last executing test programs: 15.794227582s ago: executing program 4 (id=3247): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70e00000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x0, 0xfff2}, {0xf, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) 13.880130916s ago: executing program 4 (id=3254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010427bd7000ffdbdf25010000800c00018008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0xc0000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000500)={{0x6, 0x1, 0x80000001, 0x5, 'syz1\x00', 0x3c}, 0x5, 0x2, 0x69, 0x0, 0x7, 0x1e1, 'syz0\x00', &(0x7f0000000000)=['+\x00', 'new ', '.}.#\'-:^\x00', 'de&ault', '-/\x00', '\x00', '/dev/snd/controlC#\x00'], 0x2d}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r9, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) r10 = msgget$private(0x0, 0x40) msgsnd(r10, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) 13.442442775s ago: executing program 2 (id=3259): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000004780)={0x18, 0x0, 0x0, {0x6}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 12.818085103s ago: executing program 2 (id=3260): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000000001, 0x3, &(0x7f0000000200)) r0 = socket(0x2, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lstat(0x0, &(0x7f00000002c0)) r5 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000177, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xff78f35f28532255, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 9.801713868s ago: executing program 2 (id=3265): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) io_setup(0x7a, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000100)={0x18, r7, 0xffffffffffffffff, 0x1c}) 9.80105319s ago: executing program 4 (id=3266): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020006", @ANYRES32, @ANYBLOB='\b'], 0x64}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6023, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000002440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b0000000000", @ANYRES32, @ANYBLOB="0200000000009f000000000000008d9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x1, "446216e924934e178cb394e17e362af7c5cd5e9eb598e00b961feee297d2a061", 0x38414762}) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.676544439s ago: executing program 4 (id=3270): socket(0xa, 0x80000, 0x7a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001900010000000000fbdbdf251d010900440012804000800031004180e7227ae5c252f37c41df2a84b5cdecbc7e272fbe572d6a76e2253ab30bd45f00466ac176050400be800400e38000"/88], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000300)="fbe4ce478bec748e6bf5aa4768db2416453840b12e839b64576b48f38175bdd8e3e67d33b0e41ef827572b001db940cecf63f0291c36faf292cf1a44d8027f4ded512c8c1a9c5e3d6ada7e25b27d9961d16359e172299e42fa62a909888d1125476aa986e1057ce6b689870bce825fc7fe1548385e52f2760fd856566bf69db2dc4b2d06a0129bbb9412960aa9182df7d448001e77a9ac7b3b66582a0ba9d5311f4b6951b3", &(0x7f00000003c0)=@tcp6=r2, 0x1}, 0x20) recvmmsg(r2, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000005c0)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x7, @remote}, 0xffffffffffffffff, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x9, 0x3, 0x9, 0x9, 0x4, 0x30000, 0x9, 0x7cb, 0x44]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) 8.512346828s ago: executing program 0 (id=3272): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f400000000000000cfffffff854ae18a53158a0e82", @ANYRESHEX=r1, @ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x20002, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc8, 0xb6}}}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10101, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0xff01, 0x6, 0x8, 0x4}, {0x1, 0x4, 0xf9, 0x5}, {0x5, 0x7, 0x8, 0xfcce}, {0x41, 0x2, 0x36, 0x5}, {0x1ff, 0xb, 0x4}, {0x7, 0x7, 0x6, 0x3}, {0x6, 0xeb, 0x2e, 0x5}, {0xcc67, 0x40, 0x0, 0x5}]}) 7.375840327s ago: executing program 1 (id=3274): r0 = socket$inet(0x2, 0x1, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) pipe2(0x0, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) pipe2(&(0x7f0000000040), 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], '\x00', 'veth0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x6, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x26, 0x141], 0x7f, 0x8, 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'ipvlan1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2, 0x80, 0x4, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x0, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) listen(r0, 0x9) bind$inet(r0, 0x0, 0x0) 6.611729128s ago: executing program 0 (id=3275): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000100003000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000400f20f0000"], 0x3c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 6.254512466s ago: executing program 4 (id=3277): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) io_setup(0x7a, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000100)={0x18, r7, 0xffffffffffffffff, 0x1c}) 6.157047103s ago: executing program 2 (id=3278): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) io_setup(0x7a, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000100)={0x18, r7, 0xffffffffffffffff, 0x1c}) 6.150835772s ago: executing program 3 (id=3279): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20008040) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400"], 0x20}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x2b, 0x3, 0x2b418842, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@loopback, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000d40)=0xe8) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) io_setup(0x30, &(0x7f0000000600)=0x0) io_submit(r7, 0x0, 0x0) 5.575031955s ago: executing program 3 (id=3280): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x2b, 0x3, 0x2b418842, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x8, {0x5, 0x3, 0x7, 0x4000000000008, 0xfffffffd, 0x6, {0x42, 0x6, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0xa000, 0x28001, r5, r6, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@loopback, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000d40)=0xe8) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) io_setup(0x30, &(0x7f0000000600)=0x0) io_submit(r7, 0x0, 0x0) 4.79765839s ago: executing program 1 (id=3281): setrlimit(0x1, &(0x7f0000000000)={0x2, 0x400000000000009}) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) 4.776808643s ago: executing program 3 (id=3282): socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, 0x0, &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.557900622s ago: executing program 1 (id=3283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f400000000000000cfffffff854ae18a53158a0e82", @ANYRESHEX=r1, @ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x20002, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc8, 0xb6}}}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10101, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0xff01, 0x6, 0x8, 0x4}, {0x1, 0x4, 0xf9, 0x5}, {0x5, 0x7, 0x8, 0xfcce}, {0x41, 0x2, 0x36, 0x5}, {0x1ff, 0xb, 0x4}, {0x7, 0x7, 0x6, 0x3}, {0x6, 0xeb, 0x2e, 0x5}, {0xcc67, 0x40, 0x0, 0x5}]}) 4.143053031s ago: executing program 0 (id=3284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000140)=0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000079c0)=@newtfilter={0x1744, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xfff2, 0xfff2}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x133c, 0x2, [@TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x1310, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x1158, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x110c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xb6, 0x5, "59580dc1ad3aeffd154cd12f8178eee38c8401f6ce99386d9c0b30f35c0d969344c4118eb6dec9c3e8230abaf91397e8cc42983585ab90a632ab1ff626fdbc1087b2f612847d4d19d62cc74d8e0d7c48ca6c9cb198f1e62b7619a9b5e8a698708ae94dd7af63bacaef7e3847a67553e6d01bdd6723cb5a3aad4d8cadfd12809153dd3dee5263feeb925b8487df50d0d14c386a5b28e0c9a357b0cb2214c0e87a43f494e8a2ecf0705e0fd0f817a6ab051508"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "86637cf7570c151c9689947b60fd778d7445112337db2209b8c1f75a031d233eb408f95d66a3f438b869467a70505538a5aaec8881316a5203286c45b7aca3bd64c26af763bd6710b8158711e069788ae5aaba9215336f32e66c6cde5fc78e856554e613644b8e7bd580720b18456cc879873b993bed6181298721f9bac5c0aff73db7591f514726292f690a3d2690205463aca3a7135e57d865d1ea32e918c115ae6d8cf6443ce021597f9960308013751513ac0fddd67bf65fc4c50a60f59985d42eea4ea15390503511d9eb465f3c2afe001997427393841764c54452e1a5c1be867607f275a6fa24b1841fdd54a06ec0c570239fe55c4dbcc41fc966cca64ea93d970d07fedf201bbb60340a3b2c05e48e6c8bee298e3ba5cbe2cce1857d81ce1f40a1a2152cc145634f4609199c3f106038f8c84ede83856a4b1c64f46d6311b514d2a6c5ed1b80f2e639eb2aebb61d3ad59ea02dd0e34827c76c4dad82118fcc68a54e2e71acd06c4f6523943d22f31fc767261f101e4060c58d11d3bd96c1469c378cf3cecaacbea9b89cec7b838c558e4d22eb825bf50f66addf7ecdcb90653a9e95d8704ccc30bf3f6dcd25cb9cabf27d8a0be4686528026eed88ae0079d86a020ad6ee8cf988d3390337f9f079131c713a80b7b1d936b4de7a4932e83a0f34d42680f9a84cbff5184dc9f89f36791b128b33510dbe1e07ecc8f66388b5e6aa4ece4b49f05347a7be36f6fc3e64d2ac614a784c6a41f58ff3b6f2e01ecc140d38d5fb59300a42eb1ea5afb8b17a217af2249472987e5623a1a4bc84ea3ef18724316f36dd5110c1d425e1c3d2fc8a4f80d98d2251bc3d6efdb1afb14e331592e2b4bcc35978c388c4e3da21c722b20343c757e632a42b706c886148461c50856b5c5ed87964bbd115e34979678349c8cea2dff7f637f276565c5a503dee84b84bb532a398e306efd0256a637785237b6e0dc8bfdcb8ab8f87cef2327ab2b0103d0c06e065da704047dbb602353c121457638c0075adf24299fab32e36a7d3336eb961a9e71be473db6e9a9d9594ddb748327e585e7936f1df310fdea70dc36f604f6c55aa8c587e386ddb6b789c61f587254a41a8b4185107b3d07bd06c4e214eb5dbc8827c1be1d553f21dde1fe6ab50ab687f7095d0873e004b717738f0286c68ca8f9749037601f5452a45afaf1426098ebdf2a271d927a1cc306d0f9398567fb9ad3e0c1d717838ddb595dda0a0800b42f869255b906a4a615bf0e76254a659f4192c95f4717a8625a158a754494eb93be25de4b0d7350a50ad8a1d981c6e938ffa77e91e2c618147116e78c32358788616ecbfaa723d7da77bf244edc8ca9c7e748f480811b21b0b15259a7a17365c1c2421c69ffe511a984dc37bd94aa04b3256ad3457aadf857537bb8c362056593bbd9ff7819153593c662efbcf7c4c21a2ca258e39765eac57db7b53ff41fa6b33d4bad38ec76cc11cdce4510664005e14d63a308852553eadc0f4e489c05cce6d8da2b830f95b1e85da57ee54bad2d0a510cb308ae9d508f9eba7f05303b3a0b9d74eb550f03ff758cedf2b59fee371527e1039492f101d9d0a953fbcf5e3cfcc24ef349b10276b18fc82a9ead8767c647303ab117a36190312d6116155783bcc8c9883b99516360a0fe04a2e787bbeef19336ea584fc17ce22a9156c18f5fbb6e1b6b5581bdd11329544830ba6d7153be08eaf486f56179f6f9ea54831902282b118bab9749a146352317620e57495359688dc97b4e19b9400d00d44a8ec7f42298ea0abae0639d5b3253f4581d689fdd3a0a6e752b7bdbdb4ec51763d8914e07e83d11ec04451ded28d2b633c4d004b99ae2a13d5a222c45219f7655ec78c5f89842c73214c086de468c717f779bd7855a8862c0b68f6bb1b6f35a59ced502903890221691ae4e7a0f86a60b3521ff56463a634895d1b63d16a4120e1232db3fb32298b50e3e0996d76e3610aaabe974ea00a1571631a89f61b68553b84defbd509d332507a818a7a4ac63acebd42cb63d69cf9bb8b5c6050be8f5e5481097be1bba448cd26c9483b323dadc398afa9f4edd326d153bac6c872e4248cb11a0ea405ea3fb2b9b7738f5601f9ef8a843cae470d2c33fbbfb5bcf985bf6e9faf78927a38b3cdbf32481f1e6829b23b7c79ba12accc0c304e4a442be9639ef95c9fe9934b1824cf5e39b0f9d91941d9088970c78be2d0db4f67046c08439a9969256c5f4d2965f03b6f87cef34206a9fae30dbedbd752a6c23f29709ee86d51b57a174c2a187f64a45ce9163eb1f1bd8f1b4f92c278801671bf62f3f7ab5b1f86f3af37f26ea04b7af8482271a5203f3704ed2cbb7be08f91a08d5200a4bdd9174b3a06d0037090e8f4e1e46f23280b29efc70593bc0758746c316b9ecaed6e771a1918278c38b3e42b407b188e42c6d4878c1b04d458eac3d3dd7bef32909264d3982889e44e3c6bb648725dbd9a08168e1150176475cbbdca4aa0b857722a5711d43101a3436906ce950628fd3b2c8ec8ab001fbdafe48d55f2348a811fadf15d306f6ac7a91e63e38ec7368f3bb4353d2e99dbbb6f3c6fced755410ba9635cbaa12b80007de43fa2987a8cedb830ceffad48f7020a01843c4095129b2e85eb2371ad698ade8c7c756569b61fbff64e881bbd337ccf3d2259483b8d7c3b069d0e9f20b083bcd1f5444d8e5734f95b6a1fa2da4bc710c30fcc113f88cf6dac9fc1881a9fdcc8e9fd75085569f71e7b526cf3c033db6b664c036417890b1079352d79c926fdd7ec3f15649ccb521c0d63db7ec04db0ea5416b696819bfab27079cfbab5a655b83883314ac1ddf9dc4f29b273a23efa4768c662d1b1c898417803eb97e58367dff756371511db8715b4f5bae8702bbc2fa0ca568d25657c7f44a870834f48ece4782cc9872fe24e19ce57e64b04953b1a63e42b5673ebc24155c2da4318d98e7526b0fe25d94f30962e9f0b01af57b4fb3c9afb9b1e3afb8c68a8617ae6fbc4c13d4aa35aa8bfc4d6abffa5361d7976ba2cd6c0a14fcc54181c96371b67d6584c2e76d2522254ce56448f0dd62a03815e0c38f9b055d2f2cd6281d67fef03b1b84c32979a05828e79678fac8064f2f2828a2926e6a63ed749d3f669b91dd9b34010c3361aa3c87bc9a09584bf3b41a71449aba2095c482671a2011313702eedfb644c5ed90726bc39ea7567fc753187e449d811834a659ad3f49a64b943a6ae8a305ca84741d5f1a46a67caf12ba28bbf536488a2b3dbc8f58ccf0fd30ffc646f13cb0ad1a6b3a84353cc348b8824a0d7a84c0a45766173e07da2f00ed4e8e378861a2d9eb33086ca57e4d32a5a7c4f5a32f0fa9fdd30c15bed40743d03529b1d010b3002c31c76271b30536299a4aba94f923cd8e529de72c8083015a0e423941d106588d8de07084d59c4d0f7224694bbfc4e28942efd32b2fe3138572b80659eaed1743d428a229c622f1f76f20eb23d88732caca0b014648a0059e9eed17eff008e8f9cc6fece975b1127ec9aa8f063690b71a71f048167ae34a56fbffe78098df83060904182dbc1a3ee5e383fb00a305e9e61d79368d9abfd829b52f971e1bfe167ed42831625618e24ed1f1215d734c1bfd14de66ada97e09418297977ff69c9246e06f7d659684dcf20bfe6b886ca618c6da06618bc2386ea32dddcd95bd996cb22703ec20a3015934dcf304b3fe9ecdf664c71fece437bb8adc15c46b06a050b7a65467650a828e469bf813be757985667409bbad08cb4a3aa868824d619196bba3343adc9ae5334aadcff86784867d8749b205dca289cdca986976c44b9212777c5c42cd2be00e0900b27bd009a4aefaf39cff2cbfedc151b3bb44bfce0e31beb70775b140ac01dd360a8fd54c0a1dd5bf0de1a64cf7779fe45e7d76735bc2ec57675481175845fa9f01e0ab1023e4d03525da304b24193f10ff08be3a2ca6320f050fbf8852c61748ed5849a08a588a6c48b570c8f1aacfea06022d80d4e65884c1686ff5f571cd5bf3dc322a172256c957799d76c7bbdfe0ebb4b05e4a369b329da508d231ffc1cbac226b26d5de131bd43325d6eea5939fc5a60a8e7302db457f1dc669935a75b3981b0ab380db9e6425ad246607b37e1cd2f9507f2293f090f83ee8704183dc74b5e3071e05e90cd2e13c14fb9bd281d8e5586a1a6e71b09fa6577419e52f759f9e0ca5d3f58ff583920b26c46fb03322c2829c8309c0e0b2561eb231f6076bac7e503de38b9c845cae34064441f6102f6f4c50eba487abc63f92c74289f6f9b44d9a2d3b55d515cc3a9284742aedc8a2a56bcb983777b908d75fa0633d2b88500c12e1456ce7704d104b585f8de1650450cd4842997414ea59223b21db70746a790c38ce47ef6858cce7d353304c7dcd33846501ad2d3b5ae18535b7b5adaf63dbec67b638305404792b3fb8ba6bb4e152ba3e593d54b24b5d36894eb93d8794b1131956aa7017a9ac2cb74472d4dd0d4b08019745d7bbfdd19b43b932f9cf7c886b55f687f96df6f2840120def4a1aa425ba0a08ab81010bf01df1654c0af74eda956f8d854d677bf934bbbd5700b9b63f9134634ad2649eb0715a952b64c3b36810816186034fa6e03177d8c20bfd43ecbb1df8a474fc8877aceeb879ca3e017d6d0e7593bc15dcc0c354110549f533b11e5cf5ddd51621f07be647223ee7b2e75756047227b5608041f8e249edf4394cbe0ff772bae87b2d19c04616b276f84361942606f3322dc0f7f22a96b54c2d7ef7f94913446dfad5e0f2ba92aeb7fadeea498e68d52513521c069c0e4ceae7c9a26846c6a4f591428a3828ed1a49239ac6ab8b1c7c0fb00ce0f8ae979178da6eea3ee4cf2f4e9121c22acc64030d0d97d3228b99ca113777f121b7512eaab2138b9a02d232c0b9bfb664310a0b05dccad72868eadd3f443e4e8cdcbf860652ae837da0ba39a5585860cef164b2393a66eaca421d3115bf71f6d1d6cc0d32f2486f02aaa09013d39568358f168a575b745d9c7b8872a20f49c766abe1975994871e13f5909cb77b540162a7085f42d6fe0f5db5f4360f36d35cc2e24a556b0fdbaf87f3137e4c164ba460595803b5d93d2af7c8c0b884cbbb925de0a818a86abe521cdca0c3562b593420929a32fa26d051ad569a700716231c22a1961dd80eb6986dc00af8639b0e584fd855934dab15ddf937bdca76fa46c883173e3d6056f71eef43cc6a21a2d3bffeafb6de38099dfbcfbdda54bc1d0e56f52f9340d64553e8edf45e4f78298bd36c7c91476b69788fee1e071279526dbb410aed58213080b06bfdb30e9213add2391fb438d2188344ee24a235d46823cda8fb3e3487eabb7f5f27bedd0f2f73ad8a0172c3d6b8a8a8d882417f003b13a87525da312f7c167f6648fd897d932d3b2db3b6d8e53429f7ab9843f818b0af10beb9a8c11582673373a78859d5bfa82ef2ed460e09d31f5c110ef662252d47c27d23645546a1955a229b3cbc41fc78aa4ad7aae71a25d7cdc7af99b69f16efae4626dc9066ac442d478b2bb091f792096345df7dcfc0650d9cdfe7bf58e4dc073a98c649cd996a24d56bf1a546a313060f99c9b436a4b88c45f636ff97e19ac5e99565030cb7009644e301484f91fe011188dd4b3bb52f9d7755ca8463cb46926f7bc97b2e340be0d5b5c2fda3bbdca5e42f25367bbbf62c3b8779c3be9ef3a581d1b02d124103c228bd54f0c6f52a4d990cfe4c421ebddd0af9f2cf1586209564db2f1d76ea4442aaaab401"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7ff, 0x1, 0x8}, {0x2, 0x9, 0x863, 0x2, 0xb, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x6}, {0x8, 0x2, 0x8000, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5ea9, 0x7, 0xc}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x2}, {0x4, 0x3, 