last executing test programs: 24m13.494340698s ago: executing program 1 (id=1167): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x74000000) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, 0x0, 0x0) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) 24m10.373679889s ago: executing program 1 (id=1177): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000080000000000000000000000000098958a93a1ef95c3376143a365a4367e3fda8c6e2dc637c51d1c37ebda3055bc1ec10d8462e95b3c4aa94e16174ad4e6665a169b9e87af0e8d5deef1e3003ca72004689c3cafca1dfd0b9a9421b1812dea1f7d976065a5b7ee1f5a73dce19ab84aaea106ca66cce5869fc67a3a4a5f5ee4c050c60dae"], 0x50) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='iocharset', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x309, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128001000100677470000cff03000000030001000080"], 0x38}}, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000140)="ab54", 0x2}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24m7.512406695s ago: executing program 1 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, &(0x7f0000000040)=""/115, 0x73, 0xeb04) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xa098, 0x84, 0x4, 0x306}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) mount(0x0, 0x0, &(0x7f00000001c0)='adfs\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x2, 0xffffffffffffffff, 0x0}) 24m4.776436437s ago: executing program 1 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r2, 0x0, 0xf}, 0x18) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r3, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) getrandom(&(0x7f0000000680)=""/290, 0x122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(0xffffffffffffffff, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080004000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000018000000b704000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='ext4_fc_track_range\x00', r9, 0x0, 0x5}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000400)=0x635) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 24m4.651203094s ago: executing program 1 (id=1197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x1, 0x3, "745202"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, 'wg2\x00'}) prctl$PR_CAPBSET_READ(0x17, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 24m4.269913041s ago: executing program 1 (id=1201): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) shutdown(0xffffffffffffffff, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, 0x0, 0x0) 24m3.475445972s ago: executing program 32 (id=1201): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) shutdown(0xffffffffffffffff, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, 0x0, 0x0) 22m45.143010147s ago: executing program 2 (id=1483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) 22m43.470963622s ago: executing program 2 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500030001"], 0x28}}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x5e}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x3, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) 22m42.440748979s ago: executing program 2 (id=1492): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = dup(r0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 22m41.337375691s ago: executing program 2 (id=1494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "49ec54bb6bf95a5ef9b6a5c228d5179e"}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0x485b]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20012, 0xffffffffffffffff, 0x7b341000) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 22m40.186021681s ago: executing program 2 (id=1496): ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r0 = syz_open_dev$vbi(&(0x7f00000006c0), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000700)={0x6, "cd84fa6fb04ceb5d2eb8d67e5a57583b86fc99e99f5d37b564a9736aad487c91", 0x1, 0x800, 0x2f6d92df, 0x6, 0x10, 0x4, 0x5, 0x652}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf251e00000030002f80200003800c0005000900000000000000050002000300000008000100e5d44c8c0c0002000200aaaaaaaaaaaa08000300", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000004) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="13d1001000000000f6ff06", @ANYBLOB="b7d588f0d8eb5e556d2f8f4a83", @ANYRESOCT=r5, @ANYRESHEX=r2], 0x18}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000005c0)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x3, 0x0, 0x2, 0x1000000000007, 0x0, 0x5, 0x0, 0x798, 0xffffffffffffffff], 0x0, 0x582}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000180)=@arm64={0x6, 0xc, 0x9, '\x00', 0x1}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)={0x7, 0x0, [{0x8cd, 0x0, 0x6}, {0x4000009e, 0x0, 0x801}, {0x9c8, 0x0, 0x28}, {0xb85, 0x0, 0x1}, {0xb88, 0x0, 0x1}, {0x95d, 0x0, 0xd}, {0x4000009e, 0x0, 0x653}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x94) socket(0xa, 0x80805, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x8) 22m39.661838175s ago: executing program 2 (id=1506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd6, 0x80000000, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0x103, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x5, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0x80000000, 0xc74, 0x7, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x2, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x6, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1f, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x9, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x2, 0x9a1f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x981, 0x5aa, 0xd, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x3, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0x8, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x1, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x5, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x20000040, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x8000004, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x8, 0x7, 0x80, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x2, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x8000, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa994, 0xb, 0x4, 0x8000005, 0x3, 0x10004b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0xfffff6a6, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x9, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x7fd3, 0x1, 0x0, 0x10, 0x0, 0x3, 0x7, 0xc0000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x1b57, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x200007, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0x3, 0x6, 0x1000, 0x3, 0x4000027, 0x382d, 0x459, 0xcad, 0x7, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffff7, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x100, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x10001, 0x8, 0x6, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x6, 0x9, 0x5, 0x80000002, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x19, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x7, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x5, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5, 0x3, 0x6, 0x6, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x200000, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xf, 0x0, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x20004, 0xff, 0x5cad, 0x2, 0x4, 0x8, 0x9f, 0x3, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xba, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x1000, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xe, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1000003, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0x5, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x10001, 0x2, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xf, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x3cfd8645, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(0x0, 0x4d, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x64, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x21, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, @multicast2, @multicast1, {[@lsrr={0x83, 0xf, 0xfb, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x34}]}, @rr={0x7, 0x13, 0xa9, [@rand_addr=0x64010102, @loopback, @local, @multicast2]}, @cipso={0x86, 0xf, 0x0, [{0x5, 0x9, "6bb69630031762"}]}, @timestamp={0x44, 0x4, 0x31, 0x0, 0x3}, @ssrr={0x89, 0x1b, 0x7c, [@multicast1, @broadcast, @private=0xa010100, @loopback, @loopback, @broadcast]}, @cipso={0x86, 0x1a, 0x2, [{0xaabcbee3cdfb75e3, 0x6, "fcdac01c"}, {0x0, 0x4, "66e7"}, {0x2, 0xa, "a239994debfde162"}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000001640)=[{&(0x7f0000000380)="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", 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x7, @broadcast}, 0x38, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x13) r8 = syz_clone(0x40008800, &(0x7f0000001280)="904c789a7bd0b869af90790400248dd52eaf47309a14f239c6627893a0fe380ee7dd264fed91fa7d078de38ee455aa3bfbdde455226089ea3320d972a6ea", 0x3e, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="f4412e4d7052411d98859e72fd287db6d1841c338e93132940d8737334f1992350bacd85c7d1e77d6c46225f3de6ef82679d33fae42f4450c10fdbcea0ec4813b9c3b65fb334434ec81f3f458cfe45a5bc4746ff86927081dfce668426bef9d41e830904406d618b4a6e14c8a249f4c2e5d42fa3c5a6ae04b780e2718cba584d3be1665818e67a47ffbb1487cb8d11ada70305c5") ptrace$ARCH_GET_CPUID(0x1e, r8, 0x0, 0x1011) r9 = fsmount(r5, 0x0, 0x3) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) fchown(r10, 0x0, 0xee01) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000200)='bridge0\x00') 22m24.236319452s ago: executing program 33 (id=1506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd6, 0x80000000, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0x103, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x5, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0x80000000, 0xc74, 0x7, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x2, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x6, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1f, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x9, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x2, 0x9a1f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x981, 0x5aa, 0xd, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x3, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0x8, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x1, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x5, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x20000040, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x8000004, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x8, 0x7, 0x80, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x2, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x8000, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa994, 0xb, 0x4, 0x8000005, 0x3, 0x10004b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0xfffff6a6, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x9, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x7fd3, 0x1, 0x0, 0x10, 0x0, 0x3, 0x7, 0xc0000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x1b57, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x200007, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0x3, 0x6, 0x1000, 0x3, 0x4000027, 0x382d, 0x459, 0xcad, 0x7, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffff7, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x100, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x10001, 0x8, 0x6, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x6, 0x9, 0x5, 0x80000002, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x19, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x7, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x5, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5, 0x3, 0x6, 0x6, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x200000, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xf, 0x0, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x20004, 0xff, 0x5cad, 0x2, 0x4, 0x8, 0x9f, 0x3, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xba, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x1000, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xe, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1000003, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0x5, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x10001, 0x2, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xf, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x3cfd8645, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(0x0, 0x4d, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x64, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x21, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, @multicast2, @multicast1, {[@lsrr={0x83, 0xf, 0xfb, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x34}]}, @rr={0x7, 0x13, 0xa9, [@rand_addr=0x64010102, @loopback, @local, @multicast2]}, @cipso={0x86, 0xf, 0x0, [{0x5, 0x9, "6bb69630031762"}]}, @timestamp={0x44, 0x4, 0x31, 0x0, 0x3}, @ssrr={0x89, 0x1b, 0x7c, [@multicast1, @broadcast, @private=0xa010100, @loopback, @loopback, @broadcast]}, @cipso={0x86, 0x1a, 0x2, [{0xaabcbee3cdfb75e3, 0x6, "fcdac01c"}, {0x0, 0x4, "66e7"}, {0x2, 0xa, "a239994debfde162"}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000001640)=[{&(0x7f0000000380)="a1ff5299db278519532b89ef7f525e0a535b074d1dbde37bc0a87fb8c37253cde876ea87d36fa3aef12d60e8059a1adf16568bf97b3a99bbb944cded2510b4d8ae9e35440f5fb55ffda0e074a31e218a7ccaba780af506d07a2aa45144399fbc379712dcfd1ebf280d992389639e96bcc160c9401258bf0f75f9ebea989f3c7653dcd812ade21b81121ea5e9bac997a6ff04e34e430659835cfb422c4faedfa06e0473de5b491209257dbf29bb2994b95aa441f9baaad8d76320dfb357289343ae4ecc486a5b5729c6c8cbaace969dae8c9148265faed5c2df6bef454c905c5d1278b1467d3ccd4d43ac3ae18f1f6092430d01865fc9ef5c13a33c41c06f65a54a97d5f3ba603903a493a39f1bf2c0f4563b9ae6e4a8f8f5f5e05a24ff5fee38ffd88cfd2e8e78f08c73f501a5dfbc7e7820481af1f41ba28758494d126f9c035c12601d194082dc9c38440f176f6ea2e7bbbcec38099ea4f52b56aaf56ee87925b39d174744f69aed0b41756695bebe901af5cbf3fef4fab34719eceb51ca29d7b339a6f645c59c306ac28de766187b35f3899934d06eb13bced1557ae4b71ba8b3252d4655481b9cb3ca720c0bb8e89fa62933fa5888b517d9f652a9f2ecbfab383305bd40a962105b2bc91e47c0da002fa9fa0186bf861e8a4ccc71ce08874c10bbd236eb8ca5f934c875a09414c3e11c8cefe3b50975eafa4c6ddd75ace0431895aa5b3b5206c8b50cecd93100c55e1b01aa4059061bf0771046d97a1b834ea7564330f57cb616a4a7d8e1b2e68ff1df0b31258e033050557c58cc34228a4696b0746bac725c0a91e865040f30af2209f0e125d2a1cba539007ca735d80fa23a559814be23f2cf7f1ad6fc53783cd42c01bad52abfb6436dc405e7ba62a6357ba1c83b96ace62813301f860631e07f63acb4e090007fe0fd57e79e9b3fc61a6b3799f8ea2f6c511c4275749b6e34e6622b2f234c26c34540040facabc7ef80b2822751b980964f3a6259f140afad207579455d7c501e5bfb45c3685bbd13b6d94256dd1c07d2a4c37407950875088b2f5ffed98f6fe9a13c6017247f3483c855fae839f6bf2ff3a9240897712e0684851150543312b526a76864146d75af142b646b059782cce3bb22dfdd7628a81597ceb5f105b85c2106e9f3693e10f908a225896ef3dc47dc8a370b772dc76598471c0f3e5a08860047d3a9d569b57b47f7fdab425ed5455e48d91b6e68292e4a3d2139410db318d22aa31a35eb8c7814612a2f484d1a4c2a386f69e4a438dbc67d9593bd5639343f7160428f23098df3e080c5f5636c9cb8250c6f560c3e2782d65770a3978e2598a8c638e35d1594e8837a727419e613cf87b56ba46a6a5809757e752546b433dd69274eabbb6a87605a1b6f8a221981891d882d2a81d6f207407277274ccd42a07619eeeb4d231ebbb05da55421ab0b9c6caf6d22dc67d429f288f540c1acd608e9fccefa8331da3fb88acf90fd962211517087abd54776debd2565f1c41ea157308893aee5fd75b9d06a05a17eabb290ea7b89887d02f1169592093e7768c64229f81481230d0a7d2ef2774b9060d03b0d33acdbd62f139648a23d054879c6bd6e8fb2958aeb78d6a180512fbdc3cabd790385cc1c7b7d57209250bd4c7d6ba1a7913c9d072f7e7277f2013f30b343c627d76452bfd32c97e4c1a697972e11d6b8a1b4a42f1ce161d76f6c2ec6895ea4b27ec28b5c99eac1e93d509c34d02981938d9d2607119fd3ab3eb90cd22ddd470e88ae54dd9ce9eb0c0ffc008aa2f97fe00527c86a47f15d3fd96a6157b81f5ee3eb8e8a59820981e7e080f27ae5f14ba17b5c18eacce786ac1adaafc158fb106a43ed0eaa30524fb8fde74ce11cf11d5615d9e368e8fe4f21140382f996c365cb371d9c23ed89a418ce439510674ceff101a009bd01cb46107dcb00fda65b7066318f86b02a928f8f7e46ab5d468778a47148195185433efab4a7d588145d82df4e6d28be32000fa5567157e819e4d0a76d6cc3dd1583207daa00439a935af5d8b30869656cc7c68e86305b47b6b48b99d1adce073a1a23959003046ddd8d5aafd40f1ccd5e661e8311b079e1df5b8847ccb3ae18d5ae4beb19869eb780fb62f0fc72425ee2d81c693efb0f45066c4fa75017d15e6b90ca6bd2045f6c275a1e8c505b330791cac8b5af7d02ef7c50c7251bcfec9fee6b8dfb595599d88eb479010d1fc78243d65d0522402163f5366537b9eea8783291ac6b28880a6562a60ea683405aba5bf03fc1983b4f4f3c373a7eba226bc042a93901be2265401b04b99e5e247c70912bbecf05be8dacd4af456c342c13b88a6a4a195e0f44418057d8e82c1c1d61c764016460a66cf4296c8e0a73fc522634ecd179aaf7ef029aaace4c31f6eac6ce2b18b287e878ac60d684eeed342c776feaf5b806d1c1bc18f2c1be46ac83fd1bd163c6d2954b7e339afcea616a99084634089ed5406e3cab9cd58ccc99cf29962dcfdd3bd7d21c2322a2f32c9a7972dd554f0e6a7e2bc389cc93260ca2d7a48a03748b126a9c8d7efd13c040f48b50e8f3a23722dd438c4e210345e8a72c8589af55ca4cf6896a020f48069f3326d82116829bbe2e124e413c44ede50dcc45621d9ebb672813ac5ee18713ce4caaa2abb92f192cf992086f9b1a250d457ceecac3901a82b09d4a3167a634fb770f495818d7d8a9b47fe5a8e51a885943d7440ada224801aaf061329eaeedc20f85066017851668e29f03b78e37c5280f1f40b0d9059fbc4007574e899cd0ec3ab3eb92153c967d87e61f07d13cb57e73e55709ff7974feb22f08439096320660fd09415acc176ea81d60dcb67a4a578a29cc0955da5e102c2888217c4443f89076e5acb6aa79de7e71667619fa55fc9600e539a3e4d53fc5c5e277146665d4dbaa12bfae98048f16d8791bd8ade7cf5dc2e9b60677b3e79bbf23e7d768d0f896bf0134d59a6e50eaae0a6565004578e19209b13e80c196ce7318ba90e49405b76b37d52c8970c0c6943a077d6dd76f01543c6d736edf962fe90f5936c035f5f9e56a5957bfea6f1c882bffaa68b354c2f9521fb51df918cb18741b0d1dd37702bc09d5b6454bd00b0f52074145322e1dc9e1f69fd91d52b832db3af10df2e793cf61eaeadbc3c22280235b0728fbf569ab441650e442540a34bbce4d3d71e2912b6fc15419d78343f3af5f1c79c24f24c2c56d43bf2cbdda9c46cc6ac0ed46aab15db9dacf8556ff2ec332f0c87539e3574511c5693262572ad23cfb07e78a290d6fcf2f5ceaa70182ded438d2ac1158d8c5e322746a9adb940c1318c20e526965081ebea54cf456d86bc0bd63356ac8bf562e04b3d5462306d12c07592ddff2546f5e004dea3fc291fce44eb6f137dd5cf53a49b89bdb5c5412381a3daecbfa513c2f0fab90bddabb37305d7ba8dc217f6f19ae210be0f9868b3b47b108e77b9b1b69a150dc282a1959b160fb02e043481e267372ac73e3b86d338e55137fd8bf759a26b80616e5c0a17755171a37648299257a045d735f6cb28a013c247204b2045dee288ef7d3f0dda0e8d597b5b9d5354ae49c1a8173a4264e0d0a3bd2d52a22dcf259270e5dde54d5042fe8fc66ea6136be7a8cc55e577d4dcfc1b4b0ecceea5a4d5be6ba497732a379b1855b6f80176f49a35b9dd609c66e6b6bd90d0f611a20b039e213b73c71c28d6219997b366e5ef81db5781ddef9e804005cc6e1ad6b0dd97d9154b7897dea275d55c4dfd78d1343d68cb005a408114ab38