last executing test programs: 15.349634936s ago: executing program 0 (id=759): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {0x0}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) 13.301261413s ago: executing program 0 (id=763): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 12.577108682s ago: executing program 4 (id=766): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 12.548863887s ago: executing program 1 (id=767): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) 11.475887793s ago: executing program 0 (id=768): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) 11.430563085s ago: executing program 2 (id=769): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0xfff}], 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.800470029s ago: executing program 4 (id=770): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0xfff}], 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.763608397s ago: executing program 3 (id=771): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 10.676930802s ago: executing program 1 (id=772): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000040)) 9.476917194s ago: executing program 2 (id=773): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.701818429s ago: executing program 3 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 8.696678355s ago: executing program 0 (id=775): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x4, 0x202}, {0x0, 0xfff}], 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.611511396s ago: executing program 4 (id=776): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}], 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.58604552s ago: executing program 2 (id=777): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 6.412900928s ago: executing program 4 (id=778): syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 6.387693249s ago: executing program 3 (id=779): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 6.364565275s ago: executing program 1 (id=780): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}], 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.08443563s ago: executing program 2 (id=781): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.473284022s ago: executing program 0 (id=782): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) write$hidraw(r5, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r5, 0x401c5820, &(0x7f00000005c0)) ioctl$HIDIOCGRDESC(r5, 0x4030582a, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b04, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x20, 0x22, 0x8b, {0x8b, 0x4, "02f1cfacdf9ca7bc4665d34470cb78d9341662ca44099510d7517f1b89fdb760a68857d3d8a5ec988aeb443cb31bbaffb4920760ce610d84a845ee23ee262ac3a6c09afa172b80378fade770761ba04f369c08607c449eb9fa30a81702a366bba3b30b51f3d2ee83f2a81fc56fd8b42bf7f65dced2605fccdfff9cc6ca9372c74270289055caea329c"}}, 0x0}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x20, 0x13, 0x99, "76951d787615f66a0a759392bc7c2cf47dd3082f07e8fd751d1b671088ab76e33c4770aece07b378441583901153e3c785e08873d7f5729bdf36408f409faf548b13e7c2faf0d963eb4685d62d38613a3e16b7bb55cde9b1541c310c6729ce2d49517c23e92a795df6ad8288803ae2eed19d5d03d025193273cf96a81407fe622957a31f7044a7f43eaca07aea2cc104ed79658d2f7e679cfa"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}}) 4.333540768s ago: executing program 4 (id=783): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) 4.286749219s ago: executing program 3 (id=784): lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40), 0x0, 0x4008) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0x1f}, {0x4, 0x202}, {0x0, 0xfff}], 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x460400e4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.250924509s ago: executing program 1 (id=785): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2.210891116s ago: executing program 3 (id=786): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f00000005c0)="2506", 0x2}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) 2.102780938s ago: executing program 1 (id=787): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 1.744855907s ago: executing program 4 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 1.495259655s ago: executing program 2 (id=789): syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 774.63387ms ago: executing program 1 (id=790): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 432.172025ms ago: executing program 3 (id=791): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 202.971664ms ago: executing program 0 (id=792): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 0s ago: executing program 2 (id=793): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f00000005c0)="2506", 0x2}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) kernel console output (not intermixed with test programs): oc_t tclass=filesystem permissive=1 [ 77.430544][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.460841][ T30] audit: type=1400 audit(1756127183.218:92): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.v7dj5t/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.463822][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.509758][ T30] audit: type=1400 audit(1756127183.248:93): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.v7dj5t/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.522131][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.546968][ T30] audit: type=1400 audit(1756127183.258:94): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.566791][ T30] audit: type=1400 audit(1756127183.278:95): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.593495][ T30] audit: type=1400 audit(1756127183.278:96): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="gadgetfs" ino=8288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.620339][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.633837][ T30] audit: type=1400 audit(1756127183.288:97): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.657602][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.668617][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.771569][ T5849] veth0_macvtap: entered promiscuous mode [ 77.793539][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810708][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.847996][ T3616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858369][ T3616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.868113][ T3616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.886108][ T5849] veth1_macvtap: entered promiscuous mode [ 77.892648][ T3616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.914438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.934440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.951477][ T5975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 77.958109][ T5975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.961377][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.966105][ T5975] vhci_hcd vhci_hcd.0: Device attached [ 78.114720][ T5979] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 78.394479][ T5966] vhci_hcd: vhci_device speed not set [ 78.454494][ T24] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 78.464426][ T5863] Bluetooth: hci2: command tx timeout [ 78.469903][ T5863] Bluetooth: hci1: command tx timeout [ 78.476061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.484335][ T5853] Bluetooth: hci3: command tx timeout [ 78.504387][ T5966] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 78.514091][ T5979] team0: Port device netdevsim0 added [ 78.546118][ T5853] Bluetooth: hci0: command tx timeout [ 78.546126][ T5172] Bluetooth: hci4: command tx timeout [ 78.602019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.604916][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.610947][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.631283][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.694775][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.705017][ T24] usb 4-1: config 0 has no interfaces? [ 78.711187][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.721718][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.724280][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.735332][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.804743][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.817850][ T24] usb 4-1: config 0 descriptor?? [ 78.860621][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.870403][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.917396][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.958968][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.979421][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.043184][ T5977] vhci_hcd: unknown pdu 2 [ 79.140775][ T5966] vhci_hcd: vhci_device speed not set [ 79.522349][ T1165] vhci_hcd: stop threads [ 79.535109][ T1165] vhci_hcd: release socket [ 79.548216][ T1165] vhci_hcd: disconnect device [ 79.559210][ T5984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.593318][ T5966] usb 39-1: device descriptor read/64, error -71 [ 79.805364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.820629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.830681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.877706][ T5966] vhci_hcd: vhci_device speed not set [ 79.891208][ T5994] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 79.915670][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.982455][ T5991] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 79.988991][ T5991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.996959][ T5991] vhci_hcd vhci_hcd.0: Device attached [ 80.128376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.184413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 80.194286][ T5904] vhci_hcd: vhci_device speed not set [ 80.363771][ T5911] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 80.379505][ T5904] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 80.411726][ T5994] team0: Port device netdevsim0 added [ 80.524424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.533701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.545437][ T5853] Bluetooth: hci1: command tx timeout [ 80.545714][ T5172] Bluetooth: hci2: command tx timeout [ 80.557458][ T5172] Bluetooth: hci3: command tx timeout [ 80.561811][ T5911] usb 2-1: config 0 has no interfaces? [ 80.574313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.586731][ T5911] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.596063][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.611841][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.626366][ T5172] Bluetooth: hci0: command tx timeout [ 80.632030][ T5172] Bluetooth: hci4: command tx timeout [ 80.645958][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.665917][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.675050][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.686719][ T5911] usb 2-1: config 0 descriptor?? [ 80.778937][ T5939] usb 4-1: USB disconnect, device number 2 [ 81.397555][ T6009] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 81.430611][ T10] cfg80211: failed to load regulatory.db [ 81.438648][ T5997] vhci_hcd: unknown pdu 2 [ 81.449706][ T13] vhci_hcd: stop threads [ 81.475724][ T13] vhci_hcd: release socket [ 81.480828][ T13] vhci_hcd: disconnect device [ 81.517531][ T5904] vhci_hcd: vhci_device speed not set [ 81.534023][ T6007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.815918][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.823511][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.833497][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.846884][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.905453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.924363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.593137][ T6019] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 82.990152][ T5904] usb 2-1: USB disconnect, device number 2 [ 83.188854][ T6019] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.242190][ T6024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 83.248715][ T6024] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.256659][ T6024] vhci_hcd vhci_hcd.0: Device attached [ 83.276895][ T6019] team0: Failed to send options change via netlink (err -105) [ 83.316907][ T6019] team0: Port device netdevsim0 added [ 83.439688][ T5911] vhci_hcd: vhci_device speed not set [ 83.464246][ T5904] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 83.504566][ T5911] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 83.616356][ T5904] usb 3-1: config 0 has no interfaces? [ 83.622227][ T13] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.632506][ T5904] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.696646][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.704169][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.723965][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.733289][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.747017][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.819094][ T5904] usb 3-1: config 0 descriptor?? [ 84.518224][ T6037] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 84.526271][ T6027] vhci_hcd: unknown pdu 2 [ 84.577863][ T60] vhci_hcd: stop threads [ 84.582234][ T60] vhci_hcd: release socket [ 84.680093][ T5911] vhci_hcd: vhci_device speed not set [ 84.693691][ T6030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.700678][ T60] vhci_hcd: disconnect device [ 85.141273][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 85.141289][ T30] audit: type=1400 audit(1756127190.998:125): avc: denied { create } for pid=6039 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.168044][ T5911] usb 37-1: device descriptor read/64, error -71 [ 85.189232][ T30] audit: type=1400 audit(1756127190.998:126): avc: denied { bind } for pid=6039 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.843239][ T30] audit: type=1400 audit(1756127190.998:127): avc: denied { setopt } for pid=6039 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.844841][ T5911] vhci_hcd: vhci_device speed not set [ 85.895544][ T5968] usb 3-1: USB disconnect, device number 2 [ 86.124241][ T30] audit: type=1400 audit(1756127191.118:128): avc: denied { read } for pid=6039 comm="syz.4.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.547352][ T30] audit: type=1400 audit(1756127191.118:129): avc: denied { open } for pid=6039 comm="syz.4.