0x1}}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0xc2b, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6}, {0xe457, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="1bd8cd250c"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="743db8", @TCF_META_TYPE_VAR="ccb7facc59336de8cd", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CONTAINER={0xfc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x5}, "910c045338a599ef8206506401e004d60afe109ba1ce982e496b9596fb8f93474133bca41eac0781fbf71283621d670660c4e9e31db865e6fd29526672e9ac8048919fcd97f6c2bd83029c59a319a05ce034142e0c6e0a5039198fe400f17c116682247677bfffea7d4542a711fc785e2e310edcaf9167e8700939c6dc0af092f987d7a32a45ff20dca607897c00584786ba3bbca0374780b6804b61a10cd75da95b77888ac1337e019cedac353f32c908da7250cf92cf4fe823af60ea304c6062a7fd540d06bbe546b55e1d56432210ec89fa384dd97100631f2a629c7cc2d6c5778c99118a9505c64c03826fee2158"}}, @TCF_EM_CONTAINER={0x30, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xff}, "b59f10034854b3dfddcbc92fe8f14c305554efa1d5125e05f876e10d170f010dbf"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf22, 0x7, 0x3}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0x1}}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x3}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x390, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x2, 0x2, 0x0, 0x4}, {0xbda, 0x9, 0x5, 0xf}, {0x40, 0x4, 0x7a, 0xb6}, {0x16, 0x4a, 0x4, 0x52b}, {0x0, 0x1, 0x2, 0x9}, {0xe1ad, 0x3, 0x7c, 0x1}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x14}}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x334, 0x1, [@m_csum={0x68, 0x12, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x10000000, 0x0, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x97, 0x2, 0x1ff, 0x1}, 0x1f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xe0, 0xb, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8, 0xffffffffffffffff, 0x7, 0x1}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe, 0x10, 0x4, 0x2, 0x2}, 0x4}}]}, {0x6b, 0x6, "c3d3dbe67437acb08192ef6e91d8f499cb37fc76400c08e5e2451c536ffab742a8783588399a27391237671d0e6e2055295ba00da47e40abed80e83c4d6c55e8144e0bbda51ce5fbe140e891ae878c0c0fcef1ba6a20162dce4f1974effc83eed571cb6831f77c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_connmark={0xc0, 0x15, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe8, 0x3, 0x2, 0x100}, 0x22}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5e, 0x3, 0xe554a02660d0c6f0, 0x7, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0x5, 0x4, 0xff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x1c8, 0x20000000, 0x1, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x800, 0xffffffffffffffff, 0x3, 0x7}, 0xfffd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xc0, 0x4, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x4c, 0x6, "3ca0ada6e1ee323bb3985271c72664c0ce2e56d1eeefc31e16ac855d5bc27c2056852fdaf1f4ed299e662a1d84d840f86ff758fadc3daf9d42f34544cb01906cabd729d4966ca877"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x68, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x9, 0x0, 0x8, 0x8}, 0x11}}]}, {0x20, 0x6, "26102e7cc38c5ad6ae9bcaeef5d53e90bc57c8070783ca368cfc2a9f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x1744}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.502412818s ago: executing program 3 (id=3285): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="200a0000fd00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cecfffffffde8df2507000000", @ANYRES32=r2, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800480000340000000000ac309af81e0001ac1414bb440c0c01ac1414bb000000000d009078002000000000000000000000fffffffa"], 0x0) r5 = socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044090}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4004000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r7, 0x0, 0xa0028000}, 0x38) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r8, 0x5608) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, 0x0, 0x0) recvmmsg(r9, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8020, 0x0) 3.137764424s ago: executing program 2 (id=3286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) r6 = syz_open_dev$sndctrl(0x0, 0x1, 0xc0000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000500)={{0x6, 0x1, 0x80000001, 0x5, 'syz1\x00', 0x3c}, 0x5, 0x2, 0x69, 0x0, 0x6, 0x1e1, 'syz0\x00', &(0x7f0000000000)=['new ', '.}.#\'-:^\x00', 'de&ault', '-/\x00', '\x00', '/dev/snd/controlC#\x00'], 0x2b}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r9 = msgget$private(0x0, 0x40) msgsnd(r9, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) 3.123784912s ago: executing program 1 (id=3287): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020006", @ANYRES32, @ANYBLOB='\b'], 0x64}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6023, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000002440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b0000000000", @ANYRES32, @ANYBLOB="0200000000009f000000000000008d9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x1, "446216e924934e178cb394e17e362af7c5cd5e9eb598e00b961feee297d2a061", 0x38414762}) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.371117453s ago: executing program 1 (id=3288): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) openat2(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x220040, 0x28, 0x14}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2.304740895s ago: executing program 0 (id=3289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000002c0)=0x1) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f00000005c0)='ig', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0xa5d) 2.263237639s ago: executing program 4 (id=3290): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70e00000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x0, 0xfff2}, {0xf, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) 1.99032622s ago: executing program 0 (id=3291): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x705a82, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 924.709148ms ago: executing program 0 (id=3292): r0 = socket$inet(0x2, 0x1, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) pipe2(0x0, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) pipe2(&(0x7f0000000040), 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], '\x00', 'veth0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x6, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x26, 0x141], 0x7f, 0x8, 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'ipvlan1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2, 0x80, 0x4, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x0, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) listen(r0, 0x9) bind$inet(r0, 0x0, 0x0) 186.402005ms ago: executing program 3 (id=3293): setrlimit(0x1, &(0x7f0000000000)={0x2, 0x400000000000009}) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) 108.741444ms ago: executing program 3 (id=3294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f400000000000000cfffffff854ae18a53158a0e82", @ANYRESHEX=r1, @ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x20002, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc8, 0xb6}}}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10101, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0xff01, 0x6, 0x8, 0x4}, {0x1, 0x4, 0xf9, 0x5}, {0x5, 0x7, 0x8, 0xfcce}, {0x41, 0x2, 0x36, 0x5}, {0x1ff, 0xb, 0x4}, {0x7, 0x7, 0x6, 0x3}, {0x6, 0xeb, 0x2e, 0x5}, {0xcc67, 0x40, 0x0, 0x5}]}) 78.780112ms ago: executing program 2 (id=3295): socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 1 (id=3296): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f400000000000000cfffffff854ae18a53158a0e82", @ANYRESHEX=r1, @ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x20002, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc8, 0xb6}}}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10101, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x8, &(0x7f0000000200)=[{0xff01, 0x6, 0x8, 0x4}, {0x1, 0x4, 0xf9, 0x5}, {0x5, 0x7, 0x8, 0xfcce}, {0x41, 0x2, 0x36, 0x5}, {0x1ff, 0xb, 0x4}, {0x7, 0x7, 0x6, 0x3}, {0x6, 0xeb, 0x2e, 0x5}, {0xcc67, 0x40, 0x0, 0x5}]}) kernel console output (not intermixed with test programs): 900.819680][T16341] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 900.841728][ T30] audit: type=1400 audit(1757834856.944:673): avc: denied { write } for pid=16337 comm="syz.4.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 901.079847][T16339] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 901.570588][T16363] trusted_key: encrypted_key: key user:syz not found [ 901.673875][ T55] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 901.845521][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.857346][ T55] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 901.880186][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.966421][ T55] usb 2-1: config 0 descriptor?? [ 902.008791][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 902.011068][T16366] netlink: 'syz.0.2638': attribute type 1 has an invalid length. [ 902.049194][T16366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2638'. [ 902.073870][T16366] nbd: illegal input index 65544 [ 902.090571][T16368] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 902.120829][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2637'. [ 902.157931][T16368] nbd: illegal input index 65544 [ 902.470560][T16372] trusted_key: encrypted_key: key user:syz not found [ 902.503477][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 902.617098][T16374] trusted_key: encrypted_key: key user:syz not found [ 902.645121][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 902.680785][ T55] pwc: recv_control_msg error -32 req 02 val 2c00 [ 902.689924][ T55] pwc: recv_control_msg error -32 req 04 val 1000 [ 903.033866][ T55] pwc: recv_control_msg error -71 req 04 val 1400 [ 903.044231][ T55] pwc: recv_control_msg error -71 req 02 val 2000 [ 903.077427][ T55] pwc: recv_control_msg error -71 req 02 val 2100 [ 903.223868][ T55] pwc: recv_control_msg error -71 req 04 val 1500 [ 903.249813][ T55] pwc: recv_control_msg error -71 req 02 val 2500 [ 903.264348][ T55] pwc: recv_control_msg error -71 req 02 val 2400 [ 903.271245][ T55] pwc: recv_control_msg error -71 req 02 val 2600 [ 903.284328][ T55] pwc: recv_control_msg error -71 req 02 val 2900 [ 903.324104][ T55] pwc: recv_control_msg error -71 req 02 val 2800 [ 903.331220][ T55] pwc: recv_control_msg error -71 req 04 val 1100 [ 903.341374][ T55] pwc: recv_control_msg error -71 req 04 val 1200 [ 903.369676][ T55] pwc: Registered as video103. [ 903.385569][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 903.435431][ T55] usb 2-1: USB disconnect, device number 41 [ 904.078972][T16382] overlayfs: missing 'lowerdir' [ 904.280372][T16386] 9pnet_fd: Insufficient options for proto=fd [ 904.299709][T16386] nbd_handle_cmd: 2 callbacks suppressed [ 904.299729][T16386] block nbd0: Attempted send on invalid socket [ 904.323791][T16386] blk_print_req_error: 2 callbacks suppressed [ 904.323810][T16386] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.413827][ T9929] block nbd0: Attempted send on invalid socket [ 904.420559][ T9929] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.436726][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 904.446492][T16386] block nbd0: Attempted send on invalid socket [ 904.452722][T16386] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.462923][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 904.473196][T16386] block nbd0: Attempted send on invalid socket [ 904.479542][T16386] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.489003][T16386] block nbd0: Attempted send on invalid socket [ 904.495799][T16386] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.505599][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 904.515910][T16386] block nbd0: Attempted send on invalid socket [ 904.522094][T16386] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.531591][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 904.541627][T16386] block nbd0: Attempted send on invalid socket [ 904.547865][T16386] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.557333][T16386] block nbd0: Attempted send on invalid socket [ 904.563505][T16386] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.583864][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 904.604758][T16386] block nbd0: Attempted send on invalid socket [ 904.610950][T16386] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.663946][T16386] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 904.718460][T16386] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 905.104010][ T55] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 905.617545][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.630242][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.667114][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 905.697497][ T55] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.713887][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.733918][ T55] usb 2-1: SerialNumber: syz [ 905.886623][T16418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2649'. [ 906.135619][ T55] usb 2-1: 0:2 : does not exist [ 906.140682][ T55] usb 2-1: unit 5: unexpected type 0x0a [ 906.152750][ T55] usb 2-1: USB disconnect, device number 42 [ 906.707714][T16430] overlayfs: missing 'workdir' [ 907.614332][T16449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2659'. [ 907.680139][T16451] syzkaller0: entered promiscuous mode [ 907.693858][T16451] syzkaller0: entered allmulticast mode [ 907.753674][T16451] tipc: Enabled bearer , priority 0 [ 907.773247][T16450] tipc: Resetting bearer [ 908.060999][T16450] tipc: Disabling bearer [ 909.523822][ T5978] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 909.659606][T16470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2663'. [ 909.744016][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 909.821832][ T5978] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 909.865782][ T5978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.959459][ T5978] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.292455][ T5978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.301797][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.312619][ T5978] usb 3-1: Product: syz [ 910.329394][ T5978] usb 3-1: Manufacturer: ࠁ [ 910.353947][ T5978] usb 3-1: SerialNumber: syz [ 910.363043][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 910.585331][T16478] overlayfs: missing 'workdir' [ 910.776741][T16481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2664'. [ 911.770090][T16502] trusted_key: encrypted_key: key user:syz not found [ 911.842049][ T5978] usb 3-1: 0:2 : does not exist [ 911.944412][ T5978] usb 3-1: USB disconnect, device number 49 [ 912.102443][T16507] vlan2: entered promiscuous mode [ 912.189381][T16507] bridge0: entered promiscuous mode [ 912.354005][ T5978] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 912.653790][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 912.661583][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 912.672746][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.686888][ T5978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.720947][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 912.773530][ T5978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 913.024488][ T5978] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 913.038725][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.065626][ T5978] usb 3-1: config 0 descriptor?? [ 913.083125][ T5849] Bluetooth: hci5: urb ffff88804b6b7500 submission failed (90) [ 913.161165][T16524] overlayfs: missing 'workdir' [ 914.606556][T11290] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 914.621044][ T5978] usb 3-1: USB disconnect, device number 50 [ 914.835054][T16546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2682'. [ 914.844121][T16546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2682'. [ 914.853117][T16546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2682'. [ 914.862357][T16546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2682'. [ 915.154025][T11290] usb 4-1: device descriptor read/64, error -71 [ 915.415297][T11290] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 915.602875][T11290] usb 4-1: device descriptor read/64, error -71 [ 915.817816][T11290] usb usb4-port1: attempt power cycle [ 915.851005][T16557] FAULT_INJECTION: forcing a failure. [ 915.851005][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 915.867307][T16557] CPU: 0 UID: 0 PID: 16557 Comm: syz.4.2687 Not tainted syzkaller #0 PREEMPT(full) [ 915.867338][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 915.867350][T16557] Call Trace: [ 915.867356][T16557] [ 915.867364][T16557] dump_stack_lvl+0x16c/0x1f0 [ 915.867394][T16557] should_fail_ex+0x512/0x640 [ 915.867420][T16557] ? fs_reclaim_acquire+0xae/0x150 [ 915.867449][T16557] ? tomoyo_encode2+0x100/0x3e0 [ 915.867477][T16557] should_failslab+0xc2/0x120 [ 915.867501][T16557] __kmalloc_noprof+0xd2/0x510 [ 915.867523][T16557] ? d_absolute_path+0x136/0x1a0 [ 915.867556][T16557] tomoyo_encode2+0x100/0x3e0 [ 915.867589][T16557] tomoyo_encode+0x29/0x50 [ 915.867616][T16557] tomoyo_realpath_from_path+0x18f/0x6e0 [ 915.867654][T16557] tomoyo_path_number_perm+0x245/0x580 [ 915.867676][T16557] ? tomoyo_path_number_perm+0x237/0x580 [ 915.867701][T16557] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 915.867726][T16557] ? find_held_lock+0x2b/0x80 [ 915.867772][T16557] ? find_held_lock+0x2b/0x80 [ 915.867794][T16557] ? hook_file_ioctl_common+0x145/0x410 [ 915.867818][T16557] ? __fget_files+0x20e/0x3c0 [ 915.867843][T16557] security_file_ioctl+0x9b/0x240 [ 915.867871][T16557] __x64_sys_ioctl+0xb7/0x210 [ 915.867909][T16557] do_syscall_64+0xcd/0x4e0 [ 915.867934][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.867952][T16557] RIP: 0033:0x7f295f38eba9 [ 915.867967][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.867985][T16557] RSP: 002b:00007f2960206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.868002][T16557] RAX: ffffffffffffffda RBX: 00007f295f5d5fa0 RCX: 00007f295f38eba9 [ 915.868014][T16557] RDX: 0000000000000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 915.868025][T16557] RBP: 00007f2960206090 R08: 0000000000000000 R09: 0000000000000000 [ 915.868036][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.868047][T16557] R13: 00007f295f5d6038 R14: 00007f295f5d5fa0 R15: 00007ffccb46e478 [ 915.868071][T16557] [ 915.868093][T16557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 916.584907][T10321] Bluetooth: hci6: command 0x1003 tx timeout [ 916.611114][ T5849] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 916.964569][T11290] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 917.061355][T11290] usb 4-1: device descriptor read/8, error -71 [ 917.343828][T11290] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 917.586616][T11290] usb 4-1: device not accepting address 59, error -71 [ 917.593641][T11290] usb usb4-port1: unable to enumerate USB device [ 918.213881][T11290] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 918.473782][T11290] usb 4-1: Using ep0 maxpacket: 8 [ 918.499099][T11290] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 918.512793][T11290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.557805][T11290] pvrusb2: Hardware description: Terratec Grabster AV400 [ 918.602175][T11290] pvrusb2: ********** [ 918.615126][T11290] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 918.680272][T11290] pvrusb2: Important functionality might not be entirely working. [ 918.716350][T11290] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 919.493818][T11290] pvrusb2: ********** [ 919.509100][T11290] usb 4-1: USB disconnect, device number 60 [ 919.515472][ T2336] pvrusb2: Invalid write control endpoint [ 919.646391][T16611] macvlan2: entered promiscuous mode [ 919.729024][ T30] audit: type=1400 audit(1757834875.824:674): avc: denied { setattr } for pid=16602 comm="syz.4.2701" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 919.753128][T16611] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 920.224975][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 920.438459][ T2336] pvrusb2: Invalid write control endpoint [ 920.799269][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 920.871699][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 920.887964][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 920.939785][ T2336] pvrusb2: Device being rendered inoperable [ 920.966742][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 921.033122][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 921.049055][ T2336] pvrusb2: Attached sub-driver cx25840 [ 921.054828][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 921.064967][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 921.174612][T16626] syzkaller1: entered promiscuous mode [ 921.208165][T16626] syzkaller1: entered allmulticast mode [ 921.394100][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2707'. [ 921.414035][ T5978] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 921.615236][ T5978] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 921.623985][ T5978] usb 2-1: config 150 has no interface number 0 [ 921.630767][ T5978] usb 2-1: config 150 interface 204 has no altsetting 0 [ 921.638767][ T5978] usb 2-1: config 150 interface 1 has no altsetting 0 [ 921.641468][T16621] fuse: Unknown parameter 'G [ 921.641468][T16621] KGkfr@;ųMRe|EypeDڎ1a{@0ZϲoխNo{oh0Oum*|8 #Z' [ 921.650014][ T5978] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 921.685652][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.698968][ T5978] usb 2-1: Product: syz [ 921.707403][ T5978] usb 2-1: Manufacturer: syz [ 921.715355][ T5978] usb 2-1: SerialNumber: syz [ 922.415803][ T30] audit: type=1400 audit(1757834877.934:675): avc: denied { getopt } for pid=16643 comm="syz.4.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 922.475351][ T5978] xr_serial 2-1:150.204: xr_serial converter detected [ 922.640975][T16650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2712'. [ 923.508302][ T5978] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 923.741901][T11290] usb 2-1: USB disconnect, device number 43 [ 923.760587][T11290] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 923.784780][T11290] xr_serial 2-1:150.204: device disconnected [ 923.939393][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.985497][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.050609][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 924.133414][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.171874][T16675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.174114][ T5978] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 924.226373][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.266025][T16675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.337376][T16669] bridge1: port 1(veth0_to_bond) entered blocking state [ 924.345368][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 924.350740][T16669] bridge1: port 1(veth0_to_bond) entered disabled state [ 924.358410][T16669] veth0_to_bond: entered allmulticast mode [ 924.367080][T16669] veth0_to_bond: entered promiscuous mode [ 924.387082][ T5978] usb 1-1: device descriptor read/all, error -61 [ 925.903865][ T5978] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 925.974745][ T30] audit: type=1400 audit(1757834882.092:676): avc: denied { map } for pid=16691 comm="syz.4.2723" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 926.093955][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 926.115396][ T5978] usb 1-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 926.134053][ T5978] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 926.409905][ T30] audit: type=1400 audit(1757834882.392:677): avc: denied { append } for pid=16689 comm="syz.2.2722" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 926.520587][ T5978] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 926.586704][ T5978] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 926.596350][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.609011][ T5978] usb 1-1: config 0 descriptor?? [ 926.853853][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 928.018374][T16713] wireguard0: entered promiscuous mode [ 928.033965][T16709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 928.040470][T16709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 928.218059][T16713] wireguard0: entered allmulticast mode [ 928.218586][T16709] vhci_hcd vhci_hcd.0: Device attached [ 928.231187][T16710] vhci_hcd: connection closed [ 928.263826][ T43] usb 2-1: device descriptor read/64, error -71 [ 928.277044][T10976] vhci_hcd: stop threads [ 928.281307][T10976] vhci_hcd: release socket [ 928.287588][T10976] vhci_hcd: disconnect device [ 928.543944][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 928.803890][ T43] usb 2-1: device descriptor read/64, error -71 [ 929.050930][ T43] usb usb2-port1: attempt power cycle [ 929.186281][T16732] FAULT_INJECTION: forcing a failure. [ 929.186281][T16732] name failslab, interval 1, probability 0, space 0, times 0 [ 929.199106][T16732] CPU: 1 UID: 0 PID: 16732 Comm: syz.3.2732 Not tainted syzkaller #0 PREEMPT(full) [ 929.199134][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 929.199145][T16732] Call Trace: [ 929.199152][T16732] [ 929.199160][T16732] dump_stack_lvl+0x16c/0x1f0 [ 929.199190][T16732] should_fail_ex+0x512/0x640 [ 929.199215][T16732] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 929.199242][T16732] should_failslab+0xc2/0x120 [ 929.199266][T16732] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 929.199288][T16732] ? kasan_quarantine_put+0x10a/0x240 [ 929.199308][T16732] ? lockdep_hardirqs_on+0x7c/0x110 [ 929.199331][T16732] ? ovl_do_parse_layer+0x2f/0x1200 [ 929.199360][T16732] kstrdup+0x53/0x100 [ 929.199384][T16732] ovl_do_parse_layer+0x2f/0x1200 [ 929.199408][T16732] ? ovl_mount_dir+0x15f/0x1f0 [ 929.199434][T16732] ovl_parse_param+0xdd9/0x1570 [ 929.199463][T16732] ? __pfx_ovl_parse_param+0x10/0x10 [ 929.199487][T16732] ? trace_kmalloc+0x2b/0xd0 [ 929.199511][T16732] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 929.199536][T16732] ? static_key_count+0x5a/0x70 [ 929.199565][T16732] ? __pfx_ovl_parse_param+0x10/0x10 [ 929.199591][T16732] vfs_parse_fs_param+0x20b/0x3c0 [ 929.199625][T16732] vfs_parse_fs_string+0xe9/0x150 [ 929.199650][T16732] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 929.199674][T16732] ? __pfx_ovl_next_opt+0x10/0x10 [ 929.199701][T16732] ? vfs_parse_monolithic_sep+0x17a/0x1f0 [ 929.199726][T16732] ? vfs_parse_monolithic_sep+0xae/0x1f0 [ 929.199750][T16732] ? ovl_next_opt+0x143/0x1c0 [ 929.199773][T16732] ? __pfx_ovl_next_opt+0x10/0x10 [ 929.199795][T16732] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 929.199821][T16732] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 929.199847][T16732] ? __pfx_ovl_parse_monolithic+0x10/0x10 [ 929.199870][T16732] ? path_mount+0xbf7/0x2000 [ 929.199900][T16732] path_mount+0x14c9/0x2000 [ 929.199931][T16732] ? __pfx_path_mount+0x10/0x10 [ 929.199959][T16732] ? kmem_cache_free+0x2d1/0x4d0 [ 929.199978][T16732] ? putname+0x154/0x1a0 [ 929.200008][T16732] ? putname+0x154/0x1a0 [ 929.200037][T16732] ? __x64_sys_mount+0x28d/0x310 [ 929.200061][T16732] __x64_sys_mount+0x28d/0x310 [ 929.200088][T16732] ? __pfx___x64_sys_mount+0x10/0x10 [ 929.200124][T16732] do_syscall_64+0xcd/0x4e0 [ 929.200152][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.200173][T16732] RIP: 0033:0x7f3e0b58eba9 [ 929.200190][T16732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.200209][T16732] RSP: 002b:00007f3e097d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 929.200229][T16732] RAX: ffffffffffffffda RBX: 00007f3e0b7d6180 RCX: 00007f3e0b58eba9 [ 929.200243][T16732] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 929.200256][T16732] RBP: 00007f3e097d5090 R08: 0000200000000280 R09: 0000000000000000 [ 929.200268][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.200280][T16732] R13: 00007f3e0b7d6218 R14: 00007f3e0b7d6180 R15: 00007ffd2201d728 [ 929.200309][T16732] [ 930.029686][ T5978] usb 1-1: string descriptor 0 read error: -71 [ 930.104894][ T5978] usb 1-1: USB disconnect, device number 41 [ 930.340277][T16743] netlink: 'syz.3.2735': attribute type 13 has an invalid length. [ 930.398158][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2736'. [ 930.731571][T16751] loop6: detected capacity change from 0 to 2560 [ 930.747774][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.758998][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.769374][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.796606][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.806380][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.816470][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.826554][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.836295][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.845541][T16751] ldm_validate_partition_table(): Disk read failed. [ 930.853016][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.862899][T16751] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.873864][T16751] Dev loop6: unable to read RDB block 0 [ 930.887496][T16751] loop6: unable to read partition table [ 930.896207][T16751] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 931.637831][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2738'. [ 931.646956][T16759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'. [ 931.656068][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2738'. [ 931.665161][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2738'. [ 932.011011][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.118138][T16778] fuse: Bad value for 'fd' [ 933.200695][ T5978] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 933.713961][ T5978] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 933.757616][ T5978] usb 1-1: config 1 has no interface number 0 [ 933.809937][ T5978] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 933.886826][ T5978] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 933.923538][ T5978] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.983576][ T5978] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 933.992762][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.057436][ T5978] usb 1-1: Product: syz [ 934.061638][ T5978] usb 1-1: Manufacturer: syz [ 934.066409][ T5978] usb 1-1: SerialNumber: syz [ 934.077969][T16773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 934.135635][T16787] binder: 16786:16787 ioctl 5000940a 200000000480 returned -22 [ 934.243494][T16787] binder: 16786:16787 ioctl c0306201 200000000040 returned -22 [ 934.275137][T16787] binder: 16786:16787 ioctl aead 0 returned -22 [ 934.593102][T16773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 934.960590][ T5978] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 935.978494][ T43] usb 1-1: USB disconnect, device number 42 [ 936.009262][ T43] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 936.490515][ T43] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 936.511004][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2758'. [ 936.684349][ T30] audit: type=1400 audit(1757834892.782:678): avc: denied { getopt } for pid=16816 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 938.358429][T16835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 938.547621][ T30] audit: type=1400 audit(1757834894.652:679): avc: denied { ioctl } for pid=16836 comm="syz.4.2762" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 940.374570][T16864] syzkaller1: entered promiscuous mode [ 940.380072][T16864] syzkaller1: entered allmulticast mode [ 942.816392][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 943.342246][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2781'. [ 944.750375][T16924] trusted_key: encrypted_key: key user:syz not found [ 944.843835][T11290] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 945.086065][T11290] usb 1-1: Using ep0 maxpacket: 16 [ 945.171032][T16929] 9pnet_fd: Insufficient options for proto=fd [ 945.476477][T11290] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 945.513002][T11290] usb 1-1: config 0 has no interface number 0 [ 945.531101][T11290] usb 1-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 1.34 [ 945.541820][T11290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.562074][T11290] usb 1-1: Product: syz [ 945.567848][T11290] usb 1-1: Manufacturer: syz [ 945.577744][T11290] usb 1-1: SerialNumber: syz [ 945.591904][T11290] usb 1-1: config 0 descriptor?? [ 945.604698][T11290] snd-usb-caiaq 1-1:0.67: can't set alt interface. [ 945.612547][T11290] usb 1-1: unable to init card! (ret=-5) [ 945.618917][T11290] snd-usb-caiaq 1-1:0.67: probe with driver snd-usb-caiaq failed with error -5 [ 945.838414][T16917] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 945.856768][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'. [ 946.673932][T11290] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 946.994127][T11290] usb 3-1: Using ep0 maxpacket: 8 [ 946.995662][T16954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2795'. [ 947.009451][T11290] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 947.030181][T11290] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 947.140042][T11290] usb 3-1: config 0 has no interface number 0 [ 947.158246][T11290] usb 3-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 947.730999][T11290] usb 3-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 947.746529][T11290] usb 3-1: config 0 interface 48 has no altsetting 0 [ 947.753847][T11290] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 947.763086][T11290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.779398][T11290] usb 3-1: config 0 descriptor?? [ 947.964823][ T43] usb 1-1: USB disconnect, device number 43 [ 948.020622][T16961] wireguard1: entered promiscuous mode [ 948.040662][T16961] wireguard1: entered allmulticast mode [ 948.145119][T11290] usb 3-1: string descriptor 0 read error: -71 [ 948.163283][T11290] usb 3-1: USB disconnect, device number 51 [ 948.264690][ T30] audit: type=1400 audit(1757834904.372:680): avc: denied { remove_name } for pid=16970 comm="syz.0.2800" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 948.292811][T16971] IPVS: set_ctl: invalid protocol: 135 172.20.20.42:20000 [ 948.354666][T16972] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2800'. [ 948.355591][ T30] audit: type=1400 audit(1757834904.372:681): avc: denied { unlink } for pid=16970 comm="syz.0.2800" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 948.852303][T12303] IPVS: starting estimator thread 0... [ 948.954143][T16975] IPVS: using max 32 ests per