bcce2ef1ba3d24e48b2b3d570ebe5020d0b8ee40843a6c2932c7cfda30e992d733e9c22b444b41d72f68e03ebf03c8c29ea79844d59e962e7aa9c43d4ea95f501ba4c7b1d4bafe43273081ebfeba165c515d3142ce908054e35fff41ad7378a0c141ccedbf1e4657479fc8b6b5cf3b590e76c57d2b97ae8415910480cebbdbc4d9a71c2abec8f2f6d2590c5ab68944038589cb621c2b610abdf41391945e2f6177cccc8d54b11813cae4581b28475cab71e5b31e53a3f90aff1ee04457fe1eb931686df426b8820269e918668e2e72dbafdcfd4cf5ddfddf7bdaffe09db827ba9c34ad8ef482e7d74b5a7e011eab07a393f1e26bf31760be0e97f8ac678f10fe87ed14fa7bd6f2d7d8e33e37941e3f7c5e3a4a8d33d183de82347bfe988adf45476709602c7e9f2b7e904e8bd6071cf983cfef251b8f78a6395fc6030f3496a6c1b3ee9e34da6d3a2aa3c992823a1862cde1642b667044bc08ec71b57d9284f31c06710443b9499c228f137257752e0672d948be88a12f0456dff87c6b30efb9c0b8287c0730a57106b726af96ce6c09c90e28fe91e5e3ca351ddfef939bea7bf11181150477abc2790a0e2b06e5dfd2e7bfe66ed50506ef49c1bf70cb3c19a3dbbd05f8ed463cd8783e1cca42e5578a04decbc292608a2a19942b8d576ec23009028f2b1c2b606ec549b03d30d0a6b780faeab0faec2ba42d20c242de0ab652a250e08810c8c5dc52960b22d3f2a776a58ffe9bef061cbcb5497f951e4acbd05d445bfc88376fa50a060b88177eac78dcfaddef5fae59e6bd4c7fed0c160ce9579ea6a002a3688df1b1e7a4a57509f2e4bf3ccfc26243384a74e45aa72d72c530fce31e688b64cfd736438073ddc355abfa47054ebfe27c53f269446bea5c61e035048cf9ca885e6d470ea77033f37e51690d0e1a9d6f202acaf47548f61e87ae90c00db990390afac709de99a9f83bd932544fa594cc9f22685bab9e7f869114b4ada57d2b5c4e8f0278754ff695181a913a21909bca42698cbeeb762eaa213111097a9b95676c8325fed2069b7257c9c4649b467d262e62d8db449b60422e745d783f7202fff698853bea9a3ab62838656f342c09d3c4fb42ea6320e2abd8ef1384155461188695cdb00db391267bbd4a8141ca7606db7009f699304f2948bd8a89d272377595412b4d8e8813b9a0db4a0a99b773616725fa6e5f23c67391eff9b9b896c54a2c1b78ac8878e6a9c0ff8b7a16efec69f7044324dc0b43130accb56a6383ddeb510ca27e3f5b88d3d021df6a100c7270c1be335a0ddc16dab5323ff741e877d799c3e45d76af5158ec6902cc267dfe4c31f77c8c77712ead04325a36a808ff30ff2e35eaa310cc85f97a5d632656ac2fb31e777ee3a62fb055d0431d3162460cc109902c55a9e228733f5a1f9b607f5fac8a6315827de11763694ae97912f24f9f3860f3e22a6b3339de6abc5d4478f249b848060726a3de91e54e6e5c8a68e25c03180d3d48787cb0b7aae62685de9b221ac14b077c85c12f7e3c759d6d3ae4cc2530373779d6f6ba33a83b74be9deba2c6037e2b994e766bf1bbc22b528d4fc40d211d3241cb3d2911de9598ceb381ff659b0dbac334b6f7054b77f25e5f8163fd1fcb4c5ab7cbf0059a94ca11ddb498ad8c9f8a5568623b7ec87f6cc37500627395d7ff82e609bf747f0fc9a42bb0120eb84ef4a4122689d94c2124b1e2ce23683afcf0453474590e895f7557fb6b94e1978a468d7d2e763e7eea6cf0df0a9cfa2d2eff27a9ae11cedd4127ded166279bfe05654bb869d713ff57c93b998a5a638431bf2c662ce095cd9a9f0ddf916207840c9261b10c47ee7c10397890b7714c30cd55fdbbcbe9232f6ffee844ab4bd8c1f3835bf2a9add1b11581bbfd4b1e5819a34192eeed9af3e2d7cc1a936947a50084d297cbf56b07bbd7ad87ae84743801fe08664f76bec160fffe3536523b16e7844e24fda41c4c95f3ea09d73", 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x7, @broadcast}, 0x38, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x13) r8 = syz_clone(0x40008800, &(0x7f0000001280)="904c789a7bd0b869af90790400248dd52eaf47309a14f239c6627893a0fe380ee7dd264fed91fa7d078de38ee455aa3bfbdde455226089ea3320d972a6ea", 0x3e, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="f4412e4d7052411d98859e72fd287db6d1841c338e93132940d8737334f1992350bacd85c7d1e77d6c46225f3de6ef82679d33fae42f4450c10fdbcea0ec4813b9c3b65fb334434ec81f3f458cfe45a5bc4746ff86927081dfce668426bef9d41e830904406d618b4a6e14c8a249f4c2e5d42fa3c5a6ae04b780e2718cba584d3be1665818e67a47ffbb1487cb8d11ada70305c5") ptrace$ARCH_GET_CPUID(0x1e, r8, 0x0, 0x1011) r9 = fsmount(r5, 0x0, 0x3) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) fchown(r10, 0x0, 0xee01) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000200)='bridge0\x00') 16m12.601741793s ago: executing program 5 (id=2973): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0x5, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x401, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) 16m12.36238356s ago: executing program 5 (id=2975): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') pread64(r0, &(0x7f00000001c0)=""/64, 0x40, 0x400000000000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x43, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d45") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x50, 0xffffffffffffffff, 0xf2d19000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x8f5) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x38, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}}}, 0x88) 16m5.19780875s ago: executing program 5 (id=2997): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000270c0)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0xef4, 0x30, 0x25, 0x0, 0x0, {}, [{0xee0, 0x1, [@m_pedit={0xedc, 0x1, 0x0, 0x0, {{0xa}, {0xeb0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{}, 0x2, 0x0, [{0x0, 0x2, 0x4, 0x6, 0x3, 0x5ee2}, {0x62, 0xfff, 0x0, 0x10001, 0x8, 0xda4}, {0x9, 0x7c, 0x523, 0x6, 0xb82, 0x3}, {0x1, 0xd, 0x1000, 0x9, 0x101, 0x3}]}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {0x10}, {0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000004}, {0x0, 0x0, 0x978e97b}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x20000000}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x20}, {0xfffffc01, 0x0, 0x2, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xef4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x11, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="4055f2ff8000820030dcf1725ab050e78b81bbfca48445924176c8f7f63b1aae4b3cd60a45cb3d56d18ec61a0232b0bae624a303a95f4cf3b1c482cef4faa3996c5cee969924ea9ba90b08da45ca39aefb1c82c6e5a73181a63b69d6e760276cd6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x62, 0x0, 0x0, 0x6, 0x10000, @value=r0}, 0x28) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x128, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x40, 0x5, 0xf8f, 'snmp_trap\x00', {0x8}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x24b9, 0x8001, 0x1a, 0x6, 0x9, 0x8, 0x5, 0x18, 0xd8}, {0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100fcffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="3ba385e0f06fad120c0705001f193c99a8772efb0c000200"], 0x3c}}, 0x20000000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) 16m4.3192492s ago: executing program 5 (id=3002): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\x00\x00\x00\x00ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\x85n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) 16m2.65450682s ago: executing program 5 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x284800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0413010064d2759b5c5aaf213d59ed3606c4ec15b1e207f6fe23e7d424909558b7ad55ba18b35f52f8b7ebe9fa0610393eb34e43d5cabed891b2e0c589097c31c37000000000000000000f443ca123142c57ab24439a2592797677fcce36fe020ade2677d876efe4346d2e36c90c1a6d78fd0a93682885a53c6b0e2ad7264d54c40bc74cb35ec0d0d441fb71d4ce21582ba247ab97bbbd7760c534cb3ee0b9b0c655b5eb51581ee70e20"], 0x2) 15m46.757231915s ago: executing program 34 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x284800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0413010064d2759b5c5aaf213d59ed3606c4ec15b1e207f6fe23e7d424909558b7ad55ba18b35f52f8b7ebe9fa0610393eb34e43d5cabed891b2e0c589097c31c37000000000000000000f443ca123142c57ab24439a2592797677fcce36fe020ade2677d876efe4346d2e36c90c1a6d78fd0a93682885a53c6b0e2ad7264d54c40bc74cb35ec0d0d441fb71d4ce21582ba247ab97bbbd7760c534cb3ee0b9b0c655b5eb51581ee70e20"], 0x2) 6m29.80380884s ago: executing program 4 (id=4871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @fallback=0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xb}, 0x24000001) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000085", @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m28.754806633s ago: executing program 4 (id=4873): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea199800", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0x2bc, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000fc0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, {0x2, 0xfff8, 0x3, @mcast2, 0x9}, 0xffffffffffffffff, 0x7}}, 0x48) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0xffffffdd) socket$inet6_icmp(0xa, 0x2, 0x3a) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000480)="ead4241cc4d6370c5d42045900567c7e16da0795c6ff3421eeef3dc9f7827ad47d39143deac911ab4d00803f00813df05f1b04ffe221cb0cf4", 0x39, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000c40), 0x0, 0x4) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='.++-\x00', 0xfffffffffffffffb) 6m25.428242279s ago: executing program 4 (id=4885): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x17) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x47be, 0x1, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0xff}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) 6m23.156221673s ago: executing program 4 (id=4892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80100, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @multicast1}, &(0x7f0000000500)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x26, 0x4, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6m22.032175394s ago: executing program 4 (id=4896): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 6m21.58692723s ago: executing program 4 (id=4900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18330000000004000000000000000000a077f8850000007a0000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x10, 0xb}, {0xc, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x6, 0xffffff8a, 0x20fa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048075}, 0x4008044) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x5, 0x5, "67bb6bd22e"}, 0xd) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r11, &(0x7f00000000c0)=ANY=[], 0xffe) 6m20.825681852s ago: executing program 35 (id=4900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18330000000004000000000000000000a077f8850000007a0000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x10, 0xb}, {0xc, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x6, 0xffffff8a, 0x20fa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048075}, 0x4008044) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x5, 0x5, "67bb6bd22e"}, 0xd) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r11, &(0x7f00000000c0)=ANY=[], 0xffe) 3m18.614188442s ago: executing program 8 (id=5414): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d4786682467", 0x1e}], 0x2}, 0x4) r1 = fanotify_init(0x20, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(0xffffffffffffffff, r2) fanotify_mark(r1, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') 3m17.789971544s ago: executing program 8 (id=5418): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) execveat(0xffffffffffffffff, 0x0, &(0x7f0000001440), 0xfffffffffffffffc, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x3}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x3c8, 0x12, 0x100, 0x70bd27, 0x25dfdbfb, {0x2b, 0xd, 0x52, 0x0, {0x4e20, 0x4e20, [0xffff, 0x3, 0x8, 0x4], [0x209, 0x100, 0x3ff, 0x3], 0x0, [0xffff, 0x2]}, 0x80000001, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "c00042eff1a2e1ff682a96fef95daaeb00c8ffbb36d836665ee41227c5960ff1ca061197addc0b7c9e643fc2a37a6822702eb380"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "f130681160acbe04bb96f2606227e80d1a94e850f77bb6c7c49fb8d33deeab84bbc6b2095d2f496f5d470f45daa6d107fd7abc7fef04f395fb99a3fe647594448da587c5e9e1ac484ff0ed44e31b0dc8265c5f131f65fdd877410bd073711843beed9bcf09c79dc70a750d931d17adcf2b799df22f4a9a6999a2ecaf293a2721e35a37bb19c3ebe069"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "ac39c6c1378cf5d50128c4a89d48e420b79e"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "49c32bb73f4ab8043bfe1797162f31eb5c98503be8b68de80054840a2539b10d0a4cd0cc16e2a234b5e22114ddac747bbfbecf21c591c07a505dc2c7a08b317d6965133360e63a7d49fc4972a6e8a944117d9b2036d17caa8a6a5484c48a1e0c0adbe821074772c7fc79e15f26e4b181cfd2b145520746f3b2d243e04c7904630d27e89c2fe4584e3dfe8336436cf7c50b67fd8ef7d2844400cfbb588ec382bacce7e63f8485a713c4b6aaf8a6ab39bff516078bbb01134b86818f6f5b14bb1581ceb2a760bbc7eed33a079762a4af0f0ff96d617886a0f9c02d87d1c5463968e61a6c765978f3845ed95566"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "a5aee0c77a2af020abef1e6ac13ab8b83f682de3d0cb0d593b1b9ff26438ee9c3d1f219fb8e03c35393670351aef6ba7633a4795136a072385069506d3a0d3502ebccc478a38788de503c7c5ef8ea79e2ae9601d5004726ce8cdd3161d89a9d28f0ed23acd04d6165b6f844d7ae8c470a0a7a72a47a9e15024462353f7fafecb47202bc5baace122b6e68d5ba4b2c3bec3532752707089b1cba08a3879cc62c85ec0d396433d6065c31a463437fed6a315da9a7370e984c37235"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "8cbc2a8a443004f51fbc58526a3d7a8c0867eee2ea20661a6ae067d7ca83da208686e54f674ba99aed11f491ee1f6c5709b23c1f57a7f73ae907c1c93ace637fbd6bdbce0d371204601a50f9e7"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "fbd442514c80be0f846799b2fac310db9efb148afbf40b2567902c4263aad13c394c870bb5d22c66bacf84890e94126482bc344d615b401f58f1b3097eb56ac7895a37713f4f1c8fbc9af0b76c46c831443d08a30eadb6018602664dd489ce588a3e0803eeae719eb638d78015ac895d341248fe665b4a80d5600147ce985d03cdf9708e0236949202d6637093df89e4e7cd"}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x1998d96be5c40e4b}, 0x4000) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) memfd_secret(0x80000) (async) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x62, &(0x7f0000000000)=@generic={0x3, 0x2, 0x5a, "17004719", "d4266e295181a244332b576bbac4c3359b259506a9032b3b1a91330aeb7c0e13040a9b7c642a86f5bc4cd06bd603d7969cd65924e5d85085b5aee92352a17683623c9fa651610e23aabde23b5cb908b9b8ed4538aeb2f2d7e784"}) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m15.660469079s ago: executing program 8 (id=5421): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\x00\x00\x00\x00ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\x85n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{r2, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={r2, 0x5}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x2, 0x3, 0xd5}, 0x1) 2m55.670187765s ago: executing program 36 (id=5436): r0 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) r1 = fsopen(&(0x7f0000000180)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{r2, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={r2, 0x5}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x2, 0x3, 0xd5}, 0x1) 9.216321461s ago: executing program 0 (id=6060): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x7ffffffff000, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r7}}], [{@appraise}, {@euid_eq={'euid', 0x3d, r10}}, {@dont_hash}]}) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) r11 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r11, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x1237d, 0x30) 7.653576194s ago: executing program 6 (id=6063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73"], 0x34}}, 0x4040) 7.466094914s ago: executing program 6 (id=6065): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x140, 0x0, 0x0) 6.614946785s ago: executing program 0 (id=6067): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, 0x0, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.523847915s ago: executing program 6 (id=6070): timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xffff1c06, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000e00)={&(0x7f0000000d80)=""/99, 0x63}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x1c, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f0000000640), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r11, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x47, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES8=r5, @ANYBLOB="0000000000000000280012000c00010076657468f1c68750e2221b3da6d51de0b69324989c90b828fd629f28b03ffbd413b94d48c3af54b76553d7bb7460c268f9b84740fac7a15eabe7b37f574daf0bae81fb040ab5e837af856b4b8ec4daad8dd4ea86dda8009cd3fe29d2c08e481185436db681cb97f95223aceaefc7f97b794d665d4e2a2a66d85a689aabe01e79e961b51b81077aff93518bd739b8"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25110000004c000180140002006970766c616e300000000000000000000800030001000000080003000300000014000200766972745f776966693000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x80008c0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000003500007d9776a1000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f53c70c5dec1e666c3a573"], &(0x7f0000000040)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="8800", @ANYRES16], 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4040091) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 5.501173769s ago: executing program 6 (id=6073): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x77, {"b9800000c066410fc1c535000800000f300f01cfb88819458fef66bafc0cb8fac90000ef672e0f1f00360f7821c7442400a9f80b95c7442402a404c060fefe442406000000000f0114240f07460f09b9e30200000f32b9780300000f32c4a1a25d921e6b5458"}}], 0x77}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000084, 0x0, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.262035183s ago: executing program 3 (id=6076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 4.742792484s ago: executing program 9 (id=6077): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x7ffffffff000, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r7}}], [{@appraise}, {@euid_eq={'euid', 0x3d, r10}}, {@dont_hash}]}) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) r11 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r11, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x1237d, 0x30) 4.566280966s ago: executing program 3 (id=6078): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) socket$packet(0x11, 0x3, 0x300) listen(r5, 0x5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) 3.949519799s ago: executing program 7 (id=6079): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.94874131s ago: executing program 6 (id=6080): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) socket$netlink(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 3.694873762s ago: executing program 9 (id=6081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r7, r7, 0x0) 3.49345307s ago: executing program 7 (id=6082): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2.933142318s ago: executing program 7 (id=6083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) munlockall() 2.706981549s ago: executing program 7 (id=6084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003c01088080000080500009804c000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200e00000020500030001000000060001000200000008000200e000de00050003000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500060000004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c6c00008024000100f44da367938ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a000009000000070000000000000000000000000000000003000000240009800c0000800600010002000000080002007f000001050003000300000044fe008024000300b00e73e8d44e91e3da922c22438244bb885c69e269c8e9d835b11429"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.693185469s