last executing test programs: 9m17.857684367s ago: executing program 32 (id=867): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x20008844) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000240)='nolazytime\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0x3}]}) write$ppp(0xffffffffffffffff, &(0x7f00000001c0)="1627", 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m25.304779055s ago: executing program 3 (id=1177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m23.543599848s ago: executing program 3 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x3, 0x8, 0x3, 0x3, 0x4}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_crash_size', 0x12c00, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x10c, 0x15, 0xa, 0x1300, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "1b0a047b5470998dd996f1f9a4c2dc8287ceb6d35325b7917e8fc8cc3abfbd6d5ae9cc0fd8ed37eda3260cf4ba75e9ac827248d653ae466346e0550ac3b1d002086c0a22b6a5e46f076257d11c794cf2c5922301a0d7e1d5355c1c702cb727338238cdfe48c7a10330cad6496b902c1ba9ddefd1f9a9a12d0d9d3af446f65820945fb73036faccac7230b419349f0408d98a8214bd60d4d39e478772e33604fa3395acf39184ce682bd60a4aea630a06fdc428763f7bbb75334704"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x60048800}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m22.542462178s ago: executing program 3 (id=1186): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000) syz_usb_disconnect(r0) 7m16.544631725s ago: executing program 3 (id=1211): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xa00) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) 7m16.202886188s ago: executing program 3 (id=1215): mq_open(0x0, 0x40, 0x142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 7m16.08517948s ago: executing program 3 (id=1217): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000002900000004000000d237"], 0x18}, 0xc4) 7m2.034962918s ago: executing program 5 (id=1271): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 7m1.393213868s ago: executing program 5 (id=1272): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="400100001000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e00003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000000000000002000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/199], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7m0.994322475s ago: executing program 33 (id=1217): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000002900000004000000d237"], 0x18}, 0xc4) 7m0.986000874s ago: executing program 0 (id=1276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 7m0.289461509s ago: executing program 0 (id=1279): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10000000000a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x1801, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x0) 6m59.596487791s ago: executing program 5 (id=1281): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/67, 0x43}, {0x0}], 0x2, 0x0, 0x10) 6m59.291050371s ago: executing program 0 (id=1282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) 6m58.340665206s ago: executing program 0 (id=1285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0xaaaaaaaaaaaab65, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m57.590852771s ago: executing program 0 (id=1287): mq_open(0x0, 0x40, 0x142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m57.383902429s ago: executing program 0 (id=1289): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b3438064c77e1cfa65dc90b0a4640b4a9a7f2c245fa64978ddc2874f9241ed707ffc2232537c52ce36c6b82d8986df2f68cb939b963792bc893255e0e1d712125336fde1aeb000c1b2b59473f4657bcc5ca016f7ed1cda96d39595a9efb7cd3eff7d3a4c01fd9f697e19f5d953f430c76cd647cca757892d8cc128f8e4b99ac48765df70c2259fda4f1a76047ad214786c3bfc34ed6b5c5e55f29"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 6m57.121211875s ago: executing program 5 (id=1296): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000c40)}}], 0x1, 0x20080058) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r0, &(0x7f0000000080), &(0x7f0000000100)=0x37, 0x80800) 6m55.650289151s ago: executing program 5 (id=1299): mq_open(0x0, 0x40, 0x142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m55.362472286s ago: executing program 5 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0xdd, 0x3, 'abc'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 6m42.297913702s ago: executing program 34 (id=1289): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b3438064c77e1cfa65dc90b0a4640b4a9a7f2c245fa64978ddc2874f9241ed707ffc2232537c52ce36c6b82d8986df2f68cb939b963792bc893255e0e1d712125336fde1aeb000c1b2b59473f4657bcc5ca016f7ed1cda96d39595a9efb7cd3eff7d3a4c01fd9f697e19f5d953f430c76cd647cca757892d8cc128f8e4b99ac48765df70c2259fda4f1a76047ad214786c3bfc34ed6b5c5e55f29"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 6m39.602826352s ago: executing program 35 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0xdd, 0x3, 'abc'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 6m28.373708017s ago: executing program 1 (id=1394): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x614, 0xa641, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(r1, 0x1, &(0x7f000000a2c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 6m27.54856614s ago: executing program 1 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6m26.583925728s ago: executing program 1 (id=1403): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000600)='./file0\x00', r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) close(r5) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a0901"], 0xd4}}, 0x8818) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 6m25.601549773s ago: executing program 1 (id=1404): mq_open(0x0, 0x40, 0x142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m25.406214986s ago: executing program 1 (id=1406): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x3e8, 0x20, 0x2, 0x6dd, 0x10, 0x0, 0x2, 0x3, 0x20, 0x20, 0x1, 0x7, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x100004, 0x220104, 0xb, 0x51, 0xffffffffffffffff, 0x8}, 0x50) unshare(0x2c020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, 0x0, 0x0}, 0x94) 6m25.073565049s ago: executing program 1 (id=1407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc3c0000000000000, 0x2, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6m24.881181579s ago: executing program 36 (id=1407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc3c0000000000000, 0x2, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5m33.687684761s ago: executing program 2 (id=1608): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x614, 0xa641, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(r1, 0x1, &(0x7f000000a2c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 5m32.683263887s ago: executing program 2 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf2504"], 0x37a0}, 0x1, 0x0, 0x0, 0x80d}, 0x2000000c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 5m31.813158743s ago: executing program 2 (id=1616): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2e, 0x0, 0x0, @void, @value=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 5m27.779759565s ago: executing program 2 (id=1639): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m27.027301711s ago: executing program 2 (id=1644): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m26.897786105s ago: executing program 2 (id=1646): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 5m26.534608623s ago: executing program 37 (id=1646): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 32.560255481s ago: executing program 6 (id=2976): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x80000) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x4884, 0x0, 0xffffffff}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x5f4}, 0x1, 0x0, 0x0, 0x40}, 0x800) 31.408652916s ago: executing program 6 (id=2981): syz_open_dev$usbmon(0x0, 0x7, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)={0x1}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) 29.347307717s ago: executing program 6 (id=2989): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xd) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 28.387889297s ago: executing program 6 (id=2992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x22) close_range(r4, 0xffffffffffffffff, 0x0) 23.80597129s ago: executing program 6 (id=3010): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(r1, 0x0) setpgid(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) 22.53372028s ago: executing program 6 (id=3014): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc3c0000000000000, 0x2, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) 7.188254316s ago: executing program 38 (id=3014): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc3c0000000000000, 0x2, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) 6.309521363s ago: executing program 9 (id=3080): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0x9, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170928bd700000000000010000000500070000000000080009000100200008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ee85c8d0e3cb5869", 0x8, 0x10, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 6.18490017s ago: executing program 7 (id=3081): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) userfaultfd(0x801) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0x8000600) eventfd(0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.693598323s ago: executing program 7 (id=3082): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000380)=@mmap={0x400, 0x0, 0x4, 0x40, 0x2, {}, {0x3, 0x1, 0xf, 0x46, 0xfe, 0x1, "a91b43eb"}, 0x60bb, 0x1, {}, 0x101, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="3a0200b63f63f50052ca724c8464f634582d6506ccc2f850b73e2569cc668d189315a63d7bd2b9b0e271c0f7b8974f71cef3e73791f6e283a5ede1b509ae334dab39db791882"], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000034000)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000000801020000000000000000050000090900010073797a31000000000900010073797a3100000000060002408808000005000300840000000900010073797a31000000002400048008000b"], 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000700)={0x8000, 0x33424752, 0x2, @discrete={0x6d26, 0x7}}) 5.68545952s ago: executing program 8 (id=3083): setreuid(0xffffffffffffffff, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.543682021s ago: executing program 9 (id=3084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) 5.137742053s ago: executing program 8 (id=3086): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0xabf4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x2, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x950b, 0x7fff, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 4.810402523s ago: executing program 7 (id=3087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 4.751523381s ago: executing program 8 (id=3088): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16}) tkill(r1, 0x7) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x4bcfd6a2) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21}, 0x40012103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.65138s ago: executing program 9 (id=3089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, r4, 0x8, 0x70bd28, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x30, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x0) 4.632336267s ago: executing program 7 (id=3090): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) userfaultfd(0x801) 4.280582717s ago: executing program 4 (id=3091): ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000300)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4.002077999s ago: executing program 8 (id=3092): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xacd2}], 0x1, 0x12040, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001340)={0x38, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3.659417176s ago: executing program 9 (id=3093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2.785012148s ago: executing program 8 (id=3094): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0x9, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170928bd700000000000010000000500070000000000080009000100200008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ee85c8d0e3cb5869", 0x8, 0x10, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 2.760430966s ago: executing program 4 (id=3095): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000910000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r2, 0x40284504, &(0x7f0000000000)=""/56) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x143c, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x140c, 0x2, [@TCA_ROUTE4_ACT={0x7cc, 0x6, [@m_ctinfo={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5a48}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc05, 0x8, 0x0, 0xfffeffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x78, 0x6, "0217035b248946de52e7f1b0bdb73f316d828bfbe6e48a5c789700155308306d962edd1a23cba1758fbb70d299282f44e1ba08d7efd2af9b0b952d79ff939d262890b51b07d14c90ce3022b89ee6e5980ab73661da70fd7597152b6e6ff142d6c00772310ab342bcff21c276dfbf5fcbe6d26a74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x168, 0x13, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0xa, 0x9}}, @TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'gid_map\x00'}, @TCA_DEF_DATA={0x19, 0x3, '/.$&&!+]x-.}\x1f[{@%,{)\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x4, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x7, 0x4, 0x5, 0x401}}]}, {0xa5, 0x6, "c5a7bbf0c26ddfc0e4046129d264ff4e9794a78a57520848f23e6c7db37349d269fcc0b925b9cd5aae2f28ee8bc9bd2a7afe9098d37dda57d4afecb44115c70cb5ec08f98c29355c37b0c46b5e030f173ea4e1504bdfaac0ccc16b0f55cdc3c7369fd11cf4044f37814dd77e1580a3be3be8e43477cca18e70922b7365473676b25012c743fe5db16c0ce373a1036aa2aac69f5518fc14f43ec33bb8090f9ab697"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xf8, 0x3, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x949, 0x2400000, 0x7, 0x0, 0x9}}]}, {0x89, 0x6, "c72f5c151f01c116ba0e9ee482d6806b8319e5ed0128eb47de3cf09d6b080fcad8ba048d5a686351449c19cf7405bbc1495541d5f830db0097a483cfa8d1dcd036c14f5944c3b73e754b8991a55cec2b865ec1027ac49fbcaf713333b9b89895a626412b1050490b4322337098ef84f7c9caa096c729c52689237ea323ea1daec5fe9960b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x30000005, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x87b, 0x0, 0x7, 0x4}}]}, {0x9, 0x6, "c4501aecf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_simple={0x38, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xa, 0x6, "dd3270ef2f05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x5, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x2a, 0x6, "12a2c9349328f62deb0305502c8ad8a2fdf6bf91c28ccf3863cdb6433dd218dccb5b10fea4e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x150, 0xb, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x674f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x80000001, 0x7, 0x67457525, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3e4e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x1000, 0x72}}]}, {0xc3, 0x6, "5b5a75805ca875bd2f5af73c262d528535f0385511ee47bdc22a57c9607cb10696722979fd65f7594f78bec641958948951ad96685e84f4ce6cdfc7c1d87a0eec8b82dbcb369c57104c39f73efab0e9a0c65057e11b79d4f9bdbbf2b8683aa916caef2f534cf6846bafe0588f3aeed621bf672ea467f15dae3fec1ac1ba2ab8f4751c41f9160866e9c6aac0e9142f1b9b8085c21a98d147ae7ec831415938393bdb33ecc59dd3cc1a7106ed8fc0fa3dc978f63f30cb1eef2c826b71ad77e3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0x17c, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x1, 0x0, 0x2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0xffffffffffffffff, 0xc3a7}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x401, 0x7, 0xfffffffb, 0x2f00}, 0x681f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x7, 0x10000000, 0x3, 0x3}, 0x48da}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x20000000, 0x7}, 0x13}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x1, 0x2, 0x101}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x10}, 0xffaf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0xf514}, 0x2}}]}, {0x6c, 0x6, "ae916306fd434953008e0b8909fa551e1c8bb2cbd08e22fa69c27cae3bcf4dd2457d19f22783529fe74908a9d78fd817aadc87d40d56ffc4b06d062aeb90adb446b57d80bef7e2fec54751251362d516ccb64acc5bbc121ab561e3b0466e250df62337c1d5f8421c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x88, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a1e, 0x10000000}}]}, {0x4e, 0x6, "76389554682b4b08b87406224003c1ad2cba532384c41ad383cec3873d1e9c3a24d3f0a9976e48fb8e43ad27e650ca2ef15d0b9b7df47ab1fe0b3729bfbedf64e1d9f242ca6236eedcb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xc24, 0x6, [@m_sample={0xf8, 0x18, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9, 0x5, 0x8, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x3, 0xffff9a38, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x1, 0x2, 0x2, 