5780fafa9c1e3a4c4fb3672bffb1982b782f12883fb0ba8c22d44f981aceb3d4ec613f171d1c244bba6499f4aa830f644379ebc2fc5540bdba6d0e785b252525afbd44a087f208c6f8f5b51ccd78645bca1ad2734bdf5781e9c2ce167312aceffbe06ea10782948bac66dc03c4cbf1c62c9eb815d3a013c56b21320abab349c36fc85bc1d3e08991b72c7569be48f63fa7e89a84870ce891fea66403cd1d24db1b060f3c99cbd6be65d2121c6242e87d65af3e8ccd48a86c64c013cd6f72e84329de0fa822ac5aa7aa731eb8756061503f5f3d92b", @ANYRES8=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) socket$kcm(0x2, 0x5, 0x84) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x52d35ce30131f272}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 14m44.189368696s ago: executing program 2 (id=863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000981000/0x400000)=nil) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="1ce92f800c000200000000e1f1f40fb03685a575ffdec300e6dad45a1d80080018165ef87801"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc880) r9 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f7cfef8adf22750b01000000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001c0012800900010069706970000000000c00028008000200ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x10044801}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000180)) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x2, 0x0) r12 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r12, 0x0, 0x15, 0x0, &(0x7f00000004c0)) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) 14m42.264082314s ago: executing program 2 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2b6a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) close(0x3) mount$fuse(0x0, 0x0, 0x0, 0xa0020, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 14m41.220008134s ago: executing program 2 (id=873): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='xprt_reserve\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m40.211907355s ago: executing program 2 (id=877): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000340)=""/47}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x9, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 14m39.686202022s ago: executing program 32 (id=877): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000340)=""/47}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x9, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 7m51.447196413s ago: executing program 4 (id=2779): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10) syz_emit_ethernet(0x71, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x3b, 0x2c, 0x1, @remote, @mcast2, {[], {0x0, 0x0, 0x3b, 0x0, @opaque="02aadf0062dfafe40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64ef6"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000084000000000000100000005000500010000000800040000000000050006000000005cb26464de00"], 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/crash_elfcorehdr_size', 0x129a82, 0x29) sendfile(r5, r5, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x274) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 7m50.271559253s ago: executing program 4 (id=2784): ioprio_set$pid(0x2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1970024, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d6f64653d30303000590000000000000000303030302c00002dad157373b0577c"]) 7m49.917084268s ago: executing program 4 (id=2786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f800000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 7m48.835963116s ago: executing program 4 (id=2788): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8230}, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, r7, 0x36, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8820000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042bbd8e00fddbdf25050000000600020000000000050005000000000005000d0000000000050007000200000008000a0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x300, 0x0, 0x25dfdbfc, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d1) 7m47.587137704s ago: executing program 4 (id=2798): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7, 0x441) readv(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000240)=""/100, 0x64}], 0x6) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) (async) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000050000000500b1a7481769da4d8d4f8371ec86126e4dd7f4d98bc7b7488ef2f3a5fce2b39844fc56478c85c6fc2fa2380fbf7c2c5a0b3cba09676eb146cef63caf413a5aa8667dad3518d5aa98fc6af396ecc534d3184eeec0f3072df34d21fc7766ec305715705b63ce2c8f411dd9f6d4afffe1836e8a25a82ea78d3e791531194a58199b3ebadecaba386f4bdbb6a60a0246e5272eab9bd74c912a1304d692fac955f00809a1c8d46dc5618e8c2e40d22ada75c4f4a23c14e02228897fab28366b13e841e406208efd9d3156b6"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "043c"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xeb2d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 7m47.290098925s ago: executing program 4 (id=2803): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x4, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) shutdown(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000040) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0xfffffffffffffffc, 0x7b, 0x0, 0x6, 0x1, 0x101}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) setreuid(0xee01, 0xee01) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000585000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00004d8000/0x1000)=nil) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000b07900000000000000000200000024000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffd}}, 0xb8}}, 0x10) 7m46.355432865s ago: executing program 33 (id=2803): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x4, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) shutdown(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000040) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0xfffffffffffffffc, 0x7b, 0x0, 0x6, 0x1, 0x101}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) setreuid(0xee01, 0xee01) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000585000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00004d8000/0x1000)=nil) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000b07900000000000000000200000024000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffd}}, 0xb8}}, 0x10) 3m50.10712019s ago: executing program 5 (id=3741): ioprio_set$pid(0x2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) 3m49.639705364s ago: executing program 5 (id=3743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x262) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) pipe(&(0x7f0000000600)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m48.407229881s ago: executing program 5 (id=3746): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000500)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x8}], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x80, 0x0, @local, 0x14}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) getresuid(&(0x7f0000000040), &(0x7f0000000080), 0xfffffffffffffffd) r6 = socket(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0xd0}, 0x90) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xce, 0x5, "c98883efd9a8d8e8df68b87f23641a8587515b3c67410e7edf8d43aa9f7b8a3444d9542ee69491966337b07450319c14d74fa2590a7dc5c736a1ce1ad171fba3842cec0050d15773e0e6bf9566e43d2576132bf7f1e79bebea9c735080b4c5f5567dff4aa9a6683b89c78b262d1cb0e0d58419a0a6de1ceee234ad6b1721bad241f9d67d02d11415c01225ada041be5e0a381964c70de8a52be4ffffe9d639afb57a02c8ca47e277b9d9e8a58eedfdbde62677d46c8b0dcc0e4e44d40ea3ea645aed538017113e5bd7e2"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040044) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000080), 0x2, 0x0) 3m47.474893698s ago: executing program 5 (id=3747): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000002000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x491, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r4, &(0x7f00000001c0)='./file0/file0\x00', r5, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) 3m46.492131004s ago: executing program 5 (id=3750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 3m46.157947305s ago: executing program 5 (id=3753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) get_mempolicy(0x0, &(0x7f0000000880), 0x10000, &(0x7f0000ff9000/0x4000)=nil, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000d4a4f607c9862e0c829888d757f9c75d89951db8adeac4e98349728261a10aa949029e0cfb26b52f65237b199f466256aaecaf93d190e605d8d5dcd1e02e47abf16dedac29452a2b8415b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, 0xffffffffffffffff, 0x7}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000240)='\x00'/15, 0xf}, {&(0x7f0000000100)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f0000000200)="3ba0554997b8a8473caefcf72c9732d7ff5c05b504e6", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000b80)="e59fed5a149194bc150130b8849976ca9f0e3102309d39ea3327de066a10d61b31783c99af2cea8c4a2a5718f9716e62fd77719730763c1466c283a8fa547ec1a299390c5fbe5e42b86593fb82f732e1517150ff24d291e77a9107051060be60bb83016f77719ebf815700aa72627ffcda8ace52e7f6fd7af114054dc8ace6b32233b8519b7c8302d730f67debf7e42014417cb4d065f4ea147066617e5cd127cc447f2bbc24afa8", 0xa8}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0xffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x8000, 0x7ffd, 0x32c, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x13, 0x1}) io_uring_enter(r7, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010002000000104e040b120000000000010902240001000000040904000d0203000200092100000001220300090581030000ee050180badaa5545c602dfb5258501cb76b67b8e20b93014b79a303ea1015ebf0bd13565d8c71bb1b63e6229d44b19e75d641b716495af0ad3eb37722fd1711da91911655130cfa804f80539d01a42d44e9d840bbb1f69b74dea9ee588c70174b7edc2002675a79a3a4ff060c81f87b46dd51490e587bdca67732d5c5d887346798185a3b57448fe7570e008df2a6e03382aab3bf6ee480e47e"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 3m45.744907034s ago: executing program 34 (id=3753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) get_mempolicy(0x0, &(0x7f0000000880), 0x10000, &(0x7f0000ff9000/0x4000)=nil, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000d4a4f607c9862e0c829888d757f9c75d89951db8adeac4e98349728261a10aa949029e0cfb26b52f65237b199f466256aaecaf93d190e605d8d5dcd1e02e47abf16dedac29452a2b8415b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, 0xffffffffffffffff, 0x7}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000240)='\x00'/15, 0xf}, {&(0x7f0000000100)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f0000000200)="3ba0554997b8a8473caefcf72c9732d7ff5c05b504e6", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000b80)="e59fed5a149194bc150130b8849976ca9f0e3102309d39ea3327de066a10d61b31783c99af2cea8c4a2a5718f9716e62fd77719730763c1466c283a8fa547ec1a299390c5fbe5e42b86593fb82f732e1517150ff24d291e77a9107051060be60bb83016f77719ebf815700aa72627ffcda8ace52e7f6fd7af114054dc8ace6b32233b8519b7c8302d730f67debf7e42014417cb4d065f4ea147066617e5cd127cc447f2bbc24afa8", 0xa8}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0xffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x8000, 0x7ffd, 0x32c, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x13, 0x1}) io_uring_enter(r7, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010002000000104e040b120000000000010902240001000000040904000d0203000200092100000001220300090581030000ee050180badaa5545c602dfb5258501cb76b67b8e20b93014b79a303ea1015ebf0bd13565d8c71bb1b63e6229d44b19e75d641b716495af0ad3eb37722fd1711da91911655130cfa804f80539d01a42d44e9d840bbb1f69b74dea9ee588c70174b7edc2002675a79a3a4ff060c81f87b46dd51490e587bdca67732d5c5d887346798185a3b57448fe7570e008df2a6e03382aab3bf6ee480e47e"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 2m45.923887079s ago: executing program 0 (id=3917): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r1, 0x5ad2278d, 0xfff9, "8dc47007c3e528aa07c2d6460c983e4c70c309337f80faeb0524662b4ec3ee7668943ecf618aa0551a9236acbe9d3e6e6f0b8a32195149969d3e814f2251b69f678d71fbb1f602e43c4f1725181e9209dafefb8f91544cdf8471666539318ebdffc2b2c116b78bfb8aa0f3b9c0cd474695b501a1760103d8328e3362f66026aa5a92b27b327a9b951dfa2587a1da7b60a43ed40a557351f735127054a51774e82320e5b3c5f17649f92883f56047ea2b73fa"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000100)={0x40, 0xc, 0xfb, {0xfb, 0x30, "5eface5f2ea1dd4bcab00ed7bb4dbe891fc681e2074784a972ced1849ad821cca85450ca86548c31001ae024c54f8781478c0d29e49484cb271933c48b972efde0acf26de0adb50890765d7f9d7d81749989ddfee65e140b4f124ed111fc57b1c74594b881376ab00d8a2e08e0c66e6557b8315f26c38135290cbe537b61f109bbf74b86dcb6c297e129c6c1c5883b6bd175c07a545e239f55f025dc58748121c0b191cd33ef906c1fd13f2038dc9941d4e02767f26c207233962de14b532d853ed84bc70f7cd0a65d4fa9794874a6ac9b2f0f7bba583258fc10f141554c060edcb0efb4f603d1f5e0abfa219a973a00da8ff0613795afca6f"}}, &(0x7f0000000240)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "e69c58e510a444ae948a47acca15fa2f65e91cb0c0cc190aa1d2020fe0ee5b3f7fe83c7699e7da1526fc4103a3bcdf8b3309acc8caf8717f6f3ffa310499cd2ceee74ccab5b84198e84bace8b28c37bd6ff64dda2442d52d0e1212d4edd549e20ffdafad6fe8397b6633b1ac9c8bab03dd98754e8a1571ec49f49b699400ac59d49621e72c424eea0c1c909b3618b7c3900d7432aad94a4cbd867d0ad4cd839cce470310c2313d5e92a2204fdb2b00be9fd0e4af27fa6271bff2f7bf2759b26e8857de124f96737d9e3ac37c2dcb1fcca24fd6f478b3548177819c6033e5c8"}}, &(0x7f0000000340)={0x0, 0x22, 0x14, {[@main=@item_012={0x2, 0x0, 0x9, "ac49"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x8, "c18d51fa"}, @main=@item_4={0x3, 0x0, 0x8, "72b180f1"}, @local=@item_4={0x3, 0x2, 0x3, "2ac604e3"}, @local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1980, 0x22, 0x1, {0x22, 0x90}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0x55, "a7a562d99594f89f265e96f337c1e305c9dda474835e9305aaa7cdf01b3953e3b278d8c320aca923076b2fc431907630bd25d80283313663cdd085ecc619106afe1d4a0f7b8d594f33da1c232e1111d7d3b63335c4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x1, 0x2d, "714a041068d1e10ea98f5269e2b56e20ed28586f67157967a931cc21cc7c25c7081f20d3e0100f72765af4b3c8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m42.212416863s ago: executing program 0 (id=3927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000110000000000000000000000850000000f000028b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfbf00000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 2m40.799089352s ago: executing program 0 (id=3930): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) capset(&(0x7f00000001c0)={0x20071026, r3}, &(0x7f0000000040)={0xdb0, 0x200000, 0x0, 0x0, 0x0, 0x1000}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) 2m36.777548694s ago: executing program 0 (id=3944): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0xf}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x78}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48044}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20d02030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r6}, 0x18) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000003c0)={0x20, 0xf, 0x2, "a685"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.47866065s ago: executing program 0 (id=3953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000f80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000bb000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) (async) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x1c, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x5b}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x1e9700, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) (async) fsopen(&(0x7f0000000700)='affs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440), &(0x7f00000000c0)=0x8) (async) socketpair(0xf, 0x6, 0x6, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2m32.371525751s ago: executing program 0 (id=3954): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @private0, @mcast1, 0x7, 0x7, 0x0, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800490000380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50002935f47708009078000000000000000000000000a9f264d85111060a1acafb3bb56d120d3ada8f592d2a791acc5eee6ee11f0a604d3e22744f509aaa0c5675ecd16d9f32f2ee89653745a2a61b426c203a55fbfe526f3db4da7c22732deb27e141c13b1c8a94ea603a7e3648988739dc054960fc2d608411d2c79c71914663edda1d39b878b9a0f8488ca39b4d7b1234dd97049fda724422b1e2616d19dfc4be"], 0x0) (async) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (async) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/207, 0xcf}], 0x1) 2m17.362347616s ago: executing program 35 (id=3954): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @private0, @mcast1, 0x7, 0x7, 0x0, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800490000380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50002935f47708009078000000000000000000000000a9f264d85111060a1acafb3bb56d120d3ada8f592d2a791acc5eee6ee11f0a604d3e22744f509aaa0c5675ecd16d9f32f2ee89653745a2a61b426c203a55fbfe526f3db4da7c22732deb27e141c13b1c8a94ea603a7e3648988739dc054960fc2d608411d2c79c71914663edda1d39b878b9a0f8488ca39b4d7b1234dd97049fda724422b1e2616d19dfc4be"], 0x0) (async) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (async) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/207, 0xcf}], 0x1) 1m14.757712714s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1m6.274481019s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 48.888812332s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 40.494235273s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 26.025967811s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 11.882980627s ago: executing program 3 (id=4363): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs/binder0\x00', 0x800, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b400)={0x11, 0x24, &(0x7f000001b4c0)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000dddda65e1d8c4417b1c1dbd234fb1ce5a1206759b3e72adfd8747a251142f74c7cbff595de090356504a26d7a46d72b7183e335c92e73c6191495fbce19908c632bcc6c6beac671cebb0e73143239314692d2633233dec19df9a9c0dc6c859d006094cfd52757f76defb92d53170697d76ccff466fd413da202b770ce4af95b309640637fd", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000da00000085"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x3a, &(0x7f0000000280)=""/58, 0x41100, 0x1d, '\x00', r0, 0x0, r1, 0x8, &(0x7f000001b6c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03c}, {0x6}]}, 0x10) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) eventfd2(0x65c, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 10.326460498s ago: executing program 3 (id=4371): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 9.759826785s ago: executing program 3 (id=4373): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 9.417794191s ago: executing program 1 (id=3700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x81, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x10008, 