ago: executing program 9 (id=6085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.556846615s ago: executing program 9 (id=6086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f00000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.534357144s ago: executing program 7 (id=6087): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000640)={{0x33, @private=0xa010100, 0x4e22, 0x800003, 'none\x00', 0x10, 0x8ca1, 0x37}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x10000, 0x7c5, 0x8, 0x8}}, 0x44) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x541b, 0x0) 2.445778605s ago: executing program 3 (id=6088): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) process_vm_readv(r0, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {0x0}], 0x7, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/13, 0xd}], 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) chown(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x5, 0x0, 0xfff6}) 1.953939595s ago: executing program 9 (id=6089): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getitimer(0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.464658232s ago: executing program 3 (id=6090): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) 1.446387559s ago: executing program 6 (id=6091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000054cf000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="80"], 0x50) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4e, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080cf6f2f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x96}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r10, 0x8004ae98, &(0x7f0000000040)) 957.218147ms ago: executing program 3 (id=6092): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff230000000000000000000000000001140006"], 0x48}}, 0x0) 837.383474ms ago: executing program 9 (id=6093): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 782.567542ms ago: executing program 7 (id=6094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x480e0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 694.062475ms ago: executing program 3 (id=6095): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setns(r2, 0x66020000) 564.360244ms ago: executing program 0 (id=6096): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 488.91815ms ago: executing program 0 (id=6097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010100, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {}, {0x9, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) 273.830501ms ago: executing program 0 (id=6098): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./bus\x00') mkdir(&(0x7f0000000480)='./bus\x00', 0x150) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f00000004c0)='./file1\x00', r1, &(0x7f0000000300)='./bus/file0\x00', 0x2) 0s ago: executing program 0 (id=6099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): e type 1 has an invalid length. [ 1623.270518][T27199] 9pnet_fd: Insufficient options for proto=fd [ 1623.849379][T27207] tipc: Enabled bearer , priority 0 [ 1623.900784][ T30] audit: type=1400 audit(1764285548.581:1294): avc: denied { append } for pid=27204 comm="syz.8.5379" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1623.937547][T27207] syzkaller0: entered promiscuous mode [ 1623.945414][T27207] syzkaller0: entered allmulticast mode [ 1624.033904][ T30] audit: type=1400 audit(1764285548.701:1295): avc: denied { ioctl } for pid=27204 comm="syz.8.5379" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1624.431476][T27188] Bluetooth: hci0: command 0x0000 tx timeout [ 1624.546636][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1624.610087][ T30] audit: type=1400 audit(1764285549.431:1296): avc: denied { accept } for pid=27216 comm="syz.7.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1624.811974][ T30] audit: type=1400 audit(1764285549.641:1297): avc: denied { read } for pid=27216 comm="syz.7.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1625.291156][T27227] Sensor B: ================= START STATUS ================= [ 1625.298893][T27227] Sensor B: Test Pattern: 75% Colorbar [ 1625.304681][T27227] Sensor B: Show Information: All [ 1625.310003][T27227] Sensor B: Vertical Flip: false [ 1625.315160][T27227] Sensor B: Horizontal Flip: false [ 1625.320500][T27227] Sensor B: Brightness: 128 [ 1625.325085][T27227] Sensor B: Contrast: 128 [ 1625.329489][T27227] Sensor B: Hue: 0 [ 1625.333358][T27227] Sensor B: Saturation: 128 [ 1625.337953][T27227] Sensor B: ================== END STATUS ================== [ 1625.493021][T27211] team0 (unregistering): Port device team_slave_0 removed [ 1625.507241][T27225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.588913][T27211] team0 (unregistering): Port device team_slave_1 removed [ 1625.719446][T27205] tipc: Resetting bearer [ 1625.807161][T27205] tipc: Disabling bearer [ 1626.128768][T27237] block nbd0: NBD_DISCONNECT [ 1626.220174][T25407] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1626.549919][T27243] netlink: 'syz.3.5390': attribute type 10 has an invalid length. [ 1626.615175][T27243] bridge0: entered promiscuous mode [ 1626.707495][T27239] bridge0: left promiscuous mode [ 1626.799597][T25407] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1626.872607][T25407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.916281][T25407] usb 7-1: config 0 descriptor?? [ 1627.923869][T27259] Sensor B: ================= START STATUS ================= [ 1627.931722][T27259] Sensor B: Test Pattern: 75% Colorbar [ 1627.937270][T27259] Sensor B: Show Information: All [ 1627.942432][T27259] Sensor B: Vertical Flip: false [ 1627.947397][T27259] Sensor B: Horizontal Flip: false [ 1627.952590][T27259] Sensor B: Brightness: 128 [ 1627.957159][T27259] Sensor B: Contrast: 128 [ 1627.961605][T27259] Sensor B: Hue: 0 [ 1627.965397][T27259] Sensor B: Saturation: 128 [ 1627.970047][T27259] Sensor B: ================== END STATUS ================== [ 1628.174769][T27256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.190843][T25407] usb 7-1: Cannot read MAC address [ 1628.196142][T25407] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1628.257047][T25407] usb 7-1: USB disconnect, device number 96 [ 1628.697599][T27269] Mount JFS Failure: -5 [ 1628.701989][T27269] jfs_mount failed w/return code = -5 [ 1629.747944][T27284] Mount JFS Failure: -5 [ 1629.752522][T27284] jfs_mount failed w/return code = -5 [ 1630.259996][ T1206] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1630.441727][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 1630.683097][T27288] syzkaller0: entered promiscuous mode [ 1630.702372][ T1206] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1630.711607][T27288] syzkaller0: entered allmulticast mode [ 1630.711744][ T1206] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1630.780304][ T1206] usb 4-1: Product: syz [ 1630.784502][ T1206] usb 4-1: Manufacturer: syz [ 1630.900646][ T1206] usb 4-1: SerialNumber: syz [ 1630.901247][T27288] tipc: Enabled bearer , priority 0 [ 1630.907185][T27295] block nbd8: NBD_DISCONNECT [ 1630.918994][ T1206] usb 4-1: config 0 descriptor?? [ 1630.982827][T27296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27296 comm=syz.6.5404 [ 1631.001252][T27296] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1631.015084][T27296] netlink: 'syz.6.5404': attribute type 1 has an invalid length. [ 1631.340008][T27285] tipc: Resetting bearer [ 1631.348313][ T1206] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1631.554234][T27285] tipc: Disabling bearer [ 1631.958920][T27280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.983213][T27280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.047551][ T1206] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input130 [ 1632.294342][T27316] Sensor B: ================= START STATUS ================= [ 1632.302073][T27316] Sensor B: Test Pattern: 75% Colorbar [ 1632.307587][T27316] Sensor B: Show Information: All [ 1632.313843][T27316] Sensor B: Vertical Flip: false [ 1632.318922][T27316] Sensor B: Horizontal Flip: false [ 1632.324204][T27316] Sensor B: Brightness: 128 [ 1632.328780][T27316] Sensor B: Contrast: 128 [ 1632.333255][T27316] Sensor B: Hue: 0 [ 1632.337062][T27316] Sensor B: Saturation: 128 [ 1632.342941][T27316] Sensor B: ================== END STATUS ================== [ 1632.492123][T27311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.553295][ T30] audit: type=1400 audit(1764285557.371:1298): avc: denied { write } for pid=27314 comm="syz.0.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1632.716898][ T30] audit: type=1400 audit(1764285557.521:1299): avc: denied { append } for pid=27314 comm="syz.0.5411" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1633.609095][ T30] audit: type=1400 audit(1764285558.431:1300): avc: denied { execute } for pid=27326 comm="syz.8.5413" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1633.734918][T27319] warn_alloc: 1 callbacks suppressed [ 1633.734931][T27319] syz.0.5411: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1633.783001][T27319] CPU: 0 UID: 0 PID: 27319 Comm: syz.0.5411 Not tainted syzkaller #0 PREEMPT(full) [ 1633.783030][T27319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1633.783040][T27319] Call Trace: [ 1633.783046][T27319] [ 1633.783053][T27319] dump_stack_lvl+0x16c/0x1f0 [ 1633.783075][T27319] warn_alloc+0x248/0x3a0 [ 1633.783105][T27319] ? __pfx_warn_alloc+0x10/0x10 [ 1633.783146][T27319] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1633.783169][T27319] ? __vmalloc_node_noprof+0xad/0xf0 [ 1633.783198][T27319] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1633.783221][T27319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.783248][T27319] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1633.783277][T27319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1633.783307][T27319] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1633.783327][T27319] vmalloc_user_noprof+0x9e/0xe0 [ 1633.783348][T27319] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1633.783370][T27319] vb2_vmalloc_alloc+0x135/0x3f0 [ 1633.783395][T27319] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1633.783417][T27319] __vb2_queue_alloc+0x8c9/0x1280 [ 1633.783454][T27319] vb2_core_reqbufs+0xa90/0xfe0 [ 1633.783481][T27319] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1633.783520][T27319] __vb2_init_fileio+0x3f1/0x1100 [ 1633.783552][T27319] __vb2_perform_fileio+0x9c2/0x1660 [ 1633.783582][T27319] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1633.783615][T27319] vb2_fop_write+0x207/0x3f0 [ 1633.783640][T27319] v4l2_write+0x229/0x360 [ 1633.783671][T27319] loop_rw_iter+0x2fa/0x690 [ 1633.783704][T27319] io_write+0x1127/0x1660 [ 1633.783732][T27319] ? __fget_files+0x20e/0x3c0 [ 1633.783754][T27319] __io_issue_sqe+0xe8/0x7c0 [ 1633.783780][T27319] io_issue_sqe+0x85/0x1000 [ 1633.783812][T27319] io_submit_sqes+0x94d/0x2710 [ 1633.783853][T27319] __do_sys_io_uring_enter+0xd69/0x1630 [ 1633.783882][T27319] ? __pfx___schedule+0x10/0x10 [ 1633.783908][T27319] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1633.783935][T27319] ? __x64_sys_futex+0x1e0/0x4c0 [ 1633.783950][T27319] ? __x64_sys_futex+0x1e9/0x4c0 [ 1633.783969][T27319] ? __pfx___x64_sys_futex+0x10/0x10 [ 1633.783995][T27319] do_syscall_64+0xcd/0xfa0 [ 1633.784026][T27319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.784047][T27319] RIP: 0033:0x7fe45098f749 [ 1633.784062][T27319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1633.784079][T27319] RSP: 002b:00007fe45176b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1633.784096][T27319] RAX: ffffffffffffffda RBX: 00007fe450be5fa0 RCX: 00007fe45098f749 [ 1633.784107][T27319] RDX: 0000000000000000 RSI: 00000000000048ed RDI: 0000000000000006 [ 1633.784118][T27319] RBP: 00007fe450a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1633.784128][T27319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1633.784138][T27319] R13: 00007fe450be6038 R14: 00007fe450be5fa0 R15: 00007ffcf95f0848 [ 1633.784164][T27319] [ 1633.784235][T27319] Mem-Info: [ 1634.095111][T27319] active_anon:26984 inactive_anon:0 isolated_anon:0 [ 1634.095111][T27319] active_file:22526 inactive_file:41876 isolated_file:0 [ 1634.095111][T27319] unevictable:19712 dirty:296 writeback:0 [ 1634.095111][T27319] slab_reclaimable:13671 slab_unreclaimable:119875 [ 1634.095111][T27319] mapped:32535 shmem:14998 pagetables:1628 [ 1634.095111][T27319] sec_pagetables:0 bounce:0 [ 1634.095111][T27319] kernel_misc_reclaimable:0 [ 1634.095111][T27319] free:1215253 free_pcp:15308 free_cma:0 [ 1634.141664][T27319] Node 0 active_anon:107936kB inactive_anon:0kB active_file:90104kB inactive_file:167272kB unevictable:77312kB isolated(anon):0kB isolated(file):0kB mapped:130112kB dirty:1184kB writeback:0kB shmem:58456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15232kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1634.291804][T27331] bridge0: entered promiscuous mode [ 1634.340974][T27319] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1634.502427][T27329] bridge0: left promiscuous mode [ 1634.534326][ T5898] usb 4-1: USB disconnect, device number 26 [ 1634.555648][T27319] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1634.737906][T27334] ip6_vti0 speed is unknown, defaulting to 1000 [ 1635.488420][T27319] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1635.644085][T27319] Node 0 DMA32 free:930144kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127504kB inactive_anon:0kB active_file:90104kB inactive_file:167272kB unevictable:77368kB writepending:1372kB zspages:0kB present:3129332kB managed:2544848kB mlocked:8192kB bounce:0kB free_pcp:44032kB local_pcp:19628kB free_cma:0kB [ 1636.300393][T27319] lowmem_reserve[]: 0 0 1 1 1 [ 1636.351844][T27319] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1636.647190][T27319] lowmem_reserve[]: 0 0 0 0 0 [ 1636.700025][T27319] Node 1 Normal free:3900028kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12736kB local_pcp:10080kB free_cma:0kB [ 1636.732296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.827164][T27357] FAULT_INJECTION: forcing a failure. [ 1636.827164][T27357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.840432][T27357] CPU: 0 UID: 0 PID: 27357 Comm: syz.3.5420 Not tainted syzkaller #0 PREEMPT(full) [ 1636.840453][T27357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1636.840462][T27357] Call Trace: [ 1636.840467][T27357] [ 1636.840471][T27357] dump_stack_lvl+0x16c/0x1f0 [ 1636.840485][T27357] should_fail_ex+0x512/0x640 [ 1636.840501][T27357] _copy_from_user+0x2e/0xd0 [ 1636.840515][T27357] video_usercopy+0xee2/0x1720 [ 1636.840527][T27357] ? __pfx___video_do_ioctl+0x10/0x10 [ 1636.840543][T27357] ? __pfx_video_usercopy+0x10/0x10 [ 1636.840560][T27357] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1636.840577][T27357] v4l2_ioctl+0x1bd/0x250 [ 1636.840591][T27357] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1636.840607][T27357] __x64_sys_ioctl+0x18e/0x210 [ 1636.840624][T27357] do_syscall_64+0xcd/0xfa0 [ 1636.840636][T27357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.840647][T27357] RIP: 0033:0x7f82c098f749 [ 1636.840656][T27357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.840667][T27357] RSP: 002b:00007f82c1832038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1636.840677][T27357] RAX: ffffffffffffffda RBX: 00007f82c0be6090 RCX: 00007f82c098f749 [ 1636.840684][T27357] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000009 [ 1636.840690][T27357] RBP: 00007f82c1832090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.840696][T27357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.840702][T27357] R13: 00007f82c0be6128 R14: 00007f82c0be6090 R15: 00007fff4a6357a8 [ 1636.840716][T27357] [ 1637.200809][T27319] lowmem_reserve[]: 0 0 0 0 0 [ 1637.206763][T27319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1637.237007][T27319] Node 0 DMA32: 3*4kB (UM) 29*8kB (UME) 22*16kB (UE) 278*32kB (UME) 996*64kB (ME) 521*128kB (UME) 286*256kB (UME) 104*512kB (UM) 39*1024kB (UM) 4*2048kB (U) 149*4096kB (UME) = 924820kB [ 1637.255646][T27319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1637.267180][T27319] Node 1 Normal: 195*4kB (UME) 64*8kB (UME) 51*16kB (UME) 174*32kB (UE) 56*64kB (UME) 17*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3900028kB [ 1637.286202][T27319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1637.296096][T27319] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1637.305660][T27319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1637.315553][T27319] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1637.326000][T27319] 98764 total pagecache pages [ 1637.334830][T27319] 0 pages in swap cache [ 1637.339957][T27319] Free swap = 124996kB [ 1637.364940][T27319] Total swap = 124996kB [ 1637.385868][T27319] 2097051 pages RAM [ 1637.686336][T27319] 0 pages HighMem/MovableOnly [ 1637.729295][T27319] 428749 pages reserved [ 1637.745043][T27319] 0 pages cma reserved [ 1637.910313][T27357] ip6_vti0 speed is unknown, defaulting to 1000 [ 1640.479435][T27406] program syz.7.5430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1640.596973][ T30] audit: type=1400 audit(1764285565.421:1301): avc: denied { mounton } for pid=27407 comm="syz.8.5432" path="/100/file1/file0" dev="autofs" ino=89277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1640.690030][ T8019] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1640.842358][ T8019] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1640.850526][ T8019] usb 1-1: config 0 has no interface number 0 [ 1640.860275][ T8019] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8e.1e [ 1640.882295][ T8019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.926064][ T8019] usb 1-1: config 0 descriptor?? [ 1640.944183][ T8019] usb 1-1: selecting invalid altsetting 1 [ 1640.960031][ T8019] dvb_ttusb_budget: ttusb_init_controller: error [ 1640.973466][ T8019] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1641.446074][T27417] netlink: 'syz.6.5435': attribute type 10 has an invalid length. [ 1641.459086][T27417] bridge0: entered promiscuous mode [ 1641.575409][ T8019] DVB: Unable to find symbol cx22700_attach() [ 1641.618097][ T8019] DVB: Unable to find symbol tda10046_attach() [ 1641.629011][ T8019] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1641.652750][ T8019] usb 1-1: USB disconnect, device number 57 [ 1642.084227][T27416] bridge0: left promiscuous mode [ 1643.091956][T27436] bridge0: entered promiscuous mode [ 