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.609580][ T6051] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 86.616103][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.623569][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 87.133449][ T5925] vhci_hcd: vhci_device speed not set [ 87.186096][ T6064] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 87.292049][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 87.317865][ T6065] netlink: 'syz.4.18': attribute type 10 has an invalid length. [ 87.354194][ T5925] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 87.515778][ T9] usb 4-1: config 0 has no interfaces? [ 87.521273][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.624193][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.732288][ T6072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5248 sclass=netlink_route_socket pid=6072 comm=syz.2.20 [ 87.748745][ T9] usb 4-1: config 0 descriptor?? [ 87.996480][ T6055] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 88.467751][ T60] vhci_hcd: stop threads [ 88.494708][ T6077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.571776][ T60] vhci_hcd: release socket [ 88.576342][ T60] vhci_hcd: disconnect device [ 88.819811][ T6083] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 89.244818][ T6083] team0: Port device netdevsim0 added [ 89.475346][ T6090] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 89.663665][ T24] usb 4-1: USB disconnect, device number 3 [ 89.874214][ T6097] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 90.430070][ T6103] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 90.529680][ T6103] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 90.551404][ T6103] team0: Failed to send options change via netlink (err -105) [ 90.559782][ T6103] team0: Port device netdevsim0 added [ 90.629310][ T36] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 90.833275][ T6107] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 92.277917][ T6126] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 92.664885][ T6130] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 92.684283][ T5925] vhci_hcd: vhci_device speed not set [ 93.171663][ T6133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 93.178208][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.195621][ T6133] vhci_hcd vhci_hcd.0: Device attached [ 93.516040][ T5968] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 93.554297][ T5925] vhci_hcd: vhci_device speed not set [ 93.636021][ T5925] usb 39-1: device descriptor read/64, error -110 [ 94.007185][ T5968] usb 4-1: config 0 has no interfaces? [ 94.013861][ T5968] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.215170][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.236363][ T5968] usb 4-1: config 0 descriptor?? [ 94.307392][ T6147] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 94.317017][ T5925] vhci_hcd: vhci_device speed not set [ 94.494226][ T5925] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 94.599100][ T6134] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 94.634716][ T3466] vhci_hcd: stop threads [ 94.639095][ T3466] vhci_hcd: release socket [ 94.643637][ T3466] vhci_hcd: disconnect device [ 94.679783][ T6133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.329328][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5248 sclass=netlink_route_socket pid=6156 comm=syz.4.34 [ 95.368024][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5248 sclass=netlink_route_socket pid=6155 comm=syz.2.33 [ 95.696979][ T6163] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 96.579260][ T5939] usb 4-1: USB disconnect, device number 4 [ 97.035984][ T6179] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 97.160512][ T6181] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 98.166952][ T30] audit: type=1400 audit(1756127204.038:130): avc: denied { read write } for pid=6182 comm="syz.0.39" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.212241][ T30] audit: type=1400 audit(1756127204.038:131): avc: denied { open } for pid=6182 comm="syz.0.39" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.391889][ T30] audit: type=1400 audit(1756127204.038:132): avc: denied { mounton } for pid=6182 comm="syz.0.39" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.726877][ T6193] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 99.614765][ T6194] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 99.745994][ T30] audit: type=1400 audit(1756127205.628:133): avc: denied { read } for pid=6195 comm="syz.3.42" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.774313][ T5925] vhci_hcd: vhci_device speed not set [ 100.949245][ T30] audit: type=1400 audit(1756127205.628:134): avc: denied { open } for pid=6195 comm="syz.3.42" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.976446][ T30] audit: type=1400 audit(1756127205.638:135): avc: denied { bind } for pid=6195 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.431723][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.459563][ T30] audit: type=1400 audit(1756127205.638:136): avc: denied { listen } for pid=6195 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.600894][ T6217] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 101.607417][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.615371][ T6225] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 101.668036][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 101.685039][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.694356][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 101.703629][ T30] audit: type=1400 audit(1756127205.638:137): avc: denied { connect } for pid=6195 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.723016][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.729257][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.755152][ T5904] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 101.927050][ T5968] vhci_hcd: vhci_device speed not set [ 101.976125][ T5925] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 102.024935][ T5968] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 102.025802][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.053785][ T30] audit: type=1400 audit(1756127205.768:138): avc: denied { allowed } for pid=6195 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.072832][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.082465][ T5904] usb 3-1: config 0 descriptor?? [ 102.088322][ T30] audit: type=1400 audit(1756127205.768:139): avc: denied { create } for pid=6195 comm="syz.3.42" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.109359][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.196946][ T5925] usb 5-1: config 0 has no interfaces? [ 102.202484][ T5925] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.250778][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.283660][ T5925] usb 5-1: config 0 descriptor?? [ 102.524396][ T6223] vhci_hcd: unknown pdu 2 [ 102.542282][ T5904] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 102.617449][ T5968] vhci_hcd: vhci_device speed not set [ 102.632269][ T3466] vhci_hcd: stop threads [ 102.648429][ T3466] vhci_hcd: release socket [ 102.654556][ T3466] vhci_hcd: disconnect device [ 102.657876][ T6221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.706491][ T5968] usb 41-1: device descriptor read/64, error -71 [ 102.885954][ T5968] vhci_hcd: vhci_device speed not set [ 103.049223][ T6241] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 103.425929][ T5904] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 2: -71 [ 103.708729][ T5904] playstation 0003:054C:05C4.0001: Retrying DualShock 4 get calibration report (0x02) request [ 103.783144][ T5904] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 2: -71 [ 103.817810][ T5904] playstation 0003:054C:05C4.0001: Retrying DualShock 4 get calibration report (0x02) request [ 103.841083][ T5904] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 2: -71 [ 103.886619][ T5904] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 calibration info: -71 [ 103.903267][ T5904] playstation 0003:054C:05C4.0001: Invalid gyro calibration data for axis (3), disabling calibration. [ 103.929505][ T5904] playstation 0003:054C:05C4.0001: Invalid gyro calibration data for axis (4), disabling calibration. [ 104.041314][ T5904] playstation 0003:054C:05C4.0001: Invalid gyro calibration data for axis (5), disabling calibration. [ 104.072658][ T5904] playstation 0003:054C:05C4.0001: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 104.192357][ T5904] playstation 0003:054C:05C4.0001: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 104.235792][ T5904] playstation 0003:054C:05C4.0001: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 104.363047][ T5904] playstation 0003:054C:05C4.0001: Failed to get calibration data from DualShock4 [ 104.558653][ T5904] playstation 0003:054C:05C4.0001: Gyroscope and accelerometer will be inaccurate. [ 104.594829][ T5904] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0001/input/input5 [ 104.914476][ T6263] netlink: 'syz.1.52': attribute type 10 has an invalid length. [ 105.171389][ T6265] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 105.205321][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.205337][ T30] audit: type=1400 audit(1756127211.088:146): avc: denied { read } for pid=5206 comm="acpid" name="js0" dev="devtmpfs" ino=2802 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.212296][ T5904] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0001/input/input6 [ 105.549036][ T30] audit: type=1400 audit(1756127211.088:147): avc: denied { open } for pid=5206 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2802 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.612941][ T5904] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0001/input/input7 [ 105.635904][ T5925] usb 5-1: USB disconnect, device number 2 [ 105.898786][ T30] audit: type=1400 audit(1756127211.098:148): avc: denied { ioctl } for pid=5206 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2802 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.923462][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.966997][ T5904] playstation 0003:054C:05C4.0001: Registered DualShock4 controller hw_version=0x0000dc18 fw_version=0x00001c48 [ 106.115627][ T5904] usb 3-1: USB disconnect, device number 3 [ 106.388055][ T6279] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 107.129458][ T6290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 107.135993][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.143489][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 107.325090][ T5911] vhci_hcd: vhci_device speed not set [ 107.434186][ T5911] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 107.786871][ T5904] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 107.984520][ T5904] usb 3-1: config 0 has no interfaces? [ 107.991996][ T5904] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.009603][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.025259][ T5904] usb 3-1: config 0 descriptor?? [ 108.353388][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 108.724584][ T6293] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 108.804213][ T6296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.996381][ T48] vhci_hcd: stop threads [ 109.001120][ T48] vhci_hcd: release socket [ 109.012681][ T48] vhci_hcd: disconnect device [ 109.213110][ T6310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 109.219636][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.227186][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 109.460738][ T5968] vhci_hcd: vhci_device speed not set [ 109.494200][ T5939] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 109.524537][ T5968] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 109.695435][ T5939] usb 2-1: config 0 has no interfaces? [ 109.701310][ T5939] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.789751][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.845572][ T5939] usb 2-1: config 0 descriptor?? [ 109.883199][ T9] usb 3-1: USB disconnect, device number 4 [ 110.550391][ T6311] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 110.906957][ T60] vhci_hcd: stop threads [ 110.920205][ T6318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.945991][ T60] vhci_hcd: release socket [ 110.966689][ T60] vhci_hcd: disconnect device [ 112.344338][ T5939] usb 2-1: USB disconnect, device number 3 [ 112.360886][ T6336] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 112.554242][ T5911] vhci_hcd: vhci_device speed not set [ 112.742261][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.530790][ T6348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5248 sclass=netlink_route_socket pid=6348 comm=syz.4.67 [ 113.635980][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.668550][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.766034][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.812961][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 113.875277][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 113.921851][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.935524][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.953768][ T9] usb 3-1: Product: syz [ 113.961710][ T9] usb 3-1: Manufacturer: syz [ 114.033334][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 114.043873][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 114.126639][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 114.144253][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 114.600339][ T30] audit: type=1400 audit(1756127220.488:149): avc: denied { read write } for pid=6338 comm="syz.2.65" name="cdc-wdm0" dev="devtmpfs" ino=2829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 114.624952][ T5968] vhci_hcd: vhci_device speed not set [ 114.655848][ T30] audit: type=1400 audit(1756127220.488:150): avc: denied { open } for pid=6338 comm="syz.2.65" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 114.970667][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.988463][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.494311][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.662329][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 115.673559][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.691374][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.709955][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 115.719201][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.735702][ T9] usb 4-1: config 0 descriptor?? [ 116.171520][ T9] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 116.499008][ T5968] usb 3-1: USB disconnect, device number 5 [ 116.564272][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 163: -71 [ 116.577957][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 firmware info: -71 [ 116.590591][ T9] playstation 0003:054C:05C4.0002: Failed to get firmware info from DualShock4 [ 116.601373][ T9] playstation 0003:054C:05C4.0002: HW/FW version data in sysfs will be invalid. [ 116.610822][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 2: -71 [ 116.620905][ T9] playstation 0003:054C:05C4.0002: Retrying DualShock 4 get calibration report (0x02) request [ 116.636177][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 2: -71 [ 116.646266][ T9] playstation 0003:054C:05C4.0002: Retrying DualShock 4 get calibration report (0x02) request [ 116.657054][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 2: -71 [ 116.667245][ T9] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 calibration info: -71 [ 116.676917][ T9] playstation 0003:054C:05C4.0002: Invalid gyro calibration data for axis (3), disabling calibration. [ 116.689737][ T9] playstation 0003:054C:05C4.0002: Invalid gyro calibration data for axis (4), disabling calibration. [ 116.701925][ T9] playstation 0003:054C:05C4.0002: Invalid gyro calibration data for axis (5), disabling calibration. [ 116.713570][ T9] playstation 0003:054C:05C4.0002: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 116.726051][ T9] playstation 0003:054C:05C4.0002: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 116.739310][ T9] playstation 0003:054C:05C4.