0xc}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}]}, {0x5a, 0x6, "1c461927b69c15ddedb38243003b2fc9f1932154c2e4a09cf3c1b8f86530cf949fa94b671ed83a0aae1b64242875abc46fb1b56f60a3aa4a434ce9be69d4f1f6f96dd42b1c2669dc1b3c30ac63590390122aa8e03481"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ife={0x5c, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xe}]}, {0x2a, 0x6, "06ba73463179ccb3f47886b30e445578bf3f79b4c5bc14d75c79c57e0a91a77ad0a4b460a953"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xa8, 0x6, "5181452dbe4d43b552faa72dafaf1e1c3ede6dc2b67eff278812374dcbff2b8c5cd69da8e7996db6ef6b34b1f9635bf05082da5264fcb64c7158ce65714676b29f83b939ab1ae2df98b51509728d66fc1cadd7ecca52242f3ec1f5c736dcd1549968c77d6ea6a1ff6fdad26420f392c22024d769fb972e1c4b5a80052121aab64473103a59797c630f85aaaa85cf23aa3d32cf5f4cf6855a19f09c3bd05dc6337b410be8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x174, 0x4, 0x0, 0x0, {{0x8}, {0x140, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x4, 0x3, 0xb7}, {0x3, 0x8, 0x9, 0x2}, {0x400, 0x9, 0x9, 0x4}, {0x0, 0x1, 0x5, 0x8c2}]}]}, {0xe, 0x6, "143e1b45beffd32c389b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x4ec, 0x15, 0x0, 0x0, {{0x8}, {0x464, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7, 0x20000000, 0x9, 0x4eb6}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x10001, 0x20000000, 0x20000000, 0x5}}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x64, 0x6, "d75bb354724df1901a583e612478f307d81dfe0429f56f4491208744b48d3888cc6eedf50231a8d2cc745806012967a802a2b5237194b3eac579e3a31ac5a09a594c06a56aea8ad330687936674f71970c958e7397dfe23ae699a60ce5118c01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x68, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x3f, 0x6, "139712458bc289cdec193a668fa5e3bde8daa6ac5a52b8a250d4f53c279730df24ee7fcec784557f63d8620b0177e53e55551a49ee575082808d8a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x1c8, 0x12, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xd8, 0x6, {0x3, 'filter\x00', 0x9, 0x5, "6431fa24e2f4f9a9cfd5950b9abdd0821fc28ae37e552f6f83669c13bdb9366b8538b728f515ca5dcb0b5c2861be6cb18ef4cbb9173edac315e3beafaad5ec35231fde3810c696c4509215597a54d05d886c44746e84148399029841dbd6ea13469f4958958a972e424f90d48f04262bf06d22681d7dfe35f0f057b66e91d4e80ed4c8685f33c0d30363f13806037c4439ef2ab5ad8d2aa3c957c289c609d244b1848aa1742bf7834ff8f0ceb954"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3b, 0x6, {0x4, 'filter\x00', 0xe, 0x6, "e6be7cf14b933a57ac592984a51c9b8a7c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x8, 0x6, "a982c139"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xa0, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x7, 0x8, 0x8, 0xfffffff7}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x7, 0x6}, 0x7d}}]}, {0x3b, 0x6, "d67fae69c2eb29104bd84af117836e14ff8c3fe619147e842f1d18f5402ad1b9bf24109c371131bebc599152b0f2a3d1e2a716cdaf3e8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xb, 0x1, 0xfffffffc, 0x6}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2c, 0x7, 0x2}, 0x1}}]}, {0x51, 0x6, "a78ef3379c067cdd65109a89976dc59db23dfd349394b0bbaa3456fe35683cc438421a3a3da165de81de266814b67db23146c37d8eb25be06c100df3008ab37bea3aee60ebc7741952563407d1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xff}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa7}]}}]}, 0x143c}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 2.511747622s ago: executing program 9 (id=3096): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000380)=@mmap={0x400, 0x0, 0x4, 0x40, 0x2, {}, {0x3, 0x1, 0xf, 0x46, 0xfe, 0x1, "a91b43eb"}, 0x60bb, 0x1, {}, 0x101, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="3a0200b63f63f50052ca724c8464f634582d6506ccc2f850b73e2569cc668d189315a63d7bd2b9b0e271c0f7b8974f71cef3e73791f6e283a5ede1b509ae334dab39db791882"], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000034000)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000000801020000000000000000050000090900010073797a31000000000900010073797a3100000000060002408808000005000300840000000900010073797a31000000002400048008000b"], 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$kcm(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x80) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000700)={0x8000, 0x33424752, 0x2, @discrete={0x6d26, 0x7}}) 2.413203524s ago: executing program 7 (id=3097): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r3, 0x40284504, &(0x7f0000000000)=""/56) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x5f0, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x5c0, 0x2, [@TCA_ROUTE4_ACT={0x5ac, 0x6, [@m_ctinfo={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5a48}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc05, 0x8, 0x0, 0xfffeffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x78, 0x6, "0217035b248946de52e7f1b0bdb73f316d828bfbe6e48a5c789700155308306d962edd1a23cba1758fbb70d299282f44e1ba08d7efd2af9b0b952d79ff939d262890b51b07d14c90ce3022b89ee6e5980ab73661da70fd7597152b6e6ff142d6c00772310ab342bcff21c276dfbf5fcbe6d26a74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x154, 0x13, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0xa, 0x9}}, @TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'gid_map\x00'}, @TCA_DEF_DATA={0x19, 0x3, '/.$&&!+]x-.}\x1f[{@%,{)\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x4, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x7, 0x4, 0x5, 0x401}}]}, {0x91, 0x6, "c5a7bbf0c26ddfc0e4046129d264ff4e9794a78a57520848f23e6c7db37349d269fcc0b925b9cd5aae2f28ee8bc9bd2a7afe9098d37dda57d4afecb44115c70cb5ec08f98c29355c37b0c46b5e030f173ea4e1504bdfaac0ccc16b0f55cdc3c7369fd11cf4044f37814dd77e1580a3be3be8e43477cca18e70922b7365473676b25012c743fe5db16c0ce373a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xf8, 0x3, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x949, 0x2400000, 0x7, 0x0, 0x9}}]}, {0x89, 0x6, "c72f5c151f01c116ba0e9ee482d6806b8319e5ed0128eb47de3cf09d6b080fcad8ba048d5a686351449c19cf7405bbc1495541d5f830db0097a483cfa8d1dcd036c14f5944c3b73e754b8991a55cec2b865ec1027ac49fbcaf713333b9b89895a626412b1050490b4322337098ef84f7c9caa096c729c52689237ea323ea1daec5fe9960b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x7c, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x30000005, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x87b, 0x0, 0x7, 0x4}}]}, {0x7, 0x6, "c4501a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbedit={0x58, 0x5, 0x0, 0x0, {{0xc}, {0x4}, {0x2a, 0x6, "12a2c9349328f62deb0305502c8ad8a2fdf6bf91c28ccf3863cdb6433dd218dccb5b10fea4e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x14c, 0xb, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x674f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x80000001, 0x7, 0x67457525, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3e4e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x1000, 0x72}}]}, {0xbd, 0x6, "5b5a75805ca875bd2f5af73c262d528535f0385511ee47bdc22a57c9607cb10696722979fd65f7594f78bec641958948951ad96685e84f4ce6cdfc7c1d87a0eec8b82dbcb369c57104c39f73efab0e9a0c65057e11b79d4f9bdbbf2b8683aa916caef2f534cf6846bafe0588f3aeed621bf672ea467f15dae3fec1ac1ba2ab8f4751c41f9160866e9c6aac0e9142f1b9b8085c21a98d147ae7ec831415938393bdb33ecc59dd3cc1a7106ed8fc0fa3dc978f63f30cb1eef2c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x3c, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a1e, 0x10000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xff}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 1.504727537s ago: executing program 9 (id=3098): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x100}], 0x1, 0xd) 1.397064522s ago: executing program 4 (id=3099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 1.258941151s ago: executing program 4 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 1.199977365s ago: executing program 7 (id=3101): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESDEC=0x0], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4}]}, 0x24}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4008040) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000000)=0xcf7, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 1.188041202s ago: executing program 4 (id=3102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, r4, 0x8, 0x70bd28, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x30, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x0) 115.950573ms ago: executing program 4 (id=3103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 0s ago: executing program 8 (id=3104): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b783000077838d995d8bfdf592f6b24400bf0900000000000055090100000000009500000000000000be91000000000000b7020000000000008500000085000020c7d70dce725f0e0095000000000000000000000000000000000000956d0f373d13071b572003d63a8008448a3c5951ef0285d00600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r1, 0x1, 0x0) fchmodat(r8, &(0x7f0000000000)='.\x00', 0xe0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): 6d, idProduct=0892, bcdDevice=6d.2a [ 613.928311][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.940645][ T5857] usb 7-1: config 0 descriptor?? [ 613.955493][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 614.086027][ T3093] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 614.095608][ T9] usb 3-1: device descriptor read/64, error -71 [ 614.187094][T11857] netlink: 'syz.6.1560': attribute type 1 has an invalid length. [ 614.207196][ T9] usb usb3-port1: attempt power cycle [ 614.213849][T11857] NCSI netlink: No device for ifindex 0 [ 614.242599][ T5857] usb 7-1: USB disconnect, device number 3 [ 614.351243][ T3093] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.405184][ T3093] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.490343][ T3093] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 614.543823][ T3093] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.623133][ T3093] usb 9-1: config 0 descriptor?? [ 614.835470][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 614.872676][ T9] usb 3-1: device descriptor read/8, error -71 [ 614.917418][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1568'. [ 615.134705][ T3093] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 615.159009][ T3093] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 615.272825][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 615.340277][ T9] usb 3-1: device descriptor read/8, error -71 [ 615.447368][ T3093] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 616.545777][ T9] usb usb3-port1: unable to enumerate USB device [ 616.708342][ T3093] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 616.736817][ T3093] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 616.777103][ T3093] usb 9-1: USB disconnect, device number 2 [ 617.368250][T11913] fido_id[11913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 617.655983][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 617.874029][ T9] usb 10-1: device descriptor read/64, error -71 [ 618.445468][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 618.991225][ T30] audit: type=1326 audit(1760333844.459:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.121656][ T30] audit: type=1326 audit(1760333844.499:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.209784][ T30] audit: type=1326 audit(1760333844.499:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.273273][ T30] audit: type=1326 audit(1760333844.499:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.333741][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.359584][ T30] audit: type=1326 audit(1760333844.499:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.377486][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.489139][ T30] audit: type=1326 audit(1760333844.509:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.537077][ T30] audit: type=1326 audit(1760333844.509:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.585481][ T30] audit: type=1326 audit(1760333844.509:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 619.618411][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.854916][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.920346][ T30] audit: type=1326 audit(1760333844.509:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 620.128774][ T30] audit: type=1326 audit(1760333844.509:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87df8eec9 code=0x7ffc0000 [ 620.799514][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.901401][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.744185][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.775820][ T3093] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 621.784310][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.996402][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.040672][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.066360][ T3093] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 622.079416][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1591'. [ 622.101823][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.137217][ T3093] usb 7-1: config 0 descriptor?? [ 623.452523][ T79] bridge_slave_1: left allmulticast mode [ 623.585469][ T79] bridge_slave_1: left promiscuous mode [ 623.591791][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.608457][ T3093] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 623.632021][ T79] bridge_slave_0: left allmulticast mode [ 623.637732][ T79] bridge_slave_0: left promiscuous mode [ 623.649455][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.656420][ T3093] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 623.867990][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.140252][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.207132][ T3093] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 624.441378][ T3093] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 624.541848][T12034] syz.2.1596(12034): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 624.561929][ T3093] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 624.812171][ T3093] usb 7-1: USB disconnect, device number 4 [ 626.584180][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.601263][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.620354][ T79] bond0 (unregistering): Released all slaves [ 628.736030][T12095] netlink: 14220 bytes leftover after parsing attributes in process `syz.2.1611'. [ 629.108407][ T79] hsr_slave_0: left promiscuous mode [ 629.142067][T12108] binder: 12104:12108 ioctl c0306201 0 returned -14 [ 629.171172][T12108] binder: 12104:12108 ioctl c0306201 200000000640 returned -22 [ 629.349871][ T79] hsr_slave_1: left promiscuous mode [ 629.402528][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.433093][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.520175][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.563883][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.636587][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 629.685858][ T79] veth1_macvtap: left promiscuous mode [ 629.691484][ T79] veth0_macvtap: left promiscuous mode [ 629.754079][ T79] veth1_vlan: left promiscuous mode [ 629.831040][ T79] veth0_vlan: left promiscuous mode [ 631.639632][ T79] team0 (unregistering): Port device team_slave_1 removed [ 631.705229][ T79] team0 (unregistering): Port device team_slave_0 removed [ 631.833404][T12147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.982417][T12150] netlink: zone id is out of range [ 631.991762][T12150] netlink: zone id is out of range [ 632.113574][T12154] process 'syz.6.1629' launched '/dev/fd/3' with NULL argv: empty string added [ 632.125245][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 632.125263][ T30] audit: type=1400 audit(1760333857.589:493): avc: denied { execute_no_trans } for pid=12153 comm="syz.6.1629" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 632.639367][ T30] audit: type=1804 audit(1760333858.099:494): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1631" name="/newroot/28/file0" dev="tmpfs" ino=168 res=1 errno=0 [ 634.043098][T12185] autofs: Unknown parameter '0x0000000000000000' [ 634.429613][ T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.694641][ T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.923614][ T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.068605][T10568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.078379][T10568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.090307][T10568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.099064][T10568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.108888][T10568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.119913][ T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.191419][T12221] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.275680][T11420] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 635.424038][ T79] bridge_slave_1: left allmulticast mode [ 635.489860][T11420] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 635.522951][T11420] usb 9-1: can't read configurations, error -61 [ 635.526327][ T79] bridge_slave_1: left promiscuous mode [ 635.545787][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.605658][ T79] bridge_slave_0: left allmulticast mode [ 635.611299][ T79] bridge_slave_0: left promiscuous mode [ 635.634398][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.755545][T11420] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 636.138756][T11420] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 636.170528][T11420] usb 9-1: can't read configurations, error -61 [ 636.189378][T11420] usb usb9-port1: attempt power cycle [ 636.562021][T11420] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 636.837838][T11420] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 636.845497][T11420] usb 9-1: can't read configurations, error -61 [ 637.220624][T11420] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 637.236057][T10568] Bluetooth: hci3: command tx timeout [ 637.267830][T11420] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 637.290417][T11420] usb 9-1: can't read configurations, error -61 [ 637.298751][T11420] usb usb9-port1: unable to enumerate USB device [ 637.362065][T12262] netlink: 512 bytes leftover after parsing attributes in process `syz.9.1658'. [ 637.791436][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.802053][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.812563][ T79] bond0 (unregistering): Released all slaves [ 638.077842][ T30] audit: type=1400 audit(1760333863.539:495): avc: denied { bind } for pid=12272 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 638.097075][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.237762][ T5931] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 639.305497][T10568] Bluetooth: hci3: command tx timeout [ 639.353053][ T30] audit: type=1326 audit(1760333864.819:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.438949][ T30] audit: type=1326 audit(1760333864.819:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.462472][ T5931] usb 8-1: device descriptor read/64, error -71 [ 639.514522][ T30] audit: type=1326 audit(1760333864.859:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.561101][ T30] audit: type=1326 audit(1760333864.859:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.895467][ T30] audit: type=1326 audit(1760333864.859:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.920613][ T30] audit: type=1326 audit(1760333864.859:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.952290][ T5931] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 639.953699][ T30] audit: type=1326 audit(1760333864.869:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 639.985920][ T30] audit: type=1326 audit(1760333864.869:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 640.010995][ T30] audit: type=1326 audit(1760333864.879:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.9.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 640.103137][ T5931] usb 8-1: device descriptor read/64, error -71 [ 640.166143][ T910] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 640.216441][ T5931] usb usb8-port1: attempt power cycle [ 640.291937][T12221] chnl_net:caif_netlink_parms(): no params data found [ 640.367793][ T910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.379534][ T910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.399716][ T910] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 640.427956][ T910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.515748][ T910] usb 10-1: config 0 descriptor?? [ 640.567475][ T5931] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 640.666628][ T5931] usb 8-1: device descriptor read/8, error -71 [ 640.852449][ T79] hsr_slave_0: left promiscuous mode [ 640.872432][ T79] hsr_slave_1: left promiscuous mode [ 640.893339][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.916328][ T5931] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 640.930485][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.942648][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.950604][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.959872][ T5931] usb 8-1: device descriptor read/8, error -71 [ 640.991179][ T79] veth1_macvtap: left promiscuous mode [ 641.003729][ T79] veth0_macvtap: left promiscuous mode [ 641.011507][ T79] veth1_vlan: left promiscuous mode [ 641.021788][ T79] veth0_vlan: left promiscuous mode [ 641.040163][ T910] usbhid 10-1:0.0: can't add hid device: -71 [ 641.064067][ T910] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 641.095789][ T5931] usb usb8-port1: unable to enumerate USB device [ 641.108496][ T910] usb 10-1: USB disconnect, device number 4 [ 641.435473][T10568] Bluetooth: hci3: command tx timeout [ 641.997498][T12356] overlayfs: missing 'lowerdir' [ 642.459790][ T79] team0 (unregistering): Port device team_slave_1 removed [ 642.586430][ T79] team0 (unregistering): Port device team_slave_0 removed [ 643.425448][ T5871] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 643.475463][T10568] Bluetooth: hci3: command tx timeout [ 643.574692][ T5871] usb 9-1: device descriptor read/64, error -71 [ 644.142518][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.154155][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.162557][T12221] bridge_slave_0: entered allmulticast mode [ 644.170448][T12221] bridge_slave_0: entered promiscuous mode [ 644.195912][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 644.214728][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.233426][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.265579][ T5871] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 644.343763][T12221] bridge_slave_1: entered allmulticast mode [ 644.356505][T12221] bridge_slave_1: entered promiscuous mode [ 644.395491][ T5871] usb 9-1: device descriptor read/64, error -71 [ 644.517803][ T5871] usb usb9-port1: attempt power cycle [ 644.608665][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.865662][ T5871] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 644.866249][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.948605][ T5871] usb 9-1: device descriptor read/8, error -71 [ 645.365469][ T5871] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 645.412451][T12221] team0: Port device team_slave_0 added [ 645.420269][ T5871] usb 9-1: device descriptor read/8, error -71 [ 645.547156][ T5871] usb usb9-port1: unable to enumerate USB device [ 645.897196][T12221] team0: Port device team_slave_1 added [ 645.953598][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.965417][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.998685][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.017465][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.024460][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.065418][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.144923][T12413] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1695'. [ 646.360050][T12419] binder: 12416:12419 ioctl c0306201 0 returned -14 [ 646.402968][T12419] binder: 12416:12419 ioctl c0306201 200000000640 returned -22 [ 646.619536][T12221] hsr_slave_0: entered promiscuous mode [ 646.646498][T12221] hsr_slave_1: entered promiscuous mode [ 647.373005][ T5871] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 647.652511][ T5871] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.750496][ T5871] usb 9-1: config 0 has no interface number 0 [ 647.779694][ T5871] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 647.805172][ T5871] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 647.833748][ T5871] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.095468][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.330772][ T5871] usb 9-1: config 0 descriptor?? [ 648.347078][T12421] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 648.366119][ T5871] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 649.615468][ T5814] usb 9-1: USB disconnect, device number 11 [ 649.705457][ T5871] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 649.743769][T12468] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1707'. [ 649.869235][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.901064][ T5871] usb 10-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 649.935558][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.016846][ T5871] usb 10-1: config 0 descriptor?? [ 650.576408][ T5814] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 650.760608][ T5871] usbhid 10-1:0.0: can't add hid device: -71 [ 650.827751][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 650.854175][ T5871] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 650.887025][ T5814] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 650.977438][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 651.007955][ T5814] usb 9-1: Product: syz [ 651.012234][ T5814] usb 9-1: SerialNumber: syz [ 651.037934][ T5871] usb 10-1: USB disconnect, device number 5 [ 651.064235][ T5814] usb 9-1: config 0 descriptor?? [ 651.091221][ T5814] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 651.115011][ T5814] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 651.141983][ T5814] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 651.184648][ T5814] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 651.413935][T12221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 651.443046][T12221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 651.482482][T12221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 651.538903][T12221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 651.719998][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.751674][T12221] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.770176][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.777367][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.791551][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.798748][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.216916][T12221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.452058][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 652.452097][ T30] audit: type=1400 audit(1760333877.919:513): avc: denied { read } for pid=12543 comm="syz.7.1719" path="socket:[45008]" dev="sockfs" ino=45008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 652.683473][T12550] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1720'. [ 652.745320][ T30] audit: type=1400 audit(1760333878.209:514): avc: denied { setattr } for pid=12543 comm="syz.7.1719" name="[userfaultfd]" dev="anon_inodefs" ino=45006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 652.974249][T12318] usb 9-1: USB disconnect, device number 12 [ 653.871990][T12575] xt_hashlimit: max too large, truncated to 1048576 [ 654.019864][T12221] veth0_vlan: entered promiscuous mode [ 654.370245][T12221] veth1_vlan: entered promiscuous mode [ 654.397682][T12221] veth0_macvtap: entered promiscuous mode [ 654.422306][T12221] veth1_macvtap: entered promiscuous mode [ 654.468306][T12221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.484247][T12221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.512461][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.538000][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.573931][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.597156][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.940414][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.032696][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.036018][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.063127][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.095576][ T30] audit: type=1400 audit(1760333884.549:515): avc: denied { connect } for pid=12659 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 659.904242][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1741'. [ 659.962774][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1748'. [ 660.215429][ T30] audit: type=1400 audit(1760333885.659:516): avc: denied { connect } for pid=12686 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 661.066895][ T30] audit: type=1400 audit(1760333886.529:517): avc: denied { connect } for pid=12699 comm="syz.8.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 662.426621][T12723] openvswitch: netlink: IP tunnel dst address not specified [ 662.962010][ T5931] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 663.616956][ T5931] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 663.895459][ T5931] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.949274][ T5931] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 663.980747][ T5931] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.999371][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.059075][ T5931] usbtmc 7-1:16.0: bulk endpoints not found [ 664.672768][T12753] netlink: 512 bytes leftover after parsing attributes in process `syz.9.1770'. [ 665.580197][ T30] audit: type=1400 audit(1760333890.969:518): avc: denied { read } for pid=12748 comm="syz.7.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 666.068636][ T24] usb 7-1: USB disconnect, device number 5 [ 666.902076][T12811] overlayfs: missing 'workdir' [ 666.992291][ T5813] Bluetooth: hci5: command 0x0406 tx timeout [ 667.290305][ T30] audit: type=1400 audit(1760333892.359:519): avc: denied { ioctl } for pid=12800 comm="syz.6.1783" path="socket:[45688]" dev="sockfs" ino=45688 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 667.878284][T12820] cgroup: fork rejected by pids controller in /syz8 [ 667.935069][ T30] audit: type=1400 audit(1760333893.399:520): avc: denied { execute } for pid=12822 comm="syz.9.1789" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 668.405610][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 669.014227][ T24] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 669.014441][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.014491][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 669.014595][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.014643][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.103823][ T24] usbtmc 8-1:16.0: bulk endpoints not found [ 669.372768][ T30] audit: type=1400 audit(1760333894.829:521): avc: denied { unmount } for pid=11239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 669.504799][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.668043][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.916979][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.041338][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.294030][ T13] bridge_slave_1: left allmulticast mode [ 670.314097][ T13] bridge_slave_1: left promiscuous mode [ 670.331452][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.354578][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 670.365349][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 670.376844][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 670.385302][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 670.393220][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 670.401535][ T13] bridge_slave_0: left allmulticast mode [ 670.421813][ T13] bridge_slave_0: left promiscuous mode [ 670.432215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.432054][ T24] usb 8-1: USB disconnect, device number 7 [ 672.458984][ T5813] Bluetooth: hci1: command tx timeout [ 672.742590][T13030] xt_hashlimit: max too large, truncated to 1048576 [ 672.813307][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.853449][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.897178][ T13] bond0 (unregistering): Released all slaves [ 673.654374][T12991] ip6gretap0 speed is unknown, defaulting to 1000 [ 673.683388][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1819'. [ 674.570683][ T5813] Bluetooth: hci1: command tx timeout [ 675.582287][T13081] Scaler: ================= START STATUS ================= [ 675.589842][T13081] Scaler: ================== END STATUS ================== [ 676.134497][ T13] hsr_slave_0: left promiscuous mode [ 676.141043][ T13] hsr_slave_1: left promiscuous mode [ 676.581648][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.589098][ T5813] Bluetooth: hci1: command tx timeout [ 676.603137][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.624034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.637883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.682585][ T13] veth1_macvtap: left promiscuous mode [ 676.729719][ T13] veth0_macvtap: left promiscuous mode [ 676.756807][ T13] veth1_vlan: left promiscuous mode [ 676.772033][ T13] veth0_vlan: left promiscuous mode [ 676.827295][ T5871] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 676.995432][ T5871] usb 8-1: Using ep0 maxpacket: 16 [ 677.009681][ T5871] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 677.034193][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 677.080300][ T5871] usb 8-1: Product: syz [ 677.090996][ T5871] usb 8-1: SerialNumber: syz [ 677.120007][ T5871] usb 8-1: config 0 descriptor?? [ 677.153336][ T5871] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 677.284117][ T5871] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 677.296191][ T5871] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 677.303074][ T5871] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 677.367884][T13109] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 678.665441][ T5813] Bluetooth: hci1: command tx timeout [ 679.034304][ T5864] usb 8-1: USB disconnect, device number 8 [ 680.082528][ T13] team0 (unregistering): Port device team_slave_1 removed [ 680.361400][ T13] team0 (unregistering): Port device team_slave_0 removed [ 681.688436][ T30] audit: type=1804 audit(1760333907.159:522): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1847" name="/newroot/28/file0" dev="tmpfs" ino=161 res=1 errno=0 [ 681.753963][T13155] Scaler: ================= START STATUS ================= [ 681.761524][T13155] Scaler: ================== END STATUS ================== [ 682.345571][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 683.255816][T12991] chnl_net:caif_netlink_parms(): no params data found [ 683.875812][T12991] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.889662][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1855'. [ 683.910979][T12991] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.919329][T12991] bridge_slave_0: entered allmulticast mode [ 683.946300][T12991] bridge_slave_0: entered promiscuous mode [ 684.570177][T12991] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.586283][T12991] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.593510][T12991] bridge_slave_1: entered allmulticast mode [ 684.698198][T12991] bridge_slave_1: entered promiscuous mode [ 685.308195][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.314596][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.474769][ T30] audit: type=1804 audit(1760333910.919:523): pid=13214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.1859" name="/newroot/79/file0" dev="tmpfs" ino=448 res=1 errno=0 [ 685.700554][T12991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.747768][T12991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.428275][T12991] team0: Port device team_slave_0 added [ 686.483470][T12991] team0: Port device team_slave_1 added [ 686.904722][T12991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.940091][T12991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.983699][T12991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.996778][T12991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.004802][T12991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.035391][T12991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.219067][T12991] hsr_slave_0: entered promiscuous mode [ 687.236172][T12991] hsr_slave_1: entered promiscuous mode [ 687.252760][T12991] debugfs: 'hsr0' already exists in 'hsr' [ 687.265488][T12991] Cannot create hsr debugfs directory [ 687.837620][ T30] audit: type=1326 audit(1760333913.309:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 687.957928][ T30] audit: type=1326 audit(1760333913.309:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 688.052315][ T30] audit: type=1326 audit(1760333913.379:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 688.145614][ T30] audit: type=1326 audit(1760333913.379:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 688.247636][ T30] audit: type=1326 audit(1760333913.379:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 688.485003][ T30] audit: type=1326 audit(1760333913.399:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 689.006822][ T30] audit: type=1326 audit(1760333913.409:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 689.069093][ T30] audit: type=1326 audit(1760333913.409:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 689.159159][ T30] audit: type=1326 audit(1760333913.409:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 689.219376][ T30] audit: type=1326 audit(1760333913.409:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 689.471538][T12991] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 689.508724][T12991] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 689.675308][T12991] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 689.710521][T12991] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 690.475125][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1882'. [ 690.754955][T12991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.843919][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 690.848211][T12991] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.965974][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.973141][ T9220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.003148][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.010305][ T9220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.019487][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 691.207067][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.251074][ T43] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.279918][ T43] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.296858][ T43] usb 8-1: Product: syz [ 691.313257][ T43] usb 8-1: Manufacturer: syz [ 691.323045][ T43] usb 8-1: SerialNumber: syz [ 691.460117][ T43] usb 8-1: config 0 descriptor?? [ 692.219902][ T43] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 693.206054][ T43] usb 8-1: USB disconnect, device number 9 [ 693.212002][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.383213][T12991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.073965][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 695.073980][ T30] audit: type=1326 audit(1760333920.539:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 695.104656][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.133779][ T30] audit: type=1326 audit(1760333920.539:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 695.287391][ T30] audit: type=1326 audit(1760333920.539:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.086597][ T30] audit: type=1326 audit(1760333920.539:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.133856][T12991] veth0_vlan: entered promiscuous mode [ 696.228960][T12991] veth1_vlan: entered promiscuous mode [ 696.233235][ T30] audit: type=1326 audit(1760333920.539:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.258591][ T30] audit: type=1326 audit(1760333920.549:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.282071][ T30] audit: type=1326 audit(1760333920.549:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.306478][ T30] audit: type=1326 audit(1760333920.549:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.330738][ T30] audit: type=1326 audit(1760333920.549:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.356660][ T30] audit: type=1326 audit(1760333920.549:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a378eec9 code=0x7ffc0000 [ 696.676583][T12991] veth0_macvtap: entered promiscuous mode [ 696.704678][T12991] veth1_macvtap: entered promiscuous mode [ 696.738137][T12991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.772278][T12991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.850502][ T2944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.888323][ T2944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.928844][ T2944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.061793][ T2944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.283750][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.517834][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.764025][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.772346][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.389917][T13420] netlink: 512 bytes leftover after parsing attributes in process `syz.8.1917'. [ 699.943353][ T5871] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 700.241283][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.297791][ T5871] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 700.333080][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.396314][ T5871] usb 9-1: config 0 descriptor?? [ 700.825813][ T5871] usbhid 9-1:0.0: can't add hid device: -71 [ 700.831866][ T5871] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 700.893423][ T5871] usb 9-1: USB disconnect, device number 13 [ 701.207704][T13471] netlink: 512 bytes leftover after parsing attributes in process `syz.6.1932'. [ 701.841233][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1937'. [ 701.965428][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 701.965446][ T30] audit: type=1804 audit(1760333927.429:565): pid=13487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.1940" name="/newroot/100/file0" dev="tmpfs" ino=555 res=1 errno=0 [ 702.003707][T13491] fuse: Bad value for 'fd' [ 702.758902][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 702.973468][T13504] delete_channel: no stack [ 703.015414][ T30] audit: type=1400 audit(1760333928.439:566): avc: denied { create } for pid=13500 comm="syz.4.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 705.256430][ T30] audit: type=1400 audit(1760333930.719:567): avc: denied { mounton } for pid=13544 comm="syz.8.1952" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 707.308606][ T30] audit: type=1400 audit(1760333932.779:568): avc: denied { module_request } for pid=13593 comm="syz.6.1967" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 707.358305][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1967'. [ 707.733117][T13605] input: syz1 as /devices/virtual/input/input13 [ 708.266052][ T910] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 708.463363][ T910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.474907][ T910] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.490393][ T910] usb 7-1: config 0 interface 0 has no altsetting 0 [ 708.511131][ T910] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 708.521117][ T910] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 708.544228][ T910] usb 7-1: Product: syz [ 708.558737][ T910] usb 7-1: Manufacturer: syz [ 708.568556][ T910] usb 7-1: SerialNumber: syz [ 708.586749][ T910] usb 7-1: config 0 descriptor?? [ 708.683828][ T910] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 708.783878][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.833766][ T910] usb 7-1: USB disconnect, device number 6 [ 709.341983][T13646] delete_channel: no stack [ 709.988685][T13669] netlink: 512 bytes leftover after parsing attributes in process `syz.7.1983'. [ 713.575257][ T30] audit: type=1400 audit(1760333939.039:569): avc: denied { watch_reads } for pid=13719 comm="syz.9.1998" path="/106" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 714.276130][T13729] netlink: 512 bytes leftover after parsing attributes in process `syz.8.1999'. [ 714.848754][T13738] delete_channel: no stack [ 717.161213][ T30] audit: type=1400 audit(1760333942.499:570): avc: denied { read } for pid=13759 comm="syz.7.2008" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 717.485808][ T30] audit: type=1400 audit(1760333942.499:571): avc: denied { open } for pid=13759 comm="syz.7.2008" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 717.511967][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.917864][ T30] audit: type=1400 audit(1760333942.509:572): avc: denied { ioctl } for pid=13759 comm="syz.7.2008" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 717.944054][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.159563][T13765] tipc: Started in network mode [ 718.164469][T13765] tipc: Node identity 6, cluster identity 4711 [ 718.170711][T13765] tipc: Node number set to 6 [ 718.211784][ T30] audit: type=1400 audit(1760333943.679:573): avc: denied { cmd } for pid=13775 comm="syz.4.2013" path="socket:[48989]" dev="sockfs" ino=48989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 718.378533][ T30] audit: type=1400 audit(1760333943.849:574): avc: denied { create } for pid=13784 comm="syz.6.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 719.326632][T13799] binder: 13795:13799 ioctl c0306201 200000000640 returned -22 [ 721.953587][T13839] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2025'. [ 723.019223][T13860] xt_hashlimit: max too large, truncated to 1048576 [ 724.496907][T13886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.606309][ T30] audit: type=1326 audit(1760333950.079:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 724.860846][ T30] audit: type=1326 audit(1760333950.239:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 724.917082][ T30] audit: type=1326 audit(1760333950.239:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 724.941163][ T30] audit: type=1326 audit(1760333950.239:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.051214][ T30] audit: type=1326 audit(1760333950.239:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.146110][ T30] audit: type=1326 audit(1760333950.249:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.169942][ T30] audit: type=1326 audit(1760333950.249:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.195312][ T30] audit: type=1326 audit(1760333950.249:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.219197][ T30] audit: type=1326 audit(1760333950.249:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.243308][ T30] audit: type=1326 audit(1760333950.249:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.9.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f78eec9 code=0x7ffc0000 [ 725.783315][T13925] fuse: Bad value for 'fd' [ 725.837532][T10568] Bluetooth: hci3: Malformed Event: 0x02 [ 728.085657][T13952] comedi comedi3: comedi_config --init_data is deprecated [ 728.635760][T12318] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 728.987575][T12318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.014065][T12318] usb 8-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 729.064508][T12318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.113357][T12318] usb 8-1: config 0 descriptor?? [ 729.165542][ T5880] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 729.225707][ T5871] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 729.325997][ T5880] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.356220][ T5880] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 729.373885][ T5880] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.396263][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.414609][ T5871] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.432605][ T5871] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.452451][T13968] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 729.471461][T12318] usbhid 8-1:0.0: can't add hid device: -71 [ 729.473135][ T5880] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.481871][T12318] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 729.495986][ T5871] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 729.516481][T12318] usb 8-1: USB disconnect, device number 10 [ 729.522510][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.751677][ T5871] usb 7-1: usb_control_msg returned -32 [ 729.774237][ T5871] usbtmc 7-1:16.0: can't read capabilities [ 730.208311][ T5871] usb 7-1: USB disconnect, device number 7 [ 730.476735][ T5880] usb 5-1: USB disconnect, device number 18 [ 730.884347][T14001] comedi comedi3: comedi_config --init_data is deprecated [ 732.270684][T14019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.275718][T14041] comedi comedi3: comedi_config --init_data is deprecated [ 735.255499][ T5871] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 735.425509][ T5871] usb 10-1: Using ep0 maxpacket: 16 [ 735.444871][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 735.444886][ T30] audit: type=1804 audit(1760333960.909:601): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2095" name="/newroot/76/file0" dev="tmpfs" ino=412 res=1 errno=0 [ 735.446058][ T5871] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 735.473321][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.612367][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 735.621590][ T5871] usb 10-1: Product: syz [ 735.625923][ T5871] usb 10-1: SerialNumber: syz [ 735.640373][ T5871] usb 10-1: config 0 descriptor?? [ 735.807812][ T5871] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 735.814856][ T5871] dvb_usb_af9015 10-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 735.835697][ T5871] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 735.842211][ T5871] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 735.964117][T14085] random: crng reseeded on system resumption [ 736.007071][ T30] audit: type=1400 audit(1760333961.429:602): avc: denied { read write } for pid=14080 comm="syz.7.2097" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 736.083488][ T30] audit: type=1400 audit(1760333961.429:603): avc: denied { ioctl open } for pid=14080 comm="syz.7.2097" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 736.138395][ T30] audit: type=1400 audit(1760333961.519:604): avc: denied { name_connect } for pid=14080 comm="syz.7.2097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 737.511720][T12267] usb 10-1: USB disconnect, device number 6 [ 738.226693][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2106'. [ 738.266313][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 738.741924][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.754086][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.766774][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 739.319003][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.535676][T12267] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 739.602979][ T24] usb 7-1: config 0 descriptor?? [ 739.715531][ T5931] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 739.745407][T12267] usb 10-1: Using ep0 maxpacket: 8 [ 739.762200][T12267] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.788619][T12267] usb 10-1: config 0 has no interfaces? [ 739.990744][T12267] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 740.000513][T12267] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.012951][T12267] usb 10-1: config 0 descriptor?? [ 740.018073][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 740.027245][ T5931] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 740.462115][ T24] usbhid 7-1:0.0: can't add hid device: -32 [ 740.466001][T14133] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2116'. [ 740.476294][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 740.480466][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 740.502344][ T24] usb 7-1: USB disconnect, device number 8 [ 740.529374][ T5931] usb 5-1: Product: syz [ 740.530050][ T5893] usb 10-1: USB disconnect, device number 7 [ 740.550433][ T5931] usb 5-1: SerialNumber: syz [ 740.683752][ T5931] usb 5-1: config 0 descriptor?? [ 740.705138][ T5931] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 740.725903][ T5931] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 740.746029][ T5931] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 740.754978][ T5931] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 740.954655][T14166] binder: 14165:14166 ioctl c0306201 200000000640 returned -22 [ 741.204271][T10568] Bluetooth: hci2: Malformed Event: 0x02 [ 742.137649][ T5931] usb 5-1: USB disconnect, device number 19 [ 742.305864][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2129'. [ 742.725946][T14204] Bluetooth: MGMT ver 1.23 [ 743.380416][ T5814] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 743.452373][T14220] binder: 14215:14220 ioctl c0306201 200000000640 returned -22 [ 743.507673][ T5871] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 743.615549][ T5814] usb 10-1: Using ep0 maxpacket: 8 [ 743.633639][ T5814] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 743.666268][ T5814] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.697452][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.720699][ T5814] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.735855][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.762496][ T5814] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.780881][ T5871] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 743.792344][T10568] Bluetooth: hci5: Malformed Event: 0x02 [ 744.585248][ T5814] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.598466][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.925972][ T5871] usb 8-1: config 0 descriptor?? [ 744.931453][ T5814] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 744.945790][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.100610][T10568] Bluetooth: hci5: Malformed Event: 0x02 [ 745.245935][ T5814] usb 10-1: usb_control_msg returned -32 [ 745.985547][ T5814] usbtmc 10-1:16.0: can't read capabilities [ 746.009985][ T5814] usb 10-1: USB disconnect, device number 8 [ 746.168837][ T5871] usbhid 8-1:0.0: can't add hid device: -32 [ 746.747596][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.778554][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.788400][ T5871] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 746.850628][ T5871] usb 8-1: USB disconnect, device number 11 [ 747.433058][T14271] lo: entered allmulticast mode [ 747.689472][T14271] dvmrp1: entered allmulticast mode [ 747.738504][T14270] lo: left allmulticast mode [ 748.236748][T14280] tipc: Started in network mode [ 748.241687][T14280] tipc: Node identity ac141413, cluster identity 4711 [ 748.249561][T14280] tipc: New replicast peer: 10.1.1.2 [ 748.255098][T14280] tipc: Enabled bearer , priority 10 [ 748.657964][ T30] audit: type=1400 audit(1760333974.099:605): avc: denied { create } for pid=14285 comm="syz.6.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.677354][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.373346][ T5814] tipc: Node number set to 2886997011 [ 749.420667][T14316] binder: 14307:14316 ioctl c0306201 200000000640 returned -22 [ 749.575631][ T5893] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 749.907609][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.918630][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.936230][ T5893] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 749.959357][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.039239][ T5893] usb 9-1: config 0 descriptor?? [ 750.065979][T14322] input: syz1 as /devices/virtual/input/input17 [ 750.463764][ T5893] usbhid 9-1:0.0: can't add hid device: -32 [ 750.616349][ T5893] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 751.085312][ T5893] usb 9-1: USB disconnect, device number 14 [ 751.165788][T14342] gfs2: gfs2 mount does not exist [ 752.304453][T14360] comedi comedi3: comedi_config --init_data is deprecated [ 753.385119][T14370] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 753.656964][T14380] input: syz1 as /devices/virtual/input/input18 [ 754.064604][ T30] audit: type=1400 audit(1760333979.529:606): avc: denied { connect } for pid=14391 comm="syz.7.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.109297][ T30] audit: type=1400 audit(1760333979.579:607): avc: denied { ioctl } for pid=14391 comm="syz.7.2174" path="socket:[51503]" dev="sockfs" ino=51503 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.235433][ T5931] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 754.516939][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.534457][ T5931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.552600][ T5931] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 755.092119][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.120359][ T5931] usb 10-1: config 0 descriptor?? [ 755.573815][ T5931] usbhid 10-1:0.0: can't add hid device: -32 [ 755.580046][ T5931] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 755.603760][ T5931] usb 10-1: USB disconnect, device number 9 [ 755.683994][ T30] audit: type=1804 audit(1760333981.149:608): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2179" name="/newroot/168/file0" dev="tmpfs" ino=903 res=1 errno=0 [ 756.660265][T14437] delete_channel: no stack [ 758.007613][ T5931] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 758.308564][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.411145][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.464845][ T5931] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 758.516343][ T5931] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.548518][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.607303][ T5931] usb 7-1: config 0 descriptor?? [ 759.341594][ T5931] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 759.411361][ T5931] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 759.787077][ T5871] usb 7-1: USB disconnect, device number 9 [ 760.332694][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2194'. [ 760.374590][ T5871] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 760.567334][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.869070][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.892069][ T5871] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 760.925476][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.953310][ T5871] usb 5-1: config 0 descriptor?? [ 761.541387][ T5871] usbhid 5-1:0.0: can't add hid device: -32 [ 761.569129][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 761.678388][ T5871] usb 5-1: USB disconnect, device number 20 [ 762.985921][T14541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.524309][T14543] comedi comedi3: comedi_config --init_data is deprecated [ 766.853393][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 766.873558][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 767.023807][T14587] ceph: No mds server is up or the cluster is laggy [ 767.167800][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 767.173987][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 767.201648][ T30] audit: type=1400 audit(1760333992.659:609): avc: denied { connect } for pid=14602 comm="syz.9.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.803046][T14610] bad cache= option: noneksize : 16 [ 767.803046][T14610] min keysize : 32 [ 767.803046][T14610] max keysize : 48 [ 767.803046][T14610] ivsize : 16 [ 767.803046][T14610] chunksize : 16 [ 767.803046][T14610] walksize : 16 [ 767.803046][T14610] statesize : 0 [ 767.803046][T14610] [ 767.803046][T14610] name : xts(aes) [ 767.803046][T14610] driver : xts(ecb-aes-aesni) [ 767.803046][T14610] module : kernel [ 767.803046][T14610] priority : 400 [ 767.803046][T14610] refcnt : 1 [ 767.803046][T14610] selftest : passed [ 767.803046][T14610] internal : no [ 767.803046][T14610] type : skcipher [ 767.803046][T14610] async : no [ 767.803046][T14610] blocksize : 16 [ 767.803046][T14610] min keysize : 32 [ 767.803046][T14610] max keysize : 64 [ 767.803046][T14610] ivsize : 16 [ 767.803046][T14610] chunksize : 16 [ 767.803046][T14610] walksize : 16 [ 767.803046][T14610] statesize : 0 [ 767.803046][T14610] [ 767.803046][T14610] name : ccm(aes) [ 767.803046][T14610] driver : ccm_base(ctr-aes-aesni-avx [ 767.803046][T14610] [ 767.910298][T14610] CIFS: VFS: bad cache= option: noneksize : 16 [ 767.910298][T14610] min keysize : 32 [ 767.910298][T14610] max keysize : 48 [ 767.910298][T14610] ivsize : 16 [ 767.910298][T14610] chunksize : 16 [ 767.910298][T14610] walksize : 16 [ 767.910298][T14610] statesize : 0 [ 767.910298][T14610] [ 767.910298][T14610] name : xts(aes) [ 767.910298][T14610] driver : xts(ecb-aes-aesni) [ 767.910298][T14610] module : kernel [ 767.910298][T14610] priority : 400 [ 767.910298][T14610] refcnt : 1 [ 767.910298][T14610] selftest : passed [ 767.910298][T14610] internal : no [ 767.910298][T14610] type : skcipher [ 767.910298][T14610] async : no [ 767.910298][T14610] blocksize : 16 [ 767.910298][T14610] min keysize : 32 [ 767.910298][T14610] max keysize : 64 [ 767.910298][T14610] ivsize : 16 [ 767.910298][T14610] chunksize : 16 [ 767.910298][T14610] walksize : 16 [ 767.910298][T14610] statesize : 0 [ 767.910298][T14610] [ 767.910298][T14610] name : ccm(aes) [ 767.910298][T14610] driver : ccm_base(ctr-aes-aesni-avx [ 769.168915][T10568] Bluetooth: hci1: Malformed Event: 0x02 [ 770.862220][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2242'. [ 771.362278][ T30] audit: type=1804 audit(1760333996.829:610): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2245" name="/newroot/75/file0" dev="tmpfs" ino=401 res=1 errno=0 [ 773.045173][T14698] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2252'. [ 775.719796][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2263'. [ 776.027298][T14737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.115405][ T5931] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 776.297208][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.648231][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.710323][ T5931] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 776.744546][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.775022][ T5931] usb 7-1: config 0 descriptor?? [ 777.209325][ T5931] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 777.286033][T14770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.432054][ T5931] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 777.517992][ T5931] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 778.493324][T14733] cp2112 0003:10C4:EA90.0008: Error starting transaction: -38 [ 778.553359][ T5931] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 778.569095][ T5931] usb 7-1: USB disconnect, device number 10 [ 779.548689][T14797] delete_channel: no stack [ 781.230985][ T30] audit: type=1400 audit(1760334006.699:611): avc: denied { getopt } for pid=14821 comm="syz.9.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 783.165431][T12267] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 783.326803][T12267] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 783.340270][T12267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.358650][T12267] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 783.799178][T12267] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 783.810641][T12267] usb 7-1: Manufacturer: syz [ 783.820089][T12267] usb 7-1: config 0 descriptor?? [ 783.958021][T12267] rc_core: IR keymap rc-hauppauge not found [ 784.030694][T12267] Registered IR keymap rc-empty [ 784.037993][T12267] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 784.311629][T12267] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 784.340665][T14860] delete_channel: no stack [ 784.517672][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 784.560812][T14868] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2304'. [ 784.575964][T12267] usb 7-1: USB disconnect, device number 11 [ 784.667325][T10568] Bluetooth: hci3: command 0x0406 tx timeout [ 785.398083][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 785.429934][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 785.461354][T14893] ceph: No mds server is up or the cluster is laggy [ 785.475727][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 785.486442][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 787.023293][T14927] xt_hashlimit: max too large, truncated to 1048576 [ 789.356600][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 789.664308][T14973] tipc: Started in network mode [ 789.669495][T14973] tipc: Node identity ac141413, cluster identity 4711 [ 789.680304][T14973] tipc: Enabling of bearer rejected, failed to enable media [ 790.252597][ T5813] Bluetooth: hci5: Malformed Event: 0x02 [ 796.959335][T15077] comedi comedi3: comedi_config --init_data is deprecated [ 799.587171][T15106] tipc: Enabling of bearer rejected, failed to enable media [ 800.409727][T15109] netlink: 512 bytes leftover after parsing attributes in process `syz.6.2377'. [ 800.516821][T15115] comedi comedi3: comedi_config --init_data is deprecated [ 803.590889][T15162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.113374][T15204] input: syz1 as /devices/virtual/input/input21 [ 807.353450][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2408'. [ 807.981058][T15225] binder: 15224:15225 ioctl c0306201 200000000640 returned -22 [ 808.086354][ T5813] Bluetooth: hci1: Malformed Event: 0x02 [ 808.199369][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.945474][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.367780][T15260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 810.465532][ T5893] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 810.491331][T15267] binder: 15265:15267 ioctl c0306201 200000000640 returned -22 [ 810.687723][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 810.709850][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.779127][T15274] comedi comedi3: comedi_config --init_data is deprecated [ 811.168757][ T5893] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.178464][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 811.187575][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.221911][ T5893] usb 5-1: config 0 descriptor?? [ 811.473208][ T5893] usb 5-1: USB disconnect, device number 21 [ 812.682614][T12267] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 813.071583][T12267] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 813.082597][T12267] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.098496][T12267] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 813.119851][T12267] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 813.289675][T12267] usb 10-1: Manufacturer: syz [ 813.317407][T12267] usb 10-1: config 0 descriptor?? [ 813.517020][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2437'. [ 813.685451][ T5893] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 813.880621][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 813.907240][ T5893] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 813.916605][T12267] rc_core: IR keymap rc-hauppauge not found [ 813.916622][T12267] Registered IR keymap rc-empty [ 813.918345][T12267] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 813.940112][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 