1643.189244][T27433] bridge0: left promiscuous mode [ 1643.340147][T27441] netlink: 'syz.3.5442': attribute type 10 has an invalid length. [ 1643.384091][T27441] bridge0: entered promiscuous mode [ 1643.397910][T27441] bridge0: left promiscuous mode [ 1643.838099][T27444] Sensor B: ================= START STATUS ================= [ 1643.846123][T27444] Sensor B: Test Pattern: 75% Colorbar [ 1643.851648][T27444] Sensor B: Show Information: All [ 1643.856659][T27444] Sensor B: Vertical Flip: false [ 1643.862105][T27444] Sensor B: Horizontal Flip: false [ 1643.867197][T27444] Sensor B: Brightness: 128 [ 1643.871805][T27444] Sensor B: Contrast: 128 [ 1643.876113][T27444] Sensor B: Hue: 0 [ 1643.879918][T27444] Sensor B: Saturation: 128 [ 1643.884648][T27444] Sensor B: ================== END STATUS ================== [ 1643.915069][T27443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.018150][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5444'. [ 1644.722090][T27463] block nbd6: NBD_DISCONNECT [ 1645.026447][T27465] pim6reg: entered allmulticast mode [ 1646.357138][T27472] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1647.960076][T18066] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1648.141755][T18066] usb 4-1: config index 0 descriptor too short (expected 215, got 45) [ 1648.161288][T18066] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1648.180045][T18066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.190381][T18066] usb 4-1: Product: syz [ 1648.208728][T18066] usb 4-1: Manufacturer: syz [ 1648.218608][T18066] usb 4-1: SerialNumber: syz [ 1648.735893][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1648.809796][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1649.043701][T27506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1649.609097][ T30] audit: type=1400 audit(1764285574.431:1302): avc: denied { unmount } for pid=24417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1649.741044][ T1538] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1649.785109][T27511] Sensor B: ================= START STATUS ================= [ 1649.792881][T27511] Sensor B: Test Pattern: 75% Colorbar [ 1649.798480][T27511] Sensor B: Show Information: All [ 1649.803669][T27511] Sensor B: Vertical Flip: false [ 1649.808685][T27511] Sensor B: Horizontal Flip: false [ 1649.814018][T27511] Sensor B: Brightness: 128 [ 1649.818695][T27511] Sensor B: Contrast: 128 [ 1649.825002][T27511] Sensor B: Hue: 0 [ 1649.828850][T27511] Sensor B: Saturation: 128 [ 1649.833456][T27511] Sensor B: ================== END STATUS ================== [ 1650.083297][T27509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.145286][ T1538] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1650.153801][ T1538] usb 1-1: config 0 has no interface number 0 [ 1650.160039][ T1538] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.180411][ T1538] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1650.201961][ T1538] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1650.211156][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.219828][ T1538] usb 1-1: Product: syz [ 1650.224057][ T1538] usb 1-1: Manufacturer: syz [ 1650.228653][ T1538] usb 1-1: SerialNumber: syz [ 1650.238637][ T1538] usb 1-1: config 0 descriptor?? [ 1650.249958][T27508] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1650.277909][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1650.426425][T27515] netlink: 'syz.7.5457': attribute type 10 has an invalid length. [ 1650.439316][T27515] bond0: (slave netdevsim0): Releasing backup interface [ 1650.452617][T27515] netlink: 'syz.7.5457': attribute type 10 has an invalid length. [ 1650.463120][T27515] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1650.493693][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 1650.496141][ T1538] usb 1-1: USB disconnect, device number 58 [ 1650.514929][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1650.519996][T21458] udevd[21458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1650.532708][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1650.554767][T18066] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1650.565554][T18066] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1650.578604][T18066] usb 4-1: USB disconnect, device number 27 [ 1650.909849][ T5898] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1651.071224][ T5898] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1651.079493][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.091587][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1651.100947][ T5898] usb 7-1: config 0 has no interface number 0 [ 1651.107092][ T5898] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1651.118497][ T5898] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1651.130330][ T5898] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 210, setting to 64 [ 1651.141662][ T5898] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1651.157295][ T5898] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1651.166395][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.174438][ T5898] usb 7-1: Product: syz [ 1651.178599][ T5898] usb 7-1: Manufacturer: syz [ 1651.187835][ T5898] usb 7-1: SerialNumber: syz [ 1651.195717][ T5898] usb 7-1: config 0 descriptor?? [ 1651.203671][T27517] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1651.216432][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1651.239782][ T1538] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1651.426919][T27526] Sensor B: ================= START STATUS ================= [ 1651.434584][T27526] Sensor B: Test Pattern: 75% Colorbar [ 1651.440302][T27526] Sensor B: Show Information: All [ 1651.445417][T27526] Sensor B: Vertical Flip: false [ 1651.450450][T27526] Sensor B: Horizontal Flip: false [ 1651.455760][T27526] Sensor B: Brightness: 128 [ 1651.461291][T27526] Sensor B: Contrast: 128 [ 1651.465973][T27526] Sensor B: Hue: 0 [ 1651.470020][T27526] Sensor B: Saturation: 128 [ 1651.474688][T27526] Sensor B: ================== END STATUS ================== [ 1651.624600][ T5898] usb 7-1: USB disconnect, device number 97 [ 1651.641534][ T1538] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.651682][ T1538] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1651.661623][ T1538] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 1651.662413][T27523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.672204][ T1538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1651.700124][ T1538] usb 1-1: SerialNumber: syz [ 1651.717731][ T1538] usb 1-1: 0:2 : does not exist [ 1651.723182][ T1538] usb 1-1: unit 208 not found! [ 1653.014009][ T1538] usb 1-1: USB disconnect, device number 59 [ 1653.476414][T27540] netlink: 'syz.7.5465': attribute type 10 has an invalid length. [ 1653.499959][T27540] bond0: (slave netdevsim0): Releasing backup interface [ 1653.509191][T27540] netlink: 'syz.7.5465': attribute type 10 has an invalid length. [ 1653.521339][T27540] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1654.009811][T18066] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1654.179953][T18066] usb 4-1: Using ep0 maxpacket: 32 [ 1654.197963][T18066] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1654.216296][T18066] usb 4-1: config 0 has no interface number 0 [ 1654.229781][T18066] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1654.229847][T18066] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1654.266705][T18066] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1654.282769][T18066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.291243][T18066] usb 4-1: Product: syz [ 1654.295452][T18066] usb 4-1: Manufacturer: syz [ 1654.301618][T18066] usb 4-1: SerialNumber: syz [ 1654.310295][T18066] usb 4-1: config 0 descriptor?? [ 1654.399940][T25407] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 1654.527310][T18066] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1654.544479][T18066] cx231xx 4-1:0.1: Failed to read PCB config [ 1654.555120][T18066] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1654.567362][T25407] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1654.576853][T18066] usb 4-1: USB disconnect, device number 28 [ 1654.584480][T25407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.595107][T25407] usb 8-1: Product: syz [ 1654.599280][T25407] usb 8-1: Manufacturer: syz [ 1654.604309][T25407] usb 8-1: SerialNumber: syz [ 1654.614105][T25407] usb 8-1: config 0 descriptor?? [ 1655.269396][T25407] usb_8dev 8-1:0.0 can0: sending command message failed [ 1655.279952][T25407] usb_8dev 8-1:0.0 can0: can't get firmware version [ 1655.343981][T25407] usb_8dev 8-1:0.0: probe with driver usb_8dev failed with error -22 [ 1655.356727][T25407] usb 8-1: USB disconnect, device number 63 [ 1655.595648][T27575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.037729][T27578] Sensor B: ================= START STATUS ================= [ 1656.045583][T27578] Sensor B: Test Pattern: 75% Colorbar [ 1656.051364][T27578] Sensor B: Show Information: All [ 1656.056591][T27578] Sensor B: Vertical Flip: false [ 1656.061979][T27578] Sensor B: Horizontal Flip: false [ 1656.067351][T27578] Sensor B: Brightness: 128 [ 1656.076829][T27578] Sensor B: Contrast: 128 [ 1656.081427][T27578] Sensor B: Hue: 0 [ 1656.085338][T27578] Sensor B: Saturation: 128 [ 1656.090040][T27578] Sensor B: ================== END STATUS ================== [ 1656.258768][T27576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1656.275022][T27583] block nbd3: NBD_DISCONNECT [ 1656.951744][T27595] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 1656.994097][ T30] audit: type=1400 audit(1764285581.801:1303): avc: denied { relabelto } for pid=27591 comm="syz.6.5478" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:pam_var_run_t:s0" [ 1657.057811][ T30] audit: type=1400 audit(1764285581.801:1304): avc: denied { associate } for pid=27591 comm="syz.6.5478" name="tty1" dev="devtmpfs" ino=20 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_var_run_t:s0" [ 1657.085385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1657.440622][ T1538] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1657.448545][ T30] audit: type=1400 audit(1764285582.191:1305): avc: denied { setopt } for pid=27596 comm="syz.0.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1657.493726][T27188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1657.505154][T27188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1657.515348][T27188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1657.526868][T27188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1657.534399][T27188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1657.611611][ T1538] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1657.643392][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.677372][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5482'. [ 1657.711724][ T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.726056][ T1538] usb 4-1: config 0 descriptor?? [ 1659.040696][ T1538] usb 4-1: Cannot read MAC address [ 1659.046073][ T1538] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1659.072787][ T1538] usb 4-1: USB disconnect, device number 29 [ 1659.355769][ T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.475524][T27601] ip6_vti0 speed is unknown, defaulting to 1000 [ 1659.631608][T27188] Bluetooth: hci0: command tx timeout [ 1659.662634][ T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.196713][T27625] netlink: 'syz.3.5485': attribute type 10 has an invalid length. [ 1660.558623][ T60] bond0: (slave netdevsim0): Releasing backup interface [ 1660.653435][ T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.718784][T27624] bridge0: entered promiscuous mode [ 1660.746015][T27629] bridge0: left promiscuous mode [ 1660.951469][T27640] block nbd3: NBD_DISCONNECT [ 1661.109539][ T60] bridge_slave_1: left allmulticast mode [ 1661.115501][ T60] bridge_slave_1: left promiscuous mode [ 1661.121329][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.220690][T27643] Mount JFS Failure: -5 [ 1661.224917][T27643] jfs_mount failed w/return code = -5 [ 1661.588699][ T60] bridge_slave_0: left allmulticast mode [ 1661.709979][T27188] Bluetooth: hci0: command tx timeout [ 1661.723055][ T60] bridge_slave_0: left promiscuous mode [ 1661.728881][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.003016][T27648] block nbd7: NBD_DISCONNECT [ 1662.230073][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5493'. [ 1662.960068][T27661] netlink: 'syz.6.5494': attribute type 10 has an invalid length. [ 1663.158380][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.181319][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.191481][ T60] bond0 (unregistering): (slave team0): Releasing backup interface [ 1663.200616][ T60] bond0 (unregistering): Released all slaves [ 1663.211280][ T60] bond1 (unregistering): Released all slaves [ 1663.241038][T27655] pim6reg: entered allmulticast mode [ 1663.251074][T27662] bridge0: entered promiscuous mode [ 1663.315988][T27662] bridge0: left promiscuous mode [ 1663.453509][T27601] chnl_net:caif_netlink_parms(): no params data found [ 1664.125468][T27188] Bluetooth: hci0: command tx timeout [ 1664.636029][T27689] netlink: 'syz.3.5498': attribute type 10 has an invalid length. [ 1664.684499][T27697] netlink: 'syz.3.5498': attribute type 10 has an invalid length. [ 1664.869979][T18066] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1664.883462][T27697] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1664.888727][T27705] FAULT_INJECTION: forcing a failure. [ 1664.888727][T27705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.920230][T27705] CPU: 0 UID: 0 PID: 27705 Comm: syz.6.5502 Not tainted syzkaller #0 PREEMPT(full) [ 1664.920246][T27705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1664.920252][T27705] Call Trace: [ 1664.920256][T27705] [ 1664.920261][T27705] dump_stack_lvl+0x16c/0x1f0 [ 1664.920275][T27705] should_fail_ex+0x512/0x640 [ 1664.920291][T27705] _copy_to_user+0x32/0xd0 [ 1664.920307][T27705] simple_read_from_buffer+0xcb/0x170 [ 1664.920325][T27705] proc_fail_nth_read+0x197/0x240 [ 1664.920339][T27705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.920352][T27705] ? rw_verify_area+0xcf/0x6c0 [ 1664.920368][T27705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.920380][T27705] vfs_read+0x1e4/0xcf0 [ 1664.920392][T27705] ? __pfx___mutex_lock+0x10/0x10 [ 1664.920403][T27705] ? __pfx_vfs_read+0x10/0x10 [ 1664.920416][T27705] ? __fget_files+0x20e/0x3c0 [ 1664.920431][T27705] ksys_read+0x12a/0x250 [ 1664.920441][T27705] ? __pfx_ksys_read+0x10/0x10 [ 1664.920451][T27705] ? fput+0x9b/0xd0 [ 1664.920466][T27705] do_syscall_64+0xcd/0xfa0 [ 1664.920477][T27705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.920488][T27705] RIP: 0033:0x7f754418e15c [ 1664.920497][T27705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1664.920508][T27705] RSP: 002b:00007f75450c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1664.920518][T27705] RAX: ffffffffffffffda RBX: 00007f75443e5fa0 RCX: 00007f754418e15c [ 1664.920525][T27705] RDX: 000000000000000f RSI: 00007f75450c30a0 RDI: 0000000000000005 [ 1664.920531][T27705] RBP: 00007f75450c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.920537][T27705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.920543][T27705] R13: 00007f75443e6038 R14: 00007f75443e5fa0 R15: 00007ffc8e4e9b18 [ 1664.920557][T27705] [ 1665.114919][T18066] usb 8-1: Using ep0 maxpacket: 16 [ 1665.127625][ T60] hsr_slave_0: left promiscuous mode [ 1665.135636][T18066] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.147855][ T60] hsr_slave_1: left promiscuous mode [ 1665.151256][T18066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1665.155558][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.160156][T18066] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1665.168694][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.176663][T18066] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.192424][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.200052][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.200378][T18066] usb 8-1: config 0 descriptor?? [ 1665.234177][ T60] veth1_macvtap: left promiscuous mode [ 1665.240124][ T60] veth0_macvtap: left promiscuous mode [ 1665.307618][ T60] pim6reg (unregistering): left allmulticast mode [ 1665.598969][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1665.644378][T18066] nzxt-smart2 0003:1E71:2009.007C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1665.686772][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1666.189833][T27188] Bluetooth: hci0: command tx timeout [ 1666.239417][T27601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.247161][T27601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.254812][T27601] bridge_slave_0: entered allmulticast mode [ 1666.283668][T27601] bridge_slave_0: entered promiscuous mode [ 1666.409916][T27601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.432144][T27601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.450102][T27601] bridge_slave_1: entered allmulticast mode [ 1666.458885][T27601] bridge_slave_1: entered promiscuous mode [ 1666.526474][T27722] nbd: must specify an index to disconnect [ 1666.585271][T27601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.620340][T27601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.667766][T27726] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5508'. [ 1666.705794][T27601] team0: Port device team_slave_0 added [ 1666.745629][T27601] team0: Port device team_slave_1 added [ 1666.972966][T27601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.003970][T27601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.032769][T27601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.430052][T27601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.441412][T27601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.476310][T27601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.610181][T18066] usb 8-1: USB disconnect, device number 64 [ 1667.862275][T27601] hsr_slave_0: entered promiscuous mode [ 1667.879046][T27601] hsr_slave_1: entered promiscuous mode [ 1667.889404][T27601] debugfs: 'hsr0' already exists in 'hsr' [ 1667.897792][T27601] Cannot create hsr debugfs directory [ 1667.903557][ T30] audit: type=1400 audit(1764285592.721:1306): avc: denied { setopt } for pid=27744 comm="syz.6.