0x0, 0x3}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1008}, {{&(0x7f00000003c0), 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x8, &(0x7f0000000a80)=""/77, 0x4d}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x20, 0x161041, 0x40, 0x6, 0x6, 0x0, 0x800, 0x0, 0x0, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/155, 0x9b}], 0x1, 0x7ffe, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 7.501276186s ago: executing program 3 (id=4376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup(r2) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000001740)=[{{&(0x7f0000000140)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/27, 0x1b}, 0x3}, {{&(0x7f0000001300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001380)=""/31, 0x1f}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/169, 0xa9}, {&(0x7f0000001480)=""/120, 0x78}, {&(0x7f0000001500)=""/96, 0x60}, {&(0x7f0000001580)=""/222, 0xde}], 0x6, &(0x7f0000001700)}, 0xffff}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x2000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9159, 0x6731, &(0x7f0000006680)=0x4) unshare(0x20040600) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[]) 5.625909608s ago: executing program 7 (id=4380): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt-,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt-,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) (async) 5.194593378s ago: executing program 7 (id=4383): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x8b92, 0x100, 0x0, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x4d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f00000001c0)=0x28, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.80787908s ago: executing program 7 (id=4385): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x4}) 4.363805365s ago: executing program 8 (id=4388): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$video(&(0x7f0000000400), 0x7f, 0x503000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000540), 0x80, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000440)=""/192, &(0x7f0000000040)=""/26, &(0x7f00000000c0)=""/48, 0xe6ee8000}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac00", "90be8b38559265406c09306003d8002000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x15}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x1000000, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44051}, 0x4004) r7 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(r0, 0x100000, &(0x7f0000000180)=0x100, &(0x7f00000001c0)=0x79) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 3.672687372s ago: executing program 7 (id=4389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r6}) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.645261161s ago: executing program 3 (id=4390): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 3.469240345s ago: executing program 8 (id=4391): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36f, 0x10100, 0x0, 0x155}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x51ce8, 0x4, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x2000281c) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYBLOB="188afdba6857c954373ec8359d0a181d102f48ad7f92343db1aef9251cd66db88cd3b31c16bf3c306aaf21fef1ab1e7141276825c6167bae6abff9167f33a3f0ce7960187f23af6fb5a367c417fbe6aa5fe5811711576037a3f5b64c613982b1cc0a61d76367017b32ef0b61752ff54541afd37e7b696fd418f63746fa89b479e63e8f61f5d95c6771dca198a815a2c8d2", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="348960c1", @ANYRES16=r6, @ANYBLOB="050003000000000000002e0000000a00340002020202020200000a00060008021100000100000800350000000000"], 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="3ef800000802110000010802110000000802110000000000000000000000000064000100ea52fccc10b16c7e887a5d4c0a730c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000800000200"/30], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000840)=ANY=[@ANYBLOB="3e766f4b75469b33a20215eb69643d8d69f3e4f87cfada2f4f75d24a6c1e1e775feb6824e75b76515e39210e77779816932338225bd6967423692c020ca746021636cadfb5bc390bae80e09fd6c148b8912d00b366316008a3175f5d3f5407232afb82371f3aba5686a355d1b48f1651b09552e630744dde3e783824919988cf728284ecd6a896", @ANYBLOB="67b2daeab8628681e197d988eb0400000000000000b8331013bff4a0c5ffaa2da8880dc5e01ed9f6b9aa8d41694d5b9f75eaf73231baa58f4615d745c402c125d630636f54a8848ee270dd463fd024f0329b915ef72b9b43eac66f2aefcbf540e5937af69699ae0729a29f8005a061325eabe3c1b322b8e385d88bf4f687919de4ee4d779d7b30a5c19e4cdc27eb915ec29048b4dedd7c14f3b15750afeaf4ed941bf78aa89c6451124f32326dabbc86fae96915a1649f56c241dcdffec2b96ba57f8402de5fd40cf35ad81e6ae81090e1f3df7864828a9da82fc787756329629e7e98128554697108cf72aeccfa19395341b5a224e9d04a"], 0x28) sendmsg$nl_route_sched(r0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000080)={0xaa, 0x7f, 0x7fff}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008cc454200304dcbf8ef7ff0203ff080209000000df000044466b97d7e0ded491f0be5a7158051d723fb3f46e33d6a6"], 0x0) 2.726399843s ago: executing program 8 (id=4392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) truncate(&(0x7f0000000180)='./file1\x00', 0x8000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4) 2.651507996s ago: executing program 7 (id=4393): r0 = shmget$private(0x0, 0x800000, 0x100, &(0x7f0000173000/0x800000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) chown(0x0, 0x0, 0xee01) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xfb25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220400b9}, 0x40040) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) syz_open_pts(r1, 0x80000) shmat(r0, &(0x7f0000287000/0x2000)=nil, 0xffffffffffffcfff) socket$inet6(0xa, 0x3, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x802) 2.383533998s ago: executing program 8 (id=4394): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) 2.163658102s ago: executing program 6 (id=4395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = epoll_create(0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002680)={0x2}) read$msr(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000680)={0x2, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)}, {&(0x7f0000000580)=""/140, 0x8c}], &(0x7f0000000640)=[0x8, 0x8ccf, 0xaa2e, 0x101]}, 0x20) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x40000002, &(0x7f0000000440)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r6, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r6, 0x0, 0x1500}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.403096302s ago: executing program 8 (id=4396): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = dup(r2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x4001c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500)=0xffffefdfbffffff8, 0xef9) r8 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7fff}, 0x0, 0x2, 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "12e5f23c2edf2cacbf8058fa31f144f84f2dcba667379c8e384d6463521ed7af", "9f5deca0afe9202756c24bd4e443651dd70a66d3aedac133c8c91c1b6929650f", "9b711a48f420b58630f686075eba26c5de61f1f74246f0233879cbd2864b03cf", "bbae26cf7cd15c056d1883c15387ca0e318e864aa47894870783407051fe8fc9", "9f91b68a21397390a69336dd21f1bb4bce429ec6a6ffd1d50190629200c5b21a", "a5f2e5f7b4f334e8fbf51985"}}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0) 1.284418866s ago: executing program 6 (id=4397): r0 = syz_io_uring_setup(0x3113, 0x0, &(0x7f0000000480)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x11e357f5638e4c9}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 853.63866ms ago: executing program 7 (id=4398): openat$sysfs(0xffffffffffffff9c, 0x0, 0x880, 0x0) io_setup(0x6, &(0x7f00000003c0)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f"], 0x1c}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='scmi_rx_done\x00', r5, 0x0, 0x1ff}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) syz_open_procfs$pagemap(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x0, 0x6, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[], 0x50e) fsopen(&(0x7f0000000300)='btrfs\x00', 0x0) 779.934232ms ago: executing program 6 (id=4399): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x12, 0x610, 0x148, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "092233fed8bc5dedf3f4d6e243e594b232ebf904fcd38feb4712a47f9497"}}, {{@ipv6={@mcast1, @mcast2, [], [0x0, 0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'wg0\x00', {0xc3d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) mount$cgroup(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={[{@cpuset_v2_mode}]}) 742.640449ms ago: executing program 6 (id=4400): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000440000000500000008000900020000000c001600fbffffffffffffff060001000500000008000b000200000005001404fe00000008000c"], 0x48}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x7fffffff, 0x0, &(0x7f0000000080)=[r5, r5, 0xffffffffffffffff, r7, r1, r4, r0]}, 0x7) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140008"], 0x28}}, 0x0) 698.624698ms ago: executing program 8 (id=4401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 327.617168ms ago: executing program 6 (id=4402): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x9, 0x400000, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, r1, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/29], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000000000000000ac1e000100000000000000000000000000000080000000000a004000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) sendto$phonet(r7, &(0x7f0000000280)="d4a0cb6f5dee9567a25acb60bd9aeb7907d2450f8e9412ec6e5170957e38156a234d2f83e147b4108473f92a0d6c913b27e56c5681032018e3fe185e38074a23e017ff93f8c2088b690c44802633c811a7e19c206e8d8c514973c973ac2159d1abe811d1683691d6c4dafabf988990fd03219f38c91794ed61d17cc5848a0876a163c02807354d6692b768ca04a213c595c07ca747842ea7e05f1400dbc37b21a487475ce19cc2866bebe995074c4d1fce06158a5fed6518", 0xb8, 0x40014, &(0x7f0000000440)={0x23, 0x20, 0x0, 0x3}, 0x10) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x40001e0, 0x0) (rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x43, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async, rerun: 64) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 319.530845ms ago: executing program 3 (id=4403): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x2, 0x6}, 0xfffffffffffffdd9) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x7}], 0x1, 0x0, 0x0) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x3, 0x1, 0x4, 0xfffffe01, 0x3, 0xfffffffffffffff9, 0x3, 0x3, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 6 (id=4404): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3e8, 0x110, 0x110, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xff000000, 0x8, 0xa, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0x101]}}, 0x5, 0x9, 0x4, 0x2, 0x4, 0xf761, 'hsr0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @loopback, 0x7, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xff0000ff, 0xe, 0xa, {@mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xf6, 0x80, 0x1, 0xe, 0x8, 0x6, 'ip6_vti0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x9}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @rand_addr=0x64010102, 0x0, 0xff, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x8, 0x0, 0xfff8, 0x3, 0x5, 0x4, 'pim6reg0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x20a}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0xfffffffffffffffa}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast2}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) kernel console output (not intermixed with test programs): 993 comm="syz.6.4160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa018e929 code=0x0 [ 1119.578236][T20874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.609911][T20874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.657738][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.664918][T14494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.672655][T18427] Bluetooth: hci1: command tx timeout [ 1119.698713][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.705883][T14494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.535178][T21013] netlink: 'syz.6.4163': attribute type 7 has an invalid length. [ 1120.939682][T20874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.075583][ T5965] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1121.290028][T20874] veth0_vlan: entered promiscuous mode [ 1121.323239][T20874] veth1_vlan: entered promiscuous mode [ 1121.397147][ T5965] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.403898][T20874] veth0_macvtap: entered promiscuous mode [ 1121.422097][ T5965] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.434251][T20874] veth1_macvtap: entered promiscuous mode [ 1121.443940][ T5965] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1121.462694][ T5965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1121.469418][T20874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.479286][ T5965] usb 9-1: SerialNumber: syz [ 1121.523027][T20874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.544758][T20874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.554321][T20874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.564028][T20874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.574375][T20874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.752062][ T5965] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.759952][ T5965] usb 9-1: MIDIStreaming interface descriptor not found [ 1121.880200][ T5965] usb 9-1: USB disconnect, device number 4 [ 1121.895666][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.903501][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.001531][T16726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.042549][T16726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.397825][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1123.486531][ T5957] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1123.655147][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 1123.694383][ T5957] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1123.722373][ T5957] usb 7-1: config 7 has an invalid interface number: 193 but max is 0 [ 1123.735510][ T5957] usb 7-1: config 7 has no interface number 0 [ 1123.741649][ T5957] usb 7-1: config 7 interface 193 has no altsetting 0 [ 1123.750509][ T5957] usb 7-1: New USB device found, idVendor=0711, idProduct=0950, bcdDevice=af.fb [ 1123.759675][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.767725][ T5957] usb 7-1: Product: syz [ 1123.771894][ T5957] usb 7-1: Manufacturer: syz [ 1123.776584][ T5957] usb 7-1: SerialNumber: syz [ 1123.992688][ T5957] sisusb 7-1:7.193: Invalid USB2VGA device [ 1124.001553][ T5957] sisusb 7-1:7.193: probe with driver sisusb failed with error -22 [ 1124.011579][ T5957] usb 7-1: USB disconnect, device number 55 [ 1124.142147][T21059] netlink: 'syz.8.4178': attribute type 7 has an invalid length. [ 1124.240062][ T6065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.868903][ T6065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.924227][ T6065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.977877][ T6065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.083828][ T6065] bridge_slave_1: left allmulticast mode [ 1125.089535][ T6065] bridge_slave_1: left promiscuous mode [ 1125.095443][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.103801][ T6065] bridge_slave_0: left allmulticast mode [ 1125.110360][ T6065] bridge_slave_0: left promiscuous mode [ 1125.116529][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.411095][ T6065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.421503][ T6065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.431356][ T6065] bond0 (unregistering): Released all slaves [ 1125.581482][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4180'. [ 1125.594620][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.602321][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.625930][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.666513][T21067] overlayfs: failed to resolve './file0': -2 [ 1126.025198][ T5957] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1126.074245][T19232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.086710][T19232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.096269][T19232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.106966][T19232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.114562][T19232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.174638][ T6065] hsr_slave_0: left promiscuous mode [ 1126.180743][ T6065] hsr_slave_1: left promiscuous mode [ 1126.186978][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.194528][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.213714][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.231067][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.238643][ T5957] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1126.246827][ T5957] usb 9-1: can't read configurations, error -22 [ 1126.270214][ T6065] veth1_macvtap: left promiscuous mode [ 1126.275872][ T6065] veth0_macvtap: left promiscuous mode [ 1126.281606][ T6065] veth1_vlan: left promiscuous mode [ 1126.286979][ T6065] veth0_vlan: left promiscuous mode [ 1126.407518][ T5957] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1126.580239][ T5957] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1126.588988][ T5957] usb 9-1: can't read configurations, error -22 [ 1126.597132][ T5957] usb usb9-port1: attempt power cycle [ 1126.955353][ T5957] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1127.013097][ T5957] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1127.030402][ T5957] usb 9-1: can't read configurations, error -22 [ 1127.172485][ T6065] team0 (unregistering): Port device team_slave_1 removed [ 1127.199916][ T5957] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1127.270580][ T5957] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1127.287465][ T5957] usb 9-1: can't read configurations, error -22 [ 1127.287869][ T6065] team0 (unregistering): Port device team_slave_0 removed [ 1127.342982][ T5957] usb usb9-port1: unable to enumerate USB device [ 1127.551040][T21098] netlink: 'syz.6.4191': attribute type 7 has an invalid length. [ 1128.225391][T18427] Bluetooth: hci1: command tx timeout [ 1128.239421][T21079] lo speed is unknown, defaulting to 1000 [ 1128.360186][T21079] chnl_net:caif_netlink_parms(): no params data found [ 1128.409141][T21079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.416373][T21079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.423640][T21079] bridge_slave_0: entered allmulticast mode [ 1128.431029][T21079] bridge_slave_0: entered