chain, 76800 per kthread [ 949.365593][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2802'. [ 949.377173][ T30] audit: type=1400 audit(1757834905.462:682): avc: denied { write } for pid=16978 comm="syz.2.2802" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 949.400648][T16979] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2802'. [ 949.414152][T16979] sd 0:0:1:0: PR command failed: 1026 [ 949.420851][ T30] audit: type=1400 audit(1757834905.522:683): avc: denied { ioctl } for pid=16978 comm="syz.2.2802" path="/555/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 949.433876][T16979] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 949.466194][T16979] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 953.738663][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2807'. [ 953.766798][T16996] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2806'. [ 954.279363][T17003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2809'. [ 956.203902][T17018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2811'. [ 959.653790][T11290] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 959.806274][T11290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.839397][T11290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.872730][T11290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 959.918150][T11290] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.010448][T11290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.049570][T11290] usb 4-1: config 0 descriptor?? [ 961.002605][T11290] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 961.070520][T11290] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 961.153771][ T5978] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 961.186724][ T30] audit: type=1400 audit(1757834917.302:684): avc: denied { append } for pid=17067 comm="syz.3.2825" name="file0" dev="tmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 961.228838][ T30] audit: type=1400 audit(1757834917.302:685): avc: denied { open } for pid=17067 comm="syz.3.2825" path="/556/file0" dev="tmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 961.307257][T11290] usb 4-1: USB disconnect, device number 61 [ 961.363767][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 961.553741][ T5978] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 961.702884][ T5978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.723073][ T5978] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 962.048249][ T5978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.072341][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.114093][ T5978] usb 3-1: Product: syz [ 962.118290][ T5978] usb 3-1: Manufacturer: ࠁ [ 962.122880][ T5978] usb 3-1: SerialNumber: syz [ 962.783459][T17107] syzkaller1: entered promiscuous mode [ 962.800235][T17107] syzkaller1: entered allmulticast mode [ 963.137309][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'. [ 963.620411][ T5978] usb 3-1: 0:2 : does not exist [ 963.641615][ T5978] usb 3-1: USB disconnect, device number 52 [ 967.030870][T10321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.040473][T10321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.048545][T10321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.056917][T10321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.064506][T10321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.150303][ T30] audit: type=1400 audit(1757834923.202:686): avc: denied { mounton } for pid=17161 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 967.858766][T17169] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 967.882745][T17169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2849'. [ 967.995764][T17169] nbd: illegal input index 65544 [ 968.272995][T17179] trusted_key: encrypted_key: key user:syz not found [ 968.279064][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'. [ 968.641891][T17161] chnl_net:caif_netlink_parms(): no params data found [ 969.203808][T10321] Bluetooth: hci3: command tx timeout [ 969.809764][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2852'. [ 970.796486][T11000] bond2 (unregistering): (slave bridge3): Releasing active interface [ 971.279736][T10321] Bluetooth: hci3: command tx timeout [ 971.340062][T11000] bond0 (unregistering): Released all slaves [ 971.352240][T11000] bond1 (unregistering): Released all slaves [ 971.366516][T11000] bond2 (unregistering): Released all slaves [ 971.745450][T17161] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.784113][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.807120][T17161] bridge_slave_0: entered allmulticast mode [ 971.931298][T17161] bridge_slave_0: entered promiscuous mode [ 971.946059][T17161] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.946219][T17203] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 971.953237][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.962704][T17203] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 971.969997][T17161] bridge_slave_1: entered allmulticast mode [ 971.979402][T17203] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 971.986836][T17161] bridge_slave_1: entered promiscuous mode [ 972.014541][T11000] : left promiscuous mode [ 972.015225][T17204] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 972.028827][T17204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 972.038586][T17204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 972.210264][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.220784][T11000] tipc: Left network mode [ 972.271566][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.293257][T17161] team0: Port device team_slave_0 added [ 973.308340][T17161] team0: Port device team_slave_1 added [ 973.365890][T10321] Bluetooth: hci3: command tx timeout [ 973.616225][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.641423][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.827282][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.940678][T17243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2863'. [ 974.069470][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.080812][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.117166][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.248247][T11000] hsr_slave_0: left promiscuous mode [ 974.256491][T11000] hsr_slave_1: left promiscuous mode [ 974.593835][ T5978] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 974.860541][T17259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2869'. [ 974.883991][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 974.890652][ T5978] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 974.901129][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.914102][T12303] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 974.935321][ T5978] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 975.019563][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.035231][ T5978] usb 4-1: config 0 descriptor?? [ 975.445218][T10321] Bluetooth: hci3: command tx timeout [ 975.491429][T12303] usb 3-1: Using ep0 maxpacket: 32 [ 975.504143][T12303] usb 3-1: no configurations [ 975.508756][T12303] usb 3-1: can't read configurations, error -22 [ 975.635802][ T5978] usb 4-1: USB disconnect, device number 62 [ 975.647274][T12303] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 975.824630][T12303] usb 3-1: Using ep0 maxpacket: 32 [ 975.834708][T12303] usb 3-1: no configurations [ 975.839325][T12303] usb 3-1: can't read configurations, error -22 [ 975.848179][T12303] usb usb3-port1: attempt power cycle [ 976.214374][T12303] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 976.229135][T17263] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 976.238664][T17263] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 976.248338][T17263] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 976.328816][T12303] usb 3-1: Using ep0 maxpacket: 32 [ 976.347056][T12303] usb 3-1: no configurations [ 976.425024][T12303] usb 3-1: can't read configurations, error -22 [ 976.465634][T17161] hsr_slave_0: entered promiscuous mode [ 976.572402][T17161] hsr_slave_1: entered promiscuous mode [ 976.578915][T17161] debugfs: 'hsr0' already exists in 'hsr' [ 976.584783][T17161] Cannot create hsr debugfs directory [ 976.691357][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 977.101800][T12303] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 977.167299][T12303] usb 3-1: Using ep0 maxpacket: 32 [ 977.216931][T12303] usb 3-1: no configurations [ 977.232136][T12303] usb 3-1: can't read configurations, error -22 [ 977.347901][T12303] usb usb3-port1: unable to enumerate USB device [ 977.411507][T17282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2875'. [ 977.573002][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2874'. [ 977.869543][T17289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2874'. [ 978.204438][T12303] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 978.314151][T11000] IPVS: stop unused estimator thread 0... [ 978.395095][T12303] usb 2-1: Using ep0 maxpacket: 8 [ 978.756953][T12303] usb 2-1: unable to get BOS descriptor or descriptor too short [ 978.796318][T12303] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 978.808236][T12303] usb 2-1: config 7 has no interface number 0 [ 978.834562][T12303] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7 [ 978.865696][T12303] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024 [ 978.914654][T12303] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.956957][T12303] usb 2-1: config 7 interface 58 has no altsetting 0 [ 978.981503][T17302] veth1_to_bridge: entered allmulticast mode [ 978.993523][T12303] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 979.007717][T12303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.067999][T12303] usb 2-1: Product: syz [ 979.112257][T12303] usb 2-1: Manufacturer: Ь [ 979.142281][T17298] veth1_to_bridge: left allmulticast mode [ 979.201273][T12303] usb 2-1: SerialNumber: syz [ 979.509657][T17285] overlayfs: missing 'lowerdir' [ 979.523056][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 979.801693][T17161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 979.837976][T17161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 979.880979][T17161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 979.935169][T17161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 980.627181][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2882'. [ 980.670752][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 980.772319][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.794161][ T5978] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 980.847171][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.865819][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.872983][ T6673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.932501][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.939663][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.959952][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 980.978661][ T5978] usb 4-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 981.081130][T17331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2883'. [ 981.096811][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.124776][ T5978] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 981.158508][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.170110][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.219719][ T5978] usb 4-1: Product: syz [ 981.314182][ T5978] usb 4-1: Manufacturer: ࠁ [ 981.332191][ T5978] usb 4-1: SerialNumber: syz [ 981.372347][T12303] usb 2-1: USB disconnect, device number 47 [ 982.235541][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.805334][ T43] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 982.958724][ T5978] usb 4-1: 0:2 : does not exist [ 982.987772][ T5978] usb 4-1: USB disconnect, device number 63 [ 983.117031][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 983.140245][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 983.190004][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.280172][T17161] veth0_vlan: entered promiscuous mode [ 983.289338][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.293899][T17161] veth1_vlan: entered promiscuous mode [ 983.335076][ T43] usb 3-1: string descriptor 0 read error: -22 [ 983.349599][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.368528][T17161] veth0_macvtap: entered promiscuous mode [ 983.389195][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.392218][T17161] veth1_macvtap: entered promiscuous mode [ 983.455867][ T43] usb 3-1: 0:2 : does not exist [ 983.467673][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.485816][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.529319][ T6668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.539104][ T6668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.554193][ T6668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.615614][ T6668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.805266][T10990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.829687][T17368] block nbd3: Attempted send on invalid socket [ 983.836112][T17368] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 983.846991][T10990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.854585][T17368] block nbd3: Attempted send on invalid socket [ 983.879369][T17368] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 983.903867][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 983.959150][ T9929] block nbd3: Attempted send on invalid socket [ 983.965760][ T9929] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 983.975057][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 983.985705][T17368] block nbd3: Attempted send on invalid socket [ 983.994147][T17368] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.047134][T17368] block nbd3: Attempted send on invalid socket [ 984.053332][T17368] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.054883][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.086658][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.292861][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 984.604432][T17368] block nbd3: Attempted send on invalid socket [ 984.610781][T17368] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.673928][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 984.704583][T17368] block nbd3: Attempted send on invalid socket [ 984.710822][T17368] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.728413][T17368] block nbd3: Attempted send on invalid socket [ 984.731204][ T43] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 984.735547][T17368] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 984.765696][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 984.766326][ T43] usb 3-1: Warning! Unlikely big volume range (=12453), cval->res is probably wrong. [ 984.844177][T17368] block nbd3: Attempted send on invalid socket [ 984.996163][T17368] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 985.005682][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 985.009628][ T43] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/12453/1 [ 985.016045][T17368] block nbd3: Attempted send on invalid socket [ 985.036402][T17368] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 985.046200][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 985.058143][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 985.071324][T17368] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 985.081055][T17368] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 985.110807][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 985.152552][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 985.190199][ T43] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 985.281128][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 985.325172][ T43] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 985.355907][ T43] usb 3-1: USB disconnect, device number 57 [ 988.073094][T17421] ubi7: attaching mtd0 [ 988.077268][T17421] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 988.807232][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 988.844378][T17431] nbd_handle_cmd: 4 callbacks suppressed [ 988.844401][T17431] block nbd2: Attempted send on invalid socket [ 988.865143][ T6673] Bluetooth: hci5: Frame reassembly failed (-84) [ 988.908866][T17431] blk_print_req_error: 4 callbacks suppressed [ 988.908886][T17431] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 988.992398][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 989.034128][ T9989] block nbd2: Attempted send on invalid socket [ 989.040333][ T9989] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.049827][T17431] block nbd2: Attempted send on invalid socket [ 989.056079][T17431] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.068075][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 989.080188][T17431] block nbd2: Attempted send on invalid socket [ 989.086543][T17431] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.097724][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 989.107960][T17431] block nbd2: Attempted send on invalid socket [ 