813.968334][T12267] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input22 [ 814.038090][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 814.056372][ T5893] usb 5-1: Product: syz [ 814.060554][ T5893] usb 5-1: SerialNumber: syz [ 814.078482][ T5893] usb 5-1: config 0 descriptor?? [ 814.084567][T12267] usb 10-1: USB disconnect, device number 10 [ 814.088108][ T5893] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 814.113760][ T5893] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 814.153591][T15311] binder: 15309:15311 ioctl c0306201 200000000640 returned -22 [ 814.182085][ T5893] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 814.192130][ T5893] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 814.242584][ T30] audit: type=1804 audit(1760334039.709:612): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2439" name="/newroot/223/file0" dev="tmpfs" ino=1185 res=1 errno=0 [ 815.718398][T12318] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 815.887240][T12318] usb 7-1: Using ep0 maxpacket: 8 [ 815.887986][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2449'. [ 815.956996][T15345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.082958][T12318] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.093640][T12318] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 816.106764][T12318] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 816.120985][T12318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.206364][ T910] usb 5-1: USB disconnect, device number 22 [ 816.217563][T12318] usb 7-1: config 0 descriptor?? [ 816.431169][T12318] usb 7-1: USB disconnect, device number 12 [ 817.916134][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2461'. [ 818.122457][ T5813] Bluetooth: hci2: Malformed Event: 0x02 [ 818.970465][T15398] binder: 15397:15398 ioctl c0306201 200000000640 returned -22 [ 820.037027][T15421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.662176][T15465] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 823.649685][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2487'. [ 824.637983][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2492'. [ 825.712448][T15508] input: syz1 as /devices/virtual/input/input24 [ 826.854649][ T30] audit: type=1400 audit(1760334052.319:613): avc: denied { name_bind } for pid=15527 comm="syz.6.2503" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 827.746014][T15544] gfs2: gfs2 mount does not exist [ 827.865609][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 827.913642][ T30] audit: type=1400 audit(1760334053.379:614): avc: denied { create } for pid=15550 comm="syz.6.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 827.944530][ T30] audit: type=1400 audit(1760334053.409:615): avc: denied { write } for pid=15550 comm="syz.6.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 827.975004][ T30] audit: type=1400 audit(1760334053.409:616): avc: denied { nlmsg_write } for pid=15550 comm="syz.6.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 828.027480][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.039706][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 828.053014][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.069823][ T24] usb 5-1: config 0 descriptor?? [ 828.115417][ T5871] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 828.238172][T15559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.397721][T15560] overlayfs: overlapping lowerdir path [ 828.416894][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.428094][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.443668][ T5871] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 828.455953][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 828.461950][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 828.475372][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.495469][ T24] usb 5-1: USB disconnect, device number 23 [ 828.504091][ T5871] usb 10-1: config 0 descriptor?? [ 828.932862][ T5871] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 828.979252][ T5871] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 829.143010][ T5871] cp2112 0003:10C4:EA90.0009: error requesting version [ 829.164429][ T5871] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 829.803928][T15592] gfs2: gfs2 mount does not exist [ 829.997671][T15596] tipc: Enabling of bearer rejected, failed to enable media [ 830.368801][T15600] xt_hashlimit: max too large, truncated to 1048576 [ 831.062864][ T24] usb 10-1: USB disconnect, device number 11 [ 831.372757][T15614] overlayfs: overlapping lowerdir path [ 831.775463][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 831.967779][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 832.016722][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.043142][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 832.059619][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 832.084707][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.209268][ T24] usb 9-1: config 0 descriptor?? [ 832.705231][ T24] usb 9-1: USB disconnect, device number 15 [ 833.835618][ T910] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 833.851972][T15649] delete_channel: no stack [ 834.037899][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.057441][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.077770][ T910] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 834.097962][ T910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.186675][ T910] usb 9-1: config 0 descriptor?? [ 834.434006][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 834.715862][ T910] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 834.918894][ T910] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 834.987035][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.005439][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.009846][ T910] cp2112 0003:10C4:EA90.000A: error requesting version [ 835.015294][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.036318][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.045790][ T910] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 835.063596][T15657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 835.078043][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.743712][ T24] usb 5-1: USB disconnect, device number 24 [ 837.371339][ T5893] usb 9-1: USB disconnect, device number 16 [ 837.631017][T15698] delete_channel: no stack [ 838.103891][ T30] audit: type=1400 audit(1760334063.569:617): avc: denied { read } for pid=15699 comm="syz.8.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 838.319338][ T30] audit: type=1400 audit(1760334063.729:618): avc: denied { create } for pid=15706 comm="syz.4.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 838.477498][ T30] audit: type=1400 audit(1760334063.739:619): avc: denied { ioctl } for pid=15706 comm="syz.4.2559" path="socket:[55790]" dev="sockfs" ino=55790 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 838.594345][ T30] audit: type=1400 audit(1760334063.759:620): avc: denied { connect } for pid=15706 comm="syz.4.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 838.860390][T15714] xt_hashlimit: max too large, truncated to 1048576 [ 839.263904][T15724] comedi comedi3: comedi_config --init_data is deprecated [ 839.390253][T15725] gfs2: gfs2 mount does not exist [ 839.485943][T12318] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 839.776964][T12318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.798974][T12318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.812613][T12318] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 839.822012][T12318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.832834][T12318] usb 5-1: config 0 descriptor?? [ 840.327118][T12318] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 840.356650][T12318] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 840.518829][T12318] cp2112 0003:10C4:EA90.000B: error requesting version [ 840.532198][T12318] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 842.952488][T12318] usb 5-1: USB disconnect, device number 25 [ 843.176570][T15774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.216112][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 843.396275][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 843.406472][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 843.441207][ T24] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 843.484706][ T24] usb 7-1: Product: syz [ 843.493385][ T24] usb 7-1: SerialNumber: syz [ 843.495681][T12318] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 843.508728][ T24] usb 7-1: config 0 descriptor?? [ 843.524408][ T24] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 843.665509][T12318] usb 5-1: Using ep0 maxpacket: 8 [ 843.675061][T12318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.677509][ T24] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 843.694885][ T24] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 843.697080][T12318] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.701395][ T24] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 843.723305][T12318] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 843.737836][T12318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.763405][T12318] usb 5-1: config 0 descriptor?? [ 844.115096][ T910] usb 5-1: USB disconnect, device number 26 [ 844.442696][ T30] audit: type=1400 audit(1760334069.909:621): avc: denied { write } for pid=15794 comm="syz.9.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 845.174285][ T910] usb 7-1: USB disconnect, device number 13 [ 846.413452][T15824] delete_channel: no stack [ 849.061634][T15867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.625146][T15892] 9pnet_fd: Insufficient options for proto=fd [ 850.639339][ T5813] Bluetooth: hci5: Malformed Event: 0x02 [ 852.562566][ T30] audit: type=1326 audit(1760334078.029:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.2622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a378eec9 code=0x0 [ 852.585790][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.810652][T15922] xt_hashlimit: max too large, truncated to 1048576 [ 855.219517][T12318] libceph: connect (1)[c::]:6789 error -101 [ 855.251798][T12318] libceph: mon0 (1)[c::]:6789 connect error [ 855.268073][T12318] libceph: connect (1)[c::]:6789 error -101 [ 855.274684][T12318] libceph: mon0 (1)[c::]:6789 connect error [ 855.561767][T12318] libceph: connect (1)[c::]:6789 error -101 [ 855.645141][T12318] libceph: mon0 (1)[c::]:6789 connect error [ 855.732294][T15952] fuse: Bad value for 'fd' [ 856.031463][T15944] ceph: No mds server is up or the cluster is laggy [ 856.915376][ T5813] Bluetooth: hci0: Malformed Event: 0x02 [ 857.293705][T15986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2648'. [ 857.338754][T15975] cgroup: fork rejected by pids controller in /syz6 [ 861.204041][T12318] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 861.469060][T16044] Bluetooth: hci1: command 0x0406 tx timeout [ 861.670917][T12318] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.785823][T12318] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.805424][T12318] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.815728][T12318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.831616][T16072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.849083][T12318] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.800364][T12318] usb 5-1: USB disconnect, device number 27 [ 863.922331][ T30] audit: type=1400 audit(1760334089.389:623): avc: denied { read write } for pid=16123 comm="syz.9.2682" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 863.949624][ T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 863.974829][ T30] audit: type=1400 audit(1760334089.389:624): avc: denied { open } for pid=16123 comm="syz.9.2682" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 864.000755][ T24] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 864.008481][T16127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2683'. [ 865.871085][ T910] libceph: connect (1)[c::]:6789 error -101 [ 865.885654][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 866.157733][ T910] libceph: connect (1)[c::]:6789 error -101 [ 866.171426][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 866.576866][T16152] ceph: No mds server is up or the cluster is laggy [ 866.765973][ T910] libceph: connect (1)[c::]:6789 error -101 [ 866.791732][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 866.942914][T16176] comedi comedi3: comedi_config --init_data is deprecated [ 867.195705][T16182] xt_hashlimit: max too large, truncated to 1048576 [ 868.657094][ T43] libceph: connect (1)[c::]:6789 error -101 [ 868.669081][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 868.948167][ T24] libceph: connect (1)[c::]:6789 error -101 [ 868.979436][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 869.447321][T16239] ceph: No mds server is up or the cluster is laggy [ 869.628663][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.635013][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.815535][T16265] gfs2: gfs2 mount does not exist [ 873.950944][T16311] binder: BINDER_SET_CONTEXT_MGR already set [ 873.959244][T16311] binder: 16309:16311 ioctl 4018620d 2000000002c0 returned -16 [ 873.971708][ T30] audit: type=1400 audit(1760334099.419:625): avc: denied { map } for pid=16309 comm="syz.7.2729" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 875.800686][T16343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.352774][T16355] gfs2: gfs2 mount does not exist [ 877.620950][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2750'. [ 882.948607][T16454] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2774'. [ 885.425520][ T910] libceph: connect (1)[c::]:6789 error -101 [ 885.460101][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 885.848049][ T910] libceph: connect (1)[c::]:6789 error -101 [ 885.877657][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 886.092448][T16496] syz2: rxe_newlink: already configured on ip6gretap0 [ 886.204390][T16480] ceph: No mds server is up or the cluster is laggy [ 886.838446][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2790'. [ 891.800307][T16599] binder: BINDER_SET_CONTEXT_MGR already set [ 891.806345][T16599] binder: 16597:16599 ioctl 4018620d 2000000002c0 returned -16 [ 891.844439][ T5813] Bluetooth: hci1: Malformed Event: 0x02 [ 891.849000][T12267] libceph: connect (1)[c::]:6789 error -101 [ 891.996052][ T30] audit: type=1326 audit(1760334117.409:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.7.2820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b74d8eec9 code=0x0 [ 892.026728][T12267] libceph: mon0 (1)[c::]:6789 connect error [ 892.345779][T12267] libceph: connect (1)[c::]:6789 error -101 [ 892.354656][T12267] libceph: mon0 (1)[c::]:6789 connect error [ 892.595486][T16598] ceph: No mds server is up or the cluster is laggy [ 895.321404][T12267] libceph: connect (1)[c::]:6789 error -101 [ 895.352256][T12267] libceph: mon0 (1)[c::]:6789 connect error [ 895.372950][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2837'. [ 895.404731][ T30] audit: type=1400 audit(1760334120.869:627): avc: denied { connect } for pid=16661 comm="syz.7.