promiscuous mode [ 1128.439003][T21079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.446133][T21079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.453337][T21079] bridge_slave_1: entered allmulticast mode [ 1128.460027][T21079] bridge_slave_1: entered promiscuous mode [ 1128.464944][ T5965] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1128.491992][T21079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.502826][T21079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.536434][T21079] team0: Port device team_slave_0 added [ 1128.544772][T21079] team0: Port device team_slave_1 added [ 1128.565442][T21079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.572394][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.598777][T21079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.611535][T21079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.618684][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.648930][T21079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.675500][ T5965] usb 7-1: too many configurations: 64, using maximum allowed: 8 [ 1128.688035][T21079] hsr_slave_0: entered promiscuous mode [ 1128.694077][T21079] hsr_slave_1: entered promiscuous mode [ 1128.700400][T21079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.708143][T21079] Cannot create hsr debugfs directory [ 1128.713631][ T5965] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1128.721534][ T5965] usb 7-1: can't read configurations, error -61 [ 1128.858222][ T5965] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1129.068865][ T5965] usb 7-1: too many configurations: 64, using maximum allowed: 8 [ 1129.101135][ T5965] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1129.169719][ T5965] usb 7-1: can't read configurations, error -61 [ 1129.225851][ T5965] usb usb7-port1: attempt power cycle [ 1129.389693][T21118] FAULT_INJECTION: forcing a failure. [ 1129.389693][T21118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.404061][ T30] audit: type=1400 audit(1751300074.974:2011): avc: denied { write } for pid=21116 comm="syz.8.4196" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1129.428108][T21118] CPU: 0 UID: 0 PID: 21118 Comm: syz.8.4196 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1129.428133][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1129.428143][T21118] Call Trace: [ 1129.428147][T21118] [ 1129.428152][T21118] dump_stack_lvl+0x16c/0x1f0 [ 1129.428173][T21118] should_fail_ex+0x512/0x640 [ 1129.428190][T21118] _copy_to_user+0x32/0xd0 [ 1129.428206][T21118] simple_read_from_buffer+0xcb/0x170 [ 1129.428222][T21118] proc_fail_nth_read+0x197/0x270 [ 1129.428236][T21118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.428250][T21118] ? rw_verify_area+0xcf/0x680 [ 1129.428262][T21118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.428275][T21118] vfs_read+0x1e4/0xc60 [ 1129.428290][T21118] ? __pfx___mutex_lock+0x10/0x10 [ 1129.428306][T21118] ? __pfx_vfs_read+0x10/0x10 [ 1129.428322][T21118] ? __fget_files+0x20e/0x3c0 [ 1129.428341][T21118] ksys_read+0x12a/0x250 [ 1129.428354][T21118] ? __pfx_ksys_read+0x10/0x10 [ 1129.428370][T21118] do_syscall_64+0xcd/0x4c0 [ 1129.428388][T21118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.428399][T21118] RIP: 0033:0x7f38b878d33c [ 1129.428409][T21118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1129.428419][T21118] RSP: 002b:00007f38b95dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1129.428430][T21118] RAX: ffffffffffffffda RBX: 00007f38b89b6080 RCX: 00007f38b878d33c [ 1129.428436][T21118] RDX: 000000000000000f RSI: 00007f38b95dd0a0 RDI: 0000000000000005 [ 1129.428442][T21118] RBP: 00007f38b95dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.428448][T21118] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1129.428455][T21118] R13: 0000000000000000 R14: 00007f38b89b6080 R15: 00007ffe3fad5fa8 [ 1129.428468][T21118] [ 1129.510935][T21079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1129.598163][ T30] audit: type=1400 audit(1751300074.974:2012): avc: denied { open } for pid=21116 comm="syz.8.4196" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1129.726081][ T5965] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1129.750256][ T5965] usb 7-1: too many configurations: 64, using maximum allowed: 8 [ 1129.782241][ T5965] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1129.785031][T21079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.790094][ T5965] usb 7-1: can't read configurations, error -61 [ 1129.889640][T21079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1129.936021][ T5965] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1129.949759][T21079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1129.976573][ T5965] usb 7-1: too many configurations: 64, using maximum allowed: 8 [ 1129.998086][ T5965] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1130.004636][T21125] netlink: 'syz.8.4197': attribute type 39 has an invalid length. [ 1130.010791][ T5965] usb 7-1: can't read configurations, error -61 [ 1130.020796][ T5965] usb usb7-port1: unable to enumerate USB device [ 1130.063401][T21079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.080517][T21079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.093017][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.100124][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.112768][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.119938][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.307353][T18427] Bluetooth: hci1: command tx timeout [ 1130.583283][T21079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.683123][T21079] veth0_vlan: entered promiscuous mode [ 1130.711184][T21079] veth1_vlan: entered promiscuous mode [ 1130.762327][T21079] veth0_macvtap: entered promiscuous mode [ 1130.779395][T21079] veth1_macvtap: entered promiscuous mode [ 1130.809431][T21079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.861668][T21079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.891348][T21079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.903799][T21079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.916352][T21079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.925486][T21079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.030418][ T5957] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1131.075085][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.085934][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.152390][T14494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.161529][T14494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.185110][ T5957] usb 9-1: Using ep0 maxpacket: 16 [ 1131.207507][ T5957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.220103][ T5957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.231468][ T5957] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1131.247154][ T5957] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1131.285325][ T5957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.295677][ T5957] usb 9-1: config 0 descriptor?? [ 1131.366577][T21154] afs: Unknown parameter '0x000000000000000000000000000000000000' [ 1131.688008][ T5965] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1131.710897][ T5957] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 1131.718563][ T5957] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 1131.725562][ T5957] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 1131.732588][ T5957] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 1131.739688][ T5957] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 1131.749921][ T5957] input: HID 0955:7214 Haptics as /devices/virtual/input/input84 [ 1131.763231][ T5957] shield 0003:0955:7214.004D: Registered Thunderstrike controller [ 1131.771999][ T5957] shield 0003:0955:7214.004D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1131.845078][ T5965] usb 7-1: Using ep0 maxpacket: 8 [ 1131.854037][ T5965] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1131.865656][ T5965] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1131.878963][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1131.890210][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1131.901522][ T5965] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1131.916373][ T5965] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1131.925576][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.933614][ T5965] usb 7-1: Product: syz [ 1131.938200][ T5965] usb 7-1: Manufacturer: syz [ 1131.942839][ T5965] usb 7-1: SerialNumber: syz [ 1131.950159][ T5965] usb 7-1: config 0 descriptor?? [ 1131.960155][ T5965] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input85 [ 1131.977295][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1132.163510][ T5794] usb 7-1: USB disconnect, device number 60 [ 1132.234207][T21160] netlink: 'syz.8.4202': attribute type 2 has an invalid length. [ 1132.242209][T21160] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4202'. [ 1132.646852][T16726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.895272][ T5957] shield 0003:0955:7214.004D: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1132.907992][ T5957] shield 0003:0955:7214.004D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1132.919362][ T5957] shield 0003:0955:7214.004D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1132.930628][ T5957] shield 0003:0955:7214.004D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1133.045048][ T5965] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 1133.185017][ T5965] usb 9-1: device descriptor read/64, error -32 [ 1133.445138][ T5965] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 1133.575103][ T5965] usb 9-1: device descriptor read/64, error -32 [ 1133.827680][ T5965] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 1134.046168][ T5965] usb 9-1: device not accepting address 9, error -71 [ 1134.783933][T21171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 1134.806504][T16726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.948228][T19232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1134.958285][T19232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1134.968766][T19232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1134.981408][T19232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1134.989142][T19232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1135.061541][T16726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.071895][ T5965] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 1135.533377][T16726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.604313][ T5794] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1135.793969][T21179] lo speed is unknown, defaulting to 1000 [ 1135.877950][T16726] bridge_slave_1: left allmulticast mode [ 1135.883672][T16726] bridge_slave_1: left promiscuous mode [ 1135.889634][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.948705][T21196] netlink: 'syz.8.4208': attribute type 2 has an invalid length. [ 1135.956908][T21196] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4208'. [ 1136.285059][ T5794] usb 7-1: device descriptor read/64, error -71 [ 1136.362739][T16726] bridge_slave_0: left allmulticast mode [ 1136.368536][T16726] bridge_slave_0: left promiscuous mode [ 1136.374341][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.537552][ T5794] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1136.695359][ T5794] usb 7-1: Using ep0 maxpacket: 16 [ 1136.703646][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.719639][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.729547][ T5794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1136.743454][ T5794] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1136.747431][T16726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.752649][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.772931][T16726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.773550][ T5794] usb 7-1: config 0 descriptor?? [ 1136.788674][T16726] bond0 (unregistering): Released all slaves [ 1136.999606][T21179] chnl_net:caif_netlink_parms(): no params data found [ 1137.025089][T19232] Bluetooth: hci1: command tx timeout [ 1137.080337][T21205] binder: 21204:21205 ioctl c0306201 0 returned -14 [ 1137.761414][ T5794] shield 0003:0955:7214.004E: unknown main item tag 0x0 [ 1138.494922][ T5965] usb 9-1: USB disconnect, device number 9 [ 1139.093953][ T5794] shield 0003:0955:7214.004E: unknown main item tag 0x0 [ 1139.514771][T19232] Bluetooth: hci1: command tx timeout [ 1139.591896][ T5794] shield 0003:0955:7214.004E: unknown main item tag 0x0 [ 1139.599070][ T5794] shield 0003:0955:7214.004E: unknown main item tag 0x0 [ 1139.606086][ T5794] shield 0003:0955:7214.004E: unknown main item tag 0x0 [ 1139.615275][ T5794] input: HID 0955:7214 Haptics as /devices/virtual/input/input86 [ 1139.708890][ T5794] shield 0003:0955:7214.004E: Registered Thunderstrike controller [ 1139.859023][ T5794] shield 0003:0955:7214.004E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1140.408767][ T9] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1140.419979][ T5794] usb 7-1: USB disconnect, device number 62 [ 1140.437298][ T9] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.599325][ T9] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.636152][ T9] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1140.842837][T16726] hsr_slave_0: left promiscuous mode [ 1140.868649][T16726] hsr_slave_1: left promiscuous mode [ 1140.874567][T16726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.893939][T16726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.902243][T16726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.905103][T21235] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1140.911754][T16726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.918987][T21235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1141.396680][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1141.420608][T16726] veth1_macvtap: left promiscuous mode [ 1141.426259][T16726] veth0_macvtap: left promiscuous mode [ 1141.431886][T16726] veth1_vlan: left promiscuous mode [ 1141.437444][T16726] veth0_vlan: left promiscuous mode [ 1141.589241][T18427] Bluetooth: hci1: command tx timeout [ 1141.615072][ T5794] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1141.776905][ T5794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1141.788530][ T5794] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 1141.796816][ T5794] usb 7-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1141.811679][ T5794] usb 7-1: config 0 has no interface number 0 [ 1141.819790][ T5794] usb 7-1: config 0 interface 107 altsetting 140 endpoint 0xC has invalid maxpacket 37904, setting to 64 [ 1141.833963][ T5794] usb 7-1: config 0 interface 107 altsetting 140 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.850058][ T5794] usb 7-1: config 0 interface 107 has no altsetting 0 [ 1141.858942][ T5794] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=a5.5f [ 1141.868277][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.877116][ T5794] usb 7-1: Product: syz [ 1141.881307][ T5794] usb 7-1: Manufacturer: syz [ 1141.886041][ T5794] usb 7-1: SerialNumber: syz [ 1141.893223][ T5794] usb 7-1: config 0 descriptor?? [ 1141.911399][T16726] team0 (unregistering): Port device team_slave_1 removed [ 1141.967034][T16726] team0 (unregistering): Port device team_slave_0 removed [ 1142.101823][ T30] audit: type=1326 audit(1751300087.684:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa018e929 code=0x7ffc0000 [ 1142.125691][ T30] audit: type=1326 audit(1751300087.704:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fafa018e929 code=0x7ffc0000 [ 1142.154448][ T30] audit: type=1326 audit(1751300087.704:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa018e929 code=0x7ffc0000 [ 1142.178176][ T30] audit: type=1326 audit(1751300087.704:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa018e929 code=0x7ffc0000 [ 1142.498672][T21179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.502061][ T5794] ti_usb_3410_5052 7-1:0.107: required endpoints missing [ 1142.505970][T21179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.506133][T21179] bridge_slave_0: entered allmulticast mode [ 1142.519073][ T5794] usb 7-1: USB disconnect, device number 63 [ 1142.524241][T21179] bridge_slave_0: entered promiscuous mode [ 1142.555773][T21179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.562971][T21179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.580679][T21179] bridge_slave_1: entered allmulticast mode [ 1142.592051][T21179] bridge_slave_1: entered promiscuous mode [ 1142.697166][T21179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.708543][T19232] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1142.741910][T21179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.803232][T21179] team0: Port device team_slave_0 added [ 1142.828189][T21179] team0: Port device team_slave_1 added [ 1142.927429][T21179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.940993][T21179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.996143][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1143.111030][T21257] netlink: 'syz.8.4229': attribute type 7 has an invalid length. [ 1143.120360][T21179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.206344][T21179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.214221][T21179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.267245][T21179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.576472][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4230'. [ 1143.610177][T21179] hsr_slave_0: entered promiscuous mode [ 1143.620243][T21179] hsr_slave_1: entered promiscuous mode [ 1143.651456][T21179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.660550][T21179] Cannot create hsr debugfs directory [ 1143.675208][T19232] Bluetooth: hci1: command tx timeout [ 1143.852870][T21267] overlayfs: failed to resolve './file1/file0': -2 [ 1144.961366][ T5897] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1145.147365][ T5897] usb 9-1: Using ep0 maxpacket: 16 [ 1145.155964][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.175677][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.208611][ T5897] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1145.237219][ T5897] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1145.262872][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.287345][ T5897] usb 9-1: config 0 descriptor?? [ 1145.329036][T21179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1145.347170][T21179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1145.357864][T21179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1145.400283][T21281] lo speed is unknown, defaulting to 1000 [ 