989.114762][T17431] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.133994][T17431] block nbd2: Attempted send on invalid socket [ 989.142678][T17431] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.168467][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 989.180910][T17431] block nbd2: Attempted send on invalid socket [ 989.187795][T17431] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.199391][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 989.212971][T17431] block nbd2: Attempted send on invalid socket [ 989.221177][T17431] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.233616][T17431] block nbd2: Attempted send on invalid socket [ 989.242352][T17431] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.252912][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 989.306412][T17431] block nbd2: Attempted send on invalid socket [ 989.313882][T17431] I/O error, dev nbd2, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 989.327567][T17431] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 989.339018][T17431] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 990.723451][T17445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.873824][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 990.893943][T10321] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 991.005403][T17442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.282927][T17463] netlink: 748 bytes leftover after parsing attributes in process `syz.0.2913'. [ 992.298528][T17463] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 992.802215][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.302400][T17477] ubi7: attaching mtd0 [ 993.306630][T17477] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 993.717807][T17481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.742492][T17481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.758786][T17481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.182796][ T30] audit: type=1400 audit(1757834950.292:687): avc: denied { write } for pid=17496 comm="syz.1.2921" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 994.213973][T17497] random: crng reseeded on system resumption [ 994.388548][ T30] audit: type=1400 audit(1757834950.462:688): avc: denied { bind } for pid=17496 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 994.870775][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 994.880401][T17489] ALSA: mixer_oss: invalid OSS volume '8' [ 994.942874][T10974] Bluetooth: hci5: Frame reassembly failed (-84) [ 995.006172][T10974] Bluetooth: hci5: Frame reassembly failed (-84) [ 995.063904][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 995.279145][ T43] usb 3-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 995.303158][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 995.325634][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 995.338927][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 995.363845][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.406312][ T43] usb 3-1: config 0 descriptor?? [ 996.658847][T17531] netlink: 'syz.3.2929': attribute type 11 has an invalid length. [ 996.953789][T10321] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 997.576016][ T43] usb 3-1: string descriptor 0 read error: -71 [ 997.587403][ T43] usb 3-1: USB disconnect, device number 58 [ 997.717583][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2933'. [ 997.734409][T17541] 8021q: VLANs not supported on caif0 [ 998.004809][T17548] : entered promiscuous mode [ 998.119961][T17554] netlink: 'syz.4.2937': attribute type 1 has an invalid length. [ 998.131218][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2937'. [ 998.141649][T17554] nbd: illegal input index 65544 [ 998.413793][T17563] trusted_key: encrypted_key: key user:syz not found [ 998.545355][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 998.655822][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2940'. [ 998.807464][ T5880] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 999.002320][ T5880] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 999.313829][ T5880] usb 4-1: config 0 has no interface number 0 [ 999.505224][ T5880] usb 4-1: config 0 interface 113 has no altsetting 0 [ 999.525143][ T5880] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 999.536161][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.550208][T17572] ubi31: attaching mtd0 [ 999.557334][T17572] ubi31: scanning is finished [ 999.562049][T17572] ubi31: empty MTD device detected [ 999.674387][ T5880] usb 4-1: Product: syz [ 999.678617][ T5880] usb 4-1: Manufacturer: syz [ 999.683212][ T5880] usb 4-1: SerialNumber: syz [ 999.690213][ T5880] usb 4-1: config 0 descriptor?? [ 999.690714][T17572] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 999.774777][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2941'. [ 1000.259082][T17582] FAULT_INJECTION: forcing a failure. [ 1000.259082][T17582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.272630][T17582] CPU: 1 UID: 0 PID: 17582 Comm: syz.1.2943 Not tainted syzkaller #0 PREEMPT(full) [ 1000.272647][T17582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1000.272655][T17582] Call Trace: [ 1000.272661][T17582] [ 1000.272670][T17582] dump_stack_lvl+0x16c/0x1f0 [ 1000.272702][T17582] should_fail_ex+0x512/0x640 [ 1000.272733][T17582] _copy_from_user+0x2e/0xd0 [ 1000.272753][T17582] copy_msghdr_from_user+0x98/0x160 [ 1000.272769][T17582] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1000.272790][T17582] ___sys_sendmsg+0xfe/0x1d0 [ 1000.272807][T17582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.272870][T17582] __sys_sendmsg+0x16d/0x220 [ 1000.272891][T17582] ? __pfx___sys_sendmsg+0x10/0x10 [ 1000.272915][T17582] do_syscall_64+0xcd/0x4e0 [ 1000.272931][T17582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.272944][T17582] RIP: 0033:0x7fbae438eba9 [ 1000.272960][T17582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.272981][T17582] RSP: 002b:00007fbae525c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.273001][T17582] RAX: ffffffffffffffda RBX: 00007fbae45d5fa0 RCX: 00007fbae438eba9 [ 1000.273015][T17582] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 000000000000000a [ 1000.273028][T17582] RBP: 00007fbae525c090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.273036][T17582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.273042][T17582] R13: 00007fbae45d6038 R14: 00007fbae45d5fa0 R15: 00007ffc90b272b8 [ 1000.273058][T17582] [ 1000.276227][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.530476][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.625038][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1000.632651][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1000.640730][ T5880] usb 4-1: NFC: Unable to get FW version [ 1000.663290][ T5880] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -71 [ 1000.681659][ T5880] usb 4-1: USB disconnect, device number 64 [ 1000.698404][T17586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1000.707824][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1000.749879][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2945'. [ 1000.760130][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 1001.870877][T17604] netlink: 'syz.4.2951': attribute type 1 has an invalid length. [ 1001.882566][T17604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1001.891722][T17604] nbd: illegal input index 65544 [ 1002.424051][T17611] trusted_key: encrypted_key: key user:syz not found [ 1003.542565][T17629] fuse: Bad value for 'group_id' [ 1003.554922][T17629] fuse: Bad value for 'group_id' [ 1006.250100][T17648] __nla_validate_parse: 1 callbacks suppressed [ 1006.250120][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1006.303612][T17652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17652 comm=syz.0.2964 [ 1006.403032][T17652] netlink: 'syz.0.2964': attribute type 1 has an invalid length. [ 1006.998513][T17659] bond2: (slave bridge3): making interface the new active one [ 1007.007418][T17659] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1007.216296][T17666] block nbd1: Attempted send on invalid socket [ 1007.222518][T17666] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.238123][T17666] block nbd1: Attempted send on invalid socket [ 1007.244798][T17666] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.257046][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1007.277738][T17666] block nbd1: Attempted send on invalid socket [ 1007.313527][T17666] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.694911][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1007.729441][T17666] block nbd1: Attempted send on invalid socket [ 1007.758145][T17669] mkiss: ax0: crc mode is auto. [ 1007.770306][T17666] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.790798][T17669] syz.0.2968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1007.985020][T17666] block nbd1: Attempted send on invalid socket [ 1007.997435][T17666] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.007404][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1008.017348][T17666] block nbd1: Attempted send on invalid socket [ 1008.041232][T17666] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.053271][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1008.080154][T17666] block nbd1: Attempted send on invalid socket [ 1008.088666][T17666] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.099183][T17666] block nbd1: Attempted send on invalid socket [ 1008.107326][T17666] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.251074][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1008.732702][T17666] block nbd1: Attempted send on invalid socket [ 1008.770691][T17666] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.821633][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1008.857036][T17666] block nbd1: Attempted send on invalid socket [ 1008.866008][T17666] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.906559][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1008.920121][T17666] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1008.933613][T17666] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1009.143922][T17689] syz_tun: entered allmulticast mode [ 1009.154485][T17688] syz_tun: left allmulticast mode [ 1009.327968][T17691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1009.593474][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1009.692834][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1009.878324][T17712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2981'. [ 1010.566189][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2982'. [ 1011.299331][T17733] fuse: Bad value for 'group_id' [ 1011.304406][T17733] fuse: Bad value for 'group_id' [ 1015.319818][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.330964][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.402422][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.409830][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.413904][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.497319][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.507332][T17769] netlink: 'syz.1.2990': attribute type 21 has an invalid length. [ 1015.518473][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1015.661219][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.776500][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.073085][ T8831] syz_tun (unregistering): left promiscuous mode [ 1016.110329][T17769] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2990'. [ 1016.126159][T10989] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.136926][T10989] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.151930][T10989] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.192483][T10989] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.239251][T17778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1017.596962][ T5849] Bluetooth: hci1: command tx timeout [ 1017.705661][T17766] chnl_net:caif_netlink_parms(): no params data found [ 1017.729668][ T6668] veth0_to_bond: left allmulticast mode [ 1017.760608][ T6668] veth0_to_bond: left promiscuous mode [ 1017.794111][ T6668] bridge1: port 1(veth0_to_bond) entered disabled state [ 1017.913924][T11290] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1018.144100][T11290] usb 4-1: Using ep0 maxpacket: 32 [ 1018.154707][T11290] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1018.162991][T11290] usb 4-1: config 0 has no interface number 0 [ 1018.175891][T11290] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1018.188756][T11290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.212295][T11290] usb 4-1: Product: syz [ 1018.216613][T11290] usb 4-1: Manufacturer: syz [ 1018.227508][T11290] usb 4-1: SerialNumber: syz [ 1018.249528][T11290] usb 4-1: config 0 descriptor?? [ 1018.285155][T11290] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1018.555162][T11290] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1018.584255][T11290] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1018.681200][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3008'. [ 1018.690490][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 1018.738290][ T6668] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1018.854662][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.863271][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.974762][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1018.975660][ T5880] usb 4-1: USB disconnect, device number 65 [ 1018.992078][ T6668] bond0 (unregistering): Released all slaves [ 1019.000559][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1019.043561][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1019.076712][ T5880] quatech2 4-1:0.51: device disconnected [ 1019.237969][ T6668] bond1 (unregistering): (slave veth3): Releasing active interface [ 1019.258070][ T6668] bond1 (unregistering): Released all slaves [ 1019.284945][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1019.295314][ T6668] bond2 (unregistering): Released all slaves [ 1019.674706][ T5849] Bluetooth: hci1: command tx timeout [ 1019.707749][T17806] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3006'. [ 1019.813699][ T6668] : left promiscuous mode [ 1019.979373][ T6668] tipc: Left network mode [ 1020.019421][T17837] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1020.123768][ T5880] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1020.254030][T17766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.281256][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.290827][T17766] bridge_slave_0: entered allmulticast mode [ 1020.304485][T17766] bridge_slave_0: entered promiscuous mode [ 1020.706535][T17766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.726414][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.726564][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1020.749634][T17766] bridge_slave_1: entered allmulticast mode [ 1020.780785][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1020.792353][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1145, setting to 64 [ 1020.804059][T17766] bridge_slave_1: entered promiscuous mode [ 1020.816053][ T5880] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1020.829220][ T6668] batadv_slave_0: left promiscuous mode [ 1020.829390][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.853153][ T5880] usb 4-1: Product: syz [ 1020.863706][ T5880] usb 4-1: Manufacturer: syz [ 1020.871242][ T5880] usb 4-1: SerialNumber: syz [ 1020.885069][ T5880] usb 4-1: config 0 descriptor?? [ 1020.894221][T17831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1020.901447][T17831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1020.914545][ T5880] usb 4-1: ucan: probing device on interface #0 [ 1020.937832][ T6668] hsr_slave_0: left promiscuous mode [ 1020.946818][ T6668] hsr_slave_1: left promiscuous mode [ 1021.160399][ T5880] usb 4-1: ucan: device protocol version 1949266947 is not supported [ 1021.168605][ T5880] usb 4-1: ucan: probe failed; try to update the device firmware [ 1021.763827][ T5849] Bluetooth: hci1: command tx timeout [ 1022.128312][T17854] vlan2: entered promiscuous mode [ 1022.172444][ T5880] usb 4-1: USB disconnect, device number 66 [ 1022.201236][T17766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.219306][T17766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.276443][T17766] team0: Port device team_slave_0 added [ 1022.356354][T17766] team0: Port device team_slave_1 added [ 1022.434248][T17766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.454682][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.482293][T17766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.494768][T17766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.501724][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.537898][T17766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.675053][ T5849] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1023.684728][ T5849] Bluetooth: hci3: Injecting HCI hardware error event [ 1023.693915][ T5849] Bluetooth: hci3: hardware error 0x00 [ 1023.821320][T17766] hsr_slave_0: entered promiscuous mode [ 1023.834987][T10321] Bluetooth: hci1: command tx timeout [ 