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1668.258017][T18066] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1668.405736][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.469933][T18066] usb 8-1: Using ep0 maxpacket: 32 [ 1668.487132][T18066] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1668.532276][T18066] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.668912][T18066] usb 8-1: config 0 descriptor?? [ 1669.162979][T18066] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1669.189889][T18066] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1669.271051][T27768] Mount JFS Failure: -5 [ 1669.275255][T27768] jfs_mount failed w/return code = -5 [ 1669.633972][T18066] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1669.643615][T18066] usb 8-1: media controller created [ 1669.685021][T18066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1669.834109][T27601] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1669.889953][T18066] DVB: Unable to find symbol dib7000p_attach() [ 1669.896454][T18066] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1670.105152][T27601] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1670.210352][T27601] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1670.262404][T27601] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1670.279910][T18066] rc_core: IR keymap rc-dib0700-rc5 not found [ 1670.289118][ T1538] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1670.307759][ T1538] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1670.342726][T18066] Registered IR keymap rc-empty [ 1670.379606][T18066] dvb-usb: could not initialize remote control. [ 1670.428967][T18066] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1670.486948][T18066] usb 8-1: USB disconnect, device number 65 [ 1670.569077][T18066] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1670.718852][T27601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.986246][T27601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.999794][T18066] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1671.682900][T17782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.690032][T17782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.716496][T13587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.723618][T13587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.811330][T27601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1671.830137][T18066] usb 8-1: Using ep0 maxpacket: 8 [ 1671.837570][T18066] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.851305][T18066] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1671.880037][T18066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1671.905426][T18066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1671.949244][T18066] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1672.078829][T18066] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1672.098998][T18066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1672.107911][T18066] usb 8-1: Product: syz [ 1672.112786][T18066] usb 8-1: Manufacturer: syz [ 1672.117461][T18066] usb 8-1: SerialNumber: syz [ 1672.183285][T27821] input: syz1 as /devices/virtual/input/input136 [ 1672.257082][ T30] audit: type=1400 audit(1764285597.001:1307): avc: denied { read } for pid=27815 comm="syz.6.5522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1672.515071][T18066] usb 8-1: config 0 descriptor?? [ 1672.557116][T27601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.787941][T18066] radio-si470x 8-1:0.0: DeviceID=0x7478 ChipID=0x5b00 [ 1672.987622][T18066] radio-si470x 8-1:0.0: software version 116, hardware version 120 [ 1673.198835][T27793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.217448][T27793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.237208][T18066] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1673.701428][T18066] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1673.715384][T18066] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1673.748495][T18066] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1673.783898][T27601] veth0_vlan: entered promiscuous mode [ 1673.804466][T18066] usb 8-1: USB disconnect, device number 66 [ 1673.860805][T27601] veth1_vlan: entered promiscuous mode [ 1674.018347][T27601] veth0_macvtap: entered promiscuous mode [ 1674.053652][T27601] veth1_macvtap: entered promiscuous mode [ 1674.072424][T27601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.075717][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1674.085697][T27601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.120008][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1674.123522][ T1009] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.158242][ T1009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.187879][ T1009] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.197411][ T1009] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.339973][T18066] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1674.343944][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.386776][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.458957][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.473176][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.510051][T18066] usb 8-1: Using ep0 maxpacket: 8 [ 1674.527029][T18066] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1674.550055][T18066] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1674.558060][T18066] usb 8-1: Product: syz [ 1674.572414][T18066] usb 8-1: Manufacturer: syz [ 1674.577024][T18066] usb 8-1: SerialNumber: syz [ 1674.604910][T27868] overlayfs: workdir and upperdir must reside under the same mount [ 1674.614016][T18066] usb 8-1: config 0 descriptor?? [ 1674.666195][ T30] audit: type=1400 audit(1764285599.491:1308): avc: denied { setattr } for pid=27867 comm="syz.9.5479" name="PNPIPE" dev="sockfs" ino=91882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1674.689906][T26570] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1675.490475][T18066] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1675.547679][ T30] audit: type=1400 audit(1764285600.371:1309): avc: denied { append } for pid=27880 comm="syz.3.5532" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1675.573601][T18066] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input137 [ 1675.659825][T26570] usb 7-1: Using ep0 maxpacket: 32 [ 1675.674887][T26570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1675.703710][T26570] usb 7-1: config 128 has an invalid interface number: 8 but max is 1 [ 1675.718809][T26570] usb 7-1: config 128 has an invalid interface number: 92 but max is 1 [ 1675.737763][ T1538] usb 8-1: USB disconnect, device number 67 [ 1675.779396][T26570] usb 7-1: config 128 has no interface number 0 [ 1675.779858][ T5898] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1675.810999][T26570] usb 7-1: config 128 has no interface number 1 [ 1675.817288][T26570] usb 7-1: config 128 interface 8 has no altsetting 0 [ 1675.827322][T26570] usb 7-1: config 128 interface 92 has no altsetting 0 [ 1675.841395][T26570] usb 7-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42 [ 1675.850634][T26570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.858588][T26570] usb 7-1: Product: syz [ 1675.870982][T26570] usb 7-1: Manufacturer: syz [ 1675.880137][T26570] usb 7-1: SerialNumber: syz [ 1675.972105][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.986095][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.030401][ T5898] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1676.049985][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.080646][ T5898] usb 4-1: config 0 descriptor?? [ 1676.179363][T26570] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1676.231934][T26570] usb 7-1: selecting invalid altsetting 0 [ 1676.247539][ T2325] pvrusb2: Invalid write control endpoint [ 1676.255070][T26570] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1676.277234][T26570] usb 7-1: selecting invalid altsetting 0 [ 1676.314164][T26570] usb 7-1: USB disconnect, device number 98 [ 1676.427492][ T2325] pvrusb2: Invalid write control endpoint [ 1676.439175][ T2325] pvrusb2: Invalid write control endpoint [ 1676.445780][ T2325] pvrusb2: Invalid write control endpoint [ 1676.464961][ T2325] pvrusb2: Invalid write control endpoint [ 1676.471134][ T2325] pvrusb2: Invalid write control endpoint [ 1676.477022][ T2325] pvrusb2: Invalid write control endpoint [ 1676.483521][ T2325] pvrusb2: Invalid write control endpoint [ 1676.489429][ T2325] pvrusb2: Invalid write control endpoint [ 1676.495687][ T2325] pvrusb2: Invalid write control endpoint [ 1676.529275][ T2325] pvrusb2: Invalid write control endpoint [ 1676.597152][ T2325] pvrusb2: Invalid write control endpoint [ 1676.606607][ T5898] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 1676.613886][ T2325] pvrusb2: Invalid write control endpoint [ 1676.613903][ T2325] pvrusb2: Invalid write control endpoint [ 1676.613915][ T2325] pvrusb2: Invalid write control endpoint [ 1676.613925][ T2325] pvrusb2: Invalid write control endpoint [ 1676.613957][ T2325] pvrusb2: Invalid write control endpoint [ 1676.648437][ T2325] pvrusb2: Invalid write control endpoint [ 1676.674356][ T2325] pvrusb2: Invalid write control endpoint [ 1676.710107][ T2325] pvrusb2: Invalid write control endpoint [ 1676.717712][ T5898] hid-steam 0003:28DE:1142.007E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1676.802591][ T2325] pvrusb2: Invalid write control endpoint [ 1676.828887][ T2325] pvrusb2: Invalid write control endpoint [ 1676.843812][ T2325] pvrusb2: Invalid write control endpoint [ 1676.880459][ T2325] pvrusb2: Invalid write control endpoint [ 1677.008608][ T5898] hid-steam 0003:28DE:1142.007E: Steam wireless receiver connected [ 1677.028792][ T5898] hid-steam 0003:28DE:1142.007E: No HID_FEATURE_REPORT submitted - nothing to read [ 1677.194357][ T5898] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 1677.332691][T27912] 9pnet_virtio: no channels available for device syz [ 1677.496051][ T2325] pvrusb2: Invalid write control endpoint [ 1677.509659][ T5898] hid-steam 0003:28DE:1142.007F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1677.543049][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1677.564464][ T2325] pvrusb2: Invalid write control endpoint [ 1677.595506][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1677.634151][ T2325] pvrusb2: Invalid write control endpoint [ 1677.656499][ T2325] pvrusb2: Invalid write control endpoint [ 1677.689863][ T2325] pvrusb2: Invalid write control endpoint [ 1677.725417][ T2325] pvrusb2: Invalid write control endpoint [ 1677.969826][ T2325] pvrusb2: Invalid write control endpoint [ 1678.255433][ T2325] pvrusb2: Invalid write control endpoint [ 1678.261664][ T5898] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 1678.300002][ T2325] pvrusb2: Invalid write control endpoint [ 1678.345565][ T2325] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1678.446917][ T2325] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 1678.453500][ T2325] pvrusb2: Invalid write control endpoint [ 1678.459265][ T2325] pvrusb2: Invalid write control endpoint [ 1678.487795][ T2325] pvrusb2: Invalid write control endpoint [ 1678.499537][ T2325] pvrusb2: Invalid write control endpoint [ 1678.505604][ T2325] pvrusb2: Invalid write control endpoint [ 1678.511894][ T2325] pvrusb2: Invalid write control endpoint [ 1678.517622][ T2325] pvrusb2: Invalid write control endpoint [ 1678.523565][ T2325] pvrusb2: Invalid write control endpoint [ 1678.529308][ T2325] pvrusb2: Invalid write control endpoint [ 1678.536622][ T2325] pvrusb2: Invalid write control endpoint [ 1678.638826][ T2325] pvrusb2: Invalid write control endpoint [ 1678.669352][ T2325] pvrusb2: Invalid write control endpoint [ 1678.675234][ T2325] pvrusb2: Invalid write control endpoint [ 1678.683566][ T2325] pvrusb2: Invalid write control endpoint [ 1678.689953][ T2325] pvrusb2: Invalid write control endpoint [ 1678.695924][ T2325] pvrusb2: Invalid write control endpoint [ 1678.703692][ T2325] pvrusb2: Invalid write control endpoint [ 1678.709470][ T2325] pvrusb2: Invalid write control endpoint [ 1678.715454][ T2325] pvrusb2: Invalid write control endpoint [ 1678.721317][ T2325] pvrusb2: Invalid write control endpoint [ 1678.731108][ T2325] pvrusb2: Invalid write control endpoint [ 1679.023121][ T2325] pvrusb2: Attached sub-driver cs53l32a [ 1679.115670][ T1538] usb 4-1: USB disconnect, device number 30 [ 1679.381996][ T1538] hid-steam 0003:28DE:1142.007E: Steam wireless receiver disconnected [ 1679.449825][ T30] audit: type=1326 audit(1764285604.271:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1679.608255][T27940] netlink: 'syz.3.5542': attribute type 10 has an invalid length. [ 1679.629218][T27940] bridge0: entered promiscuous mode [ 1679.843499][ T2325] pvrusb2: Invalid write control endpoint [ 1679.843667][ T30] audit: type=1326 audit(1764285604.271:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1679.849241][ T2325] pvrusb2: Invalid write control endpoint [ 1680.016811][T27945] netlink: 'syz.7.5546': attribute type 10 has an invalid length. [ 1680.185888][ T2325] pvrusb2: Invalid write control endpoint [ 1680.191064][ T30] audit: type=1326 audit(1764285604.311:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1680.192691][ T2325] pvrusb2: Invalid write control endpoint [ 1680.215576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.245220][ T2325] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1680.248380][ T1538] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1680.263980][ T2325] pvrusb2: Device being rendered inoperable [ 1680.280638][ T2325] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1680.297989][ T2325] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1680.311326][ T1538] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1680.315048][ T2325] pvrusb2: Invalid write control endpoint [ 1680.338229][ T30] audit: type=1326 audit(1764285604.311:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1680.361731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.389856][T27935] bridge0: left promiscuous mode [ 1680.472464][ T30] audit: type=1326 audit(1764285604.311:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1680.495931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.651418][ T2325] pvrusb2: Invalid write control endpoint [ 1680.659832][ T2325] pvrusb2: Invalid write control endpoint [ 1680.660569][T27957] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5544'. [ 1680.665564][ T2325] pvrusb2: Invalid write control endpoint [ 1680.665579][ T2325] pvrusb2: Invalid write control endpoint [ 1680.665590][ T2325] pvrusb2: Invalid write control endpoint [ 1680.665602][ T2325] pvrusb2: Invalid write control endpoint [ 1680.680424][ T30] audit: type=1326 audit(1764285604.331:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.197476][ T30] audit: type=1326 audit(1764285605.161:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.206408][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5544'. [ 1681.221807][ T30] audit: type=1326 audit(1764285605.161:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.221856][ T30] audit: type=1326 audit(1764285605.291:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.221895][ T30] audit: type=1326 audit(1764285605.291:1319): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.221933][ T30] audit: type=1326 audit(1764285605.291:1320): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27936 comm="syz.9.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5657f8f749 code=0x7ffc0000 [ 1681.222184][ T2325] pvrusb2: Invalid write control endpoint [ 1681.383753][ T2325] pvrusb2: Invalid write control endpoint [ 1681.389510][ T2325] pvrusb2: Invalid write control endpoint [ 1681.398857][ T2325] pvrusb2: Invalid write control endpoint [ 1681.418833][ T2325] pvrusb2: Invalid write control endpoint [ 1681.433364][ T2325] pvrusb2: Invalid write control endpoint [ 1681.442402][T27944] ip6_vti0 speed is unknown, defaulting to 1000 [ 1681.449415][ T2325] pvrusb2: Invalid write control endpoint [ 1681.455514][ T2325] pvrusb2: Invalid write control endpoint [ 1681.479734][ T2325] pvrusb2: Invalid write control endpoint [ 1681.552829][T27967] Mount JFS Failure: -5 [ 1681.557038][T27967] jfs_mount failed w/return code = -5 [ 1681.565144][ T2325] pvrusb2: Invalid write control endpoint [ 1681.595925][ T2325] pvrusb2: Invalid write control endpoint [ 1681.611015][ T2325] pvrusb2: Invalid write control endpoint [ 1681.639264][ T2325] pvrusb2: Invalid write control endpoint [ 1681.660538][ T2325] pvrusb2: Invalid write control endpoint [ 1681.666290][ T2325] pvrusb2: Invalid write control endpoint [ 1681.697888][ T2325] pvrusb2: Invalid write control endpoint [ 1681.729757][ T2325] pvrusb2: Invalid write control endpoint [ 1681.739806][ T2325] pvrusb2: Invalid write control endpoint [ 1681.775745][ T2325] pvrusb2: Invalid write control endpoint [ 1682.593923][ T2325] pvrusb2: Invalid write control endpoint [ 1682.609744][ T2325] pvrusb2: Invalid write control endpoint [ 1682.615497][ T2325] pvrusb2: Invalid write control endpoint [ 1682.621308][ T2325] pvrusb2: Invalid write control endpoint [ 1682.630918][ T2325] pvrusb2: Invalid write control endpoint [ 1682.641784][ T2325] pvrusb2: Invalid write control endpoint [ 1682.653743][ T2325] pvrusb2: Invalid write control endpoint [ 1682.747374][ T2325] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1683.369901][ T2325] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 1683.399967][ T2325] pvrusb2: Invalid write control endpoint [ 1683.415549][T27990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5552'. [ 1683.438759][ T2325] pvrusb2: Invalid write control endpoint [ 1683.457716][ T2325] pvrusb2: Invalid write control endpoint [ 1683.478964][ T2325] pvrusb2: Invalid write control endpoint [ 1683.497039][ T2325] pvrusb2: Invalid write control endpoint [ 1683.514384][ T2325] pvrusb2: Invalid write control endpoint [ 1683.626161][ T2325] pvrusb2: Invalid write control endpoint [ 1683.645185][ T2325] pvrusb2: Invalid write control endpoint [ 1683.669872][ T2325] pvrusb2: Invalid write control endpoint [ 1683.685861][ T2325] pvrusb2: Invalid write control endpoint [ 1683.708266][ T2325] pvrusb2: Invalid write control endpoint [ 1683.733483][ T2325] pvrusb2: Invalid write control endpoint [ 1683.750443][ T2325] pvrusb2: Invalid write control endpoint [ 1683.774086][ T2325] pvrusb2: Invalid write control endpoint [ 1683.799325][ T2325] pvrusb2: Invalid write control endpoint [ 1683.807537][ T2325] pvrusb2: Invalid write control endpoint [ 1683.819056][ T2325] pvrusb2: Invalid write control endpoint [ 1683.832281][ T2325] pvrusb2: Invalid write control endpoint [ 1683.838017][ T2325] pvrusb2: Invalid write control endpoint [ 1683.853496][T27993] Cannot find add_set index 0 as target [ 1683.866610][ T2325] pvrusb2: Invalid write control endpoint [ 1683.886790][ T2325] pvrusb2: Invalid write control endpoint [ 1683.899999][ T2325] pvrusb2: Attached sub-driver cs53l32a [ 1684.014434][T27998] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5553'. [ 1684.065214][ T2325] pvrusb2: Invalid write control endpoint [ 1684.072202][ T2325] pvrusb2: Invalid write control endpoint [ 1684.077938][ T2325] pvrusb2: Invalid write control endpoint [ 1684.084763][ T2325] pvrusb2: Invalid write control endpoint [ 1684.090661][ T2325] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1684.108849][ T2325] pvrusb2: Device being rendered inoperable [ 1684.115362][ T2325] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1684.147838][ T2325] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1684.162973][T28005] block nbd6: NBD_DISCONNECT [ 1684.197731][T28006] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1684.599878][ T1538] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 1684.814123][ T1538] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 1684.831059][ T1538] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.081990][ T1538] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1685.091611][ T1538] usb 8-1: config 0 has no interface number 0 [ 1685.099516][ T1538] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1685.173168][ T1538] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1685.201323][ T1538] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 210, setting to 64 [ 1685.217762][ T1538] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1685.252124][ T1538] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1685.261759][ T1538] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.271000][ T1538] usb 8-1: Product: syz [ 1685.277630][ T1538] usb 8-1: Manufacturer: syz [ 1685.299831][ T1538] usb 8-1: SerialNumber: syz [ 1685.352887][ T1538] usb 8-1: config 0 descriptor?? [ 1685.384703][T28004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1685.396226][ T1538] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1685.608491][T25407] usb 8-1: USB disconnect, device number 68 [ 1686.133772][T28035] bridge: RTM_NEWNEIGH with invalid ether address [ 1686.604931][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1686.604948][ T30] audit: type=1400 audit(1764285611.431:1334): avc: denied { read } for pid=28046 comm="syz.0.