1145.400721][T21179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1145.690231][T21307] loop9: detected capacity change from 0 to 8 [ 1145.712733][T21307] Dev loop9: unable to read RDB block 8 [ 1145.719060][T21307] loop9: unable to read partition table [ 1145.725008][T21307] loop9: partition table beyond EOD, truncated [ 1145.731295][T21307] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1145.841326][T21179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.864480][ T5897] shield 0003:0955:7214.004F: unknown main item tag 0x0 [ 1145.880885][ T5897] shield 0003:0955:7214.004F: unknown main item tag 0x0 [ 1145.977449][ T5897] shield 0003:0955:7214.004F: unknown main item tag 0x0 [ 1146.038198][ T5897] shield 0003:0955:7214.004F: unknown main item tag 0x0 [ 1146.048830][T21179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.055694][ T5897] shield 0003:0955:7214.004F: unknown main item tag 0x0 [ 1146.079528][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.086613][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.121738][ T5897] input: HID 0955:7214 Haptics as /devices/virtual/input/input87 [ 1146.154201][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.161392][T18169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.176900][ T5897] shield 0003:0955:7214.004F: Registered Thunderstrike controller [ 1146.222217][ T5897] shield 0003:0955:7214.004F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1147.192626][T21323] netlink: 'syz.8.4232': attribute type 2 has an invalid length. [ 1147.230884][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4245'. [ 1147.252041][T21179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.305910][T21327] pim6reg: entered allmulticast mode [ 1147.329926][T21323] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4232'. [ 1147.346950][T21327] pim6reg: left allmulticast mode [ 1147.403993][T21179] veth0_vlan: entered promiscuous mode [ 1147.428227][ T5957] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1147.429761][T21179] veth1_vlan: entered promiscuous mode [ 1147.452569][ T5957] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1147.471797][T21179] veth0_macvtap: entered promiscuous mode [ 1147.491117][T21179] veth1_macvtap: entered promiscuous mode [ 1147.495921][ T5957] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1147.602687][ T5897] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 1147.664498][ T5957] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1147.688963][T21179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.710495][T21179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.719133][T17667] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1147.744510][T21179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.755093][T21179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.765584][T21179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.774563][T21179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.814897][ T5897] usb 9-1: device descriptor read/64, error -32 [ 1147.890450][T17667] usb 7-1: Using ep0 maxpacket: 32 [ 1147.922207][ T30] audit: type=1400 audit(1751300093.494:2017): avc: denied { ioctl } for pid=21330 comm="syz.6.4247" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1147.947351][T17667] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.958500][T17667] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1147.974212][T17667] usb 7-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1147.983322][T17667] usb 7-1: Product: syz [ 1147.990203][T17667] usb 7-1: Manufacturer: syz [ 1147.995155][T17667] usb 7-1: SerialNumber: syz [ 1148.002569][T17667] usb 7-1: config 0 descriptor?? [ 1148.011998][T17667] smsc75xx v1.0.0 [ 1148.015836][T17667] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1148.040486][T17667] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 1148.086966][ T30] audit: type=1400 audit(1751300093.674:2018): avc: denied { create } for pid=21179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1148.107918][ T30] audit: type=1400 audit(1751300093.674:2019): avc: denied { write } for pid=21179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1148.107962][ T30] audit: type=1400 audit(1751300093.674:2020): avc: denied { read } for pid=21179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1148.151005][ T5897] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 1148.178924][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.190438][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.347817][ T5897] usb 9-1: device descriptor read/64, error -32 [ 1148.362099][T21341] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4247'. [ 1148.393773][ T30] audit: type=1400 audit(1751300093.794:2021): avc: denied { read } for pid=21330 comm="syz.6.4247" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1148.399285][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.422127][ T30] audit: type=1400 audit(1751300093.864:2022): avc: denied { create } for pid=21330 comm="syz.6.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1148.605900][ T30] audit: type=1400 audit(1751300093.944:2023): avc: denied { write } for pid=21330 comm="syz.6.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1148.627254][ T30] audit: type=1400 audit(1751300094.044:2024): avc: denied { write } for pid=21330 comm="syz.6.4247" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.630388][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.670354][ T5957] usb 7-1: USB disconnect, device number 64 [ 1148.703785][ T30] audit: type=1400 audit(1751300094.044:2025): avc: denied { open } for pid=21330 comm="syz.6.4247" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.729920][ T30] audit: type=1400 audit(1751300094.054:2026): avc: denied { ioctl } for pid=21330 comm="syz.6.4247" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.767314][ T5897] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 1148.795394][ T5897] usb 9-1: device descriptor read/8, error -32 [ 1148.918818][T21346] netlink: 'syz.7.4250': attribute type 1 has an invalid length. [ 1149.013348][T21346] bond1: entered promiscuous mode [ 1149.043271][T21346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1149.110218][T21359] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1149.491076][T21364] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1149.565731][T21365] netlink: 'syz.6.4255': attribute type 1 has an invalid length. [ 1149.725919][T15970] usb 9-1: USB disconnect, device number 10 [ 1149.805222][T21365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1149.852985][T21367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1149.878336][T21367] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 1149.892207][T21367] bond7: (slave ipip0): Error -95 calling set_mac_address [ 1150.295126][T18169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.380948][T18169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.582317][T18169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.648207][T18169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.738441][T18169] bridge_slave_1: left allmulticast mode [ 1150.744108][T18169] bridge_slave_1: left promiscuous mode [ 1150.749856][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.758259][T18169] bridge_slave_0: left allmulticast mode [ 1150.763905][T18169] bridge_slave_0: left promiscuous mode [ 1150.769773][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.076108][T18169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.087229][T18169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.096859][T18169] bond0 (unregistering): Released all slaves [ 1151.402901][T18169] hsr_slave_0: left promiscuous mode [ 1151.408663][T18169] hsr_slave_1: left promiscuous mode [ 1151.414273][T18169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.421861][T18169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.429564][T18169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.437549][T18169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.455422][T18169] veth1_macvtap: left promiscuous mode [ 1151.460964][T18169] veth0_macvtap: left promiscuous mode [ 1151.466854][T18169] veth1_vlan: left promiscuous mode [ 1151.472099][T18169] veth0_vlan: left promiscuous mode [ 1152.280653][T18427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1152.293691][T18427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1152.349279][T18427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1152.364781][T18169] team0 (unregistering): Port device team_slave_1 removed [ 1152.412754][T18427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1152.421313][T18427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1152.589121][T18169] team0 (unregistering): Port device team_slave_0 removed [ 1152.850411][T21333] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1153.019525][T21333] usb 7-1: Using ep0 maxpacket: 16 [ 1153.038052][T21333] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1153.064076][T21333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.120716][T21333] usb 7-1: config 0 descriptor?? [ 1153.140200][T21333] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1153.844973][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1153.844989][ T30] audit: type=1400 audit(1751300099.424:2117): avc: denied { unmount } for pid=20255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1153.955358][T21333] gspca_sonixj: reg_r err -32 [ 1153.960251][T21333] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1154.044865][ T30] audit: type=1400 audit(1751300099.624:2118): avc: denied { create } for pid=21421 comm="syz.8.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1154.096126][ T30] audit: type=1400 audit(1751300099.634:2119): avc: denied { bind } for pid=21421 comm="syz.8.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1154.137356][ T30] audit: type=1400 audit(1751300099.634:2120): avc: denied { setopt } for pid=21421 comm="syz.8.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1154.315970][ T30] audit: type=1400 audit(1751300099.654:2121): avc: denied { read } for pid=21421 comm="syz.8.4267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1154.352250][T21426] loop9: detected capacity change from 0 to 8 [ 1154.362104][T21426] Dev loop9: unable to read RDB block 8 [ 1154.368085][T21426] loop9: unable to read partition table [ 1154.377137][T21426] loop9: partition table beyond EOD, truncated [ 1154.383633][T21426] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1154.390624][ T30] audit: type=1400 audit(1751300099.654:2122): avc: denied { open } for pid=21421 comm="syz.8.4267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1154.495008][T19232] Bluetooth: hci1: command tx timeout [ 1154.497341][ T30] audit: type=1400 audit(1751300099.904:2123): avc: denied { create } for pid=21423 comm="syz.3.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1154.582220][ T30] audit: type=1400 audit(1751300099.924:2124): avc: denied { create } for pid=21423 comm="syz.3.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1154.735300][T21433] sp0: Synchronizing with TNC [ 1154.742681][T21401] lo speed is unknown, defaulting to 1000 [ 1154.927288][T21401] chnl_net:caif_netlink_parms(): no params data found [ 1154.958123][ T30] audit: type=1400 audit(1751300100.544:2125): avc: denied { write } for pid=21440 comm="syz.8.4272" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1154.976433][T21441] input: syz1 as /devices/virtual/input/input88 [ 1154.984388][ T30] audit: type=1400 audit(1751300100.564:2126): avc: denied { ioctl } for pid=21440 comm="syz.8.4272" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1155.063970][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.071367][T21401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.078607][T21401] bridge_slave_0: entered allmulticast mode [ 1155.086404][T21401] bridge_slave_0: entered promiscuous mode [ 1155.094295][T21401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.104300][T21401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.112370][T21401] bridge_slave_1: entered allmulticast mode [ 1155.120406][T21401] bridge_slave_1: entered promiscuous mode [ 1155.152895][T21401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.164931][T21401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.203267][T21401] team0: Port device team_slave_0 added [ 1155.211917][T21401] team0: Port device team_slave_1 added [ 1155.231679][T21401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.239056][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.265049][T21401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.276796][T21401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.283728][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.309677][T21401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.343171][T21401] hsr_slave_0: entered promiscuous mode [ 1155.349448][T21401] hsr_slave_1: entered promiscuous mode [ 1155.355403][T21401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.362951][T21401] Cannot create hsr debugfs directory [ 1155.434908][T21333] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1155.595852][T21333] usb 9-1: Using ep0 maxpacket: 32 [ 1155.622788][ T5897] usb 7-1: USB disconnect, device number 65 [ 1155.631715][T21333] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1155.647595][T21333] usb 9-1: config 0 has no interface number 0 [ 1155.653712][T21333] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1155.687481][T21333] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1155.697555][T21333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.706801][T21333] usb 9-1: Product: syz [ 1155.710972][T21333] usb 9-1: Manufacturer: syz [ 1155.715719][T21333] usb 9-1: SerialNumber: syz [ 1155.722644][T21333] usb 9-1: config 0 descriptor?? [ 1155.730121][T21401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1155.740322][T21401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1155.750480][T21401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1155.759896][T21401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1155.782852][T21401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.790010][T21401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.797418][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.804507][T21401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.844351][T21463] dlm: non-version read from control device 111 [ 1155.862976][T21401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.879659][T21401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.888959][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.897747][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.922033][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.929156][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.951421][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.958630][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.051937][T21401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1156.064944][T21401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.275328][T17156] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1156.403092][T21401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.429368][T21333] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1156.439294][T21333] usb 9-1: invalid MIDI in EP 0 [ 1156.444922][T17156] usb 7-1: Using ep0 maxpacket: 16 [ 1156.451642][T17156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.472524][T21401] veth0_vlan: entered promiscuous mode [ 1156.476929][T21333] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1156.481155][T17156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.490729][T21333] usb 9-1: USB disconnect, device number 11 [ 1156.506901][T21401] veth1_vlan: entered promiscuous mode [ 1156.513360][T17156] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1156.526302][T17156] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1156.539342][T17156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.548061][T19232] Bluetooth: hci1: command tx timeout [ 1156.560227][T21401] veth0_macvtap: entered promiscuous mode [ 1156.566520][T17156] usb 7-1: config 0 descriptor?? [ 1156.576360][T21401] veth1_macvtap: entered promiscuous mode [ 1156.594226][T21401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.609718][T21401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.620420][T21401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.631655][T21401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.640899][T21401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.650072][T21401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.711159][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.720371][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.744692][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.753125][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.988908][T17156] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 1156.996186][T17156] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 1157.006126][T17156] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 1157.013085][T17156] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 1157.032801][T17156] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 1157.043365][T17156] input: HID 0955:7214 Haptics as /devices/virtual/input/input89 [ 1157.059942][T17156] shield 0003:0955:7214.0050: Registered Thunderstrike controller [ 1157.069144][T17156] shield 0003:0955:7214.0050: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1157.345069][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1157.400942][T21475] netlink: 'syz.6.4277': attribute type 2 has an invalid length. [ 1157.408988][T21475] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1157.945100][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1157.962171][ T9] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1157.976467][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.988426][ T9] usb 9-1: Product: syz [ 1157.992729][ T9] usb 9-1: Manufacturer: syz [ 1157.997857][ T9] usb 9-1: SerialNumber: syz [ 1158.006569][ T9] usb 9-1: config 0 descriptor?? [ 1158.018453][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1158.028800][ T9] usb 9-1: setting power ON [ 1158.033429][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1158.042689][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.053121][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1158.061825][ T9] usb 9-1: media controller created [ 1158.095929][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.105414][T15451] shield 0003:0955:7214.0050: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1158.118298][T15451] shield 0003:0955:7214.0050: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1158.145141][T15451] shield 