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 116.751858][ T9] playstation 0003:054C:05C4.0002: Failed to get calibration data from DualShock4 [ 116.761195][ T9] playstation 0003:054C:05C4.0002: Gyroscope and accelerometer will be inaccurate. [ 116.774033][ T9] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0002/input/input8 [ 116.799307][ T9] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0002/input/input9 [ 116.838929][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0002/input/input10 [ 116.861328][ T5968] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.985421][ T9] playstation 0003:054C:05C4.0002: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 117.027282][ T6376] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 117.034830][ T9] usb 4-1: USB disconnect, device number 5 [ 117.044663][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 117.052452][ T5968] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 117.077381][ T5968] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.259994][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.180387][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.190373][ T5968] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.204122][ T5968] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.213391][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.353268][ T5968] usb 3-1: usb_control_msg returned -32 [ 119.374207][ T5968] usbtmc 3-1:16.0: can't read capabilities [ 119.740066][ T6398] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 119.983166][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.069863][ T30] audit: type=1400 audit(1756127225.958:151): avc: denied { write } for pid=6373 comm="syz.2.72" name="usbtmc0" dev="devtmpfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.073104][ T6395] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 120.092877][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.105933][ T6405] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 120.189393][ T9] usb 3-1: USB disconnect, device number 6 [ 120.420252][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.475180][ T5925] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.494243][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.509019][ T5925] usb 4-1: config 0 descriptor?? [ 120.528895][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 120.736545][ T5925] pwc: send_video_command error -71 [ 120.771403][ T5925] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 120.843488][ T5925] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 120.886059][ T5925] usb 4-1: USB disconnect, device number 6 [ 122.044508][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.461377][ T6425] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 122.618938][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.627357][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.686355][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.693858][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.855905][ T5925] usb 4-1: device descriptor read/all, error -71 [ 123.234430][ T6430] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 123.307416][ T30] audit: type=1400 audit(1756127229.198:152): avc: denied { create } for pid=6432 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.309750][ T6434] Zero length message leads to an empty skb [ 123.345745][ T30] audit: type=1400 audit(1756127229.198:153): avc: denied { write } for pid=6432 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.665996][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.792942][ T30] audit: type=1400 audit(1756127229.628:154): avc: denied { mount } for pid=6432 comm="syz.0.87" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 123.881993][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.949254][ T5925] usb 4-1: config 0 has an invalid interface number: 158 but max is 0 [ 123.977028][ T5925] usb 4-1: config 0 has no interface number 0 [ 124.013576][ T5925] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=70.01 [ 124.060440][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.081224][ T5925] usb 4-1: Product: syz [ 124.088579][ T5925] usb 4-1: Manufacturer: syz [ 124.102851][ T5925] usb 4-1: SerialNumber: syz [ 124.118049][ T6439] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 124.129170][ T5925] usb 4-1: config 0 descriptor?? [ 124.158723][ T5925] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 124.491662][ T5925] dvb-usb: bulk message failed: -22 (4/0) [ 124.524255][ T5925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.084983][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 125.105697][ T5925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.144621][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.154714][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.180009][ T5925] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 125.189835][ T5925] usb 4-1: media controller created [ 125.210558][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.237605][ T5925] ttusb2: set interface to alts=3 failed [ 125.303730][ T5925] DVB: Unable to find symbol tda10023_attach() [ 125.324555][ T5925] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 125.427619][ T6452] netlink: 'syz.3.91': attribute type 10 has an invalid length. [ 125.509856][ T6453] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 125.607629][ T5925] rc_core: IR keymap rc-tt-1500 not found [ 125.613406][ T5925] Registered IR keymap rc-empty [ 125.959809][ T5925] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 126.024872][ T5925] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 126.297008][ T5925] dvb-usb: schedule remote query interval to 150 msecs. [ 126.304443][ T5925] dvb-usb: bulk message failed: -22 (4/0) [ 126.324181][ T5925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 126.344263][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 126.351744][ T5925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 126.433472][ T5925] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 126.448077][ T5925] usb 4-1: USB disconnect, device number 8 [ 126.500352][ T30] audit: type=1400 audit(1756127232.388:155): avc: denied { create } for pid=6466 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.854717][ T6471] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 127.096855][ T30] audit: type=1400 audit(1756127232.638:156): avc: denied { create } for pid=6466 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.244408][ T5925] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 127.273842][ T30] audit: type=1400 audit(1756127232.638:157): avc: denied { ioctl } for pid=6466 comm="syz.1.97" path="socket:[9771]" dev="sockfs" ino=9771 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.285774][ T6491] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 129.486679][ T6495] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 130.092349][ T6501] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 130.954045][ T6509] netlink: 'syz.2.107': attribute type 10 has an invalid length. [ 131.212306][ T6513] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 133.221432][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228597][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.435317][ T6531] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.464378][ T30] audit: type=1400 audit(1756127239.318:158): avc: denied { create } for pid=6526 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.386827][ T30] audit: type=1400 audit(1756127239.328:159): avc: denied { write } for pid=6526 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.426545][ T30] audit: type=1400 audit(1756127239.388:160): avc: denied { ioctl } for pid=6526 comm="syz.2.114" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10264 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.853942][ T30] audit: type=1400 audit(1756127241.738:161): avc: denied { create } for pid=6544 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.873395][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.576606][ T6551] block nbd0: Attempted send on invalid socket [ 136.582992][ T6551] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 136.795553][ T6554] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 136.878279][ T6551] mmap: syz.4.118 (6551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.929926][ T6556] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 136.940336][ T30] audit: type=1400 audit(1756127242.828:162): avc: denied { read } for pid=6544 comm="syz.4.118" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.202524][ T30] audit: type=1400 audit(1756127242.828:163): avc: denied { open } for pid=6544 comm="syz.4.118" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.327813][ T6567] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 138.173448][ T30] audit: type=1400 audit(1756127242.858:164): avc: denied { ioctl } for pid=6544 comm="syz.4.118" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.697280][ T6580] block nbd0: Attempted send on invalid socket [ 138.705810][ T6580] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 139.291538][ T6588] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.504202][ T6576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.192830][ T6600] netlink: 'syz.1.131': attribute type 10 has an invalid length. [ 140.338378][ T30] audit: type=1400 audit(1756127246.218:165): avc: denied { read } for pid=6601 comm="syz.2.132" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.370961][ T30] audit: type=1400 audit(1756127246.218:166): avc: denied { open } for pid=6601 comm="syz.2.132" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.668672][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.283499][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.314257][ T5925] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 141.554626][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.563729][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.604264][ T5925] usb 3-1: Product: syz [ 141.608583][ T5925] usb 3-1: Manufacturer: syz [ 141.669336][ T5925] usb 3-1: SerialNumber: syz [ 141.923898][ T30] audit: type=1400 audit(1756127247.708:167): avc: denied { write } for pid=6604 comm="syz.4.133" name="icmp6" dev="proc" ino=4026532935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 141.956473][ T5925] cdc_mbim 3-1:1.0: skipping garbage [ 142.164258][ T6603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.007592][ T6624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.074999][ T5925] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 143.188691][ T6621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 143.195226][ T6621] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.203070][ T6621] vhci_hcd vhci_hcd.0: Device attached [ 143.367682][ T5966] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 143.384262][ T5925] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 143.412639][ T5925] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 143.436199][ T5925] wwan wwan0: port wwan0mbim0 attached [ 143.652069][ T5968] vhci_hcd: vhci_device speed not set [ 143.688032][ T30] audit: type=1400 audit(1756127249.568:168): avc: denied { read } for pid=6629 comm="syz.1.138" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.746035][ T5966] usb 5-1: config 0 has no interfaces? [ 143.754684][ T5966] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.772769][ T5968] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 143.784168][ T30] audit: type=1400 audit(1756127249.568:169): avc: denied { open } for pid=6629 comm="syz.1.138" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.818378][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.884840][ T30] audit: type=1400 audit(1756127249.578:170): avc: denied { ioctl } for pid=6629 comm="syz.1.138" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.911416][ T5966] usb 5-1: config 0 descriptor?? [ 143.974210][ T5925] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fe:00:5b:c4:51:e9 [ 144.120873][ T6622] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 144.138067][ T3466] vhci_hcd: stop threads [ 144.144070][ T3466] vhci_hcd: release socket [ 144.149662][ T3466] vhci_hcd: disconnect device [ 144.594698][ T6623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.694395][ T30] audit: type=1400 audit(1756127250.578:171): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.162168][ T30] audit: type=1400 audit(1756127250.578:172): avc: denied { search } for pid=5516 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.204954][ T30] audit: type=1400 audit(1756127250.578:173): avc: denied { search } for pid=5516 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.246140][ T30] audit: type=1400 audit(1756127250.578:174): avc: denied { read } for pid=5516 comm="dhcpcd" name="n100" dev="tmpfs" ino=2581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.356735][ T5925] usb 3-1: USB disconnect, device number 7 [ 145.366636][ T5925] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 145.402315][ T30] audit: type=1400 audit(1756127250.578:175): avc: denied { open } for pid=5516 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.533291][ T30] audit: type=1400 audit(1756127250.578:176): avc: denied { getattr } for pid=5516 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.703037][ T5925] wwan wwan0: port wwan0mbim0 disconnected [ 145.973281][ T9] usb 5-1: USB disconnect, device number 3 [ 146.032067][ T30] audit: type=1400 audit(1756127251.588:177): avc: denied { read open } for pid=6653 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.456064][ T6668] block nbd0: Attempted send on invalid socket [ 146.462263][ T6668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 146.538581][ T30] audit: type=1400 audit(1756127251.588:178): avc: denied { getattr } for pid=6653 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.255701][ T6674] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 147.421308][ T30] audit: type=1400 audit(1756127253.298:179): avc: denied { add_name } for pid=6648 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.444937][ T30] audit: type=1400 audit(1756127253.308:180): avc: denied { create } for pid=6648 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.495082][ T30] audit: type=1400 audit(1756127253.308:181): avc: denied { write } for pid=6648 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=2616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.214315][ T30] audit: type=1400 audit(1756127253.308:182): avc: denied { append } for pid=6648 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.914202][ T5968] vhci_hcd: vhci_device speed not set [ 149.514282][ T30] audit: type=1400 audit(1756127255.318:183): avc: denied { remove_name } for pid=6688 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.629123][ T30] audit: type=1400 audit(1756127255.318:184): avc: denied { unlink } for pid=6688 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.274944][ T6732] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.913602][ T6751] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 154.971463][ T6773] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 