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1688.280882][T28066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1689.035878][T28081] ip6_vti0 speed is unknown, defaulting to 1000 [ 1689.769855][ T5869] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1690.400474][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1690.640549][ T5869] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1690.799754][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1690.830046][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5578'. [ 1690.912745][ T5869] usb usb1-port1: attempt power cycle [ 1691.163902][ T30] audit: type=1400 audit(1764285615.991:1335): avc: denied { write } for pid=28122 comm="syz.9.5580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1691.230567][T28124] tipc: Enabling not permitted [ 1691.236168][T28124] tipc: Enabling of bearer rejected, failed to enable media [ 1691.662270][ T5869] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1691.705208][ T5869] usb 1-1: device descriptor read/8, error -71 [ 1691.989993][ T5869] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1692.683806][ T30] audit: type=1400 audit(1764285617.511:1336): avc: denied { read } for pid=28156 comm="syz.7.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1692.789883][ T5869] usb 1-1: device not accepting address 63, error -71 [ 1692.827448][ T5869] usb usb1-port1: unable to enumerate USB device [ 1695.112456][T28271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1695.196615][T28279] overlayfs: overlapping lowerdir path [ 1695.415064][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1695.604479][ T30] audit: type=1400 audit(1764285620.431:1337): avc: denied { mount } for pid=28269 comm="syz.7.5608" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1695.648628][T28265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1695.654863][T28265] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1695.713039][ T30] audit: type=1400 audit(1764285620.541:1338): avc: denied { getopt } for pid=28287 comm="syz.0.5612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1695.805923][T28265] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1696.153373][T28293] dummy0: entered promiscuous mode [ 1696.159499][T28293] macsec1: entered promiscuous mode [ 1696.164952][T28293] macsec1: entered allmulticast mode [ 1696.170290][T28293] dummy0: entered allmulticast mode [ 1696.869753][ T1538] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 1697.044967][ T1538] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.099736][ T1538] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1697.150108][ T1538] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1697.188517][ T1538] usb 8-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1697.214125][ T1538] usb 8-1: Product: syz [ 1697.229062][ T1538] usb 8-1: config 0 descriptor?? [ 1697.710740][T27188] Bluetooth: hci0: command 0x0c1a tx timeout [ 1698.031955][ T30] audit: type=1400 audit(1764285622.851:1339): avc: denied { unmount } for pid=17616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1698.034300][T26570] usb 8-1: USB disconnect, device number 69 [ 1699.223116][T28331] TCP: TCP_TX_DELAY enabled [ 1699.679405][T28342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1699.830678][T27188] Bluetooth: hci0: command 0x0c1a tx timeout [ 1701.859801][T26510] Bluetooth: hci0: command 0x0c1a tx timeout [ 1702.843769][T28380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1704.715455][T28388] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1704.916779][T28392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1704.931631][T28396] tipc: Enabled bearer , priority 0 [ 1704.941547][T28396] syzkaller0: entered promiscuous mode [ 1704.947023][T28396] syzkaller0: entered allmulticast mode [ 1704.951449][T28392] overlayfs: failed lookup in lower (newroot/480, name='file0', err=-40): overlapping layers [ 1705.002768][T28396] tipc: Resetting bearer [ 1705.021098][T28395] tipc: Resetting bearer [ 1705.048815][T28395] tipc: Disabling bearer [ 1705.219771][ T5898] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1705.399760][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 1705.429144][ T5898] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1705.469502][ T5898] usb 7-1: config 0 has no interface number 0 [ 1705.514625][ T5898] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.581156][ T5898] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.615377][ T5898] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1705.626194][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.661236][ T5898] usb 7-1: config 0 descriptor?? [ 1706.030466][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5654'. [ 1706.067615][T28416] vlan0: entered promiscuous mode [ 1706.089788][T28416] gretap0: entered promiscuous mode [ 1706.138340][ T5898] hid (null): report_id 0 is invalid [ 1706.320806][T28421] overlayfs: overlapping lowerdir path [ 1706.730579][ T5898] input: HID 28bd:0094 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.0081/input/input138 [ 1706.818499][ T5898] uclogic 0003:28BD:0094.0081: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 1706.885315][ T5898] usb 7-1: USB disconnect, device number 99 [ 1706.983168][ T30] audit: type=1400 audit(1764285631.781:1340): avc: denied { load_policy } for pid=28426 comm="syz.7.5657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1706.995644][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1707.006890][T28428] fido_id[28428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1707.016785][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1707.059398][T28429] SELinux: ebitmap: truncated map [ 1707.092146][T28429] SELinux: failed to load policy [ 1707.963067][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5665'. [ 1708.162401][T28457] netlink: 'syz.3.5669': attribute type 12 has an invalid length. [ 1708.422379][ T5962] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 1708.430193][ T30] audit: type=1400 audit(1764285633.231:1341): avc: denied { ioctl } for pid=28454 comm="syz.7.5667" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1708.713409][ T5962] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.728301][ T5962] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1708.858475][ T5962] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1708.867660][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.875952][ T5962] usb 7-1: Product: syz [ 1708.880182][ T5962] usb 7-1: Manufacturer: syz [ 1708.884777][ T5962] usb 7-1: SerialNumber: syz [ 1709.470038][T28475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1709.563993][ T5962] usb 7-1: 0:2 : does not exist [ 1709.701392][ T5962] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1709.861653][ T5962] usb 7-1: USB disconnect, device number 100 [ 1709.952472][T21458] udevd[21458]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1709.957478][T28479] SELinux: failed to load policy [ 1710.326800][ T30] audit: type=1400 audit(1764285635.141:1342): avc: denied { mounton } for pid=28485 comm="syz.7.5678" path="/491/file0" dev="tmpfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1712.969757][ T1538] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 1713.121771][ T1538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1713.133084][ T1538] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1713.147793][ T1538] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1713.163863][ T1538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.194954][ T1538] usb 7-1: config 0 descriptor?? [ 1713.206860][T28532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1713.502783][T28532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.511888][T28532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.526377][ T1538] usbhid 7-1:0.0: can't add hid device: -71 [ 1713.534295][ T1538] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1713.552386][ T1538] usb 7-1: USB disconnect, device number 101 [ 1714.015723][T28547] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5695'. [ 1715.510255][ T1538] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1717.501538][T28567] SELinux: failed to load policy [ 1717.644411][T28583] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1718.165516][T28583] ip6_vti0 speed is unknown, defaulting to 1000 [ 1718.541317][ T30] audit: type=1400 audit(1764285643.161:1343): avc: denied { read write } for pid=28586 comm="syz.7.5708" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1718.609970][ T30] audit: type=1400 audit(1764285643.161:1344): avc: denied { open } for pid=28586 comm="syz.7.5708" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1718.638994][ T30] audit: type=1400 audit(1764285643.161:1345): avc: denied { ioctl } for pid=28586 comm="syz.7.5708" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1719.596646][T28590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5708'. [ 1719.642610][T28590] bridge_slave_1: left promiscuous mode [ 1719.716955][T28590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.810495][T28590] bridge_slave_0: left allmulticast mode [ 1719.829430][T28590] bridge_slave_0: left promiscuous mode [ 1719.849877][T28590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.059449][T28609] bridge0: entered promiscuous mode [ 1720.081549][T28608] bridge0: left promiscuous mode [ 1721.040213][ T5869] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1721.166182][ T30] audit: type=1400 audit(1764285645.991:1346): avc: denied { watch_reads } for pid=28644 comm="syz.6.5717" path="/202" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1721.192687][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 1721.206848][ T5869] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 1721.216994][ T5869] usb 4-1: config 0 has no interface number 0 [ 1721.225135][ T5869] usb 4-1: config 0 interface 93 has no altsetting 0 [ 1721.233822][ T5869] usb 4-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice=e0.c2 [ 1721.245157][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.259344][ T5869] usb 4-1: config 0 descriptor?? [ 1723.219190][ T5869] usb 4-1: string descriptor 0 read error: -71 [ 1723.230568][ T5869] usb 4-1: bad CDC descriptors [ 1723.251330][ T5869] usb 4-1: can't set first interface for hiFace device. [ 1723.258307][ T5869] snd-usb-hiface 4-1:0.93: probe with driver snd-usb-hiface failed with error -5 [ 1723.289980][ T5869] usb 4-1: USB disconnect, device number 31 [ 1723.617621][ T30] audit: type=1326 audit(1764285648.421:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1723.812271][ T30] audit: type=1326 audit(1764285648.421:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1723.914634][ T30] audit: type=1326 audit(1764285648.431:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.284051][ T30] audit: type=1326 audit(1764285648.431:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.568490][ T30] audit: type=1326 audit(1764285648.431:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.655821][ T30] audit: type=1326 audit(1764285648.431:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.682101][ T30] audit: type=1326 audit(1764285648.431:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.716113][ T30] audit: type=1326 audit(1764285648.431:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1724.819183][T28702] ip6_vti0 speed is unknown, defaulting to 1000 [ 1725.655983][T28709] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 1725.673141][T28709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=28709 comm=syz.7.5734 [ 1725.698211][ T30] audit: type=1326 audit(1764285648.441:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1725.722523][ T30] audit: type=1326 audit(1764285648.441:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45098f749 code=0x7ffc0000 [ 1726.369162][T28714] 8021q: VLANs not supported on ip6gre0 [ 1726.547819][T28714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5735'. [ 1726.560488][T28714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5735'. [ 1727.879738][ T1538] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1728.031226][ T1538] usb 4-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 1728.041643][ T1538] usb 4-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 1728.052358][ T1538] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1728.082430][ T1538] usb 4-1: string descriptor 0 read error: -22 [ 1728.109206][ T1538] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1728.141939][ T1538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.768098][T28723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1728.927945][T28723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1729.190030][ T8019] usb 4-1: USB disconnect, device number 32 [ 1729.652501][T28773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1730.270344][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.631470][T28806] SELinux: failed to load policy [ 1734.179008][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1734.179023][ T30] audit: type=1400 audit(1764285659.001:1364): avc: denied { mount } for pid=28834 comm="syz.6.5776" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1734.212524][ T30] audit: type=1400 audit(1764285659.001:1365): avc: denied { mounton } for pid=28834 comm="syz.6.5776" path="/213/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1734.247265][ T30] audit: type=1400 audit(1764285659.001:1366): avc: denied { remount } for pid=28834 comm="syz.6.5776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1734.390465][ T30] audit: type=1400 audit(1764285659.211:1367): avc: denied { firmware_load } for pid=28841 comm="syz.9.5778" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1734.830041][ T30] audit: type=1400 audit(1764285659.341:1368): avc: denied { unmount } for pid=24417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1734.852695][ T30] audit: type=1400 audit(1764285659.351:1369): avc: denied { bind } for pid=28846 comm="syz.0.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1734.895592][ T30] audit: type=1400 audit(1764285659.721:1370): avc: denied { read } for pid=28851 comm="syz.6.5781" name="file1" dev="tmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1737.231046][T28914] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5793'. [ 1737.242494][T28914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5793'. [ 1737.709768][T26570] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1737.925879][T26570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.937646][T26570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.950535][T26570] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1738.081959][T26570] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1738.307674][T26570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.439100][T26570] usb 4-1: config 0 descriptor?? [ 1738.879280][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1738.919388][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.146939][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.165170][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.173178][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.181015][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.188503][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.679457][T26510] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1739.684432][T27188] Bluetooth: hci5: command 0x1003 tx timeout [ 1739.707847][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.726953][T26570] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 1739.800973][T26570] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1739.826128][T26570] usb 4-1: USB disconnect, device number 33 [ 1739.905582][T28949] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5807'. [ 1740.509304][T28958] fido_id[28958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1740.600642][T28965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5813'. [ 1742.372806][T28986] pimreg: entered allmulticast mode [ 1742.790508][T28993] wireguard0: entered promiscuous mode [ 1742.796085][T28993] wireguard0: entered allmulticast mode [ 1742.858688][T28983] pimreg: left allmulticast mode [ 1743.062242][T28995] ip6_vti0 speed is unknown, defaulting to 1000 [ 1745.390609][T18066] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1745.578846][T29038] can0: slcan on ttyS3. [ 1745.759919][T18066] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1746.001836][T18066] usb 4-1: config 0 has no interface number 0 [ 1746.007966][T18066] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.019368][T18066] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.029884][T29038] can0 (unregistered): slcan off ttyS3. [ 1746.037828][T18066] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.144706][T18066] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1746.169737][T18066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.186472][T18066] usb 4-1: config 0 descriptor?? [ 1746.433587][T29049] ip6_vti0 speed is unknown, defaulting to 1000 [ 1746.866638][T18066] uclogic 0003:28BD:0042.0083: failed retrieving string descriptor #100: -71 [ 1746.886402][T18066] uclogic 0003:28BD:0042.0083: failed retrieving pen parameters: -71 [ 1746.904078][T18066] uclogic 0003:28BD:0042.0083: pen probing failed: -71 [ 1746.919953][T18066] uclogic 0003:28BD:0042.0083: failed probing parameters: -71 [ 1746.955228][T18066] uclogic 0003:28BD:0042.0083: probe with driver uclogic failed with error -71 [ 1746.988987][T18066] usb 4-1: USB disconnect, device number 34 [ 1747.540341][ T30] audit: type=1400 audit(1764285672.371:1371): avc: denied { setopt } for pid=29059 comm="syz.3.