0003:0955:7214.0050: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1158.156526][ T9] usb 9-1: selecting invalid altsetting 6 [ 1158.162312][ T9] usb 9-1: digital interface selection failed (-22) [ 1158.169554][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1158.178676][T15451] shield 0003:0955:7214.0050: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1158.191141][ T9] usb 9-1: setting power OFF [ 1158.195823][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1158.201562][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1158.211040][ T9] (NULL device *): no alternate interface [ 1158.257103][ T5794] usb 7-1: reset high-speed USB device number 66 using dummy_hcd [ 1158.321428][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1158.335631][ T9] usb 9-1: USB disconnect, device number 12 [ 1158.423263][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.458061][ T5794] usb 7-1: device descriptor read/64, error -32 [ 1158.694947][ T5794] usb 7-1: reset high-speed USB device number 66 using dummy_hcd [ 1158.844914][ T5794] usb 7-1: device descriptor read/64, error -32 [ 1159.094959][ T5794] usb 7-1: reset high-speed USB device number 66 using dummy_hcd [ 1159.315088][ T5794] usb 7-1: device not accepting address 66, error -71 [ 1159.683229][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.882258][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.930146][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.024714][ T6071] bridge_slave_1: left allmulticast mode [ 1160.030619][ T6071] bridge_slave_1: left promiscuous mode [ 1160.036455][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.044750][ T6071] bridge_slave_0: left allmulticast mode [ 1160.050633][ T6071] bridge_slave_0: left promiscuous mode [ 1160.057104][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.095873][ T10] usb 7-1: USB disconnect, device number 66 [ 1160.216060][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1160.216077][ T30] audit: type=1400 audit(1751300105.794:2137): avc: denied { execute } for pid=21491 comm="syz.8.4281" name="file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1160.329277][T21493] 9pnet_fd: Insufficient options for proto=fd [ 1160.359105][ T30] audit: type=1400 audit(1751300105.944:2138): avc: denied { write } for pid=21485 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1160.704205][ T30] audit: type=1400 audit(1751300106.074:2139): avc: denied { write } for pid=21485 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1160.776287][T21508] tmpfs: Unknown parameter 'MrFJ`*AN'Yoٴ"aO6Z.s6NAhuYCm' [ 1160.801396][T18427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1160.830601][T18427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1160.843131][ T30] audit: type=1400 audit(1751300106.074:2140): avc: denied { nlmsg_read } for pid=21485 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1160.867510][T18427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1160.874559][ T30] audit: type=1400 audit(1751300106.354:2141): avc: denied { ioctl } for pid=21507 comm="syz.7.4287" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1160.900558][ T30] audit: type=1400 audit(1751300106.424:2142): avc: denied { append } for pid=21507 comm="syz.7.4287" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1160.925135][T18427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1160.934182][ T30] audit: type=1400 audit(1751300106.424:2143): avc: denied { create } for pid=21507 comm="syz.7.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1160.954477][ T30] audit: type=1400 audit(1751300106.424:2144): avc: denied { read } for pid=21507 comm="syz.7.4287" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1160.978060][ T30] audit: type=1400 audit(1751300106.424:2145): avc: denied { open } for pid=21507 comm="syz.7.4287" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1161.001875][T18427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1161.026564][ T30] audit: type=1400 audit(1751300106.614:2146): avc: denied { ioctl } for pid=21507 comm="syz.7.4287" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1161.051890][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1161.217241][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1161.224466][ T10] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1161.234161][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.251394][ T10] usb 9-1: config 0 descriptor?? [ 1161.267411][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.270101][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1161.286976][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.299827][ T6071] bond0 (unregistering): Released all slaves [ 1161.450488][T21517] can0: slcan on ptm0. [ 1161.545172][T21523] netlink: 'syz.7.4291': attribute type 7 has an invalid length. [ 1161.556233][ T1205] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1161.572594][ T1205] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1161.588541][ T1205] usb 4-1: USB disconnect, device number 20 [ 1161.602345][T21516] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig [ 1161.671358][T21517] can0 (unregistered): slcan off ptm0. [ 1161.791478][T21506] lo speed is unknown, defaulting to 1000 [ 1161.967809][T21516] kvm: kvm [21514]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 1161.978372][T21516] kvm: kvm [21514]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x80 [ 1162.069148][ T1205] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1162.096813][ T10] gspca_sonixj: reg_r err -32 [ 1162.101647][ T10] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1162.146645][ T6071] hsr_slave_0: left promiscuous mode [ 1162.159452][ T6071] hsr_slave_1: left promiscuous mode [ 1162.192866][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.288367][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.295643][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 1162.319519][ T1205] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1162.339466][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.357070][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.368983][ T1205] usb 4-1: Product: syz [ 1162.373149][ T1205] usb 4-1: Manufacturer: syz [ 1162.386773][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.404237][ T1205] usb 4-1: SerialNumber: syz [ 1162.416652][ T1205] usb 4-1: config 0 descriptor?? [ 1162.437322][ T1205] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1162.448153][ T6071] veth1_macvtap: left promiscuous mode [ 1162.453661][ T6071] veth0_macvtap: left promiscuous mode [ 1162.469625][ T1205] usb 4-1: setting power ON [ 1162.474148][ T1205] dvb-usb: bulk message failed: -22 (2/0) [ 1162.486421][ T6071] veth1_vlan: left promiscuous mode [ 1162.496859][ T6071] veth0_vlan: left promiscuous mode [ 1162.507867][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1162.541364][ T1205] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1162.568277][ T1205] usb 4-1: media controller created [ 1162.600052][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.950534][ T1205] usb 4-1: selecting invalid altsetting 6 [ 1162.973533][ T1205] usb 4-1: digital interface selection failed (-22) [ 1162.989871][ T1205] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1163.011948][ T1205] usb 4-1: setting power OFF [ 1163.016663][ T1205] dvb-usb: bulk message failed: -22 (2/0) [ 1163.023326][ T1205] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1163.036164][T18427] Bluetooth: hci1: command tx timeout [ 1163.038055][ T1205] (NULL device *): no alternate interface [ 1163.109142][ T1205] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1163.157680][ T1205] usb 4-1: USB disconnect, device number 21 [ 1163.526593][T21333] usb 9-1: USB disconnect, device number 13 [ 1163.778598][T21534] 9pnet_fd: Insufficient options for proto=fd [ 1163.892594][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 1163.937870][T21333] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1163.972281][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 1164.094961][T21333] usb 9-1: Using ep0 maxpacket: 16 [ 1164.101880][T21333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.123800][T21333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.147591][T21333] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1164.171044][T21333] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1164.196407][T21333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.217129][T21333] usb 9-1: config 0 descriptor?? [ 1164.731472][T21333] shield 0003:0955:7214.0051: unknown main item tag 0x0 [ 1164.741395][T21333] shield 0003:0955:7214.0051: unknown main item tag 0x0 [ 1164.748629][T21333] shield 0003:0955:7214.0051: unknown main item tag 0x0 [ 1164.760880][T21333] shield 0003:0955:7214.0051: unknown main item tag 0x0 [ 1164.768038][T21333] shield 0003:0955:7214.0051: unknown main item tag 0x0 [ 1164.778428][T21333] input: HID 0955:7214 Haptics as /devices/virtual/input/input90 [ 1164.806270][T21333] shield 0003:0955:7214.0051: Registered Thunderstrike controller [ 1164.814490][T21333] shield 0003:0955:7214.0051: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1165.115052][T18427] Bluetooth: hci1: command tx timeout [ 1165.197318][T21557] netlink: 'syz.8.4294': attribute type 2 has an invalid length. [ 1165.205241][T21557] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4294'. [ 1165.592835][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1165.592851][ T30] audit: type=1400 audit(1751300111.174:2152): avc: denied { read } for pid=21556 comm="syz.7.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1165.749270][ T30] audit: type=1400 audit(1751300111.334:2153): avc: denied { write } for pid=21566 comm="syz.6.4301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1165.927418][ T5965] shield 0003:0955:7214.0051: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1166.022441][ T5965] shield 0003:0955:7214.0051: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1166.042025][T21506] chnl_net:caif_netlink_parms(): no params data found [ 1166.064903][ T5897] usb 9-1: reset high-speed USB device number 14 using dummy_hcd [ 1166.105897][ T5965] shield 0003:0955:7214.0051: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1166.120722][ T5965] shield 0003:0955:7214.0051: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1166.300138][ T5897] usb 9-1: device descriptor read/64, error -32 [ 1166.313255][T21506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.329559][T21506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.341031][T21506] bridge_slave_0: entered allmulticast mode [ 1166.348737][T21506] bridge_slave_0: entered promiscuous mode [ 1166.366813][T21506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.386835][T21506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.409106][T21506] bridge_slave_1: entered allmulticast mode [ 1166.506268][T21506] bridge_slave_1: entered promiscuous mode [ 1166.540488][T21506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.551658][T21506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.747427][T21506] team0: Port device team_slave_0 added [ 1166.758573][T21506] team0: Port device team_slave_1 added [ 1166.797278][T21580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4302'. [ 1166.841442][T21506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.892368][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.072713][T21506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.095731][T21506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.095780][ T1205] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1167.102744][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.144969][T21506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.184901][T18427] Bluetooth: hci1: command tx timeout [ 1167.207281][T21506] hsr_slave_0: entered promiscuous mode [ 1167.213314][T21506] hsr_slave_1: entered promiscuous mode [ 1167.231470][T21506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.239485][T21506] Cannot create hsr debugfs directory [ 1167.245355][ T5897] usb 9-1: reset high-speed USB device number 14 using dummy_hcd [ 1167.305339][ T1205] usb 4-1: Using ep0 maxpacket: 32 [ 1167.314435][ T1205] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1167.326303][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.340761][ T1205] usb 4-1: config 0 descriptor?? [ 1167.354332][ T1205] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1167.534185][ T5897] usb 9-1: device firmware changed [ 1167.582737][T21333] usb 9-1: USB disconnect, device number 14 [ 1168.181409][T21333] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1168.345187][T21333] usb 9-1: Using ep0 maxpacket: 16 [ 1168.397761][T21333] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1168.416632][T21333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.450643][T21333] usb 9-1: config 0 descriptor?? [ 1168.452183][ T30] audit: type=1400 audit(1751300114.034:2154): avc: denied { read write } for pid=21598 comm="syz.7.4309" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1168.468072][T21333] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1168.493336][ T1205] gspca_nw80x: reg_r err -110 [ 1168.510806][ T1205] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 1168.510969][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.545389][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.555361][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.601284][ T30] audit: type=1400 audit(1751300114.034:2155): avc: denied { open } for pid=21598 comm="syz.7.4309" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1168.603076][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.665203][ T5897] usb 4-1: USB disconnect, device number 22 [ 1168.686626][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.707848][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.716158][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.739003][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.767947][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.771894][ T30] audit: type=1400 audit(1751300114.354:2156): avc: denied { create } for pid=21605 comm="syz.6.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1168.797159][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.797768][ T30] audit: type=1400 audit(1751300114.384:2157): avc: denied { ioctl } for pid=21605 comm="syz.6.4310" path="socket:[87811]" dev="sockfs" ino=87811 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1168.815037][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.869606][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.885083][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.893013][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.908014][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.918718][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.926687][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.934583][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.953140][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.961589][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.974584][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.986605][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1168.994705][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.004052][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.013927][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.023203][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.032943][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.042897][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.052606][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.060290][T21506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1169.062816][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.078546][T21506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1169.087719][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.098474][T21506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1169.098909][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.116656][T21506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1169.126217][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.134092][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.151721][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.160203][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.175146][T21613] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4309'. [ 1169.175640][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.195615][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.203988][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.212769][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.261900][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.280255][T18427] Bluetooth: hci1: command tx timeout [ 1169.283322][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.294236][T21333] gspca_sonixj: reg_r err -32 [ 1169.301442][T21333] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1169.315699][T21506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.337055][T21506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.354510][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.361646][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.372097][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.381317][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.395367][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.402482][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.412279][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.421925][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.430944][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.438877][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.447509][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.456814][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.462431][T21506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.476101][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.477902][T21506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.483884][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.506536][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.514411][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.522350][T17667] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1169.663477][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.672045][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.679906][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.687689][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.695744][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.703493][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.711292][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.714760][T21506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.719627][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.734788][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.742776][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.753658][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1169.764093][T17667] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1169.773690][T17667] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1170.247012][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.254780][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.254841][T17667] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1170.271838][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.279625][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.290842][T21506] veth0_vlan: entered promiscuous mode [ 1170.322848][T17156] usb 9-1: USB disconnect, device number 15 [ 1170.330865][T21506] veth1_vlan: entered promiscuous mode [ 1170.357974][T21506] veth0_macvtap: entered promiscuous mode [ 1170.367007][T21506] veth1_macvtap: entered promiscuous mode [ 1170.378494][T17667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1170.394637][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.405268][T17667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1170.416461][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.424220][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.439522][ T30] audit: type=1400 audit(1751300116.024:2158): avc: denied { setopt } for pid=21634 comm="syz.8.