1023.999701][T17766] hsr_slave_1: entered promiscuous mode [ 1024.007328][T17766] debugfs: 'hsr0' already exists in 'hsr' [ 1024.013114][T17766] Cannot create hsr debugfs directory [ 1024.546843][ T6668] IPVS: stop unused estimator thread 0... [ 1024.724305][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1024.737290][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1025.041651][ T30] audit: type=1400 audit(1757834981.152:689): avc: denied { ioctl } for pid=17896 comm="syz.3.3036" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1025.362794][T17899] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.3036'. [ 1025.865880][ T5849] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1025.990232][T17766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1026.041753][T17766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.055097][T17766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.085148][T17766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1026.179507][T17766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.205843][T17766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.220429][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.227576][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.397325][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.404468][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.694985][T17915] 9pnet_fd: Insufficient options for proto=fd [ 1026.706983][T17915] nbd_handle_cmd: 2 callbacks suppressed [ 1026.707003][T17915] block nbd1: Attempted send on invalid socket [ 1026.719828][T17915] blk_print_req_error: 2 callbacks suppressed [ 1026.719846][T17915] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.737314][T17915] block nbd1: Attempted send on invalid socket [ 1026.743581][T17915] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.784055][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1026.802323][T17915] block nbd1: Attempted send on invalid socket [ 1026.808805][T17915] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.820676][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1026.833554][T17915] block nbd1: Attempted send on invalid socket [ 1026.839998][T17915] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.849710][T17915] block nbd1: Attempted send on invalid socket [ 1026.856673][T17915] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.867215][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1026.877215][T17915] block nbd1: Attempted send on invalid socket [ 1026.883490][T17915] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.893241][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1027.135654][T17915] block nbd1: Attempted send on invalid socket [ 1027.226453][T17915] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1027.254641][T17915] block nbd1: Attempted send on invalid socket [ 1027.260889][T17915] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1027.270848][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1027.321510][T17915] block nbd1: Attempted send on invalid socket [ 1027.328009][T17915] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1027.330161][T17766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.338464][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1027.356430][T17915] block nbd1: Attempted send on invalid socket [ 1027.362688][T17915] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1027.373394][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1027.504028][T17915] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1027.536940][T17915] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1027.609983][T17766] veth0_vlan: entered promiscuous mode [ 1027.703045][T17766] veth1_vlan: entered promiscuous mode [ 1027.830053][T17766] veth0_macvtap: entered promiscuous mode [ 1027.893457][T17766] veth1_macvtap: entered promiscuous mode [ 1027.944977][T17766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.008903][T17766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.022036][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1028.081990][ T6679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.091245][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1028.107411][ T6668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.143613][ T6668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.172669][ T6668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.283737][T12303] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1028.315040][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.358481][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.394553][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.411670][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.474238][T12303] usb 2-1: Using ep0 maxpacket: 16 [ 1028.481101][T12303] usb 2-1: config 0 has no interfaces? [ 1028.488959][T12303] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1028.498581][T12303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.563792][T12303] usb 2-1: Product: syz [ 1028.571283][T12303] usb 2-1: Manufacturer: syz [ 1028.578961][T12303] usb 2-1: SerialNumber: syz [ 1028.588938][T12303] usb 2-1: config 0 descriptor?? [ 1028.833594][T17945] ipvlan0: entered allmulticast mode [ 1028.839743][T17945] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1028.913329][T15762] syz_tun (unregistering): left promiscuous mode [ 1028.962236][T12303] usb 2-1: USB disconnect, device number 48 [ 1029.315047][T10321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1029.326853][T17953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17953 comm=syz.0.3049 [ 1029.327368][T10321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1029.350575][T10321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1029.362446][T10321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1029.370167][T10321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1029.728260][T17966] 9pnet_fd: Insufficient options for proto=fd [ 1029.799643][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1029.831753][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1029.869635][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1029.879642][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1029.890299][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1029.900376][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1029.914941][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1029.933231][T17954] chnl_net:caif_netlink_parms(): no params data found [ 1029.949483][T17966] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1030.041152][T17966] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1030.188203][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.196473][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.205421][T17954] bridge_slave_0: entered allmulticast mode [ 1030.215954][T17954] bridge_slave_0: entered promiscuous mode [ 1030.225469][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.234880][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.256795][T17954] bridge_slave_1: entered allmulticast mode [ 1030.264230][T17954] bridge_slave_1: entered promiscuous mode [ 1030.356916][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.379369][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.757186][T17954] team0: Port device team_slave_0 added [ 1030.817490][T17954] team0: Port device team_slave_1 added [ 1031.063855][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.070852][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.098125][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 1031.128887][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.209395][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.243378][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.269305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.278098][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.433998][ T5849] Bluetooth: hci2: command tx timeout [ 1031.455327][T17954] hsr_slave_0: entered promiscuous mode [ 1031.461797][T17954] hsr_slave_1: entered promiscuous mode [ 1031.477776][T17954] debugfs: 'hsr0' already exists in 'hsr' [ 1031.489867][T17954] Cannot create hsr debugfs directory [ 1031.521859][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1032.543848][T11290] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1032.706369][T11290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.719182][T11290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.729109][T11290] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1033.084058][ T5880] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1033.258412][T11290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.284484][T11290] usb 1-1: config 0 descriptor?? [ 1033.304420][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 1033.318322][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1033.337304][ T5880] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1033.378224][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.395050][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1033.413613][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.426312][ T5880] usb 2-1: Product: syz [ 1033.430493][ T5880] usb 2-1: Manufacturer: ࠁ [ 1033.440382][ T5880] usb 2-1: SerialNumber: syz [ 1033.514369][ T5849] Bluetooth: hci2: command tx timeout [ 1033.874890][T11290] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 1034.002522][T11290] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 1034.015493][T11290] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000B/input/input28 [ 1034.037729][T11290] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1034.090932][T11290] usb 1-1: USB disconnect, device number 44 [ 1034.120345][ T30] audit: type=1400 audit(1757834990.232:690): avc: denied { watch_sb } for pid=18028 comm="syz.4.3073" path="/39/file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1034.187218][T17954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1034.209594][T17954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1034.260827][T17954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1034.290852][T17954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1034.511005][T17954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.707000][ T30] audit: type=1400 audit(1757834990.792:691): avc: denied { read } for pid=18035 comm="syz.2.3075" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1034.816682][ T30] audit: type=1400 audit(1757834990.802:692): avc: denied { open } for pid=18035 comm="syz.2.3075" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1035.022426][T17954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.240288][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.247480][T10989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.283402][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.290632][T10989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.593894][ T5849] Bluetooth: hci2: command tx timeout [ 1035.718754][ T5880] usb 2-1: 0:2 : does not exist [ 1035.751626][ T5880] usb 2-1: USB disconnect, device number 49 [ 1036.067601][T18060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 1036.748218][T17954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.838457][T17954] veth0_vlan: entered promiscuous mode [ 1036.891829][T17954] veth1_vlan: entered promiscuous mode [ 1037.027423][T17954] veth0_macvtap: entered promiscuous mode [ 1037.076309][T17954] veth1_macvtap: entered promiscuous mode [ 1037.136667][T17954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.167444][T17954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.201102][T10974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.230279][T10974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.255613][T10974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.268636][T10974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.303930][T11290] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1037.425445][T10974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.453603][T10974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.659815][T11290] usb 2-1: Using ep0 maxpacket: 8 [ 1037.675271][ T5849] Bluetooth: hci2: command tx timeout [ 1037.687211][T11290] usb 2-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 1037.703449][T11290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1037.733248][T11290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1037.758612][T11290] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1037.799389][T11290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.820923][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.984786][T11290] usb 2-1: config 0 descriptor?? [ 1038.463613][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.605345][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1038.657671][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1038.971628][T18076] usb 2-1: USB disconnect, device number 50 [ 1039.228977][T10321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1039.240549][T10321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1039.248691][T10321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1039.262368][T10321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1039.270171][T10321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1040.056399][ T30] audit: type=1400 audit(1757834996.052:693): avc: denied { audit_write } for pid=18095 comm="syz.0.3091" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1040.876494][ T30] audit: type=1400 audit(1757834996.072:694): avc: denied { watch } for pid=18095 comm="syz.0.3091" path="/10/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1041.011242][ T5840] syz_tun (unregistering): left promiscuous mode [ 1041.022141][T18108] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1041.031870][T18108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1041.041797][T18108] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1041.052268][T18109] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1041.061713][T18109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1041.071453][T18109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1041.259472][T18091] chnl_net:caif_netlink_parms(): no params data found [ 1041.290817][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 1041.304089][T18114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 1041.353794][T10321] Bluetooth: hci5: command tx timeout [ 1042.283777][T11290] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1042.468381][T11290] usb 1-1: Using ep0 maxpacket: 16 [ 1042.578852][T11290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.595586][T11290] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1042.609716][T11290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.623383][T11290] usb 1-1: config 0 descriptor?? [ 1042.643075][T18091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.724227][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.731745][T18091] bridge_slave_0: entered allmulticast mode [ 1042.741478][T18091] bridge_slave_0: entered promiscuous mode [ 1042.759472][T18091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.888753][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.896843][T18091] bridge_slave_1: entered allmulticast mode [ 1042.904578][T18091] bridge_slave_1: entered promiscuous mode [ 1043.023009][T18141] ubi7: attaching mtd0 [ 1043.027173][T18141] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 1043.436740][T10321] Bluetooth: hci5: command tx timeout [ 1043.480427][T11290] usbhid 1-1:0.0: can't add hid device: -71 [ 1043.499644][T11290] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1043.574584][T11290] usb 1-1: USB disconnect, device number 45 [ 1043.695628][T18091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.816538][T18091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.403835][T18149] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3101'. [ 1044.414925][T18091] team0: Port device team_slave_0 added [ 1044.424285][T18091] team0: Port device team_slave_1 added [ 1044.485064][T18157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3102'. [ 1044.642750][ T6679] dummy0: left allmulticast mode [ 1044.649734][ T6679] bridge0: port 3(dummy0) entered disabled state [ 1044.677207][ T6679] bridge_slave_1: left allmulticast mode [ 1044.691450][ T6679] bridge_slave_1: left promiscuous mode [ 1044.715117][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.735391][ T6679] bridge_slave_0: left allmulticast mode [ 1044.741179][ T6679] bridge_slave_0: left promiscuous mode [ 1044.747001][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.257887][T18169] netlink: 'syz.4.3104': attribute type 10 has an invalid length. [ 1045.513759][T10321] Bluetooth: hci5: command tx timeout [ 1046.139092][ T6679] team0: Port device bond0 removed [ 1046.145947][ T6679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.158928][ T6679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.168536][ T6679] bond0 (unregistering): Released all slaves [ 1046.183269][ T6679] bond1 (unregistering): Released all slaves [ 1046.203398][T18091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.210576][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.249848][T18091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.301281][T18164] bridge_slave_0: left allmulticast mode [ 1046.308860][T18164] bridge_slave_0: left promiscuous mode [ 1046.338114][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.362633][T18164] bridge_slave_1: left allmulticast mode [ 1046.369207][T18164] bridge_slave_1: left promiscuous mode [ 1046.392998][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.427799][T18164] bond0: (slave bond_slave_0): Releasing backup interface [ 1046.437723][T18164] bond0: (slave bond_slave_1): Releasing backup interface [ 1046.450883][T18164] team0: Port device team_slave_0 removed [ 1046.620883][T18164] team0: Port device team_slave_1 removed [ 1046.658253][T18164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.689963][T18164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.917365][T18169] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1046.927100][T18173] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1046.936587][T18173] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1046.946303][T18173] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1047.034045][ T6679] : left promiscuous mode [ 1047.061045][T18186] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 1047.061650][T18091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.083982][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1047.103139][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.131429][T18186] nbd: illegal input index 65544 [ 1047.228105][T18091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.244937][ T6679] tipc: Disabling bearer [ 1047.253129][ T6679] tipc: Left network mode [ 1047.548874][T18190] trusted_key: encrypted_key: key user:syz not found [ 1047.613903][T10321] Bluetooth: hci5: command tx timeout [ 1047.648968][T11290] IPVS: starting estimator thread 0... [ 1047.703495][T18091] hsr_slave_0: entered promiscuous mode [ 1047.724548][T18091] hsr_slave_1: entered promiscuous mode [ 1047.738353][T18091] debugfs: 'hsr0' already exists in 'hsr' [ 1047.745481][T18193] IPVS: using max 43 ests per chain, 103200 per kthread [ 1047.753613][T18091] Cannot create hsr debugfs directory [ 1047.776451][ T6679] batadv_slave_0: left promiscuous mode [ 1047.792897][ T6679] hsr_slave_0: left promiscuous mode [ 1047.799800][ T6679] hsr_slave_1: left promiscuous mode [ 1047.807550][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.357297][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.328987][T18221] trusted_key: encrypted_key: key user:syz not found [ 1052.199086][ T6679] team0 (unregistering): Port device team_slave_1 removed [ 1052.404004][ T6679] team0 (unregistering): Port device team_slave_0 removed [ 1054.264195][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.890576][T18233] tipc: Started in network mode [ 1054.900286][T18233] tipc: Node identity c6e7a05ebcec, cluster identity 4711 [ 1054.916558][T18233] tipc: Enabled bearer , priority 0 [ 1055.061915][T18233] tipc: Disabling bearer [ 1055.412153][ T6679] IPVS: stop unused estimator thread 0... [ 1055.971755][ T30] audit: type=1400 audit(1757835012.042:695): avc: denied { setattr } for pid=18269 comm="syz.3.3131" name="" dev="pipefs" ino=69756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1056.162657][ T30] audit: type=1400 audit(1757835012.262:696): avc: denied { write } for pid=18269 comm="syz.3.3131" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1056.220474][ T30] audit: type=1400 audit(1757835012.272:697): avc: denied { open } for pid=18269 comm="syz.3.3131" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1056.414550][ T30] audit: type=1400 audit(1757835012.502:698): avc: denied { read append } for pid=18269 comm="syz.3.3131" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1056.815219][T18091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1056.826412][T18091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1056.840089][T18091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1056.877099][T18091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1057.028393][T18091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.091682][T18091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.114218][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.121355][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.227064][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.234176][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.372929][T18297] syz_tun: entered allmulticast mode [ 1057.399712][T18296] syz_tun: left allmulticast mode [ 1057.672589][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1058.100807][T18307] trusted_key: encrypted_key: key user:syz not found [ 1058.267976][T18091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.817380][T18091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.964358][T18091] veth0_vlan: entered promiscuous mode [ 1060.018951][T18334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1060.035312][T18091] veth1_vlan: entered promiscuous mode [ 1060.155896][T18091] veth0_macvtap: entered promiscuous mode [ 1060.813001][T18091] veth1_macvtap: entered promiscuous mode [ 1060.864858][T18091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.887061][T18091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.907304][T10989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.927592][T10989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.961372][T10989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.976572][T10989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.278130][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.330448][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.354745][T10321] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1061.363362][T10321] Bluetooth: hci1: Injecting HCI hardware error event [ 1061.372820][T10321] Bluetooth: hci1: hardware error 0x00 [ 1061.453741][T10989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.480077][T10989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.482748][T18349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3146'. [ 1063.433832][T10321] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1063.744826][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1063.755898][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1063.765058][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1063.777290][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1063.787377][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.506667][ T5843] syz_tun (unregistering): left promiscuous mode [ 1064.772452][T18384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1064.829541][T18379] fuse: Unknown parameter 'grou00000000000000000000' [ 1065.915327][ T5849] Bluetooth: hci0: command tx timeout [ 1065.974715][T18374] chnl_net:caif_netlink_parms(): no params data found [ 1066.653815][ T5978] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1066.991269][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 1067.053341][ T5978] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1067.072269][ T5978] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1067.096573][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.118044][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1067.127150][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.135150][ T5978] usb 4-1: Product: syz [ 1067.148622][ T5978] usb 4-1: Manufacturer: ࠁ [ 1067.154862][ T5978] usb 4-1: SerialNumber: syz [ 1067.729461][T10976] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1067.993798][ T5849] Bluetooth: hci0: command tx timeout [ 1068.370007][T10976] bond0 (unregistering): Released all slaves [ 1068.393257][T10976] bond1 (unregistering): Released all slaves [ 1068.521290][T10976] bond2 (unregistering): Released all slaves [ 1068.542956][T10976] bond3 (unregistering): Released all slaves [ 1068.887433][T10976] : left promiscuous mode [ 1068.919036][T18374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.926364][T18374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.933556][T18374] bridge_slave_0: entered allmulticast mode [ 1068.943290][T18374] bridge_slave_0: entered promiscuous mode [ 1068.952510][T18374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.965415][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.972837][T18374] bridge_slave_1: entered allmulticast mode [ 1068.989026][T18374] bridge_slave_1: entered promiscuous mode [ 1068.998722][T10976] tipc: Left network mode [ 1069.014623][T10976] IPVS: stopping backup sync thread 9129 ... [ 1069.045406][T18430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1069.182604][ T5978] usb 4-1: 0:2 : does not exist [ 1069.195295][ T5978] usb 4-1: USB disconnect, device number 67 [ 1069.277417][T18374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.311506][T18374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.073756][ T5849] Bluetooth: hci0: command tx timeout [ 1070.357577][T18374] team0: Port device team_slave_0 added [ 1070.365355][T18374] team0: Port device team_slave_1 added [ 1070.553832][T18435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1070.560341][T18435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1071.725406][T18436] vhci_hcd: connection closed [ 1071.745442][T18435] vhci_hcd vhci_hcd.0: Device attached [ 1071.746243][T18437] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1071.824072][T10974] vhci_hcd: stop threads [ 1071.828336][T10974] vhci_hcd: release socket [ 1071.850299][T10974] vhci_hcd: disconnect device [ 1071.890617][T18439] wireguard0: entered promiscuous mode [ 1071.913888][T18077] vhci_hcd: vhci_device speed not set [ 1071.958540][T18439] wireguard0: entered allmulticast mode [ 1072.157892][ T5849] Bluetooth: hci0: command tx timeout [ 1072.323349][T18374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.333906][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.399496][T18464] program syz.0.3167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.448147][T18374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.593180][T18457] nbd_handle_cmd: 14 callbacks suppressed [ 1072.593206][T18457] block nbd0: Attempted send on invalid socket [ 1072.607571][T18457] blk_print_req_error: 14 callbacks suppressed [ 1072.608301][T18457] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1072.628590][T18374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.708691][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.851475][T18374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.301581][T10976] batadv_slave_0: left promiscuous mode [ 1073.340059][T10976] hsr_slave_0: left promiscuous mode [ 1073.402708][T18472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3169'. [ 1073.540626][T10976] hsr_slave_1: left promiscuous mode [ 1073.626448][T10976] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1073.649300][T10976] batman_adv: batadv0: Removing interface: team0 [ 1074.116576][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1074.130298][T18475] netlink: 'syz.3.3170': attribute type 19 has an invalid length. [ 1074.139561][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1075.232423][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1075.232484][T10997] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.251745][T18475] netlink: 'syz.3.3170': attribute type 19 has an invalid length. [ 1075.270090][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1075.280324][T10997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.295387][T10997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.308910][T10997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.758303][T18374] hsr_slave_0: entered promiscuous mode [ 1075.782943][T18374] hsr_slave_1: entered promiscuous mode [ 1076.964152][T10976] IPVS: stop unused estimator thread 0... [ 1077.213922][ T30] audit: type=1400 audit(1757835033.322:699): avc: denied { mount } for pid=18506 comm="syz.3.3178" name="/" dev="rpc_pipefs" ino=69508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1077.309131][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1078.559964][T18512] bond0: (slave bond_slave_1): Releasing backup interface [ 1078.689351][T18523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3181'. [ 1078.831157][T18527] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 1078.839501][T18527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 1078.874277][T18527] nbd: illegal input index 65544 [ 1079.641574][T18537] trusted_key: encrypted_key: key user:syz not found [ 1080.342412][T18374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1080.398669][T18540] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1080.449043][T18540] 0XD: renamed from macvtap0 [ 1080.483142][T18540] 0XD: entered allmulticast mode [ 1080.489958][T18540] veth0_macvtap: entered allmulticast mode [ 1080.531131][T18540] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 1080.567613][T18547] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3184' sets config #0 [ 1080.673805][T18374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1080.777262][T18374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1080.803420][T18374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1081.022094][T10976] Bluetooth: hci4: Frame reassembly failed (-84) [ 1081.093903][T18374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.200129][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.236846][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.244366][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.260378][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.267478][T10990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.916309][T18374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.268697][T18374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.394080][T18374] veth0_vlan: entered promiscuous mode [ 1082.419292][T18374] veth1_vlan: entered promiscuous mode [ 1082.507530][T18374] veth0_macvtap: entered promiscuous mode [ 1082.558851][T18374] veth1_macvtap: entered promiscuous mode [ 1082.626822][T18374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.938171][T18374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.277177][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1083.742787][T10997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.757687][T10997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.918662][T10997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.061564][T10997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.147176][T11000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.156421][T11000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.249458][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.271382][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.431931][ T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1084.542277][T18610] ubi7: attaching mtd0 [ 1084.547440][T18610] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 1085.015661][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.307571][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1085.339817][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.671632][ T43] usb 1-1: config 0 descriptor?? [ 1085.684793][T18616] FAULT_INJECTION: forcing a failure. [ 1085.684793][T18616] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.700225][T18616] CPU: 1 UID: 0 PID: 18616 Comm: syz.4.3198 Not tainted syzkaller #0 PREEMPT(full) [ 1085.700250][T18616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1085.700261][T18616] Call Trace: [ 1085.700268][T18616] [ 1085.700275][T18616] dump_stack_lvl+0x16c/0x1f0 [ 1085.700303][T18616] should_fail_ex+0x512/0x640 [ 1085.700331][T18616] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1085.700356][T18616] should_failslab+0xc2/0x120 [ 1085.700381][T18616] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1085.700401][T18616] ? find_held_lock+0x2b/0x80 [ 1085.700424][T18616] ? ovl_alloc_inode+0x25/0x190 [ 1085.700447][T18616] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 1085.700466][T18616] ovl_alloc_inode+0x25/0x190 [ 1085.700484][T18616] alloc_inode+0x64/0x240 [ 1085.700519][T18616] new_inode+0x22/0x1c0 [ 1085.700550][T18616] ovl_new_inode+0x1d/0x50 [ 1085.700575][T18616] ovl_create_object+0x17c/0x300 [ 1085.700604][T18616] ? __pfx_ovl_create_object+0x10/0x10 [ 1085.700637][T18616] ? devcgroup_check_permission+0x171/0x420 [ 1085.700665][T18616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1085.700696][T18616] ovl_mknod+0x59/0x80 [ 1085.700721][T18616] vfs_mknod+0x5d7/0x8e0 [ 1085.700736][T18616] do_mknodat+0x30f/0x5d0 [ 1085.700750][T18616] ? __pfx_do_mknodat+0x10/0x10 [ 1085.700763][T18616] ? getname_flags.part.0+0x1c5/0x550 [ 1085.700783][T18616] __x64_sys_mknod+0x87/0xb0 [ 1085.700797][T18616] do_syscall_64+0xcd/0x4e0 [ 1085.700813][T18616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.700825][T18616] RIP: 0033:0x7fb07598eba9 [ 1085.700835][T18616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.700847][T18616] RSP: 002b:00007fb0768c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1085.700858][T18616] RAX: ffffffffffffffda RBX: 00007fb075bd5fa0 RCX: 00007fb07598eba9 [ 1085.700866][T18616] RDX: 