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1748.920030][T29082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5846'. [ 1748.930247][T29082] veth1_macvtap: left promiscuous mode [ 1749.268060][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1753.679832][T29118] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1753.778924][ T30] audit: type=1400 audit(1764285678.601:1372): avc: denied { read write } for pid=17616 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1754.240660][T29120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.247956][T29120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.254041][ T30] audit: type=1400 audit(1764285678.631:1373): avc: denied { open } for pid=17616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1754.294648][ T30] audit: type=1400 audit(1764285678.631:1374): avc: denied { ioctl } for pid=17616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1754.375953][ T30] audit: type=1400 audit(1764285678.661:1375): avc: denied { write } for pid=29115 comm="syz.0.5854" path="socket:[96032]" dev="sockfs" ino=96032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1754.422640][ T30] audit: type=1400 audit(1764285678.711:1376): avc: denied { prog_load } for pid=29115 comm="syz.0.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1754.453853][ T30] audit: type=1400 audit(1764285678.711:1377): avc: denied { bpf } for pid=29115 comm="syz.0.5854" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.486194][T29120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.499318][T29120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.503647][ T30] audit: type=1400 audit(1764285678.711:1378): avc: denied { perfmon } for pid=29115 comm="syz.0.5854" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.528933][ T30] audit: type=1400 audit(1764285678.711:1379): avc: denied { prog_run } for pid=29115 comm="syz.0.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1754.550572][ T30] audit: type=1400 audit(1764285679.221:1380): avc: denied { map_create } for pid=29125 comm="syz.3.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1754.573384][ T30] audit: type=1400 audit(1764285679.221:1381): avc: denied { map_read map_write } for pid=29125 comm="syz.3.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1755.452232][T29137] overlayfs: overlapping lowerdir path [ 1756.245371][T29145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1756.805102][T28221] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.850595][T29145] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1756.860126][T29145] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1756.870316][T29145] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1756.931759][T28221] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.108102][ T5962] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1757.146440][T28245] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.411827][T29153] 9pnet_fd: Insufficient options for proto=fd [ 1757.726179][T28245] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.749519][T29152] ip6_vti0 speed is unknown, defaulting to 1000 [ 1758.028911][ T1206] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1758.065114][T29157] ip6_vti0 speed is unknown, defaulting to 1000 [ 1759.782968][ T1206] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1759.799852][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.807856][ T1206] usb 1-1: Product: syz [ 1759.820110][ T1206] usb 1-1: Manufacturer: syz [ 1759.829852][ T1206] usb 1-1: SerialNumber: syz [ 1759.842462][ T1206] usb 1-1: config 0 descriptor?? [ 1759.861121][ T1206] asix 1-1:0.0: probe with driver asix failed with error -22 [ 1760.000241][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1760.000257][ T30] audit: type=1400 audit(1764285684.831:1424): avc: denied { name_bind } for pid=29172 comm="syz.7.5868" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1760.053775][ T5898] usb 1-1: USB disconnect, device number 64 [ 1760.103827][ T30] audit: type=1400 audit(1764285684.831:1425): avc: denied { node_bind } for pid=29172 comm="syz.7.5868" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1760.167979][ T30] audit: type=1400 audit(1764285684.991:1426): avc: denied { allowed } for pid=29176 comm="syz.0.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1760.576245][ T30] audit: type=1400 audit(1764285685.401:1427): avc: denied { create } for pid=29186 comm="syz.3.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1760.623853][ T30] audit: type=1400 audit(1764285685.401:1428): avc: denied { create } for pid=29186 comm="syz.3.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1760.683167][T29185] netlink: 'syz.7.5870': attribute type 3 has an invalid length. [ 1760.806787][T29191] ip6gretap0: entered promiscuous mode [ 1760.820040][T29191] macsec1: entered promiscuous mode [ 1760.839088][T29191] ip6gretap0: left promiscuous mode [ 1761.083094][ T30] audit: type=1400 audit(1764285685.911:1429): avc: denied { create } for pid=29195 comm="syz.3.5875" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1762.061752][ T30] audit: type=1400 audit(1764285685.941:1430): avc: denied { ioctl } for pid=29195 comm="syz.3.5875" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=96784 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1762.088205][ T30] audit: type=1400 audit(1764285686.101:1431): avc: denied { write } for pid=29192 comm="syz.6.5874" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1762.293056][ T30] audit: type=1400 audit(1764285687.031:1432): avc: denied { create } for pid=29195 comm="syz.3.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1762.485145][ T30] audit: type=1400 audit(1764285687.051:1433): avc: denied { write } for pid=29195 comm="syz.3.5875" path="socket:[97360]" dev="sockfs" ino=97360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1765.361964][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1765.361981][ T30] audit: type=1400 audit(1764285689.701:1440): avc: denied { read write } for pid=29219 comm="syz.0.5881" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1765.395527][T29225] xt_hashlimit: size too large, truncated to 1048576 [ 1765.437510][T29232] pim6reg1: entered promiscuous mode [ 1765.447061][T29232] pim6reg1: entered allmulticast mode [ 1765.866026][T29237] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1765.915745][T29237] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1766.479125][ T30] audit: type=1400 audit(1764285689.701:1441): avc: denied { open } for pid=29219 comm="syz.0.5881" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1766.629794][ T30] audit: type=1400 audit(1764285689.721:1442): avc: denied { mount } for pid=29219 comm="syz.0.5881" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1766.707239][ T30] audit: type=1400 audit(1764285690.221:1443): avc: denied { unmount } for pid=23624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1766.789804][ T30] audit: type=1400 audit(1764285690.671:1444): avc: denied { mount } for pid=29234 comm="syz.9.5885" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1766.918851][ T30] audit: type=1400 audit(1764285690.691:1445): avc: denied { mounton } for pid=29234 comm="syz.9.5885" path="/77/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1767.015203][ T30] audit: type=1400 audit(1764285690.701:1446): avc: denied { mount } for pid=29234 comm="syz.9.5885" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1767.089573][ T30] audit: type=1400 audit(1764285691.241:1447): avc: denied { unmount } for pid=27601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1767.139401][ T30] audit: type=1400 audit(1764285691.411:1448): avc: denied { unmount } for pid=27601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1767.659899][ T5962] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1767.841516][ T5962] usb 7-1: Using ep0 maxpacket: 16 [ 1767.902105][ T5962] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.927213][ T30] audit: type=1400 audit(1764285692.751:1449): avc: denied { write } for pid=29244 comm="syz.3.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1767.987727][T29246] ip6_vti0 speed is unknown, defaulting to 1000 [ 1768.174997][ T5962] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1768.279350][T29262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1768.377883][ T5962] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1768.388179][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.396523][ T5962] usb 7-1: Product: syz [ 1768.404538][ T5962] usb 7-1: Manufacturer: syz [ 1768.409348][ T5962] usb 7-1: SerialNumber: syz [ 1768.641394][ T5962] usb 7-1: 0:2 : does not exist [ 1768.657086][ T5962] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1768.695290][ T5962] usb 7-1: USB disconnect, device number 103 [ 1770.256163][T29290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1771.578127][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1771.578162][ T30] audit: type=1400 audit(1764285696.401:1457): avc: denied { map } for pid=29302 comm="syz.7.5903" path="socket:[97559]" dev="sockfs" ino=97559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1772.029087][ T30] audit: type=1400 audit(1764285696.851:1458): avc: denied { create } for pid=29310 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1772.086155][ T30] audit: type=1400 audit(1764285696.891:1459): avc: denied { write } for pid=29310 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1772.449054][ T30] audit: type=1400 audit(1764285697.271:1460): avc: denied { nlmsg_write } for pid=29312 comm="syz.9.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1772.939799][ T30] audit: type=1400 audit(1764285697.631:1461): avc: denied { ioctl } for pid=29319 comm="syz.6.5908" path="socket:[97567]" dev="sockfs" ino=97567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1773.018232][T29331] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5910'. [ 1773.027417][T29331] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5910'. [ 1773.432914][ T30] audit: type=1400 audit(1764285698.261:1462): avc: denied { connect } for pid=29338 comm="syz.3.5913" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1773.532001][T29343] 8021q: VLANs not supported on ip6gre0 [ 1773.722990][T29343] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5912'. [ 1773.733245][T29343] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5912'. [ 1773.833420][ T30] audit: type=1400 audit(1764285698.261:1463): avc: denied { write } for pid=29338 comm="syz.3.5913" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1773.927423][ T30] audit: type=1400 audit(1764285698.581:1464): avc: denied { sqpoll } for pid=29335 comm="syz.6.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1773.950512][ T30] audit: type=1400 audit(1764285698.591:1465): avc: denied { map } for pid=29335 comm="syz.6.5912" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1773.991133][ T30] audit: type=1400 audit(1764285698.591:1466): avc: denied { read write } for pid=29335 comm="syz.6.5912" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1776.714238][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1776.714271][ T30] audit: type=1400 audit(1764285701.511:1474): avc: denied { bind } for pid=29377 comm="syz.0.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1777.076402][ T30] audit: type=1400 audit(1764285701.521:1475): avc: denied { listen } for pid=29377 comm="syz.0.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1777.701090][ T30] audit: type=1400 audit(1764285702.481:1476): avc: denied { connect } for pid=29383 comm="syz.0.5927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1778.391721][ T30] audit: type=1326 audit(1764285703.111:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1778.753144][ T30] audit: type=1326 audit(1764285703.111:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1778.776605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1778.813578][ T30] audit: type=1326 audit(1764285703.121:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1778.887471][ T30] audit: type=1326 audit(1764285703.121:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1778.910979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1778.947473][ T30] audit: type=1326 audit(1764285703.131:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1778.989774][ T30] audit: type=1326 audit(1764285703.141:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1779.013152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1779.051088][ T30] audit: type=1326 audit(1764285703.141:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29390 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c098f749 code=0x7ffc0000 [ 1779.074565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1779.319250][T29408] netlink: 'syz.6.5932': attribute type 4 has an invalid length. [ 1779.447647][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5932'. [ 1779.979729][ T5898] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1780.139845][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 1780.150555][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.165400][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.187551][ T5898] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1780.229723][ T5898] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1780.259464][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.303091][ T5898] usb 10-1: config 0 descriptor?? [ 1781.783440][ T5898] microsoft 0003:045E:07DA.0084: unknown main item tag 0x0 [ 1781.802829][ T5898] microsoft 0003:045E:07DA.0084: ignoring exceeding usage max [ 1782.645601][T29409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.666432][ T5898] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0084/input/input139 [ 1782.679962][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1782.679975][ T30] audit: type=1400 audit(1764285707.511:1491): avc: denied { watch watch_reads } for pid=29418 comm="syz.6.5937" path="/241" dev="tmpfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1782.869535][T29409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.142348][ T30] audit: type=1400 audit(1764285707.921:1492): avc: denied { unlink } for pid=23624 comm="syz-executor" name="file0" dev="tmpfs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1783.206171][ T5898] microsoft 0003:045E:07DA.0084: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1783.279271][ T5898] usb 10-1: USB disconnect, device number 3 [ 1783.300438][ T30] audit: type=1400 audit(1764285707.931:1493): avc: denied { read } for pid=5168 comm="acpid" name="js0" dev="devtmpfs" ino=6979 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.399755][ T30] audit: type=1400 audit(1764285707.931:1494): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6979 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.436369][T29433] fido_id[29433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1783.503077][ T30] audit: type=1400 audit(1764285707.931:1495): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6979 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.565084][ T30] audit: type=1400 audit(1764285708.281:1496): avc: denied { load_policy } for pid=29434 comm="syz.0.5940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1783.623220][T29435] SELinux: failed to load policy [ 1784.103172][ T1206] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1784.283147][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 1784.300701][ T1206] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1784.317263][ T1206] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1784.362219][ T1206] usb 4-1: config 0 has no interface number 0 [ 1784.368355][ T1206] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1784.524728][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.536932][ T1206] usb 4-1: config 0 descriptor?? [ 1784.662390][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5945'. [ 1784.808573][ T1206] usb 4-1: string descriptor 0 read error: -71 [ 1784.911074][ T1206] uvcvideo 4-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1785.007453][ T1206] uvcvideo 4-1:0.64: No valid video chain found. [ 1785.119120][ T1206] usb 4-1: USB disconnect, device number 35 [ 1785.549710][ T30] audit: type=1400 audit(1764285710.371:1497): avc: denied { create } for pid=29455 comm="syz.3.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1787.149736][ T30] audit: type=1400 audit(1764285710.401:1498): avc: denied { write } for pid=29455 comm="syz.3.5946" path="socket:[97760]" dev="sockfs" ino=97760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1787.189776][ T1206] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1787.981230][ T1206] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.000760][ T1206] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.029748][ T30] audit: type=1400 audit(1764285711.681:1499): avc: denied { connect } for pid=29463 comm="syz.6.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1788.046477][ T1206] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1788.092891][ T1206] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1788.201553][ T1206] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1788.219797][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.239751][ T1206] usb 7-1: Product: syz [ 1788.243950][ T1206] usb 7-1: Manufacturer: syz [ 1788.248546][ T1206] usb 7-1: SerialNumber: syz [ 1788.360873][T29472] ip6_vti0 speed is unknown, defaulting to 1000 [ 1788.414336][ T1206] cdc_mbim 7-1:1.0: skipping garbage [ 1788.815781][T29466] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1789.242665][ T30] audit: type=1400 audit(1764285714.041:1500): avc: denied { read write } for pid=29479 comm="syz.7.5954" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1789.339943][T29483] input: syz0 as /devices/virtual/input/input140 [ 1789.669512][T29482] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1789.722163][ T30] audit: type=1400 audit(1764285714.041:1501): avc: denied { open } for pid=29479 comm="syz.7.5954" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1790.066178][ T1206] cdc_mbim 7-1:1.0: bind() failure [ 1790.306119][ T1206] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1790.370802][ T30] audit: type=1400 audit(1764285714.051:1502): avc: denied { ioctl } for pid=29479 comm="syz.7.5954" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1790.416606][ T1206] cdc_ncm 7-1:1.1: bind() failure [ 1791.050202][ T30] audit: type=1400 audit(1764285715.871:1503): avc: denied { write } for pid=29490 comm="syz.9.