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1170.441633][T21635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.468663][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.477048][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.480999][T21506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.485630][T17667] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1170.499817][ T30] audit: type=1400 audit(1751300116.054:2159): avc: denied { name_bind } for pid=21636 comm="syz.6.4315" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1170.501190][T17667] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1170.528410][T21506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.530988][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.549103][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.556953][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.561077][T21506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.573531][T17667] usb 4-1: Product: syz [ 1170.577854][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.585646][ T30] audit: type=1400 audit(1751300116.064:2160): avc: denied { node_bind } for pid=21636 comm="syz.6.4315" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1170.585690][ T30] audit: type=1400 audit(1751300116.064:2161): avc: denied { create } for pid=21636 comm="syz.6.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1170.610919][T21506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.628074][T17667] usb 4-1: Manufacturer: syz [ 1170.629161][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.644382][T21506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.654342][T21635] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1170.661919][T21506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.667088][T17667] cdc_wdm 4-1:1.0: skipping garbage [ 1170.689919][T17667] cdc_wdm 4-1:1.0: skipping garbage [ 1170.698073][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.707053][T17667] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1170.713044][T17667] cdc_wdm 4-1:1.0: Unknown control protocol [ 1170.726956][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.735285][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.745627][T15451] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 1170.753532][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.763111][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.793579][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.811849][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.812004][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.828909][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.836960][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.845469][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.856359][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.865654][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.872429][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.873511][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.881344][T15451] usb 7-1: device descriptor read/64, error -71 [ 1170.889121][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.919036][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.931549][T17667] usb 4-1: USB disconnect, device number 23 [ 1170.939258][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.950278][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.960549][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.969274][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.984526][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1170.992597][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.000819][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.009281][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.017819][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.029556][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.037804][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.045799][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.053772][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.061759][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.070020][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.078721][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.086741][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.094686][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.102696][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.111216][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.119899][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.128002][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.135621][T15451] usb 7-1: new low-speed USB device number 68 using dummy_hcd [ 1171.136178][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.151122][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.159858][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.167913][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.176189][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.184117][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.192175][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.200301][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.208319][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.217440][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.225414][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.233364][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.241296][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.249681][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.257714][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.267588][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.275472][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.275813][T15451] usb 7-1: device descriptor read/64, error -71 [ 1171.283398][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.298501][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.306767][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.314687][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.322875][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.331665][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.339730][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.347781][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.356008][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.363839][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.371789][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.379786][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.387768][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.395737][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.403647][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.411975][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: unknown main item tag 0x0 [ 1171.426962][T15451] usb usb7-port1: attempt power cycle [ 1171.432634][ T5965] hid-generic 2BD0:FFFFFFF7:8000.0052: hidraw0: HID v0.0d Device [syz1] on syz0 [ 1171.765249][T15451] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 1171.880984][ T30] audit: type=1326 audit(1751300117.464:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21647 comm="syz.7.4317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f050538e929 code=0x0 [ 1172.173570][T21657] netlink: 'syz.3.4319': attribute type 7 has an invalid length. [ 1172.295595][T15451] usb 7-1: device descriptor read/8, error -71 [ 1172.657177][T15451] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 1172.686758][T15451] usb 7-1: device descriptor read/8, error -71 [ 1172.795322][T15451] usb usb7-port1: unable to enumerate USB device [ 1172.938826][ T6065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.164151][ T6065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.245502][ T6065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.321429][ T6065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.402792][ T6065] bridge_slave_1: left allmulticast mode [ 1174.408693][ T6065] bridge_slave_1: left promiscuous mode [ 1174.414343][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.423349][ T6065] bridge_slave_0: left allmulticast mode [ 1174.429077][ T6065] bridge_slave_0: left promiscuous mode [ 1174.434724][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.782092][T21667] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1174.818428][ T30] audit: type=1400 audit(1751300120.404:2163): avc: denied { mount } for pid=21666 comm="syz.3.4322" name="/" dev="rpc_pipefs" ino=89518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1174.928501][ T30] audit: type=1400 audit(1751300120.514:2164): avc: denied { append } for pid=21662 comm="syz.8.4321" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1175.341298][T19232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.357284][T19232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.368087][T19232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.377728][ T6065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.386560][T19232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.395436][T19232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.403230][ T6065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.417010][ T6065] bond0 (unregistering): Released all slaves [ 1175.587821][ T30] audit: type=1400 audit(1751300121.174:2165): avc: denied { read } for pid=21686 comm="syz.3.4327" path="socket:[88811]" dev="sockfs" ino=88811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1175.677107][ T30] audit: type=1400 audit(1751300121.234:2166): avc: denied { create } for pid=21690 comm="syz.6.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1175.720664][ T30] audit: type=1400 audit(1751300121.234:2167): avc: denied { ioctl } for pid=21690 comm="syz.6.4325" path="socket:[89574]" dev="sockfs" ino=89574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1175.751767][ T30] audit: type=1400 audit(1751300121.284:2168): avc: denied { bind } for pid=21690 comm="syz.6.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1175.778998][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4325'. [ 1175.801233][ T30] audit: type=1400 audit(1751300121.364:2169): avc: denied { unmount } for pid=20255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1175.855469][ T30] audit: type=1400 audit(1751300121.364:2170): avc: denied { write } for pid=21690 comm="syz.6.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1176.740648][T21712] nbd: must specify at least one socket [ 1176.748319][T21712] netlink: 'syz.3.4330': attribute type 1 has an invalid length. [ 1176.760905][ T30] audit: type=1400 audit(1751300122.344:2171): avc: denied { getopt } for pid=21711 comm="syz.3.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1176.803669][T21716] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4328'. [ 1176.871965][T21684] lo speed is unknown, defaulting to 1000 [ 1176.933139][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.942397][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.518407][T18427] Bluetooth: hci1: command tx timeout [ 1177.722512][ T6065] hsr_slave_0: left promiscuous mode [ 1177.755148][ T6065] hsr_slave_1: left promiscuous mode [ 1177.790249][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.810700][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.911756][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.013988][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.028403][T21731] x_tables: unsorted entry at hook 2 [ 1178.226663][ T6065] veth1_macvtap: left promiscuous mode [ 1178.235688][T21731] block device autoloading is deprecated and will be removed. [ 1178.249353][ T6065] veth0_macvtap: left promiscuous mode [ 1178.256149][T21731] syz.7.4334: attempt to access beyond end of device [ 1178.256149][T21731] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1178.260252][ T6065] veth1_vlan: left promiscuous mode [ 1178.290862][ T6065] veth0_vlan: left promiscuous mode [ 1178.567612][ T30] audit: type=1400 audit(1751300124.154:2172): avc: denied { create } for pid=21733 comm="syz.8.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1178.733959][ T30] audit: type=1400 audit(1751300124.314:2173): avc: denied { setopt } for pid=21733 comm="syz.8.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1178.775947][T21737] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 1178.838617][ T30] audit: type=1400 audit(1751300124.344:2174): avc: denied { bind } for pid=21733 comm="syz.8.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1178.953845][ T30] audit: type=1400 audit(1751300124.534:2175): avc: denied { write } for pid=21736 comm="syz.7.4336" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1178.981878][T21749] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4336'. [ 1178.993105][ T30] audit: type=1400 audit(1751300124.564:2176): avc: denied { open } for pid=21736 comm="syz.7.4336" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1179.093582][T17156] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1179.634897][T18427] Bluetooth: hci1: command tx timeout [ 1179.651191][ T30] audit: type=1400 audit(1751300125.234:2177): avc: denied { setopt } for pid=21750 comm="syz.6.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1179.833430][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4340'. [ 1179.855334][ T30] audit: type=1400 audit(1751300125.344:2178): avc: denied { read } for pid=21750 comm="syz.6.4340" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1179.904449][T17156] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1179.929816][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4340'. [ 1179.968550][T17156] usb 4-1: config 0 has no interface number 0 [ 1179.996438][T17156] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1180.007860][ T30] audit: type=1400 audit(1751300125.354:2179): avc: denied { open } for pid=21750 comm="syz.6.4340" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1180.107154][T17156] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1180.116522][T17156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.124487][T17156] usb 4-1: Product: syz [ 1180.134898][ T30] audit: type=1400 audit(1751300125.354:2180): avc: denied { write } for pid=21750 comm="syz.6.4340" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1180.163946][T17156] usb 4-1: Manufacturer: syz [ 1180.171643][T17156] usb 4-1: SerialNumber: syz [ 1180.177759][ T30] audit: type=1400 audit(1751300125.354:2181): avc: denied { open } for pid=21750 comm="syz.6.4340" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1180.202714][T17156] usb 4-1: config 0 descriptor?? [ 1180.212007][T17156] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1180.515204][ T6065] team0 (unregistering): Port device team_slave_1 removed [ 1180.564232][ T6065] team0 (unregistering): Port device team_slave_0 removed [ 1180.700659][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1181.126980][ T10] usb 4-1: USB disconnect, device number 24 [ 1181.138539][ T10] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1181.328218][T21684] chnl_net:caif_netlink_parms(): no params data found [ 1181.732648][T18427] Bluetooth: hci1: command tx timeout [ 1181.869332][T21684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.885022][T21684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.893192][T21684] bridge_slave_0: entered allmulticast mode [ 1181.917381][T21684] bridge_slave_0: entered promiscuous mode [ 1181.930815][T21684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.934960][ T10] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1181.938054][T21684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.953582][T21684] bridge_slave_1: entered allmulticast mode [ 1181.971352][T21684] bridge_slave_1: entered promiscuous mode [ 1182.068943][T21684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.132543][ T10] usb 7-1: config 4 has an invalid interface number: 212 but max is 0 [ 1182.144875][ T10] usb 7-1: config 4 has no interface number 0 [ 1182.150993][ T10] usb 7-1: config 4 interface 212 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1182.177135][T21684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.196519][ T10] usb 7-1: config 4 interface 212 has no altsetting 0 [ 1182.216714][ T10] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=28.12 [ 1182.236280][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.298849][ T10] usb 7-1: Product: syz [ 1182.307667][T21780] syz.3.4344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1182.313266][ T10] usb 7-1: Manufacturer: syz [ 1182.333060][ T10] usb 7-1: SerialNumber: syz [ 1182.381542][T21684] team0: Port device team_slave_0 added [ 1182.417373][T21684] team0: Port device team_slave_1 added [ 1182.508932][T21684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.529529][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.586362][T21684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.600208][ T10] kvaser_usb 7-1:4.212: error -ENODEV: Cannot get usb endpoint(s) [ 1182.612767][ T10] usb 7-1: USB disconnect, device number 71 [ 1182.623113][T21684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.662211][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.792291][T21684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.801684][T21787] No