159.148543][ T6801] block nbd0: Attempted send on invalid socket [ 159.154784][ T6801] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 160.995107][ T6821] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.244957][ T6827] block nbd0: Attempted send on invalid socket [ 161.251841][ T6827] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 162.597664][ T6839] block nbd0: Attempted send on invalid socket [ 162.603918][ T6839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 163.182316][ T6848] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.566218][ T6859] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.741178][ T6870] block nbd0: Attempted send on invalid socket [ 165.748325][ T6870] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 166.637557][ T6885] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.559209][ T6889] block nbd0: Attempted send on invalid socket [ 167.565471][ T6889] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 168.382552][ T6911] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.105531][ T6912] block nbd0: Attempted send on invalid socket [ 169.111858][ T6912] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 169.166134][ T6925] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 169.649264][ T6931] block nbd0: Attempted send on invalid socket [ 169.655598][ T6931] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 170.229622][ T6938] block nbd0: Attempted send on invalid socket [ 170.235897][ T6938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 170.916050][ T6943] block nbd0: Attempted send on invalid socket [ 170.922731][ T6943] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 171.950582][ T6957] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 172.520654][ T6961] block nbd0: Attempted send on invalid socket [ 172.526924][ T6961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 173.400321][ T6975] block nbd0: Attempted send on invalid socket [ 173.406574][ T6975] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 173.651890][ T6980] block nbd0: Attempted send on invalid socket [ 173.658165][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 173.826862][ T6985] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 174.137462][ T6984] block nbd0: Attempted send on invalid socket [ 174.143735][ T6984] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 174.902784][ T6992] block nbd0: Attempted send on invalid socket [ 174.909165][ T6992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 176.791757][ T7014] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.415066][ T7020] block nbd0: Attempted send on invalid socket [ 177.421287][ T7020] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 177.891904][ T7021] block nbd0: Attempted send on invalid socket [ 177.898160][ T7021] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 178.113357][ T7018] block nbd0: Attempted send on invalid socket [ 178.241894][ T7018] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 178.521209][ T7032] block nbd0: Attempted send on invalid socket [ 178.527492][ T7032] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 178.916489][ T7035] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.262458][ T7044] block nbd0: Attempted send on invalid socket [ 179.268699][ T7044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 179.400227][ T30] audit: type=1400 audit(1756127285.288:185): avc: denied { wake_alarm } for pid=7047 comm="syz.0.217" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.775329][ T7054] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.802152][ T30] audit: type=1400 audit(1756127285.588:186): avc: denied { create } for pid=7047 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.941987][ T30] audit: type=1400 audit(1756127285.598:187): avc: denied { write } for pid=7047 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.113909][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 180.144416][ T7060] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.275486][ T7068] block nbd0: Attempted send on invalid socket [ 181.284518][ T7068] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 182.596850][ T7084] block nbd0: Attempted send on invalid socket [ 182.603158][ T7084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 183.814252][ T5968] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.111606][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 184.121905][ T5968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 184.132103][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.141994][ T5968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.164593][ T5968] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 184.175330][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.183302][ T5968] usb 4-1: Product: syz [ 184.187857][ T5968] usb 4-1: Manufacturer: syz [ 184.192433][ T5968] usb 4-1: SerialNumber: syz [ 184.227596][ T5968] usb 4-1: config 0 descriptor?? [ 184.255908][ T5968] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 184.340654][ T5968] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 184.446882][ T7105] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 184.457103][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.478127][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.881013][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.899797][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.951779][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.112643][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.138452][ T5966] usb 4-1: USB disconnect, device number 9 [ 185.148051][ T5966] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 185.221302][ T5966] ti_usb_3410_5052 4-1:0.0: device disconnected [ 185.477521][ T7119] block nbd0: Attempted send on invalid socket [ 185.483722][ T7119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 185.845377][ T7121] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.377033][ T7133] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.480272][ T7137] block nbd0: Attempted send on invalid socket [ 187.486574][ T7137] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 187.950423][ T7154] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 187.965465][ T7155] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.141319][ T5966] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.344361][ T5966] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.354029][ T5966] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.417550][ T5966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.564164][ T5966] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 188.654320][ T5966] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 188.668681][ T7161] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 188.811012][ T5966] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.820359][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.843764][ T5966] usb 3-1: Product: syz [ 188.909278][ T5966] usb 3-1: Manufacturer: syz [ 188.996847][ T5966] cdc_wdm 3-1:1.0: skipping garbage [ 189.002058][ T5966] cdc_wdm 3-1:1.0: skipping garbage [ 189.229996][ T5966] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 189.243846][ T5966] cdc_wdm 3-1:1.0: Unknown control protocol [ 189.428310][ T5918] usb 3-1: USB disconnect, device number 8 [ 190.409419][ T30] audit: type=1400 audit(1756127296.298:188): avc: denied { mounton } for pid=7174 comm="syz.0.246" path="/48/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.623958][ T7195] block nbd0: Attempted send on invalid socket [ 191.630889][ T7195] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 193.708741][ T7216] block nbd0: Attempted send on invalid socket [ 193.715166][ T7216] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 193.963144][ T7217] block nbd0: Attempted send on invalid socket [ 193.969606][ T7217] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 194.009827][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.017931][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.514812][ T7215] block nbd0: Attempted send on invalid socket [ 194.521022][ T7215] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 195.294740][ T7227] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 196.082810][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 196.144417][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 196.151020][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 196.157067][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 196.163090][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 197.257187][ T7249] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 199.264355][ T7269] block nbd0: Attempted send on invalid socket [ 199.270644][ T7269] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 199.736987][ T7276] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.732209][ T7285] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 201.339448][ T7294] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 204.333802][ T7330] bridge0: entered promiscuous mode [ 204.342741][ T7330] macsec1: entered promiscuous mode [ 204.354215][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 206.625378][ T7345] block nbd0: Attempted send on invalid socket [ 206.631574][ T7345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 207.029421][ T5925] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.088111][ T7356] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.285765][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.296918][ T5925] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 207.310734][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.320657][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.518313][ T5925] usb 3-1: Product: syz [ 207.522504][ T5925] usb 3-1: Manufacturer: syz [ 207.537340][ T5925] usb 3-1: SerialNumber: syz [ 207.566785][ T5925] cdc_mbim 3-1:1.0: skipping garbage [ 207.829860][ T7352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.649370][ T7352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.752258][ T7374] block nbd0: Attempted send on invalid socket [ 208.758523][ T7374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 208.784683][ T5925] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 209.157977][ T5925] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 209.180350][ T5925] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 209.265012][ T5925] wwan wwan0: port wwan0mbim0 attached [ 209.479410][ T5925] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ba:12:7b:ff:51:89 [ 209.718479][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.725287][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.731602][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.738259][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.744614][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.751270][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.757575][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.764237][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.771950][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.778622][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.785341][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.792038][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.798432][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.805093][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.812169][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.818842][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.834453][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.841167][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.847588][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 209.854267][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 209.956617][ T5966] usb 3-1: USB disconnect, device number 9 [ 210.114904][ T5966] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 211.138888][ T5966] wwan wwan0: port wwan0mbim0 disconnected [ 211.426930][ T7405] block nbd0: Attempted send on invalid socket [ 211.433137][ T7405] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 211.933036][ T7409] block nbd0: Attempted send on invalid socket [ 211.939525][ T7409] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 214.672439][ T7440] block nbd0: Attempted send on invalid socket [ 214.678666][ T7440] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 214.952846][ T7450] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.263313][ T7459] block nbd0: Attempted send on invalid socket [ 215.269686][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 216.215563][ T7475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 216.222114][ T7475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.230114][ T7475] vhci_hcd vhci_hcd.0: Device attached [ 216.254201][ T5966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 216.864188][ T5925] vhci_hcd: vhci_device speed not set [ 216.864224][ T54] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 216.897749][ T5966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.935429][ T5966] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 216.954676][ T5925] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 216.993024][ T5966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.004122][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.054853][ T5966] usb 2-1: Product: syz [ 217.123929][ T5966] usb 2-1: Manufacturer: syz [ 217.136428][ T54] usb 5-1: config 0 has no interfaces? [ 217.150657][ T54] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.160188][ T5966] usb 2-1: SerialNumber: syz [ 217.192543][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.204019][ T5966] cdc_mbim 2-1:1.0: skipping garbage [ 217.225865][ T54] usb 5-1: config 0 descriptor?? [ 217.406366][ T7470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.564747][ T7478] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 217.975549][ T7480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.456091][ T1145] vhci_hcd: stop threads [ 218.600431][ T1145] vhci_hcd: release socket [ 218.612452][ T1145] vhci_hcd: disconnect device [ 218.751756][ T7470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.759566][ T5966] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 218.966705][ T5966] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 218.983465][ T5966] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 218.992503][ T5966] wwan wwan0: port wwan0mbim0 attached [ 219.003623][ T5966] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 66:24:d0:27:02:7c [ 219.222234][ T5911] usb 5-1: USB disconnect, device number 4 [ 219.372873][ C1] wdm_int_callback: 506 callbacks suppressed [ 219.372888][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.385505][ C1] wdm_int_callback: 506 callbacks suppressed [ 