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 895.462078][T16664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.476301][ T30] audit: type=1400 audit(1760334120.929:628): avc: denied { ioctl } for pid=16661 comm="syz.7.2837" path="socket:[58955]" dev="sockfs" ino=58955 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 895.509840][T16664] bond0: (slave rose0): Enslaving as an active interface with an up link [ 895.646050][T12267] libceph: connect (1)[c::]:6789 error -101 [ 895.654820][T12267] libceph: mon0 (1)[c::]:6789 connect error [ 895.818010][ T30] audit: type=1326 audit(1760334121.229:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.6.2838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a378eec9 code=0x0 [ 896.055923][T16676] binder: BINDER_SET_CONTEXT_MGR already set [ 896.061918][T16676] binder: 16675:16676 ioctl 4018620d 2000000002c0 returned -16 [ 896.106242][T16658] ceph: No mds server is up or the cluster is laggy [ 897.685843][ T43] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 897.906683][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 897.920011][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 897.939302][ T43] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 897.958054][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.967795][ T43] usb 9-1: Product: syz [ 897.974767][ T43] usb 9-1: Manufacturer: syz [ 897.984770][ T43] usb 9-1: SerialNumber: syz [ 897.997754][ T43] usb 9-1: config 0 descriptor?? [ 898.025125][ T43] hub 9-1:0.0: bad descriptor, ignoring hub [ 898.042450][ T43] hub 9-1:0.0: probe with driver hub failed with error -5 [ 898.195872][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 898.204902][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 898.240502][ T43] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 898.253708][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.264624][ T43] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 898.273924][ T43] usb 9-1: media controller created [ 898.399669][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.516273][ T43] DVB: Unable to find symbol dib7000p_attach() [ 898.538406][ T43] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 898.718749][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 898.725102][ T30] audit: type=1326 audit(1760334124.189:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.4.2856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58f118eec9 code=0x0 [ 898.748271][T16720] ceph: No mds server is up or the cluster is laggy [ 898.778858][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 898.785784][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 898.842794][ T43] Registered IR keymap rc-empty [ 898.914188][ T43] dvb-usb: could not initialize remote control. [ 899.005111][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 899.058218][ T30] audit: type=1400 audit(1760334124.529:631): avc: denied { mount } for pid=16762 comm="syz.9.2857" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 899.161752][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.249560][ T30] audit: type=1400 audit(1760334124.639:632): avc: denied { mounton } for pid=16762 comm="syz.9.2857" path="/277/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 899.320979][ T30] audit: type=1400 audit(1760334124.709:633): avc: denied { unmount } for pid=11239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 899.443702][T16772] binder: 16769:16772 ioctl 4018620d 0 returned -22 [ 899.590551][ T43] usb 9-1: USB disconnect, device number 17 [ 899.751227][ T910] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 899.796225][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 899.976786][ T910] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 899.984879][ T910] usb 8-1: config 0 has no interface number 0 [ 899.994565][ T910] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 900.008433][ T910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.016505][ T910] usb 8-1: Product: syz [ 900.020688][ T910] usb 8-1: Manufacturer: syz [ 900.025307][ T910] usb 8-1: SerialNumber: syz [ 900.033706][ T910] usb 8-1: config 0 descriptor?? [ 900.278949][ T910] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 900.290413][ T910] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 900.302951][ T910] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 900.311742][ T910] usb 8-1: media controller created [ 900.932897][ T910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.277752][ T910] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 902.390111][ T910] usb 8-1: USB disconnect, device number 12 [ 902.578782][T16818] syz2: rxe_newlink: already configured on ip6gretap0 [ 902.586110][T16815] comedi comedi3: comedi_config --init_data is deprecated [ 904.034102][ T30] audit: type=1400 audit(1760334129.079:634): avc: denied { ioctl } for pid=16829 comm="syz.8.2879" path="socket:[60029]" dev="sockfs" ino=60029 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 906.882831][ T5813] Bluetooth: hci5: Malformed Event: 0x02 [ 907.142730][ T910] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 907.767946][ T5813] Bluetooth: hci5: Malformed Event: 0x02 [ 908.355183][ T910] usb 5-1: Using ep0 maxpacket: 32 [ 908.632416][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 908.650925][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 908.670037][ T910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.691199][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 908.856729][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 909.052320][ T910] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 909.071687][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.101992][ T910] usb 5-1: Product: syz [ 909.120343][ T910] usb 5-1: Manufacturer: syz [ 909.148547][ T910] usb 5-1: SerialNumber: syz [ 909.172411][ T910] usb 5-1: config 0 descriptor?? [ 909.188100][T16873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 909.220595][ T910] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 909.249225][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.315986][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.344670][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.395641][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.434838][ T6188] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.503313][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.517835][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.535918][ T5814] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 909.591247][T16903] xt_hashlimit: max too large, truncated to 1048576 [ 909.760619][T16873] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.773036][ T5167] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 909.807541][ T5864] usb 5-1: USB disconnect, device number 28 [ 909.813549][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 909.928736][ T5814] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 909.940405][ T5814] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 909.974820][ T5814] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 909.984867][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.008795][T16898] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 910.038067][ T5814] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.290620][ T5864] usb 7-1: USB disconnect, device number 14 [ 911.475411][ T30] audit: type=1400 audit(1760334136.909:635): avc: denied { append } for pid=16917 comm="syz.8.2906" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 911.498713][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.446008][T16939] syz2: rxe_newlink: already configured on ip6gretap0 [ 913.100313][T16959] xt_hashlimit: max too large, truncated to 1048576 [ 919.118268][T17034] comedi comedi3: comedi_config --init_data is deprecated [ 919.594148][T17041] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 919.725346][T12319] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 919.905673][ T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 919.975718][ T24] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 920.006373][T12319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.022870][T12319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.032742][T12319] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 920.041852][T12319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.057450][T12319] usb 5-1: config 0 descriptor?? [ 921.078941][T12319] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 921.090001][T12319] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 921.203000][T12319] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 921.227965][T12319] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 921.327860][T12319] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 921.451103][ T5813] Bluetooth: hci1: Malformed Event: 0x02 [ 922.570310][T17080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.632259][T12319] usb 5-1: USB disconnect, device number 29 [ 924.976203][T17119] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 925.255365][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 925.512711][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.525232][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.540873][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 925.550469][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.759024][ T43] usb 5-1: config 0 descriptor?? [ 926.574919][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 926.589608][ T43] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 926.987509][ T43] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 927.190412][ T43] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 927.245790][ T43] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 928.032269][T17163] loop5: detected capacity change from 0 to 7 [ 928.166480][T13113] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.176142][T13113] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.185771][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.205465][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.224376][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.245172][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.263817][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.273295][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.281743][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.290941][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.298925][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.308083][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.316236][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.325448][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.333368][T17163] ldm_validate_partition_table(): Disk read failed. [ 928.340734][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.351439][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.361971][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.373150][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.383103][T17163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.397982][T17163] Buffer I/O error on dev loop5, logical block 0, async page read [ 928.406678][T17163] Dev loop5: unable to read RDB block 0 [ 928.412662][T17163] loop5: unable to read partition table [ 928.507067][T17163] loop5: partition table beyond EOD, truncated [ 928.513357][T17163] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 928.669949][ T5814] usb 5-1: USB disconnect, device number 30 [ 928.824247][ T5813] Bluetooth: hci3: Malformed Event: 0x02 [ 929.936463][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 930.112733][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 930.866396][T17180] ceph: No mds server is up or the cluster is laggy [ 931.068912][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.078314][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.501971][T17212] xt_hashlimit: max too large, truncated to 1048576 [ 931.775364][T12319] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 931.884554][T17215] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 931.947103][T12319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.948780][ T5813] Bluetooth: hci5: Malformed Event: 0x02 [ 931.954601][T12319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.954640][T12319] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 931.954660][T12319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.993144][T12319] usb 9-1: config 0 descriptor?? [ 933.200163][T12319] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 933.325548][T12319] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 933.466400][T12319] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 933.657695][T12319] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 933.666937][T12319] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -32 [ 935.612683][T12319] usb 9-1: USB disconnect, device number 18 [ 936.402413][T12319] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 936.616853][T12319] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 936.639152][T12319] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 936.669087][T12319] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 936.688971][T12319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.740709][T17261] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 936.770734][T12319] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.341793][T12319] usb 9-1: USB disconnect, device number 19 [ 938.758282][T17297] tc_dump_action: action bad kind [ 941.296603][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 941.318852][T17323] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 942.615570][ T910] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 942.957961][ T910] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 943.010169][T12319] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 943.400164][ T910] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 943.412121][T12319] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 943.432996][ T910] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 943.442943][ T910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.475507][T17340] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 943.488066][ T910] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.537098][T17352] ip6gretap0 speed is unknown, defaulting to 1000 [ 943.766637][T12319] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 943.867818][ T910] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 944.048722][ T5814] usb 10-1: USB disconnect, device number 12 [ 944.075456][T12319] usb 8-1: device descriptor read/64, error -71 [ 944.105701][ T910] usb 9-1: Using ep0 maxpacket: 32 [ 944.120517][ T910] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 944.131591][ T910] usb 9-1: config 0 has no interface number 0 [ 944.137840][ T910] usb 9-1: config 0 interface 209 has no altsetting 0 [ 944.146631][ T910] usb 9-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 944.159464][ T910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.171229][ T910] usb 9-1: Product: syz [ 944.175499][ T910] usb 9-1: Manufacturer: syz [ 944.180256][ T910] usb 9-1: SerialNumber: syz [ 944.187962][ T910] usb 9-1: config 0 descriptor?? [ 944.325374][T12319] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 944.345472][ T5864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 944.442448][ T910] usb 9-1: USB disconnect, device number 20 [ 944.456383][T12319] usb 8-1: device descriptor read/64, error -71 [ 944.498298][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.510878][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.520965][ T5864] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 944.530277][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.544096][ T5864] usb 5-1: config 0 descriptor?? [ 944.565891][T12319] usb usb8-port1: attempt power cycle [ 944.688689][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3036'. [ 944.701058][T17365] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 944.925432][T12319] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 944.948086][T12319] usb 8-1: device descriptor read/8, error -71 [ 944.966905][ T5864] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 944.982089][ T5864] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 945.163453][ T5864] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 945.186880][T12319] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 945.236059][T12319] usb 8-1: device descriptor read/8, error -71 [ 945.345559][T12319] usb usb8-port1: unable to enumerate USB device [ 945.363998][ T5864] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 945.378962][ T5864] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32 [ 946.218929][ T910] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 946.229737][ T910] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 946.375434][ T910] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 946.535613][ T910] usb 9-1: Using ep0 maxpacket: 16 [ 946.556979][ T910] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 946.572860][ T910] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 946.585577][ T910] usb 9-1: Product: syz [ 946.589778][ T910] usb 9-1: SerialNumber: syz [ 946.599067][ T910] usb 9-1: config 0 descriptor?? [ 946.631904][ T910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 946.643546][ T910] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 946.658949][ T910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 946.666510][ T910] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 947.122498][ T24] usb 5-1: USB disconnect, device number 31 [ 947.193668][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 947.208238][T17402] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 947.400225][T17407] binder: BINDER_SET_CONTEXT_MGR already set [ 947.406477][T17407] binder: 17406:17407 ioctl 4018620d 2000000002c0 returned -16 [ 949.058823][ T24] usb 9-1: USB disconnect, device number 21 [ 949.128432][T17423] fuse: Unknown parameter 'group_i00000000000000000000' [ 949.794996][ T43] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 949.824051][T12319] libceph: connect (1)[c::]:6789 error -101 [ 949.833073][T12319] libceph: mon0 (1)[c::]:6789 connect error [ 950.264116][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.383571][T12319] libceph: connect (1)[c::]:6789 error -101 [ 950.389728][T12319] libceph: mon0 (1)[c::]:6789 connect error [ 950.399126][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.409182][ T43] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 950.420966][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.431693][ T43] usb 8-1: config 