source specified [ 1182.872508][T21684] hsr_slave_0: entered promiscuous mode [ 1182.953454][T21684] hsr_slave_1: entered promiscuous mode [ 1182.974440][T21684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.011838][T21684] Cannot create hsr debugfs directory [ 1183.078679][T21795] sctp: [Deprecated]: syz.8.4348 (pid 21795) Use of int in max_burst socket option. [ 1183.078679][T21795] Use struct sctp_assoc_value instead [ 1183.305598][ T5897] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1183.487228][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1183.506482][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1183.523298][ T5897] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1183.533619][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.542689][ T5897] usb 4-1: Product: syz [ 1183.547223][ T5897] usb 4-1: Manufacturer: syz [ 1183.551801][ T5897] usb 4-1: SerialNumber: syz [ 1183.557894][ T5897] usb 4-1: config 0 descriptor?? [ 1183.563335][T21794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1183.570663][T21794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1183.588468][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4351'. [ 1183.619131][ T10] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1183.638115][T21802] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4351'. [ 1183.744944][T18427] Bluetooth: hci1: command tx timeout [ 1183.761461][T21684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1183.772709][T21684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1183.784069][ T10] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1183.786138][T21794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1183.794861][T21684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1183.807091][ T10] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1183.807904][T21794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1183.815661][ T10] usb 7-1: Product: syz [ 1183.829468][T21684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1183.836635][ T10] usb 7-1: Manufacturer: syz [ 1183.841283][ T10] usb 7-1: SerialNumber: syz [ 1183.853565][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1183.957356][T21684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.981671][T21684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.000636][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.007820][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.023706][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.030889][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.077859][T21684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.119115][ T10] vp7045: USB control message 'out' went wrong. [ 1185.138780][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1185.138796][ T30] audit: type=1400 audit(1751300130.724:2190): avc: denied { create } for pid=21790 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1185.140233][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1185.155237][ T30] audit: type=1400 audit(1751300130.724:2191): avc: denied { setopt } for pid=21790 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1185.175379][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1185.217617][ T30] audit: type=1400 audit(1751300130.724:2192): avc: denied { setopt } for pid=21790 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1185.247969][ T5897] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1185.261957][ T5897] usb 4-1: USB disconnect, device number 25 [ 1185.304384][ T10] usb 7-1: USB disconnect, device number 72 [ 1185.324126][T21833] netlink: 'syz.7.4357': attribute type 10 has an invalid length. [ 1185.389146][T21684] veth0_vlan: entered promiscuous mode [ 1185.403825][T21684] veth1_vlan: entered promiscuous mode [ 1185.412281][T21834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1185.846966][ T30] audit: type=1400 audit(1751300131.424:2193): avc: denied { create } for pid=21826 comm="syz.8.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1185.885718][ T30] audit: type=1400 audit(1751300131.424:2194): avc: denied { create } for pid=21826 comm="syz.8.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1185.912789][ T30] audit: type=1400 audit(1751300131.424:2195): avc: denied { setopt } for pid=21826 comm="syz.8.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1185.951122][T21840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1186.101338][T21684] veth0_macvtap: entered promiscuous mode [ 1186.118850][T21684] veth1_macvtap: entered promiscuous mode [ 1186.170496][T21684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.204363][T21684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.272683][ T30] audit: type=1400 audit(1751300131.844:2196): avc: denied { write } for pid=21841 comm="syz.3.4359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1186.349051][T21684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.451710][T21684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.537047][T21684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.625548][T21684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.729327][T18169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.749420][T18169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.782340][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.792829][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.818888][T21850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21850 comm=syz.8.4361 [ 1186.834769][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4361'. [ 1187.057947][ T30] audit: type=1400 audit(1751300132.644:2197): avc: denied { mount } for pid=21851 comm="syz.6.4362" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1187.864857][T21859] i2c i2c-0: Invalid block write size 34 [ 1188.429642][ T30] audit: type=1400 audit(1751300134.014:2198): avc: denied { write } for pid=21873 comm="syz.8.4369" name="netstat" dev="proc" ino=4026533575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1188.571893][T21879] netlink: 'syz.3.4371': attribute type 7 has an invalid length. [ 1188.814901][ T30] audit: type=1400 audit(1751300134.374:2199): avc: denied { mount } for pid=21875 comm="syz.8.4370" name="/" dev="autofs" ino=91618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1189.169658][T21886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.195812][T21886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.484896][ T5897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1189.580887][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.660370][ T5897] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1189.684836][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.713168][ T5897] usb 4-1: Product: syz [ 1189.717513][ T5897] usb 4-1: Manufacturer: syz [ 1189.722126][ T5897] usb 4-1: SerialNumber: syz [ 1189.748011][ T5897] usb 4-1: config 0 descriptor?? [ 1189.758246][ T5897] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1189.765303][ T5897] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1189.775085][ T5897] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1189.958767][ T5897] usb 4-1: USB disconnect, device number 26 [ 1190.080891][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.133600][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.209212][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.294179][ T6071] bridge_slave_1: left allmulticast mode [ 1190.299850][ T6071] bridge_slave_1: left promiscuous mode [ 1190.306979][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.320186][ T6071] bridge_slave_0: left allmulticast mode [ 1190.326008][ T6071] bridge_slave_0: left promiscuous mode [ 1190.331630][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.649565][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.660046][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.671394][ T6071] bond0 (unregistering): Released all slaves [ 1190.968189][ T6071] hsr_slave_0: left promiscuous mode [ 1190.973911][ T6071] hsr_slave_1: left promiscuous mode [ 1190.981516][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.997369][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.005295][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.012694][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.031189][ T6071] veth1_macvtap: left promiscuous mode [ 1191.036822][ T6071] veth0_macvtap: left promiscuous mode [ 1191.042328][ T6071] veth1_vlan: left promiscuous mode [ 1191.047670][ T6071] veth0_vlan: left promiscuous mode [ 1191.398945][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4375'. [ 1191.419827][T21899] netlink: 'syz.6.4377': attribute type 11 has an invalid length. [ 1191.495927][T21904] netlink: 'syz.6.4377': attribute type 11 has an invalid length. [ 1191.561537][T21902] netlink: 'syz.7.4378': attribute type 4 has an invalid length. [ 1191.565065][T21899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4377'. [ 1191.578590][T21904] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4377'. [ 1191.580298][T21902] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4378'. [ 1192.050728][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1192.050740][ T30] audit: type=1400 audit(1751300137.244:2201): avc: denied { write } for pid=21894 comm="syz.8.4375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1192.165832][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 1192.324903][T15970] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1192.338072][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 1192.396295][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1192.415532][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1192.426039][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1192.437337][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1192.444912][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1192.485616][T15970] usb 9-1: Using ep0 maxpacket: 16 [ 1192.497761][T15970] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1192.532089][T15970] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 1192.564897][T15970] usb 9-1: config 13 has no interface number 0 [ 1192.574933][T15970] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1192.608014][T15970] usb 9-1: config 13 interface 50 has no altsetting 0 [ 1192.637444][T15970] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1192.655001][T15970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.673267][T15970] usb 9-1: Product: syz [ 1192.682550][T15970] usb 9-1: Manufacturer: syz [ 1192.688778][T15970] usb 9-1: SerialNumber: syz [ 1192.705461][T21908] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1193.419172][T21918] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 1193.501666][T21919] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 1193.518832][T21910] lo speed is unknown, defaulting to 1000 [ 1193.718789][T21924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4383'. [ 1193.736560][T21924] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.745411][T21924] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.754103][T21924] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.762795][T21924] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.780026][T21924] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.789093][T21924] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.797989][T21924] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.806882][T21924] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.924311][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4384'. [ 1193.936784][T21910] chnl_net:caif_netlink_parms(): no params data found [ 1193.983551][ T30] audit: type=1400 audit(1751300139.564:2202): avc: denied { write } for pid=21927 comm="syz.6.4384" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1194.217667][T21910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.227685][T21910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.235382][T21910] bridge_slave_0: entered allmulticast mode [ 1194.242999][T21910] bridge_slave_0: entered promiscuous mode [ 1194.253659][T21910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.262145][T21910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.270220][T21910] bridge_slave_1: entered allmulticast mode [ 1194.278011][T21910] bridge_slave_1: entered promiscuous mode [ 1194.314998][T18427] Bluetooth: hci5: command 0x0406 tx timeout [ 1194.323651][T21910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.338305][T21910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.371953][T21910] team0: Port device team_slave_0 added [ 1194.381762][T21910] team0: Port device team_slave_1 added [ 1194.419141][T15970] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1194.460718][T15970] usb 9-1: MIDIStreaming interface descriptor not found [ 1194.467804][T18427] Bluetooth: hci1: command tx timeout [ 1194.576312][ T10] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1194.589126][T21910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.602048][T21910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.632210][T15970] usb 9-1: USB disconnect, device number 16 [ 1195.062178][T21910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.090506][T21910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.102200][T21910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.115081][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1195.141174][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1195.151108][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1195.162504][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1195.173447][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1195.189665][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.203340][ T10] usb 7-1: config 0 descriptor?? [ 1195.217483][T21910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.339104][T21910] hsr_slave_0: entered promiscuous mode [ 1195.431123][ T30] audit: type=1400 audit(1751300141.014:2203): avc: denied { create } for pid=21944 comm="syz.7.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1195.463094][T21910] hsr_slave_1: entered promiscuous mode [ 1195.496409][ T10] hdpvr 7-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 1195.496409][ T10] pY [ 1195.574994][T21910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1195.706756][ T30] audit: type=1400 audit(1751300141.274:2204): avc: denied { read } for pid=21937 comm="syz.6.4387" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1195.708703][T21910] Cannot create hsr debugfs directory [ 1195.824941][ T30] audit: type=1400 audit(1751300141.284:2205): avc: denied { open } for pid=21937 comm="syz.6.4387" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1195.830287][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4391'. [ 1195.877026][ T30] audit: type=1400 audit(1751300141.314:2206): avc: denied { map } for pid=21937 comm="syz.6.4387" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1195.992529][ T30] audit: type=1400 audit(1751300141.374:2207): avc: denied { setopt } for pid=21937 comm="syz.6.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1196.052708][ T30] audit: type=1400 audit(1751300141.404:2208): avc: denied { read } for pid=21937 comm="syz.6.4387" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1196.104317][ T10] hdpvr 7-1:0.0: Could not setup controls [ 1196.116338][ T30] audit: type=1400 audit(1751300141.614:2209): avc: denied { setopt } for pid=21944 comm="syz.7.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1196.140222][T21944] delete_channel: no stack [ 1196.148463][ T10] hdpvr 7-1:0.0: registering videodev failed [ 1196.182609][ T10] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 1196.218904][ T30] audit: type=1400 audit(1751300141.804:2210): avc: denied { mounton } for pid=21951 comm="syz.8.4392" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1196.266156][ T10] usb 7-1: USB disconnect, device number 73 [ 1196.546474][T18427] Bluetooth: hci1: command tx timeout [ 1197.494151][T21966] netlink: 'syz.3.4390': attribute type 7 has an invalid length. [ 1197.623831][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1197.623848][ T30] audit: type=1400 audit(1751300143.204:2212): avc: denied { write } for pid=21967 comm="syz.8.4396" path="socket:[90827]" dev="sockfs" ino=90827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1198.113278][T21910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1198.168122][T21910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1198.191025][T21910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1198.273510][T21910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1198.459295][ T30] audit: type=1400 audit(1751300143.924:2213): avc: denied { write } for pid=21973 comm="syz.7.4398" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1198.497276][ T30] audit: type=1400 audit(1751300143.924:2214): avc: denied { read write } for pid=21973 comm="syz.7.4398" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.599671][T15970] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1198.726039][T18427] Bluetooth: hci1: command tx timeout [ 1198.810798][ T30] audit: type=1400 audit(1751300143.924:2215): avc: denied { open } for pid=21973 comm="syz.7.4398" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.839613][ T30] audit: type=1400 audit(1751300143.934:2216): avc: denied { map } for pid=21973 comm="syz.7.4398" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.848557][T21910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.863249][ T30] audit: type=1400 audit(1751300143.934:2217): avc: denied { execute } for pid=21973 comm="syz.7.4398" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.893720][ T30] audit: type=1400 audit(1751300144.044:2218): avc: denied { ioctl } for pid=21973 comm="syz.7.4398" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.923691][ T30] audit: type=1400 audit(1751300144.364:2219): avc: denied { nlmsg_write } for pid=21993 comm="syz.6.