219.385516][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.399009][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.405680][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.412517][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.419192][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.427175][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.433843][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.440147][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.446820][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.453392][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.460086][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.466506][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.473172][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.479492][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.486146][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.492478][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.499159][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.509448][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 219.516148][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 219.542867][ T5911] usb 2-1: USB disconnect, device number 4 [ 219.554214][ T7516] block nbd0: Attempted send on invalid socket [ 219.560491][ T7516] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 219.599434][ T7518] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.640463][ T5911] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 219.756296][ T5911] wwan wwan0: port wwan0mbim0 disconnected [ 220.747112][ T7530] block nbd0: Attempted send on invalid socket [ 220.755394][ T7530] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 222.311918][ T7548] block nbd0: Attempted send on invalid socket [ 222.318167][ T7548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 222.366074][ T5925] vhci_hcd: vhci_device speed not set [ 224.631883][ T7585] block nbd0: Attempted send on invalid socket [ 224.638126][ T7585] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 225.747017][ T7602] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.081446][ T7633] block nbd0: Attempted send on invalid socket [ 228.087885][ T7633] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 228.099030][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.425781][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 228.435754][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 228.446070][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.567447][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.628733][ T5925] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 228.641911][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.652538][ T5925] usb 4-1: Product: syz [ 228.657153][ T5925] usb 4-1: Manufacturer: syz [ 228.790135][ T5925] usb 4-1: SerialNumber: syz [ 228.813872][ T5925] usb 4-1: config 0 descriptor?? [ 228.821727][ T5925] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 228.835245][ T5925] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 229.298678][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.315127][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.566511][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.645771][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.718170][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.774347][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.323207][ T7649] block nbd0: Attempted send on invalid socket [ 230.378827][ T7649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 230.519580][ T7659] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.554248][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 232.592945][ T5918] usb 4-1: USB disconnect, device number 10 [ 232.634166][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 232.654760][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.671371][ T5918] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 233.136797][ T5925] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 233.169122][ T5918] ti_usb_3410_5052 4-1:0.0: device disconnected [ 233.179010][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.477443][ T7692] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.521159][ T5925] usb 2-1: config 0 descriptor?? [ 233.711590][ T7694] block nbd0: Attempted send on invalid socket [ 233.718003][ T7694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 234.205482][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 234.212252][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.426250][ T7699] block nbd0: Attempted send on invalid socket [ 234.432446][ T7699] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 234.455524][ T5925] usb 2-1: USB disconnect, device number 5 [ 237.460036][ T7728] block nbd0: Attempted send on invalid socket [ 237.466328][ T7728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 238.283216][ T7741] block nbd0: Attempted send on invalid socket [ 238.296570][ T7741] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 238.968106][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 239.541191][ T7771] block nbd0: Attempted send on invalid socket [ 239.547473][ T7771] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 240.620005][ T7765] block nbd0: Attempted send on invalid socket [ 240.954187][ T7765] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 241.616894][ T7786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 241.623405][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.630884][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 241.794246][ T54] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 241.814188][ T5939] vhci_hcd: vhci_device speed not set [ 241.974128][ T5939] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 242.024336][ T30] audit: type=1400 audit(1756127347.898:189): avc: denied { sys_module } for pid=7776 comm="syz.1.358" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.127848][ T54] usb 1-1: config 0 has no interfaces? [ 242.194155][ T54] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.235171][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.416324][ T7801] block nbd0: Attempted send on invalid socket [ 242.433041][ T7801] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 242.584906][ T54] usb 1-1: config 0 descriptor?? [ 243.285157][ T7789] vhci_hcd: unknown pdu 2 [ 243.296492][ T1165] vhci_hcd: stop threads [ 243.300810][ T1165] vhci_hcd: release socket [ 243.376513][ T5939] vhci_hcd: vhci_device speed not set [ 243.424636][ T1165] vhci_hcd: disconnect device [ 243.444295][ T5939] usb 33-1: device descriptor read/64, error -71 [ 243.729043][ T7806] block nbd0: Attempted send on invalid socket [ 243.735534][ T5939] vhci_hcd: vhci_device speed not set [ 243.740985][ T7806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 244.436063][ T5918] usb 1-1: USB disconnect, device number 2 [ 245.346963][ T7822] block nbd0: Attempted send on invalid socket [ 245.366045][ T7822] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 246.439295][ T7832] block nbd0: Attempted send on invalid socket [ 246.454103][ T7832] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 248.027687][ T7854] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 248.034225][ T7854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 248.041712][ T7854] vhci_hcd vhci_hcd.0: Device attached [ 248.443023][ T5939] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 248.514204][ T54] vhci_hcd: vhci_device speed not set [ 248.713846][ T54] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 248.944112][ T5939] usb 5-1: config 0 has no interfaces? [ 248.950214][ T5939] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.964173][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.144392][ T5939] usb 5-1: config 0 descriptor?? [ 249.796663][ T7857] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 249.826402][ T1165] vhci_hcd: stop threads [ 249.945623][ T1165] vhci_hcd: release socket [ 249.959614][ T7856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.031576][ T1165] vhci_hcd: disconnect device [ 250.058932][ T7872] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 251.040144][ T7885] block nbd0: Attempted send on invalid socket [ 251.046501][ T5911] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.054107][ T7885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 251.211947][ T5966] usb 5-1: USB disconnect, device number 5 [ 251.342385][ T5911] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.442479][ T7888] block nbd0: Attempted send on invalid socket [ 251.654161][ T5911] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.691344][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.700911][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 251.712024][ T7888] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 251.794269][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.298834][ T7896] block nbd0: Attempted send on invalid socket [ 252.309192][ T7896] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 252.349907][ T5911] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.404219][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.424124][ T5911] usb 1-1: Product: syz [ 252.428375][ T5911] usb 1-1: Manufacturer: syz [ 252.438080][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 252.443310][ T5911] cdc_wdm 1-1:1.0: skipping garbage [ 252.455860][ T5911] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 252.464233][ T5911] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.883254][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 253.964382][ T7917] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.113778][ T54] vhci_hcd: vhci_device speed not set [ 254.214750][ T5939] usb 1-1: USB disconnect, device number 3 [ 255.619482][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.627167][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.397160][ T7936] block nbd0: Attempted send on invalid socket [ 256.414585][ T7936] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 256.740268][ T7943] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.317462][ T7959] block nbd0: Attempted send on invalid socket [ 258.323630][ T7959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 258.816813][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.051729][ T5925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.063745][ T5925] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.104399][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.114723][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.142162][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.155057][ T5925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.166068][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.181365][ T5925] usb 5-1: Product: syz [ 259.190106][ T5925] usb 5-1: Manufacturer: syz [ 260.191897][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 260.197449][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 260.243911][ T5925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 260.250642][ T5925] cdc_wdm 5-1:1.0: Unknown control protocol [ 260.706557][ T7983] block nbd0: Attempted send on invalid socket [ 260.712796][ T7983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 260.920556][ T7986] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.793237][ T5918] usb 5-1: USB disconnect, device number 6 [ 263.113038][ T8001] block nbd0: Attempted send on invalid socket [ 263.119924][ T8001] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 265.546958][ T8029] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 265.604161][ T5966] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 266.119383][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 266.130659][ T5966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 266.141635][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.151952][ T5966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.744213][ T5966] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 266.753394][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.771766][ T5966] usb 3-1: Product: syz [ 266.776530][ T5966] usb 3-1: Manufacturer: syz [ 266.781109][ T5966] usb 3-1: SerialNumber: syz [ 266.797328][ T5966] usb 3-1: config 0 descriptor?? [ 266.876256][ T5966] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 266.924281][ T5966] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 267.079665][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.109092][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.396039][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.430741][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.444519][ T8050] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.509405][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.518466][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.565116][ T5918] usb 3-1: USB disconnect, device number 10 [ 268.603327][ T5918] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 268.695376][ T5918] ti_usb_3410_5052 3-1:0.0: device disconnected [ 268.752247][ T8064] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 270.619954][ T8077] block nbd0: Attempted send on invalid socket [ 270.626358][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 274.606455][ T5939] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.775695][ T8119] block nbd0: Attempted send on invalid socket [ 274.781919][ T8119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 274.909793][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 274.924224][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 274.960384][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.974542][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 274.988086][ T5939] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 274.998211][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.006419][ T5939] usb 5-1: Product: syz [ 275.010605][ T5939] usb 5-1: Manufacturer: syz [ 275.120128][ T5939] usb 5-1: SerialNumber: syz [ 275.136774][ T5939] usb 5-1: config 0 descriptor?? [ 275.239496][ T5939] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 275.448585][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.484932][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.498769][ T5939] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 275.752261][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.764908][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.684749][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.766876][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.531383][ T8163] block nbd0: Attempted send on invalid socket [ 277.538309][ T8163] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 278.214179][ T5918] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.286234][ T5911] usb 5-1: USB disconnect, device number 7 [ 278.321462][ T5911] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 278.356424][ T8174] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.418701][ T5911] ti_usb_3410_5052 5-1:0.0: device disconnected [ 278.482690][ T8176] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 278.504278][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 278.515642][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.527298][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 278.755504][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.855466][ T5918] usb 2-1: config 0 descriptor?? [ 279.116507][ T8186] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.244390][ T30] audit: type=1400 audit(1756127385.118:190): avc: denied { write } for pid=8188 comm="syz.4.441" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.327493][ T5939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 279.567182][ T30] audit: type=1400 audit(1756127385.118:191): avc: denied { open } for pid=8188 comm="syz.4.441" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.589735][ T30] audit: type=1400 audit(1756127385.128:192): avc: denied { read append } for pid=8188 comm="syz.4.441" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.610782][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.798329][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 279.822186][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.846864][ T5918] usb 2-1: USB disconnect, device number 6 [ 279.877218][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.892688][ T5939] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 279.908981][ T5939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.919950][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.928449][ T5939] usb 1-1: Product: syz [ 279.932789][ T5939] usb 1-1: Manufacturer: syz [ 279.938796][ T5939] usb 1-1: SerialNumber: syz [ 279.960420][ T5939] cdc_mbim 1-1:1.0: skipping garbage [ 280.175191][ T8185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.540030][ T8198] block nbd0: Attempted send on invalid socket [ 280.546365][ T8198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 280.804487][ T8185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.812069][ T5939] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 281.015731][ T8208] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.194527][ T5939] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 281.251050][ T5939] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 281.259462][ T5939] wwan wwan0: port wwan0mbim0 attached [ 281.282657][ T30] audit: type=1400 audit(1756127387.168:193): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.283354][ T5939] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 82:80:58:b6:33:1d [ 281.543852][ T5939] usb 1-1: USB disconnect, device number 4 [ 281.726708][ T5939] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 281.840070][ T8220] block nbd0: Attempted send on invalid socket [ 281.861500][ T8220] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 281.909745][ T5939] wwan wwan0: port wwan0mbim0 disconnected [ 282.988686][ T8219] block nbd0: Attempted send on invalid socket [ 283.178094][ T8219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 283.238962][ T8244] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.162020][ T8258] block nbd0: Attempted send on invalid socket [ 284.175081][ T8258] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 285.576895][ T8276] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.509604][ T8274] block nbd0: Attempted send on invalid socket [ 286.516196][ T8274] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 287.208187][ T8292] block nbd0: Attempted send on invalid socket [ 287.214421][ T8292] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 287.559915][ T5918] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.774137][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 287.820535][ T8311] block nbd0: Attempted send on invalid socket [ 287.826804][ T8311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 287.898612][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.982511][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 288.014390][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.145018][ T5918] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 288.244177][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.277483][ T5918] usb 1-1: Product: syz [ 288.281679][ T5918] usb 1-1: Manufacturer: syz [ 288.300464][ T5918] usb 1-1: SerialNumber: syz [ 288.318112][ T5918] usb 1-1: config 0 descriptor?? [ 288.576720][ T8321] block nbd0: Attempted send on invalid socket [ 288.582950][ T8321] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 288.705820][ T5918] appledisplay 1-1:0.0: Could not find int-in endpoint [ 288.720761][ T5918] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 289.724149][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 289.733887][ T8332] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 290.170406][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 290.180161][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 290.190018][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.200217][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.223877][ T9] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 290.251410][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.332370][ T5911] usb 1-1: USB disconnect, device number 5 [ 290.358518][ T8338] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.472912][ T9] usb 5-1: Product: syz [ 290.488816][ T9] usb 5-1: Manufacturer: syz [ 290.531268][ T9] usb 5-1: SerialNumber: syz [ 291.565512][ T8345] block nbd0: Attempted send on invalid socket [ 291.571735][ T8345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 291.691263][ T9] usb 5-1: config 0 descriptor?? [ 291.765089][ T9] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 291.840340][ T9] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 291.931581][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.976810][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.082226][ T8355] block nbd0: Attempted send on invalid socket [ 292.088472][ T8355] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 292.545433][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.568232][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.578434][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.587075][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.633338][ T8362] block nbd0: Attempted send on invalid socket [ 292.925073][ T8362] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 292.934871][ T8365] block nbd0: Attempted send on invalid socket [ 292.941173][ T8365] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 292.945541][ T8364] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 294.628466][ T9] usb 5-1: USB disconnect, device number 8 [ 294.666469][ T9] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 294.678169][ T9] ti_usb_3410_5052 5-1:0.0: device disconnected [ 296.748906][ T8402] block nbd0: Attempted send on invalid socket [ 296.755284][ T8402] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 297.040213][ T8412] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 297.917010][ T8426] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.136534][ T8431] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.201647][ T8430] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.474112][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 298.624155][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 298.630559][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 298.639211][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.659805][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.699978][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.724275][ T5966] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 298.763490][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.781519][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.798741][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.897411][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 299.638605][ T5966] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 299.648360][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.659715][ T5966] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.662314][ T9] usb 3-1: usb_control_msg returned -32 [ 299.682503][ T9] usbtmc 3-1:16.0: can't read capabilities [ 299.684761][ T5966] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 299.690885][ T8443] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.697551][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.714224][ T5966] usb 5-1: Product: syz [ 299.718432][ T5966] usb 5-1: Manufacturer: syz [ 299.728946][ T5966] usb 5-1: SerialNumber: syz [ 299.737704][ T5966] usb 5-1: config 0 descriptor?? [ 299.746859][ T5966] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 299.765787][ T5966] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 299.884195][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 300.015475][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.054633][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.078483][ T8435] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 300.085287][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 300.091150][ T5911] usb 3-1: USB disconnect, device number 11 [ 300.107802][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.120040][ T5925] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 300.137526][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.152737][ T5925] usb 1-1: config 0 descriptor?? [ 300.243332][ T8455] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.342872][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.351711][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.362339][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.377056][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.059471][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 301.065516][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 301.082786][ T5925] usb 1-1: USB disconnect, device number 6 [ 301.263406][ T8463] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 301.449604][ T5925] usb 5-1: USB disconnect, device number 9 [ 301.471427][ T5925] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 301.635452][ T5925] ti_usb_3410_5052 5-1:0.0: device disconnected [ 301.812403][ T8471] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 302.980338][ T8480] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.371440][ T8492] block nbd0: Attempted send on invalid socket [ 303.377696][ T8492] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 303.404262][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 303.645929][ T5925] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.656799][ T5925] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 303.666515][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.684467][ T5925] usb 2-1: Product: syz [ 303.698961][ T5925] usb 2-1: Manufacturer: syz [ 303.703558][ T5925] usb 2-1: SerialNumber: syz [ 303.718734][ T5925] usb 2-1: config 0 descriptor?? [ 304.901741][ T8507] block nbd0: Attempted send on invalid socket [ 304.908063][ T8507] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 305.310024][ T8505] block nbd0: Attempted send on invalid socket [ 305.437724][ T8505] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 305.444557][ T8514] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 306.386053][ T9] usb 2-1: USB disconnect, device number 7 [ 306.567817][ T8523] block nbd0: Attempted send on invalid socket [ 306.574089][ T8523] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 306.621080][ T8525] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 307.275735][ T8535] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.664251][ T8550] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.740126][ T5966] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 308.014240][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 308.020601][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.031835][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 308.053533][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 308.087539][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 308.113440][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.138667][ T5966] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 308.148392][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.157389][ T5966] usb 2-1: Product: syz [ 308.191021][ T5966] usb 2-1: Manufacturer: syz [ 308.200535][ T5966] usb 2-1: SerialNumber: syz [ 308.218419][ T5966] usb 2-1: config 0 descriptor?? [ 308.461236][ T5966] appledisplay 2-1:0.0: Error while getting initial brightness: -32 [ 308.492407][ T5966] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -32 [ 308.633000][ T5966] usb 2-1: USB disconnect, device number 8 [ 308.785617][ T8560] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 309.701563][ T8567] block nbd0: Attempted send on invalid socket [ 309.714203][ T8567] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 310.313741][ T8569] block nbd0: Attempted send on invalid socket [ 310.320054][ T8569] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 311.098795][ T8584] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 311.543570][ T8588] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.820469][ T8593] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 312.219347][ T8595] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 312.792719][ T8607] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 313.802652][ T8622] block nbd0: Attempted send on invalid socket [ 313.809511][ T8622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 314.519624][ T8631] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.849711][ T8634] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 315.989395][ T8643] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 316.414297][ T8651] block nbd0: Attempted send on invalid socket [ 316.420716][ T8651] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 316.724323][ T8657] block nbd0: Attempted send on invalid socket [ 316.779516][ T8657] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 316.873279][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.880704][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.986395][ T5966] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 317.225084][ T8664] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.415027][ T5966] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.429927][ T5966] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.458360][ T5966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.504974][ T5966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.524325][ T5966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.546422][ T5966] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.555989][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.563965][ T5966] usb 2-1: Product: syz [ 317.568954][ T5966] usb 2-1: Manufacturer: syz [ 317.600104][ T5966] cdc_wdm 2-1:1.0: skipping garbage [ 317.615977][ T5966] cdc_wdm 2-1:1.0: skipping garbage [ 317.691996][ T5966] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 317.714404][ T5966] cdc_wdm 2-1:1.0: Unknown control protocol [ 318.020137][ T5966] usb 2-1: USB disconnect, device number 9 [ 318.598446][ T8680] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 318.832881][ T8686] block nbd0: Attempted send on invalid socket [ 318.839187][ T8686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 319.569431][ T8694] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.024349][ T8711] block nbd0: Attempted send on invalid socket [ 320.030569][ T8711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 320.050242][ T8709] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.290922][ T8705] block nbd0: Attempted send on invalid socket [ 320.334087][ T8705] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 320.832758][ T8718] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 