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1791.075030][ T30] audit: type=1400 audit(1764285715.901:1504): avc: denied { bind } for pid=29465 comm="syz.6.5950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1791.095621][ T30] audit: type=1400 audit(1764285715.901:1505): avc: denied { name_bind } for pid=29465 comm="syz.6.5950" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1791.146195][ T30] audit: type=1400 audit(1764285715.901:1506): avc: denied { node_bind } for pid=29465 comm="syz.6.5950" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1791.208797][T29496] tipc: Enabled bearer , priority 0 [ 1791.225665][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.230594][ T30] audit: type=1400 audit(1764285716.021:1507): avc: denied { ioctl } for pid=29492 comm="syz.7.5957" path="socket:[97834]" dev="sockfs" ino=97834 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1791.400432][ T30] audit: type=1400 audit(1764285716.161:1508): avc: denied { sys_module } for pid=29492 comm="syz.7.5957" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1791.606935][T29498] syzkaller0: entered promiscuous mode [ 1791.618927][T29498] syzkaller0: entered allmulticast mode [ 1791.664546][T29492] tipc: Resetting bearer [ 1791.680144][ T1206] usb 7-1: USB disconnect, device number 104 [ 1791.721108][T29492] tipc: Disabling bearer [ 1791.977623][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5959'. [ 1793.177565][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1793.177600][ T30] audit: type=1400 audit(1764285717.931:1510): avc: denied { getopt } for pid=29523 comm="syz.7.5965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1795.769909][ T30] audit: type=1400 audit(1764285720.591:1511): avc: denied { ioctl } for pid=29546 comm="syz.7.5971" path="socket:[97971]" dev="sockfs" ino=97971 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1795.808758][T29548] tipc: Started in network mode [ 1795.819633][T29548] tipc: Node identity aa14df74d3bb, cluster identity 4711 [ 1795.827003][T29548] tipc: Enabled bearer , priority 0 [ 1795.869532][T29554] syzkaller0: entered promiscuous mode [ 1795.877090][T29554] syzkaller0: entered allmulticast mode [ 1795.996148][ T30] audit: type=1400 audit(1764285720.751:1512): avc: denied { write } for pid=29558 comm="syz.0.5976" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1796.052214][T29547] tipc: Resetting bearer [ 1796.435696][T29547] tipc: Disabling bearer [ 1797.330821][ T30] audit: type=1400 audit(1764285722.161:1513): avc: denied { setopt } for pid=29576 comm="syz.3.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1801.670038][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5994'. [ 1802.433779][T29631] overlayfs: overlapping lowerdir path [ 1804.121938][ T5962] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1804.449773][ T5962] usb 10-1: Using ep0 maxpacket: 32 [ 1804.466375][ T5962] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1804.481020][ T5962] usb 10-1: config 40 has an invalid interface number: 144 but max is 0 [ 1804.494761][ T5962] usb 10-1: config 40 has no interface number 0 [ 1804.503586][ T5962] usb 10-1: config 40 interface 144 has no altsetting 0 [ 1804.662961][ T5962] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=6e.65 [ 1804.665615][T29660] 9pnet_fd: Insufficient options for proto=fd [ 1804.672241][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.672274][ T5962] usb 10-1: Product: syz [ 1804.672289][ T5962] usb 10-1: Manufacturer: syz [ 1804.672304][ T5962] usb 10-1: SerialNumber: syz [ 1805.139164][T29667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6005'. [ 1805.148830][T29667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1805.241297][T29667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.720103][ T5962] usbhid 10-1:40.144: couldn't find an input interrupt endpoint [ 1805.755661][ T5962] usb 10-1: USB disconnect, device number 4 [ 1806.444155][T29680] ip6_vti0 speed is unknown, defaulting to 1000 [ 1806.764014][ T30] audit: type=1400 audit(1764285731.131:1514): avc: denied { create } for pid=29676 comm="syz.3.6009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1806.794976][ T30] audit: type=1400 audit(1764285731.181:1515): avc: denied { sys_admin } for pid=29676 comm="syz.3.6009" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1808.435696][T29696] ip6_vti0 speed is unknown, defaulting to 1000 [ 1809.493123][T29712] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6018'. [ 1810.552257][T29723] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1810.569740][T29723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1810.589223][T29723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1811.700906][ T8019] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1811.864351][ T8019] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1811.884250][ T8019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.898237][ T8019] usb 10-1: Product: syz [ 1811.906586][ T8019] usb 10-1: Manufacturer: syz [ 1811.911596][ T8019] usb 10-1: SerialNumber: syz [ 1811.911969][ T30] audit: type=1400 audit(1764285736.701:1516): avc: denied { mounton } for pid=29745 comm="syz.0.6029" path="/297/file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1811.929314][ T8019] usb 10-1: config 0 descriptor?? [ 1811.958901][ T8019] asix 10-1:0.0: probe with driver asix failed with error -22 [ 1813.815031][T29761] wg2: entered promiscuous mode [ 1813.821385][T29761] wg2: entered allmulticast mode [ 1813.902303][ T30] audit: type=1400 audit(1764285738.731:1517): avc: denied { getopt } for pid=29763 comm="syz.0.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1814.006515][ T5869] usb 10-1: USB disconnect, device number 5 [ 1814.136797][ T30] audit: type=1400 audit(1764285738.961:1518): avc: denied { setopt } for pid=29771 comm="syz.3.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1814.975546][ T30] audit: type=1400 audit(1764285739.801:1519): avc: denied { read } for pid=29771 comm="syz.3.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1815.293487][T29787] wireguard0: entered promiscuous mode [ 1815.299015][T29787] wireguard0: entered allmulticast mode [ 1816.737387][T29802] ip6_vti0 speed is unknown, defaulting to 1000 [ 1817.647851][ T1538] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1817.770742][ T30] audit: type=1400 audit(1764285742.591:1520): avc: denied { write } for pid=29809 comm="syz.9.6046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1818.339756][ T1538] usb 4-1: Using ep0 maxpacket: 32 [ 1818.354733][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.382939][ T1538] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1818.443293][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.464434][ T30] audit: type=1400 audit(1764285743.291:1521): avc: denied { create } for pid=29814 comm="syz.7.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1818.500771][ T1538] usb 4-1: config 0 descriptor?? [ 1819.549849][ T30] audit: type=1400 audit(1764285744.281:1522): avc: denied { setopt } for pid=29819 comm="syz.0.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1819.641076][ T1538] lenovo 0003:17EF:60EE.0085: unknown main item tag 0x7 [ 1819.650382][ T1538] lenovo 0003:17EF:60EE.0085: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 1819.661654][ T30] audit: type=1400 audit(1764285744.281:1523): avc: denied { map } for pid=29819 comm="syz.0.6049" path="socket:[99505]" dev="sockfs" ino=99505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1819.661699][ T30] audit: type=1400 audit(1764285744.281:1524): avc: denied { read accept } for pid=29819 comm="syz.0.6049" path="socket:[99505]" dev="sockfs" ino=99505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1819.661736][ T30] audit: type=1400 audit(1764285744.371:1525): avc: denied { getopt } for pid=29819 comm="syz.0.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1820.706895][ T1538] usb 4-1: USB disconnect, device number 36 [ 1821.344521][T29844] xt_hashlimit: max too large, truncated to 1048576 [ 1821.353894][T29844] No such timeout policy "syz1" [ 1824.805602][T29871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6063'. [ 1824.856961][ T30] audit: type=1400 audit(1764285749.681:1526): avc: denied { map } for pid=29870 comm="syz.3.6064" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1825.176137][T29876] overlayfs: overlapping lowerdir path [ 1825.282173][ T30] audit: type=1400 audit(1764285750.111:1527): avc: denied { read } for pid=29874 comm="syz.6.6065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1825.971313][ T30] audit: type=1400 audit(1764285750.791:1528): avc: denied { shutdown } for pid=29886 comm="syz.6.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1826.037537][T29890] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6070'. [ 1826.571876][T29899] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1826.584086][T29899] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1826.987796][T29906] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1827.043052][T29905] kvm: kvm [29904]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x6000000d4aa [ 1827.078626][T29905] kvm: kvm [29904]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x6000000d054 [ 1827.102051][T29905] kvm: kvm [29904]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x6000000f246 [ 1827.124460][T29905] kvm: kvm [29904]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x6000000dc62 [ 1827.154987][T29905] kvm: kvm [29904]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x6000000a638 [ 1827.301138][ T30] audit: type=1400 audit(1764285752.131:1529): avc: denied { read } for pid=29915 comm="syz.3.6076" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1827.411555][T29917] ip6tnl1: entered promiscuous mode [ 1827.533507][ T30] audit: type=1400 audit(1764285752.131:1530): avc: denied { open } for pid=29915 comm="syz.3.6076" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1827.697275][ T30] audit: type=1400 audit(1764285752.131:1531): avc: denied { ioctl } for pid=29915 comm="syz.3.6076" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1828.322390][T29923] overlayfs: overlapping lowerdir path [ 1828.665280][ T30] audit: type=1400 audit(1764285753.491:1532): avc: denied { execute } for pid=29920 comm="syz.3.6078" path="/562/cpuacct.usage_percpu" dev="tmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1828.723996][T29932] netlink: 83 bytes leftover after parsing attributes in process `syz.7.6079'. [ 1828.886568][ T1538] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1829.549934][ T1538] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.569710][ T1538] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1829.590219][ T1538] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1829.609488][ T1538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1829.629860][ T1538] usb 7-1: SerialNumber: syz [ 1829.782679][T29942] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6084'. [ 1829.847943][ T1538] usb 7-1: 0:2 : does not exist [ 1829.940662][ T1538] usb 7-1: USB disconnect, device number 105 [ 1829.983661][T21458] udevd[21458]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1831.445727][ T30] audit: type=1400 audit(1764285756.271:1533): avc: denied { mount } for pid=29962 comm="syz.6.6091" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1831.582940][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6092'. [ 1832.251417][T29980] wireguard0: entered promiscuous mode [ 1832.260083][T29980] wireguard0: entered allmulticast mode [ 1832.614083][T29985] ------------[ cut here ]------------ [ 1832.619585][T29985] WARNING: CPU: 0 PID: 29985 at arch/x86/kvm/lapic.c:3483 kvm_apic_accept_events+0x444/0x4c0 [ 1832.630105][T29985] Modules linked in: [ 1832.634992][T29985] CPU: 0 UID: 0 PID: 29985 Comm: syz.6.6091 Not tainted syzkaller #0 PREEMPT(full) [ 1832.644434][T29985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1832.654514][T29985] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 1832.667913][T29985] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 b1 af de 00 e9 33 fc ff ff e8 77 af de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 8f af de 00 e9 de fb ff ff e8 55 af de [ 1832.687643][T29985] RSP: 0018:ffffc9000c527c38 EFLAGS: 00010283 [ 1832.693791][T29985] RAX: 0000000000000704 RBX: 0000000000000002 RCX: ffffc9000e2ff000 [ 1832.701872][T29985] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 1832.710296][T29985] RBP: ffff88808a92f200 R08: 0000000000000005 R09: 0000000000000002 [ 1832.718661][T29985] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 1832.726728][T29985] R13: ffff88808a92f2e0 R14: ffff888071f9a970 R15: 0000000000000001 [ 1832.734717][T29985] FS: 00007f75450816c0(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 1832.743674][T29985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.750601][T29985] CR2: 0000001b317eaff8 CR3: 000000008a93d000 CR4: 00000000003526f0 [ 1832.758586][T29985] Call Trace: [ 1832.763061][T29985] [ 1832.765998][T29985] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 1832.772246][T29985] kvm_vcpu_ioctl+0x7b8/0x1690 [ 1832.777039][T29985] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1832.782341][T29985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1832.788249][T29985] ? do_vfs_ioctl+0x128/0x14f0 [ 1832.793093][T29985] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1832.798128][T29985] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1832.805059][T29985] ? hook_file_ioctl_common+0x145/0x410 [ 1832.811013][T29985] ? selinux_file_ioctl+0x180/0x270 [ 1832.816233][T29985] ? selinux_file_ioctl+0xb4/0x270 [ 1832.821901][T29985] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1832.827124][T29985] __x64_sys_ioctl+0x18e/0x210 [ 1832.832022][T29985] do_syscall_64+0xcd/0xfa0 [ 1832.836537][T29985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.842479][T29985] RIP: 0033:0x7f754418f749 [ 1832.846895][T29985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1832.866564][T29985] RSP: 002b:00007f7545081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.875013][T29985] RAX: ffffffffffffffda RBX: 00007f75443e6180 RCX: 00007f754418f749 [ 1832.883023][T29985] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 000000000000000b [ 1832.891014][T29985] RBP: 00007f7544213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1832.898987][T29985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.907023][T29985] R13: 00007f75443e6218 R14: 00007f75443e6180 R15: 00007ffc8e4e9b18 [ 1832.915431][T29985] [ 1832.918824][T29985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1832.926112][T29985] CPU: 0 UID: 0 PID: 29985 Comm: syz.6.6091 Not tainted syzkaller #0 PREEMPT(full) [ 1832.935472][T29985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1832.945518][T29985] Call Trace: [ 1832.948781][T29985] [ 1832.951697][T29985] dump_stack_lvl+0x3d/0x1f0 [ 1832.956269][T29985] vpanic+0x640/0x6f0 [ 1832.960243][T29985] ? kvm_apic_accept_events+0x444/0x4c0 [ 1832.965858][T29985] panic+0xca/0xd0 [ 1832.969570][T29985] ? __pfx_panic+0x10/0x10 [ 1832.973982][T29985] check_panic_on_warn+0xab/0xb0 [ 1832.978900][T29985] __warn+0xf6/0x3c0 [ 1832.982772][T29985] ? kvm_apic_accept_events+0x444/0x4c0 [ 1832.988302][T29985] report_bug+0x3c3/0x580 [ 1832.992617][T29985] ? kvm_apic_accept_events+0x444/0x4c0 [ 1832.998147][T29985] handle_bug+0x184/0x210 [ 1833.002462][T29985] exc_invalid_op+0x17/0x50 [ 1833.006948][T29985] asm_exc_invalid_op+0x1a/0x20 [ 1833.011777][T29985] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 1833.017916][T29985] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 b1 af de 00 e9 33 fc ff ff e8 77 af de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 8f af de 00 e9 de fb ff ff e8 55 af de [ 1833.037514][T29985] RSP: 0018:ffffc9000c527c38 EFLAGS: 00010283 [ 1833.043565][T29985] RAX: 0000000000000704 RBX: 0000000000000002 RCX: ffffc9000e2ff000 [ 1833.051514][T29985] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 1833.059462][T29985] RBP: ffff88808a92f200 R08: 0000000000000005 R09: 0000000000000002 [ 1833.067413][T29985] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 1833.075366][T29985] R13: ffff88808a92f2e0 R14: ffff888071f9a970 R15: 0000000000000001 [ 1833.083327][T29985] ? kvm_apic_accept_events+0x443/0x4c0 [ 1833.089039][T29985] ? kvm_apic_accept_events+0x443/0x4c0 [ 1833.094655][T29985] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 1833.100798][T29985] kvm_vcpu_ioctl+0x7b8/0x1690 [ 1833.105554][T29985] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1833.110744][T29985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1833.116624][T29985] ? do_vfs_ioctl+0x128/0x14f0 [ 1833.121375][T29985] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1833.126387][T29985] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1833.133227][T29985] ? hook_file_ioctl_common+0x145/0x410 [ 1833.138782][T29985] ? selinux_file_ioctl+0x180/0x270 [ 1833.143958][T29985] ? selinux_file_ioctl+0xb4/0x270 [ 1833.149056][T29985] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1833.154239][T29985] __x64_sys_ioctl+0x18e/0x210 [ 1833.158992][T29985] do_syscall_64+0xcd/0xfa0 [ 1833.163498][T29985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.169371][T29985] RIP: 0033:0x7f754418f749 [ 1833.173766][T29985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1833.193355][T29985] RSP: 002b:00007f7545081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.201751][T29985] RAX: ffffffffffffffda RBX: 00007f75443e6180 RCX: 00007f754418f749 [ 1833.209709][T29985] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 000000000000000b [ 1833.217755][T29985] RBP: 00007f7544213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1833.225724][T29985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1833.233683][T29985] R13: 00007f75443e6218 R14: 00007f75443e6180 R15: 00007ffc8e4e9b18 [ 1833.241657][T29985] [ 1833.244939][T29985] Kernel Offset: disabled [ 1833.249235][T29985] Rebooting in 86400 seconds..