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1198.944955][T15970] usb 9-1: Using ep0 maxpacket: 8 [ 1198.951594][T22005] x_tables: duplicate underflow at hook 1 [ 1199.187635][T15970] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1199.197001][T15970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.253337][T15970] usb 9-1: Product: syz [ 1199.257678][T15970] usb 9-1: Manufacturer: syz [ 1199.262283][T15970] usb 9-1: SerialNumber: syz [ 1199.281461][T15970] usb 9-1: config 0 descriptor?? [ 1199.290825][T15970] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1199.301248][T15970] usb 9-1: setting power ON [ 1199.306658][T15970] dvb-usb: bulk message failed: -22 (2/0) [ 1199.314935][T15970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1199.326600][T15970] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1199.336357][T15970] usb 9-1: media controller created [ 1199.362452][T15970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1199.380862][T15970] usb 9-1: selecting invalid altsetting 6 [ 1199.387131][T15970] usb 9-1: digital interface selection failed (-22) [ 1199.393780][T15970] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1199.403991][T15970] usb 9-1: setting power OFF [ 1199.408697][T15970] dvb-usb: bulk message failed: -22 (2/0) [ 1199.415908][T15970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1199.426306][T15970] (NULL device *): no alternate interface [ 1199.435013][ T10] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1199.452246][T15970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1199.477156][T21910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.487782][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.494956][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.615113][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1199.626546][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.639403][ T10] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1199.648124][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.655562][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.663137][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.675172][ T10] usb 7-1: Product: syz [ 1199.683361][ T10] usb 7-1: Manufacturer: syz [ 1199.688009][ T10] usb 7-1: SerialNumber: syz [ 1199.780123][ T10] usb 7-1: config 0 descriptor?? [ 1199.830191][ T10] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1199.836137][T21910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.871017][T21910] veth0_vlan: entered promiscuous mode [ 1199.880709][T21910] veth1_vlan: entered promiscuous mode [ 1199.896716][T21910] veth0_macvtap: entered promiscuous mode [ 1199.905029][ T31] INFO: task kworker/1:4:17523 blocked for more than 143 seconds. [ 1199.912990][ T31] Not tainted 6.16.0-rc4-syzkaller #0 [ 1199.919796][T21910] veth1_macvtap: entered promiscuous mode [ 1199.926017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1199.939085][ T31] task:kworker/1:4 state:D stack:21384 pid:17523 tgid:17523 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1199.954958][T21910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.964390][T21910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.971709][ T31] Workqueue: usb_hub_wq hub_event [ 1199.985155][ T31] Call Trace: [ 1200.004202][ T31] [ 1200.012948][ T31] __schedule+0x116a/0x5de0 [ 1200.019609][T21910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.038002][ T31] ? device_unregister+0x1d/0xc0 [ 1200.047372][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 1200.058938][T21910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.077831][ T31] ? dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1200.099708][T21910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.124846][ T31] ? dvb_usbv2_probe+0x1f61/0x3e50 [ 1200.146740][ T31] ? __device_attach_driver+0xe0/0x310 [ 1200.152659][T21910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.161481][ T31] ? __lock_acquire+0x622/0x1c90 [ 1200.166667][ T31] ? __pfx___schedule+0x10/0x10 [ 1200.178007][ T6065] usb 7-1: Failed to submit usb control message: -71 [ 1200.183173][ T31] ? find_held_lock+0x2b/0x80 [ 1200.185189][ T6065] usb 7-1: unable to send the bmi data to the device: -71 [ 1200.221320][ T31] ? schedule+0x2d7/0x3a0 [ 1200.227067][ T31] schedule+0xe7/0x3a0 [ 1200.231217][ T31] schedule_timeout+0x257/0x290 [ 1200.237500][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1200.242927][ T31] ? mark_held_locks+0x49/0x80 [ 1200.251793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1200.260666][ T6065] usb 7-1: unable to get target info from device [ 1200.260670][ T31] __wait_for_common+0x2ff/0x4e0 [ 1200.272068][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1200.281352][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1200.286938][ T10] usb 7-1: USB disconnect, device number 74 [ 1200.292041][T17667] usb 9-1: USB disconnect, device number 17 [ 1200.297372][ T6065] usb 7-1: could not get target info (-71) [ 1200.302916][ T31] ? __pfx_device_del+0x10/0x10 [ 1200.308043][ T6065] usb 7-1: could not probe fw (-71) [ 1200.312095][ T31] ? kobject_put+0xab/0x5a0 [ 1200.319254][ T31] i2c_del_adapter+0x546/0x6f0 [ 1200.324042][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1200.330163][ T31] ? kfree+0x2b4/0x4d0 [ 1200.334227][ T31] ? media_device_cleanup+0x53/0x80 [ 1200.340171][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 1200.345857][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1200.351184][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 1200.358383][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1200.363670][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1200.369071][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1200.374900][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1200.380537][ T31] usb_probe_interface+0x300/0x9c0 [ 1200.386526][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1200.392162][ T31] really_probe+0x241/0xa90 [ 1200.396751][ T31] __driver_probe_device+0x1de/0x440 [ 1200.402045][ T31] driver_probe_device+0x4c/0x1b0 [ 1200.407169][ T31] __device_attach_driver+0x1df/0x310 [ 1200.412549][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1200.418474][ T31] bus_for_each_drv+0x159/0x1e0 [ 1200.423309][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1200.428805][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1200.434097][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1200.439958][ T31] __device_attach+0x1e4/0x4b0 [ 1200.444734][ T31] ? __pfx___device_attach+0x10/0x10 [ 1200.450068][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1200.455380][ T31] bus_probe_device+0x17f/0x1c0 [ 1200.460243][ T31] device_add+0x1148/0x1a70 [ 1200.464773][ T31] ? __pfx_device_add+0x10/0x10 [ 1200.470674][ T31] ? usb_cache_string+0xf2/0x150 [ 1200.475617][ T31] usb_set_configuration+0x1187/0x1e20 [ 1200.481091][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1200.487381][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1200.492833][ T31] usb_probe_device+0xec/0x3e0 [ 1200.497897][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1200.503258][ T31] really_probe+0x241/0xa90 [ 1200.508282][ T31] __driver_probe_device+0x1de/0x440 [ 1200.513556][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1200.519044][ T31] driver_probe_device+0x4c/0x1b0 [ 1200.524066][ T31] __device_attach_driver+0x1df/0x310 [ 1200.529452][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1200.535702][ T31] bus_for_each_drv+0x159/0x1e0 [ 1200.540557][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1200.547648][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1200.552859][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1200.558672][ T31] __device_attach+0x1e4/0x4b0 [ 1200.563423][ T31] ? __pfx___device_attach+0x10/0x10 [ 1200.568761][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1200.573943][ T31] bus_probe_device+0x17f/0x1c0 [ 1200.578986][ T31] device_add+0x1148/0x1a70 [ 1200.583479][ T31] ? __pfx_device_add+0x10/0x10 [ 1200.588392][ T31] ? usb_new_device+0xbea/0x1a20 [ 1200.593336][ T31] usb_new_device+0xd07/0x1a20 [ 1200.598128][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1200.603160][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1200.608532][ T31] ? mark_held_locks+0x49/0x80 [ 1200.613297][ T31] hub_event+0x2eb7/0x4fa0 [ 1200.617742][ T31] ? __pfx_hub_event+0x10/0x10 [ 1200.622486][ T31] ? __list_add_valid_or_report+0xe0/0x190 [ 1200.630759][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 1200.636624][ T31] ? rcu_is_watching+0x12/0xc0 [ 1200.641418][ T31] process_one_work+0x9cf/0x1b70 [ 1200.646379][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1200.651750][ T31] ? assign_work+0x1a0/0x250 [ 1200.656398][ T31] worker_thread+0x6c8/0xf10 [ 1200.660992][ T31] ? __kthread_parkme+0x19e/0x250 [ 1200.666049][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1200.671160][ T31] kthread+0x3c2/0x780 [ 1200.675262][ T31] ? __pfx_kthread+0x10/0x10 [ 1200.679866][ T31] ? rcu_is_watching+0x12/0xc0 [ 1200.684625][ T31] ? __pfx_kthread+0x10/0x10 [ 1200.689267][ T31] ret_from_fork+0x5d4/0x6f0 [ 1200.693864][ T31] ? __pfx_kthread+0x10/0x10 [ 1200.698980][ T31] ret_from_fork_asm+0x1a/0x30 [ 1200.703774][ T31] [ 1200.707040][ T31] INFO: task syz.0.3954:20087 blocked for more than 144 seconds. [ 1200.734883][ T31] Not tainted 6.16.0-rc4-syzkaller #0 [ 1200.740803][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1200.750152][ T31] task:syz.0.3954 state:D stack:28888 pid:20087 tgid:20086 ppid:17481 task_flags:0x400040 flags:0x00004004 [ 1200.762093][ T31] Call Trace: [ 1200.765413][ T31] [ 1200.768344][ T31] __schedule+0x116a/0x5de0 [ 1200.772843][ T31] ? __pfx___schedule+0x10/0x10 [ 1200.778157][ T31] ? find_held_lock+0x2b/0x80 [ 1200.782848][ T31] ? schedule+0x2d7/0x3a0 [ 1200.787309][T18427] Bluetooth: hci1: command tx timeout [ 1200.787932][ T31] schedule+0xe7/0x3a0 [ 1200.796797][ T31] schedule_preempt_disabled+0x13/0x30 [ 1200.802259][ T31] __mutex_lock+0x6c7/0xb90 [ 1200.806771][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1200.821409][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1200.826082][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1200.831133][ T31] ? kobject_put+0xab/0x5a0 [ 1200.835851][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 1200.841308][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1200.846812][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1200.851441][ T31] usbdev_open+0x1b6/0x8b0 [ 1200.855903][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1200.860909][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1200.865995][ T31] ? chrdev_open+0x58c/0x6a0 [ 1200.870590][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1200.878438][ T31] chrdev_open+0x234/0x6a0 [ 1200.882949][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1200.888047][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1200.895690][ T31] do_dentry_open+0x744/0x1c10 [ 1200.900462][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1200.905429][ T31] vfs_open+0x82/0x3f0 [ 1200.909525][ T31] path_openat+0x1de4/0x2cb0 [ 1200.914112][ T31] ? __pfx_path_openat+0x10/0x10 [ 1200.919065][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1200.924006][ T31] do_filp_open+0x20b/0x470 [ 1200.928551][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1200.933569][ T31] ? alloc_fd+0x471/0x7d0 [ 1200.937920][ T31] do_sys_openat2+0x11b/0x1d0 [ 1200.942581][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1200.948049][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 1200.953259][ T31] __x64_sys_openat+0x174/0x210 [ 1200.958155][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1200.963548][ T31] do_syscall_64+0xcd/0x4c0 [ 1200.968102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.974012][ T31] RIP: 0033:0x7fd92158d290 [ 1200.978459][ T31] RSP: 002b:00007fd9223b1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1200.986913][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fd92158d290 [ 1200.994925][ T31] RDX: 0000000000101301 RSI: 00007fd9223b1c10 RDI: 00000000ffffff9c [ 1201.002909][ T31] RBP: 00007fd9223b1c10 R08: 0000000000000000 R09: 0000000000000000 [ 1201.010931][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1201.018916][ T31] R13: 0000000000000000 R14: 00007fd9217b5fa0 R15: 00007ffc6914a148 [ 1201.027339][ T31] [ 1201.030407][ T31] [ 1201.030407][ T31] Showing all locks held in the system: [ 1201.038297][ T31] 5 locks held by kworker/0:1/10: [ 1201.043495][ T31] 1 lock held by khungtaskd/31: [ 1201.048395][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1201.058466][ T31] 3 locks held by kworker/u8:21/6059: [ 1201.063822][ T31] #0: ffff888031d3c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1201.074921][ T31] #1: ffffc90002f97d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1201.087125][ T31] #2: ffffffff9034c628 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 1201.096659][ T31] 3 locks held by kworker/u8:29/6071: [ 1201.102020][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1201.113619][ T31] #1: ffffc90002f27d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1201.127061][ T31] #2: ffffffff9034c628 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1201.136230][ T31] 2 locks held by kworker/u8:0/14494: [ 1201.141594][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1201.151567][ T31] #1: ffffc9000c2a7d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1201.164143][ T31] 3 locks held by kworker/u8:1/15273: [ 1201.169627][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1201.180796][ T31] #1: ffffc90003cefd10 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1201.193404][ T31] #2: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1201.203419][ T31] 5 locks held by kworker/1:4/17523: [ 1201.208747][ T31] #0: ffff888022a8b948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1201.219567][ T31] #1: ffffc90003f9fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1201.230897][ T31] #2: ffff8881447f5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1201.239927][ T31] #3: ffff88807a898198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1201.249230][ T31] #4: ffff88807ceb2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1201.258514][ T31] 2 locks held by getty/17777: [ 1201.263274][ T31] #0: ffff8880369ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1201.273968][ T31] #1: ffffc900036fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1201.284265][ T31] 1 lock held by syz.0.3954/20087: [ 1201.289398][ T31] #0: ffff8881447f5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 1201.298393][ T31] 3 locks held by syz-executor/21910: [ 1201.303766][ T31] #0: ffffffff9034c628 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1201.312852][ T31] #1: ffff888028dad4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x203/0x4e0 [ 1201.322537][ T31] #2: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1201.332589][ T31] [ 1201.334945][ T31] ============================================= [ 1201.334945][ T31] [ 1201.343363][ T31] NMI backtrace for cpu 1 [ 1201.343378][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1201.343399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.343411][ T31] Call Trace: [ 1201.343418][ T31] [ 1201.343425][ T31] dump_stack_lvl+0x116/0x1f0 [ 1201.343456][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1201.343475][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1201.343500][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1201.343525][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1201.343548][ T31] watchdog+0xf70/0x12c0 [ 1201.343572][ T31] ? __pfx_watchdog+0x10/0x10 [ 1201.343591][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.343617][ T31] ? __kthread_parkme+0x19e/0x250 [ 1201.343641][ T31] ? __pfx_watchdog+0x10/0x10 [ 1201.343660][ T31] kthread+0x3c2/0x780 [ 1201.343677][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.343694][ T31] ? rcu_is_watching+0x12/0xc0 [ 1201.343717][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.343734][ T31] ret_from_fork+0x5d4/0x6f0 [ 1201.343757][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.343773][ T31] ret_from_fork_asm+0x1a/0x30 [ 1201.343803][ T31] [ 1201.343810][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1201.468576][ C0] NMI backtrace for cpu 0 [ 1201.468590][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1201.468607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.468616][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1201.468639][ C0] Code: ab 71 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 30 29 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1201.468653][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 1201.468665][ C0] RAX: 00000000036c96b7 RBX: 0000000000000000 RCX: ffffffff8b80dc69 [ 1201.468674][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a0be RDI: ffffffff8c157c20 [ 1201.468683][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 1201.468692][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 1201.468700][ C0] R13: ffffffff8e297780 R14: ffffffff90a80d50 R15: 0000000000000000 [ 1201.468709][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1201.468723][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.468732][ C0] CR2: 00007f38b8981178 CR3: 000000007fb87000 CR4: 00000000003526f0 [ 1201.468742][ C0] Call Trace: [ 1201.468746][ C0] [ 1201.468751][ C0] default_idle+0x13/0x20 [ 1201.468764][ C0] default_idle_call+0x6d/0xb0 [ 1201.468776][ C0] do_idle+0x391/0x510 [ 1201.468794][ C0] ? __pfx_do_idle+0x10/0x10 [ 1201.468810][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1201.468830][ C0] cpu_startup_entry+0x4f/0x60 [ 1201.468846][ C0] rest_init+0x16b/0x2b0 [ 1201.468859][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1201.468875][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1201.468894][ C0] start_kernel+0x3ee/0x4d0 [ 1201.468911][ C0] x86_64_start_reservations+0x18/0x30 [ 1201.468927][ C0] x86_64_start_kernel+0x130/0x190 [ 1201.468944][ C0] common_startup_64+0x13e/0x148 [ 1201.468963][ C0] [ 1201.665614][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1201.672473][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1201.682548][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.692611][ T31] Call Trace: [ 1201.695895][ T31] [ 1201.698830][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1201.703445][ T31] panic+0x71c/0x800 [ 1201.707365][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1201.713277][ T31] ? __pfx_panic+0x10/0x10 [ 1201.717715][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1201.723106][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1201.729113][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1201.734503][ T31] ? watchdog+0xdda/0x12c0 [ 1201.738928][ T31] ? watchdog+0xdcd/0x12c0 [ 1201.743339][ T31] watchdog+0xdeb/0x12c0 [ 1201.747575][ T31] ? __pfx_watchdog+0x10/0x10 [ 1201.752235][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.757427][ T31] ? __kthread_parkme+0x19e/0x250 [ 1201.762441][ T31] ? __pfx_watchdog+0x10/0x10 [ 1201.767104][ T31] kthread+0x3c2/0x780 [ 1201.771160][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.775737][ T31] ? rcu_is_watching+0x12/0xc0 [ 1201.780490][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.785065][ T31] ret_from_fork+0x5d4/0x6f0 [ 1201.789647][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.794218][ T31] ret_from_fork_asm+0x1a/0x30 [ 1201.798977][ T31] [ 1201.802183][ T31] Kernel Offset: disabled [ 1201.806487][ T31] Rebooting in 86400 seconds..