0 descriptor?? [ 950.648749][T17431] ceph: No mds server is up or the cluster is laggy [ 950.719063][ T5813] Bluetooth: hci3: Malformed Event: 0x02 [ 951.643265][ T43] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 951.657332][ T43] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 951.854195][ T43] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 952.052842][ T43] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 952.102191][ T43] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 953.049545][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'. [ 953.514894][T12319] usb 8-1: USB disconnect, device number 17 [ 954.176162][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 954.420853][T17491] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 954.637506][ T2960] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.662723][ T2960] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 954.681352][T16044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.693471][T16044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.705676][T16044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.715042][T16044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.722695][T16044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 954.789477][T17494] ip6gretap0 speed is unknown, defaulting to 1000 [ 954.839825][ T2960] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.863388][ T2960] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 954.959139][ T2960] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.971172][ T2960] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 955.084003][ T2960] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.102528][ T2960] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 955.738863][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3082'. [ 956.473403][ T2960] bridge_slave_1: left allmulticast mode [ 956.485523][ T2960] bridge_slave_1: left promiscuous mode [ 956.498237][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.526131][ T2960] bridge_slave_0: left allmulticast mode [ 956.542824][ T2960] bridge_slave_0: left promiscuous mode [ 956.555942][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.755408][T16044] Bluetooth: hci4: command tx timeout [ 956.853692][ T79] smc: removing ib device syz2 [ 957.462762][T17549] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 957.527732][T17549] Error validating options; rc = [-22] [ 958.645048][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.664503][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.736710][ T2960] bond0 (unregistering): Released all slaves [ 958.782662][ T5814] ip6gretap0 speed is unknown, defaulting to 1000 [ 958.804262][ T5814] syz2: Port: 1 Link DOWN [ 958.806383][T12319] ip6gretap0 speed is unknown, defaulting to 1000 [ 958.825353][T16044] Bluetooth: hci4: command tx timeout [ 958.914518][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3096'. [ 959.662720][T17494] chnl_net:caif_netlink_parms(): no params data found [ 960.125391][ T5871] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 960.275487][T17494] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.295433][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.313155][T17494] bridge_slave_0: entered allmulticast mode [ 960.326913][T17494] bridge_slave_0: entered promiscuous mode [ 960.345754][T17494] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.368276][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.396830][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.420449][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.428779][T17494] bridge_slave_1: entered allmulticast mode [ 960.568450][T17494] bridge_slave_1: entered promiscuous mode [ 960.889520][ T43] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 960.897822][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 960.907916][T16044] Bluetooth: hci4: command tx timeout [ 960.913798][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.927505][ T5871] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.936790][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.959577][ T5871] usb 10-1: config 0 descriptor?? [ 961.101809][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 961.138090][ T43] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 961.147174][ T43] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 961.158257][ T43] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 961.172623][ T43] usb 8-1: config 250 has no interface number 0 [ 961.179301][ T43] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 961.233642][ T43] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 961.238251][T17494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.264491][ T43] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 961.293670][ T43] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 961.319494][T17494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.448898][T17494] team0: Port device team_slave_0 added [ 961.472088][ T43] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 961.490452][ T43] usb 8-1: config 250 interface 228 has no altsetting 0 [ 961.495198][T17494] team0: Port device team_slave_1 added [ 961.499773][ T5871] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 961.518520][ T43] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 961.529318][ T43] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 961.538229][ T43] usb 8-1: Product: syz [ 961.542500][ T43] usb 8-1: SerialNumber: syz [ 961.565703][ T43] hub 8-1:250.228: bad descriptor, ignoring hub [ 961.572131][ T43] hub 8-1:250.228: probe with driver hub failed with error -5 [ 961.595815][T17615] netlink: 'syz.8.3104': attribute type 4 has an invalid length. [ 961.603602][T17615] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3104'. [ 961.785677][ C0] ------------[ cut here ]------------ [ 961.791425][ C0] ODEBUG: free active (active state 0) object: ffff888029f03c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 961.804671][ C0] WARNING: CPU: 0 PID: 17614 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 961.814269][ C0] Modules linked in: [ 961.818477][ C0] CPU: 0 UID: 0 PID: 17614 Comm: syz.8.3104 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 961.827872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 961.838017][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 961.843847][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f3 f1 8b 4c 89 e6 48 c7 c7 20 e8 f1 8b e8 8f e1 c7 fc 90 <0f> 0b 90 90 58 83 05 96 d2 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 961.863586][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 961.869672][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 961.877691][ C0] RDX: ffff88805d68a480 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 961.885711][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 961.893707][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1eec0 [ 961.901776][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533b90 R15: ffffc90000007b18 [ 961.909791][ C0] FS: 00007f80d0e946c0(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 961.918774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.926689][ C0] CR2: 00007f7eef809d74 CR3: 000000007c9ca000 CR4: 00000000003526f0 [ 961.934692][ C0] Call Trace: [ 961.938435][ C0] [ 961.941277][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 961.946958][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 961.952787][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 961.958401][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 961.963385][ T5880] usb 10-1: USB disconnect, device number 13 [ 961.964493][ C0] kfree+0x291/0x6d0 [ 961.974398][ C0] ? rose_timer_expiry+0x53f/0x630 [ 961.979577][ C0] ? rose_timer_expiry+0x53f/0x630 [ 961.984736][ C0] rose_timer_expiry+0x53f/0x630 [ 961.989699][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 961.995251][ C0] call_timer_fn+0x19a/0x620 [ 962.000091][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 962.005244][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.010060][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.015544][ C0] __run_timers+0x6ef/0x960 [ 962.020061][ C0] ? __pfx___run_timers+0x10/0x10 [ 962.025118][ C0] run_timer_base+0x114/0x190 [ 962.029848][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 962.035074][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.039876][ C0] run_timer_softirq+0x1a/0x40 [ 962.044671][ C0] handle_softirqs+0x219/0x8e0 [ 962.049506][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 962.054818][ C0] __irq_exit_rcu+0x109/0x170 [ 962.059578][ C0] irq_exit_rcu+0x9/0x30 [ 962.063865][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 962.069533][ C0] [ 962.072492][ C0] [ 962.075497][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.081531][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x56/0x70 [ 962.087719][ C0] Code: 00 f0 00 75 35 8b 82 7c 16 00 00 85 c0 74 2b 8b 82 58 16 00 00 83 f8 02 75 20 48 8b 8a 60 16 00 00 8b 92 5c 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 e9 85 de ab 09 0f [ 962.107384][ C0] RSP: 0018:ffffc900129ffa30 EFLAGS: 00000246 [ 962.113470][ C0] RAX: 000000000007ffff RBX: 0000000000000001 RCX: ffffc9000d27b000 [ 962.121520][ C0] RDX: 0000000000080000 RSI: ffffffff84aabb1c RDI: 0000000000000005 [ 962.129539][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 962.137564][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 962.145558][ C0] R13: 0000000000000008 R14: ffffc900129ffb80 R15: ffffc900129ffd98 [ 962.153554][ C0] ? import_iovec+0x7c/0x140 [ 962.158185][ C0] import_iovec+0x7c/0x140 [ 962.162659][ C0] copy_msghdr_from_user+0xf9/0x160 [ 962.167907][ C0] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 962.173757][ C0] ? kfree+0x252/0x6d0 [ 962.177864][ C0] ? ___sys_recvmsg+0xed/0x1a0 [ 962.182687][ C0] ___sys_recvmsg+0xdb/0x1a0 [ 962.187330][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 962.192555][ C0] ? __pfx___might_resched+0x10/0x10 [ 962.197890][ C0] do_recvmmsg+0x2fe/0x750 [ 962.202315][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 962.207310][ C0] ? lock_acquire+0x179/0x350 [ 962.212031][ C0] ? do_futex+0x122/0x350 [ 962.212812][ T43] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 962.216428][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.232555][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 962.237649][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 962.243210][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 962.249258][ C0] do_syscall_64+0xcd/0xfa0 [ 962.253817][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.259796][ C0] RIP: 0033:0x7f80cff8eec9 [ 962.264259][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.283982][ C0] RSP: 002b:00007f80d0e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 962.292422][ C0] RAX: ffffffffffffffda RBX: 00007f80d01e6090 RCX: 00007f80cff8eec9 [ 962.300405][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 000000000000000a [ 962.308409][ C0] RBP: 00007f80d0011f91 R08: 0000000000000000 R09: 0000000000000000 [ 962.316453][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 962.324470][ C0] R13: 00007f80d01e6128 R14: 00007f80d01e6090 R15: 00007ffda0157bb8 [ 962.332535][ C0] [ 962.335582][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 962.342860][ C0] CPU: 0 UID: 0 PID: 17614 Comm: syz.8.3104 Not tainted syzkaller #0 PREEMPT(full) [ 962.352229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 962.362286][ C0] Call Trace: [ 962.365567][ C0] [ 962.368393][ C0] dump_stack_lvl+0x3d/0x1f0 [ 962.372972][ C0] vpanic+0x640/0x6f0 [ 962.376939][ C0] ? debug_print_object+0x1a2/0x2b0 [ 962.382124][ C0] panic+0xca/0xd0 [ 962.385828][ C0] ? __pfx_panic+0x10/0x10 [ 962.390237][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 962.395370][ C0] check_panic_on_warn+0xab/0xb0 [ 962.400293][ C0] __warn+0xf6/0x3c0 [ 962.404184][ C0] ? debug_print_object+0x1a2/0x2b0 [ 962.409368][ C0] report_bug+0x3c3/0x580 [ 962.413679][ C0] ? debug_print_object+0x1a2/0x2b0 [ 962.418864][ C0] handle_bug+0x184/0x210 [ 962.423180][ C0] exc_invalid_op+0x17/0x50 [ 962.427671][ C0] asm_exc_invalid_op+0x1a/0x20 [ 962.432503][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 962.438297][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f3 f1 8b 4c 89 e6 48 c7 c7 20 e8 f1 8b e8 8f e1 c7 fc 90 <0f> 0b 90 90 58 83 05 96 d2 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 962.457906][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 962.463954][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 962.471907][ C0] RDX: ffff88805d68a480 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 962.479872][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 962.487834][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1eec0 [ 962.495810][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533b90 R15: ffffc90000007b18 [ 962.503876][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 962.509522][ C0] ? __warn_printk+0x198/0x350 [ 962.514272][ C0] ? __warn_printk+0x1a5/0x350 [ 962.519023][ C0] ? debug_print_object+0x1a1/0x2b0 [ 962.524211][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 962.529828][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 962.535627][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 962.541162][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 962.547227][ C0] kfree+0x291/0x6d0 [ 962.551105][ C0] ? rose_timer_expiry+0x53f/0x630 [ 962.556205][ C0] ? rose_timer_expiry+0x53f/0x630 [ 962.561296][ C0] rose_timer_expiry+0x53f/0x630 [ 962.566216][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.571656][ C0] call_timer_fn+0x19a/0x620 [ 962.576232][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 962.581347][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.586124][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.591568][ C0] __run_timers+0x6ef/0x960 [ 962.596060][ C0] ? __pfx___run_timers+0x10/0x10 [ 962.601082][ C0] run_timer_base+0x114/0x190 [ 962.605755][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 962.610943][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.615689][ C0] run_timer_softirq+0x1a/0x40 [ 962.620431][ C0] handle_softirqs+0x219/0x8e0 [ 962.625187][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 962.630462][ C0] __irq_exit_rcu+0x109/0x170 [ 962.635126][ C0] irq_exit_rcu+0x9/0x30 [ 962.639344][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 962.644958][ C0] [ 962.647870][ C0] [ 962.650781][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.656746][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x56/0x70 [ 962.662898][ C0] Code: 00 f0 00 75 35 8b 82 7c 16 00 00 85 c0 74 2b 8b 82 58 16 00 00 83 f8 02 75 20 48 8b 8a 60 16 00 00 8b 92 5c 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 e9 85 de ab 09 0f [ 962.682498][ C0] RSP: 0018:ffffc900129ffa30 EFLAGS: 00000246 [ 962.688564][ C0] RAX: 000000000007ffff RBX: 0000000000000001 RCX: ffffc9000d27b000 [ 962.696622][ C0] RDX: 0000000000080000 RSI: ffffffff84aabb1c RDI: 0000000000000005 [ 962.704575][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 962.712528][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 962.720481][ C0] R13: 0000000000000008 R14: ffffc900129ffb80 R15: ffffc900129ffd98 [ 962.728440][ C0] ? import_iovec+0x7c/0x140 [ 962.733028][ C0] import_iovec+0x7c/0x140 [ 962.737434][ C0] copy_msghdr_from_user+0xf9/0x160 [ 962.742616][ C0] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 962.748407][ C0] ? kfree+0x252/0x6d0 [ 962.752459][ C0] ? ___sys_recvmsg+0xed/0x1a0 [ 962.757223][ C0] ___sys_recvmsg+0xdb/0x1a0 [ 962.761799][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 962.767008][ C0] ? __pfx___might_resched+0x10/0x10 [ 962.772283][ C0] do_recvmmsg+0x2fe/0x750 [ 962.776686][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 962.781611][ C0] ? lock_acquire+0x179/0x350 [ 962.786274][ C0] ? do_futex+0x122/0x350 [ 962.790597][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.795358][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 962.800368][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 962.805912][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 962.811897][ C0] do_syscall_64+0xcd/0xfa0 [ 962.816394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.822274][ C0] RIP: 0033:0x7f80cff8eec9 [ 962.826689][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.846291][ C0] RSP: 002b:00007f80d0e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 962.854861][ C0] RAX: ffffffffffffffda RBX: 00007f80d01e6090 RCX: 00007f80cff8eec9 [ 962.862818][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 000000000000000a [ 962.870771][ C0] RBP: 00007f80d0011f91 R08: 0000000000000000 R09: 0000000000000000 [ 962.878737][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 962.886695][ C0] R13: 00007f80d01e6128 R14: 00007f80d01e6090 R15: 00007ffda0157bb8 [ 962.894671][ C0] [ 962.897870][ C0] Kernel Offset: disabled [ 962.902172][ C0] Rebooting in 86400 seconds..