000000000000077b RSI: 0000000000006000 RDI: 0000200000000000 [ 1085.700874][T18616] RBP: 00007fb0768c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.700881][T18616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.700887][T18616] R13: 00007fb075bd6038 R14: 00007fb075bd5fa0 R15: 00007ffc9cc61578 [ 1085.700903][T18616] [ 1085.931835][T18599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.941436][T18599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.039404][T18620] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 1086.047234][T18620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3201'. [ 1086.057835][T18620] nbd: illegal input index 65544 [ 1086.293498][T18624] trusted_key: encrypted_key: key user:syz not found [ 1086.398097][T10321] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1086.458777][T10321] Bluetooth: hci2: Injecting HCI hardware error event [ 1086.676716][ T5849] Bluetooth: hci2: hardware error 0x00 [ 1086.965774][ T43] logitech-djreceiver 0003:046D:C52F.000C: item fetching failed at offset 0/6 [ 1087.348010][ T43] logitech-djreceiver 0003:046D:C52F.000C: logi_dj_probe: parse failed [ 1087.367649][ T43] logitech-djreceiver 0003:046D:C52F.000C: probe with driver logitech-djreceiver failed with error -22 [ 1087.419639][ T43] usb 1-1: USB disconnect, device number 46 [ 1087.892240][T18637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18637 comm=syz.0.3204 [ 1087.925210][T18637] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 1087.996161][T18637] bond1: (slave bridge2): making interface the new active one [ 1088.004325][T18637] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1088.487463][T18654] netlink: 748 bytes leftover after parsing attributes in process `syz.4.3210'. [ 1088.559232][T18657] ubi7: attaching mtd0 [ 1088.563373][T18657] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 1088.948842][ T5849] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1088.982696][T18654] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1090.906049][T18677] fuse: Unknown parameter 'group_id00000000000000000000' [ 1091.445832][ T30] audit: type=1400 audit(1757835047.552:700): avc: denied { cmd } for pid=18691 comm="syz.4.3220" path="socket:[72041]" dev="sockfs" ino=72041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1092.167698][ T5849] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1092.177957][ T5849] Bluetooth: hci5: Injecting HCI hardware error event [ 1092.186965][ T5849] Bluetooth: hci5: hardware error 0x00 [ 1093.195904][T18717] comedi comedi4: bad chanlist[2]=0xeac0220f chan=8719 range length=2 [ 1094.415720][T18740] 9pnet_fd: Insufficient options for proto=fd [ 1094.473447][T18740] block nbd1: Attempted send on invalid socket [ 1094.473816][ T5849] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1094.487202][T18740] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.487516][T18740] block nbd1: Attempted send on invalid socket [ 1094.487534][T18740] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.487620][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1094.487845][T18740] block nbd1: Attempted send on invalid socket [ 1094.552173][T18740] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.562905][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1094.576018][T18740] block nbd1: Attempted send on invalid socket [ 1094.578446][T18744] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 1094.584316][T18740] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.600245][T18740] block nbd1: Attempted send on invalid socket [ 1094.602001][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1094.613862][T18740] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.621697][T18744] nbd: illegal input index 65544 [ 1094.625045][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1094.860266][T18740] block nbd1: Attempted send on invalid socket [ 1094.867354][T18740] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.888069][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1094.984507][T18740] block nbd1: Attempted send on invalid socket [ 1095.008735][T18740] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.050794][ T9929] block nbd1: Attempted send on invalid socket [ 1095.057184][ T9929] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.139652][T18753] 9pnet_fd: Insufficient options for proto=fd [ 1095.146271][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1095.174782][T18756] trusted_key: encrypted_key: key user:syz not found [ 1095.195815][T18740] block nbd1: Attempted send on invalid socket [ 1095.210657][T18740] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.230408][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1095.240631][T18740] block nbd1: Attempted send on invalid socket [ 1095.251505][T18740] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.261544][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1095.274140][T18740] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1095.327201][T18740] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1096.113152][T18771] ubi7: attaching mtd0 [ 1096.117419][T18771] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 1097.804775][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'. [ 1098.317904][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 1098.350239][T18793] 9pnet_fd: Insufficient options for proto=fd [ 1098.369688][T18783] 8021q: VLANs not supported on caif0 [ 1099.246498][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3247'. [ 1100.306950][T18825] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 1100.332041][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3254'. [ 1100.341595][T18825] nbd: illegal input index 65544 [ 1100.373855][T18076] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1100.571413][T18834] trusted_key: encrypted_key: key user:syz not found [ 1100.591543][T18076] usb 2-1: config 2 has an invalid interface number: 100 but max is 1 [ 1100.606744][T18076] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.622206][T18076] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1100.928885][T18845] 9pnet_fd: Insufficient options for proto=fd [ 1100.987795][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1101.146945][T18076] usb 2-1: config 2 has no interface number 0 [ 1101.318555][T18076] usb 2-1: config 2 interface 100 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1101.771968][T18076] usb 2-1: New USB device found, idVendor=13b1, idProduct=0043, bcdDevice=48.c3 [ 1101.801681][T18076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.811797][T18076] usb 2-1: Product: syz [ 1101.819925][T18076] usb 2-1: Manufacturer: syz [ 1101.863393][T18076] usb 2-1: SerialNumber: syz [ 1102.155472][T18855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1102.177830][T18822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.186615][T18822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.234342][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1102.243455][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1102.488118][T11290] usb 2-1: USB disconnect, device number 51 [ 1103.199504][T18865] fuse: Bad value for 'user_id' [ 1103.204434][T18865] fuse: Bad value for 'user_id' [ 1104.714877][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3266'. [ 1104.845564][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 1105.703353][T18888] ubi7: attaching mtd0 [ 1105.707534][T18888] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 1107.337376][T18904] sch_fq: defrate 0 ignored. [ 1107.342476][ T30] audit: type=1400 audit(1757835063.442:701): avc: denied { ioctl } for pid=18899 comm="syz.3.3273" path="socket:[72544]" dev="sockfs" ino=72544 ioctlcmd=0x4b71 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1107.724794][T18912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1109.195782][T10321] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1110.317779][T18907] Bluetooth: hci0: link tx timeout [ 1110.325725][T18907] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1110.469734][T10321] Bluetooth: hci0: link tx timeout [ 1110.475209][T10321] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1110.744627][T10321] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1110.903882][T12303] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1111.076062][T12303] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1111.080794][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3287'. [ 1111.103864][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 1111.112681][T12303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.494217][T12303] usb 4-1: config 0 descriptor?? [ 1111.682983][T18965] trusted_key: encrypted_key: key user:syz not found [ 1112.161355][ T30] audit: type=1400 audit(1757835068.272:702): avc: denied { setopt } for pid=18954 comm="syz.3.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1112.264766][ T30] audit: type=1400 audit(1757835068.272:703): avc: denied { read } for pid=18954 comm="syz.3.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1113.083820][T12303] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0f [ 1113.091062][T12303] hackrf 4-1:0.0: Could not detect board [ 1113.195579][T12303] hackrf 4-1:0.0: probe with driver hackrf failed with error -110 [ 1113.939305][T18611] usb 4-1: USB disconnect, device number 68 [ 1114.844081][T10321] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1114.855276][T10321] Bluetooth: hci0: Injecting HCI hardware error event [ 1114.953960][T14447] Bluetooth: hci0: hardware error 0x00 [ 1114.976537][T18997] ------------[ cut here ]------------ [ 1114.982184][T18997] workqueue: cannot queue hci_tx_work on wq hci0 [ 1114.988571][T18997] WARNING: CPU: 0 PID: 18997 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 [ 1114.997767][T18997] Modules linked in: [ 1115.001833][T18997] CPU: 0 UID: 0 PID: 18997 Comm: syz.1.3296 Not tainted syzkaller #0 PREEMPT(full) [ 1115.011193][T18997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1115.021250][T18997] RIP: 0010:__queue_work+0xd03/0x1160 [ 1115.026626][T18997] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 8f 7b 38 00 90 0f 0b 90 e9 b4 f5 ff [ 1115.046236][T18997] RSP: 0018:ffffc90004a97710 EFLAGS: 00010086 [ 1115.052298][T18997] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90020733000 [ 1115.060255][T18997] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1115.068219][T18997] RBP: ffff88805dd4cb50 R08: 0000000000000001 R09: 0000000000000000 [ 1115.076185][T18997] R10: 0000000000000000 R11: fffffffffffce858 R12: 0000000000000008 [ 1115.084141][T18997] R13: ffff88807f0db000 R14: 0000000000000000 R15: ffff88807f0db178 [ 1115.092094][T18997] FS: 00007f7326cdc6c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 1115.101010][T18997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1115.107580][T18997] CR2: 0000200000003940 CR3: 0000000050120000 CR4: 00000000003526f0 [ 1115.115541][T18997] Call Trace: [ 1115.118803][T18997] [ 1115.121716][T18997] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 1115.127875][T18997] queue_work_on+0x1a4/0x1f0 [ 1115.132461][T18997] l2cap_chan_send+0xce5/0x2c50 [ 1115.137338][T18997] ? __mutex_lock+0x1c5/0x1060 [ 1115.142113][T18997] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1115.147935][T18997] ? __pfx_l2cap_chan_send+0x10/0x10 [ 1115.153243][T18997] ? l2cap_sock_sendmsg+0x2d9/0x490 [ 1115.158437][T18997] ? rcu_is_watching+0x12/0xc0 [ 1115.163199][T18997] l2cap_sock_sendmsg+0x3c7/0x490 [ 1115.168245][T18997] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1115.173803][T18997] ____sys_sendmsg+0xa95/0xc70 [ 1115.178566][T18997] ? copy_msghdr_from_user+0x10a/0x160 [ 1115.184013][T18997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.189297][T18997] ? kfree+0x24f/0x4d0 [ 1115.193360][T18997] ? futex_unqueue+0x133/0x2c0 [ 1115.198122][T18997] ___sys_sendmsg+0x134/0x1d0 [ 1115.202788][T18997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.207999][T18997] ? __pfx___might_resched+0x10/0x10 [ 1115.213278][T18997] __sys_sendmmsg+0x200/0x420 [ 1115.217950][T18997] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1115.223145][T18997] ? __pfx_do_futex+0x10/0x10 [ 1115.227834][T18997] ? xfd_validate_state+0x61/0x180 [ 1115.232939][T18997] ? rcu_is_watching+0x12/0xc0 [ 1115.237700][T18997] __x64_sys_sendmmsg+0x9c/0x100 [ 1115.242626][T18997] ? lockdep_hardirqs_on+0x7c/0x110 [ 1115.247814][T18997] do_syscall_64+0xcd/0x4e0 [ 1115.252313][T18997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.258190][T18997] RIP: 0033:0x7f7325d8eba9 [ 1115.262590][T18997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.282185][T18997] RSP: 002b:00007f7326cdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1115.290588][T18997] RAX: ffffffffffffffda RBX: 00007f7325fd6090 RCX: 00007f7325d8eba9 [ 1115.298542][T18997] RDX: 000000000000ff80 RSI: 0000200000003940 RDI: 0000000000000006 [ 1115.306493][T18997] RBP: 00007f7325e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1115.314448][T18997] R10: 0000000024004810 R11: 0000000000000246 R12: 0000000000000000 [ 1115.322403][T18997] R13: 00007f7325fd6128 R14: 00007f7325fd6090 R15: 00007ffc32846ad8 [ 1115.330370][T18997] [ 1115.333382][T18997] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1115.340661][T18997] CPU: 0 UID: 0 PID: 18997 Comm: syz.1.3296 Not tainted syzkaller #0 PREEMPT(full) [ 1115.350020][T18997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1115.360061][T18997] Call Trace: [ 1115.363327][T18997] [ 1115.366247][T18997] dump_stack_lvl+0x3d/0x1f0 [ 1115.370835][T18997] vpanic+0x6e8/0x7a0 [ 1115.374819][T18997] ? __pfx_vpanic+0x10/0x10 [ 1115.379328][T18997] ? __queue_work+0xd03/0x1160 [ 1115.384080][T18997] panic+0xca/0xd0 [ 1115.387785][T18997] ? __pfx_panic+0x10/0x10 [ 1115.392200][T18997] check_panic_on_warn+0xab/0xb0 [ 1115.397122][T18997] __warn+0xf6/0x3c0 [ 1115.401001][T18997] ? __pfx_vprintk_emit+0x10/0x10 [ 1115.406013][T18997] ? __queue_work+0xd03/0x1160 [ 1115.410765][T18997] report_bug+0x3c3/0x580 [ 1115.415085][T18997] ? __queue_work+0xd03/0x1160 [ 1115.419841][T18997] handle_bug+0x184/0x210 [ 1115.424167][T18997] exc_invalid_op+0x17/0x50 [ 1115.428689][T18997] asm_exc_invalid_op+0x1a/0x20 [ 1115.433538][T18997] RIP: 0010:__queue_work+0xd03/0x1160 [ 1115.438902][T18997] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 8f 7b 38 00 90 0f 0b 90 e9 b4 f5 ff [ 1115.458502][T18997] RSP: 0018:ffffc90004a97710 EFLAGS: 00010086 [ 1115.464568][T18997] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90020733000 [ 1115.472524][T18997] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1115.480489][T18997] RBP: ffff88805dd4cb50 R08: 0000000000000001 R09: 0000000000000000 [ 1115.488451][T18997] R10: 0000000000000000 R11: fffffffffffce858 R12: 0000000000000008 [ 1115.496414][T18997] R13: ffff88807f0db000 R14: 0000000000000000 R15: ffff88807f0db178 [ 1115.504386][T18997] ? __warn_printk+0x1a5/0x350 [ 1115.509162][T18997] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 1115.515320][T18997] queue_work_on+0x1a4/0x1f0 [ 1115.519905][T18997] l2cap_chan_send+0xce5/0x2c50 [ 1115.524754][T18997] ? __mutex_lock+0x1c5/0x1060 [ 1115.529508][T18997] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1115.535309][T18997] ? __pfx_l2cap_chan_send+0x10/0x10 [ 1115.540596][T18997] ? l2cap_sock_sendmsg+0x2d9/0x490 [ 1115.545782][T18997] ? rcu_is_watching+0x12/0xc0 [ 1115.550541][T18997] l2cap_sock_sendmsg+0x3c7/0x490 [ 1115.555557][T18997] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1115.561103][T18997] ____sys_sendmsg+0xa95/0xc70 [ 1115.565864][T18997] ? copy_msghdr_from_user+0x10a/0x160 [ 1115.571313][T18997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.576599][T18997] ? kfree+0x24f/0x4d0 [ 1115.580667][T18997] ? futex_unqueue+0x133/0x2c0 [ 1115.585434][T18997] ___sys_sendmsg+0x134/0x1d0 [ 1115.590109][T18997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.595322][T18997] ? __pfx___might_resched+0x10/0x10 [ 1115.600602][T18997] __sys_sendmmsg+0x200/0x420 [ 1115.605272][T18997] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1115.610471][T18997] ? __pfx_do_futex+0x10/0x10 [ 1115.615162][T18997] ? xfd_validate_state+0x61/0x180 [ 1115.620273][T18997] ? rcu_is_watching+0x12/0xc0 [ 1115.625034][T18997] __x64_sys_sendmmsg+0x9c/0x100 [ 1115.629960][T18997] ? lockdep_hardirqs_on+0x7c/0x110 [ 1115.635148][T18997] do_syscall_64+0xcd/0x4e0 [ 1115.639644][T18997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.645521][T18997] RIP: 0033:0x7f7325d8eba9 [ 1115.649918][T18997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.669511][T18997] RSP: 002b:00007f7326cdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1115.677912][T18997] RAX: ffffffffffffffda RBX: 00007f7325fd6090 RCX: 00007f7325d8eba9 [ 1115.685870][T18997] RDX: 000000000000ff80 RSI: 0000200000003940 RDI: 0000000000000006 [ 1115.693830][T18997] RBP: 00007f7325e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1115.701783][T18997] R10: 0000000024004810 R11: 0000000000000246 R12: 0000000000000000 [ 1115.709734][T18997] R13: 00007f7325fd6128 R14: 00007f7325fd6090 R15: 00007ffc32846ad8 [ 1115.717704][T18997] [ 1115.720925][T18997] Kernel Offset: disabled [ 1115.725230][T18997] Rebooting in 86400 seconds..