320.882680][ T8722] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.910829][ T8721] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 321.902827][ T8736] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.265502][ T8744] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.959470][ T8754] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.545969][ T8761] block nbd0: Attempted send on invalid socket [ 323.552157][ T8761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 327.864762][ T8801] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 328.388156][ T8811] block nbd0: Attempted send on invalid socket [ 328.394403][ T8811] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 328.484483][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 328.863381][ T8813] bridge0: entered promiscuous mode [ 328.870123][ T8813] macsec1: entered promiscuous mode [ 330.010911][ T8824] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.425943][ T8833] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.529305][ T8840] block nbd0: Attempted send on invalid socket [ 331.535587][ T8840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 332.247853][ T8850] block nbd0: Attempted send on invalid socket [ 332.254117][ T8850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 332.969202][ T8855] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 333.019570][ T8857] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 333.805699][ T8871] block nbd0: Attempted send on invalid socket [ 333.811907][ T8871] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 334.165344][ T8878] block nbd0: Attempted send on invalid socket [ 334.171593][ T8878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 335.729839][ T8888] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 336.315209][ T8898] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.161703][ T8920] block nbd0: Attempted send on invalid socket [ 338.167957][ T8920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 338.394159][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 338.564528][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 338.594155][ T5911] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 338.602583][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.643321][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.794105][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.835878][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.960096][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.960517][ T8925] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 338.969717][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.191991][ T5911] usb 3-1: usb_control_msg returned -32 [ 339.197974][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 339.251138][ T8938] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 339.365023][ T8939] block nbd0: Attempted send on invalid socket [ 339.371243][ T8939] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 339.598327][ T8941] block nbd0: Attempted send on invalid socket [ 339.604557][ T8941] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 339.659136][ T5918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 339.877000][ T5939] usb 3-1: USB disconnect, device number 12 [ 339.883485][ T8943] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 339.929089][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.964435][ T5918] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 340.141740][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.153184][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.161774][ T5918] usb 4-1: Product: syz [ 340.294117][ T5918] usb 4-1: Manufacturer: syz [ 340.305210][ T5918] usb 4-1: SerialNumber: syz [ 340.334463][ T5918] cdc_mbim 4-1:1.0: skipping garbage [ 340.540086][ T8934] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 340.837679][ T8950] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 341.069711][ T8957] block nbd0: Attempted send on invalid socket [ 341.075959][ T8957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 341.174221][ T5918] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 341.183998][ T5918] cdc_mbim 4-1:1.0: bind() failure [ 341.200618][ T5918] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 341.215527][ T5918] cdc_ncm 4-1:1.1: bind() failure [ 341.716679][ T8961] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.214383][ T5918] usb 4-1: USB disconnect, device number 11 [ 342.637922][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 342.839302][ T8981] block nbd0: Attempted send on invalid socket [ 342.845936][ T8981] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 344.080591][ T8997] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.187737][ T8998] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 344.769858][ T9008] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 345.193652][ T9012] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 345.382972][ T9018] block nbd0: Attempted send on invalid socket [ 345.399860][ T9018] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 345.594403][ T9017] block nbd0: Attempted send on invalid socket [ 345.600708][ T9017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 348.287130][ T9055] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.614443][ T5968] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 349.762979][ T9073] block nbd0: Attempted send on invalid socket [ 349.769351][ T9073] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 349.914216][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 349.924108][ T5968] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 349.938769][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.958878][ T5968] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 349.982262][ T9075] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 350.298633][ T5968] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 350.502189][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.526536][ T5968] usb 5-1: Product: syz [ 350.530831][ T5968] usb 5-1: Manufacturer: syz [ 350.535638][ T5968] usb 5-1: SerialNumber: syz [ 350.588785][ T5968] usb 5-1: config 0 descriptor?? [ 350.620725][ T5968] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 350.683176][ T5968] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 350.725898][ T9084] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 350.921814][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.954728][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.737019][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.756588][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.029329][ T9101] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.270677][ T5966] usb 5-1: USB disconnect, device number 10 [ 353.315098][ T5966] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 353.326910][ T5966] ti_usb_3410_5052 5-1:0.0: device disconnected [ 353.892651][ T9115] block nbd0: Attempted send on invalid socket [ 353.899025][ T9115] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 354.051768][ T9122] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.329049][ T9124] block nbd0: Attempted send on invalid socket [ 354.335336][ T9124] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 355.020929][ T9130] block nbd0: Attempted send on invalid socket [ 355.027358][ T9130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 357.123388][ T9152] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 357.195584][ T9157] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.737951][ T9173] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.114929][ T9176] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 360.323517][ T9194] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 360.450285][ T9197] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 361.767277][ T9211] block nbd0: Attempted send on invalid socket [ 361.773489][ T9211] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 363.128764][ T9232] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.238507][ T9224] block nbd0: Attempted send on invalid socket [ 363.244764][ T9224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 364.061509][ T9225] block nbd0: Attempted send on invalid socket [ 364.067965][ T9225] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 365.090870][ T9248] block nbd0: Attempted send on invalid socket [ 365.097156][ T9248] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 366.539002][ T9267] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.318208][ T9276] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 368.259298][ T9292] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 369.332097][ T9309] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 369.597246][ T9312] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 370.333597][ T9324] block nbd0: Attempted send on invalid socket [ 370.339910][ T9324] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 370.698950][ T9328] block nbd0: Attempted send on invalid socket [ 370.705948][ T9328] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 371.351474][ T9339] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.833241][ T9344] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.095221][ T9347] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 372.765400][ T9354] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 373.467202][ T9366] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.137455][ T9375] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.160317][ T9376] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 374.511476][ T9382] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.974875][ T9387] block nbd0: Attempted send on invalid socket [ 374.981051][ T9387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 375.622954][ T9394] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 376.129434][ T9410] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.238493][ T9411] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.852458][ T9434] block nbd0: Attempted send on invalid socket [ 377.858857][ T9434] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 378.307631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.313967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.466979][ T9442] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 378.581185][ T5966] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 378.775538][ T5966] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.894132][ T5966] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 378.936411][ T9452] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 378.951147][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.530410][ T9460] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.614121][ T5966] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.680139][ T5966] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.689363][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.697409][ T5966] usb 5-1: Product: syz [ 379.701578][ T5966] usb 5-1: Manufacturer: syz [ 379.893081][ T5966] cdc_wdm 5-1:1.0: skipping garbage [ 379.904449][ T5966] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 380.055280][ T5966] usb 5-1: USB disconnect, device number 11 [ 380.802677][ T9481] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.586065][ T9486] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 382.060005][ T9498] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.338399][ T9522] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.400704][ T9523] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 383.992663][ T9531] block nbd0: Attempted send on invalid socket [ 383.999543][ T9531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 384.274927][ T9542] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.617346][ T9538] block nbd0: Attempted send on invalid socket [ 384.623553][ T9538] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 385.454812][ T30] audit: type=1400 audit(1756127491.322:194): avc: denied { create } for pid=9554 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.595937][ T9566] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.634910][ T30] audit: type=1400 audit(1756127491.322:195): avc: denied { bind } for pid=9554 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.764279][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 385.815128][ T30] audit: type=1400 audit(1756127491.322:196): avc: denied { setopt } for pid=9554 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.834428][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.480402][ T9579] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.344887][ T9598] block nbd0: Attempted send on invalid socket [ 388.351074][ T9598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 388.524527][ T9597] block nbd0: Attempted send on invalid socket [ 388.587635][ T9597] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 389.477331][ T9613] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 389.563312][ T9614] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.231566][ T9623] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 390.442071][ T9630] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.679694][ T9631] block nbd0: Attempted send on invalid socket [ 390.687088][ T9631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 391.108698][ T9640] block nbd0: Attempted send on invalid socket [ 391.282871][ T9640] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 391.607082][ T9648] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.143618][ T9659] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.915764][ T9666] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.852217][ T9681] block nbd0: Attempted send on invalid socket [ 393.858477][ T9681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 394.203474][ T9680] block nbd0: Attempted send on invalid socket [ 394.209800][ T9680] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 394.456975][ T9688] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.896770][ T9699] block nbd0: Attempted send on invalid socket [ 394.903022][ T9699] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 397.535991][ T9724] block nbd0: Attempted send on invalid socket [ 397.542191][ T9724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 398.745530][ T9736] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.923480][ T9738] block nbd0: Attempted send on invalid socket [ 398.930068][ T9738] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 400.918274][ T9761] block nbd0: Attempted send on invalid socket [ 401.060887][ T9761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 402.884092][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 403.094103][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 403.117881][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.138923][ T5925] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 403.730140][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.804618][ T5925] usb 2-1: config 0 descriptor?? [ 404.480963][ T5925] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 404.966903][ T5966] usb 2-1: USB disconnect, device number 10 [ 406.978907][ T9823] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.364424][ T54] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 408.964586][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 408.984192][ T54] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 409.001188][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.013503][ T54] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 409.026948][ T54] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 409.053637][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.064468][ T54] usb 1-1: Product: syz [ 409.070481][ T54] usb 1-1: Manufacturer: syz [ 409.077610][ T54] usb 1-1: SerialNumber: syz [ 409.093050][ T54] usb 1-1: config 0 descriptor?? [ 409.102892][ T54] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 409.126651][ T54] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 409.338697][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.354710][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.104823][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.114696][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.167787][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.198271][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.633415][ T9862] block nbd0: Attempted send on invalid socket [ 410.639664][ T9862] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 411.443240][ T9874] ieee802154 phy0 wpan0: encryption failed: -22 [ 412.120639][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 412.294080][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 412.300855][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.312199][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 412.326915][ T54] usb 1-1: USB disconnect, device number 7 [ 412.335006][ T54] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 412.353025][ T54] ti_usb_3410_5052 1-1:0.0: device disconnected [ 412.584097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.637311][ T9] usb 2-1: config 0 descriptor?? [ 413.324267][ T9] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 413.520750][ C0] ================================================================== [ 413.528841][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0xf94/0x1030 [ 413.536390][ C0] Read of size 1 at addr ffff88806f5e7fff by task syz.2.793/9890 [ 413.544104][ C0] [ 413.546429][ C0] CPU: 0 UID: 0 PID: 9890 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 413.546446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.546454][ C0] Call Trace: [ 413.546458][ C0] [ 413.546464][ C0] dump_stack_lvl+0x116/0x1f0 [ 413.546481][ C0] print_report+0xcd/0x630 [ 413.546496][ C0] ? __virt_addr_valid+0x81/0x610 [ 413.546512][ C0] ? __phys_addr+0xe8/0x180 [ 413.546526][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 413.546541][ C0] kasan_report+0xe0/0x110 [ 413.546553][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 413.546568][ C0] mcp2221_raw_event+0xf94/0x1030 [ 413.546583][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 413.546595][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 413.546606][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 413.546620][ C0] hid_irq_in+0x35e/0x870 [ 413.546636][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 413.546653][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 413.546669][ C0] dummy_timer+0x1814/0x3a30 [ 413.546688][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 413.546701][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 413.546711][ C0] ? mark_held_locks+0x49/0x80 [ 413.546727][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 413.546738][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 413.546748][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 413.546762][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 413.546774][ C0] ? read_tsc+0x9/0x20 [ 413.546789][ C0] hrtimer_run_softirq+0x17d/0x350 [ 413.546802][ C0] handle_softirqs+0x216/0x8e0 [ 413.546817][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 413.546831][ C0] __irq_exit_rcu+0x109/0x170 [ 413.546843][ C0] irq_exit_rcu+0x9/0x30 [ 413.546855][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 413.546866][ C0] [ 413.546869][ C0] [ 413.546873][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.546885][ C0] RIP: 0010:get_vma_policy+0x185/0x3c0 [ 413.546899][ C0] Code: 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 09 84 d2 74 05 e8 ee 0c 03 00 49 c1 e4 05 31 ff 49 81 c4 20 ba e7 9a 45 0f b7 7c 24 04 <44> 89 fe e8 a3 ac 9c ff 66 45 85 ff 0f 85 9b 01 00 00 49 c7 c4 20 [ 413.546910][ C0] RSP: 0018:ffffc9001d1bf7c8 EFLAGS: 00000282 [ 413.546919][ C0] RAX: 0000000000000005 RBX: ffff888035b62500 RCX: ffffc9000ef70000 [ 413.546927][ C0] RDX: 0000000000000000 RSI: ffffffff821eda0c RDI: 0000000000000000 [ 413.546933][ C0] RBP: ffffc9001d1bf820 R08: 0000000000000005 R09: 00000000ffffffff [ 413.546940][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9ae7ba20 [ 413.546946][ C0] R13: 0000000000000000 R14: 0000200000446000 R15: 0000000000000001 [ 413.546954][ C0] ? get_vma_policy+0x12c/0x3c0 [ 413.546968][ C0] ? get_vma_policy+0x12c/0x3c0 [ 413.546981][ C0] vma_alloc_folio_noprof+0xcf/0x1e0 [ 413.546995][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 413.547010][ C0] do_pte_missing+0x2230/0x3ba0 [ 413.547027][ C0] ? find_held_lock+0x2b/0x80 [ 413.547041][ C0] __handle_mm_fault+0x152a/0x2a50 [ 413.547058][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 413.547074][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 413.547087][ C0] ? find_held_lock+0x2b/0x80 [ 413.547101][ C0] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 413.547117][ C0] handle_mm_fault+0x589/0xd10 [ 413.547133][ C0] __get_user_pages+0x551/0x34a0 [ 413.547149][ C0] ? preempt_schedule_common+0x44/0xc0 [ 413.547160][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 413.547175][ C0] populate_vma_page_range+0x267/0x3f0 [ 413.547190][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 413.547204][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 413.547218][ C0] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 413.547229][ C0] __mm_populate+0x1d8/0x380 [ 413.547243][ C0] ? __pfx___mm_populate+0x10/0x10 [ 413.547258][ C0] ? up_write+0x1b2/0x520 [ 413.547268][ C0] do_mlock+0x448/0x810 [ 413.547279][ C0] ? __pfx_do_mlock+0x10/0x10 [ 413.547288][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 413.547304][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 413.547320][ C0] ? xfd_validate_state+0x61/0x180 [ 413.547339][ C0] __x64_sys_mlock+0x59/0x80 [ 413.547349][ C0] do_syscall_64+0xcd/0x4c0 [ 413.547361][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.547372][ C0] RIP: 0033:0x7fc59e98ebe9 [ 413.547381][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.547392][ C0] RSP: 002b:00007fc59f83c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 413.547401][ C0] RAX: ffffffffffffffda RBX: 00007fc59ebb6180 RCX: 00007fc59e98ebe9 [ 413.547408][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 413.547414][ C0] RBP: 00007fc59ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 413.547421][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.547435][ C0] R13: 00007fc59ebb6218 R14: 00007fc59ebb6180 R15: 00007ffe2ccbda98 [ 413.547446][ C0] [ 413.547450][ C0] [ 414.028958][ C0] The buggy address belongs to the physical page: [ 414.035338][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f2364935 pfn:0x6f5e7 [ 414.044771][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 414.051854][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 414.060427][ C0] raw: 00000007f2364935 0000000000000000 00000000ffffffff 0000000000000000 [ 414.068984][ C0] page dumped because: kasan: bad access detected [ 414.075387][ C0] page_owner tracks the page as freed [ 414.080727][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7687, tgid 7671 (syz.4.338), ts 233267490601, free_ts 258316792268 [ 414.101969][ C0] post_alloc_hook+0x1c0/0x230 [ 414.106723][ C0] get_page_from_freelist+0x132b/0x38e0 [ 414.112245][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 414.118137][ C0] alloc_pages_mpol+0x1fb/0x550 [ 414.122963][ C0] new_slab+0x247/0x330 [ 414.127094][ C0] ___slab_alloc+0xcf2/0x1740 [ 414.131745][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 414.137107][ C0] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 414.142891][ C0] kmalloc_reserve+0x18b/0x2c0 [ 414.147650][ C0] __alloc_skb+0x166/0x380 [ 414.152049][ C0] tcp_stream_alloc_skb+0x34/0x570 [ 414.157141][ C0] tcp_sendmsg_locked+0x12d0/0x42a0 [ 414.162496][ C0] tcp_sendmsg+0x2e/0x50 [ 414.166723][ C0] inet_sendmsg+0xb9/0x140 [ 414.171131][ C0] __sys_sendto+0x43c/0x520 [ 414.175615][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 414.180352][ C0] page last free pid 7959 tgid 7955 stack trace: [ 414.186654][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 414.191850][ C0] __put_partials+0x165/0x1c0 [ 414.196502][ C0] qlist_free_all+0x4d/0x120 [ 414.201065][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 414.206504][ C0] __kasan_slab_alloc+0x69/0x90 [ 414.211414][ C0] __kmalloc_noprof+0x1d4/0x510 [ 414.216241][ C0] kernfs_fop_write_iter+0x237/0x510 [ 414.221514][ C0] vfs_write+0x7d0/0x11d0 [ 414.225829][ C0] ksys_write+0x12a/0x250 [ 414.230140][ C0] do_syscall_64+0xcd/0x4c0 [ 414.234632][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.240503][ C0] [ 414.242808][ C0] Memory state around the buggy address: [ 414.248433][ C0] ffff88806f5e7e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 414.256469][ C0] ffff88806f5e7f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 414.264514][ C0] >ffff88806f5e7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 414.272560][ C0] ^ [ 414.280513][ C0] ffff88806f5e8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.288546][ C0] ffff88806f5e8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.296581][ C0] ================================================================== [ 414.304620][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 414.311802][ C0] CPU: 0 UID: 0 PID: 9890 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 414.320991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.331030][ C0] Call Trace: [ 414.334290][ C0] [ 414.337135][ C0] dump_stack_lvl+0x3d/0x1f0 [ 414.341702][ C0] vpanic+0x6e8/0x7a0 [ 414.345677][ C0] ? __pfx_vpanic+0x10/0x10 [ 414.350155][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 414.355154][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 414.360337][ C0] panic+0xca/0xd0 [ 414.364041][ C0] ? __pfx_panic+0x10/0x10 [ 414.368471][ C0] ? end_report+0x4c/0x170 [ 414.372862][ C0] ? rcu_is_watching+0x12/0xc0 [ 414.377600][ C0] ? lock_release+0x201/0x2f0 [ 414.382266][ C0] check_panic_on_warn+0xab/0xb0 [ 414.387177][ C0] end_report+0x107/0x170 [ 414.391479][ C0] kasan_report+0xee/0x110 [ 414.395867][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 414.401052][ C0] mcp2221_raw_event+0xf94/0x1030 [ 414.406069][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.411857][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 414.417902][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 414.423343][ C0] hid_irq_in+0x35e/0x870 [ 414.427665][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 414.433031][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 414.438219][ C0] dummy_timer+0x1814/0x3a30 [ 414.442807][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 414.447730][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 414.452641][ C0] ? mark_held_locks+0x49/0x80 [ 414.457384][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.463166][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 414.468076][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 414.473260][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 414.478959][ C0] ? read_tsc+0x9/0x20 [ 414.483006][ C0] hrtimer_run_softirq+0x17d/0x350 [ 414.488091][ C0] handle_softirqs+0x216/0x8e0 [ 414.492849][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 414.498140][ C0] __irq_exit_rcu+0x109/0x170 [ 414.502796][ C0] irq_exit_rcu+0x9/0x30 [ 414.507011][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 414.512619][ C0] [ 414.515522][ C0] [ 414.518439][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.524392][ C0] RIP: 0010:get_vma_policy+0x185/0x3c0 [ 414.529915][ C0] Code: 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 09 84 d2 74 05 e8 ee 0c 03 00 49 c1 e4 05 31 ff 49 81 c4 20 ba e7 9a 45 0f b7 7c 24 04 <44> 89 fe e8 a3 ac 9c ff 66 45 85 ff 0f 85 9b 01 00 00 49 c7 c4 20 [ 414.549493][ C0] RSP: 0018:ffffc9001d1bf7c8 EFLAGS: 00000282 [ 414.555552][ C0] RAX: 0000000000000005 RBX: ffff888035b62500 RCX: ffffc9000ef70000 [ 414.563493][ C0] RDX: 0000000000000000 RSI: ffffffff821eda0c RDI: 0000000000000000 [ 414.571443][ C0] RBP: ffffc9001d1bf820 R08: 0000000000000005 R09: 00000000ffffffff [ 414.579402][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9ae7ba20 [ 414.587349][ C0] R13: 0000000000000000 R14: 0000200000446000 R15: 0000000000000001 [ 414.595297][ C0] ? get_vma_policy+0x12c/0x3c0 [ 414.600131][ C0] ? get_vma_policy+0x12c/0x3c0 [ 414.604955][ C0] vma_alloc_folio_noprof+0xcf/0x1e0 [ 414.610218][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 414.616103][ C0] do_pte_missing+0x2230/0x3ba0 [ 414.620938][ C0] ? find_held_lock+0x2b/0x80 [ 414.625617][ C0] __handle_mm_fault+0x152a/0x2a50 [ 414.630707][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 414.636142][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 414.641572][ C0] ? find_held_lock+0x2b/0x80 [ 414.646223][ C0] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 414.652265][ C0] handle_mm_fault+0x589/0xd10 [ 414.657019][ C0] __get_user_pages+0x551/0x34a0 [ 414.661933][ C0] ? preempt_schedule_common+0x44/0xc0 [ 414.667362][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 414.672713][ C0] populate_vma_page_range+0x267/0x3f0 [ 414.678155][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 414.684125][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 414.689904][ C0] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 414.695603][ C0] __mm_populate+0x1d8/0x380 [ 414.700175][ C0] ? __pfx___mm_populate+0x10/0x10 [ 414.705267][ C0] ? up_write+0x1b2/0x520 [ 414.709566][ C0] do_mlock+0x448/0x810 [ 414.713689][ C0] ? __pfx_do_mlock+0x10/0x10 [ 414.718343][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 414.723269][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 414.728202][ C0] ? xfd_validate_state+0x61/0x180 [ 414.733309][ C0] __x64_sys_mlock+0x59/0x80 [ 414.737883][ C0] do_syscall_64+0xcd/0x4c0 [ 414.742368][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.748248][ C0] RIP: 0033:0x7fc59e98ebe9 [ 414.752633][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.772212][ C0] RSP: 002b:00007fc59f83c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 414.780610][ C0] RAX: ffffffffffffffda RBX: 00007fc59ebb6180 RCX: 00007fc59e98ebe9 [ 414.788554][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 414.796593][ C0] RBP: 00007fc59ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 414.804545][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.812493][ C0] R13: 00007fc59ebb6218 R14: 00007fc59ebb6180 R15: 00007ffe2ccbda98 [ 414.820436][ C0] [ 414.823637][ C0] Kernel Offset: disabled [ 414.827931][ C0] Rebooting in 86400 seconds..