last executing test programs: 3m29.359772843s ago: executing program 1 (id=65): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0x0}, 0x106, 0x2}}, 0x20) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xfffffffffffffd29) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r6, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r10, &(0x7f0000000700)='syzkaller%d', 0xb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234be, 0x0, @loopback}, r1, 0x3e8}}, 0x48) r11 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000000)=0x5fae, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000680)={0x4, 0x8, 0xfa00, {r1, 0x3e8}}, 0x10) 3m29.086504024s ago: executing program 1 (id=69): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c6173740000000018000280"], 0xfc}}, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) alarm(0x8) 3m27.885098455s ago: executing program 1 (id=72): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfff0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008051}, 0x0) 3m27.643730716s ago: executing program 1 (id=75): unshare(0xbb49d6412e2bbeb6) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) flistxattr(r0, &(0x7f0000000200)=""/45, 0x2d) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a30000000000800006e6174005c000000060a010400000000000000000100000008000b400000000034000480300001800b0001007461726765740000200002800700030000e44e000a000100415544495c00000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) unshare(0x20400) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r3, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES32=r2], 0x0) socket(0x400000000010, 0x3, 0x0) madvise(&(0x7f0000a07000/0x4000)=nil, 0x4000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x21) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_clone(0x64144000, 0x0, 0x4c, 0x0, 0x0, 0x0) 3m22.647496308s ago: executing program 1 (id=95): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) lseek(r3, 0x5, 0x1) getdents64(r3, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x22}, @ioring_restriction_sqe_flags_required={0x3, 0x6}, @ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x6}], 0x7) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3m18.818438911s ago: executing program 1 (id=108): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfff0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008051}, 0x0) 3m17.559356089s ago: executing program 32 (id=108): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfff0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008051}, 0x0) 14.446976946s ago: executing program 0 (id=739): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f908, 0x3}) 12.057202149s ago: executing program 2 (id=742): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="181c000c000000031dbd7002fa9bdf250100a6261fa865a571a5922c07446de853ee9e6b0c09359eba2627c4a052608dfb93ec17819e5265bd1c8f0ba9bc728f1fba126c82fe3cc44d8d5a5d8972cceb969fd25d719747f672568fccfebef0cb4e86ed73a9bb6685f5ee"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000d500)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) 11.857306374s ago: executing program 5 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_to_bridge\x00', {0x2, 0x0, @private}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$binfmt_misc(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200202, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f00000043c0)={0x1, [{0x2, 0x20, 0x28, &(0x7f0000000100)="8db8e15b"}, {0x2, 0x18, 0x4, &(0x7f0000000340)="25815f"}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x8, 0x5, &(0x7f0000002cc0)="c6"}, {0x1, 0x0, 0x100, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x3b2, 0x0}, {0x2, 0x0, 0xa3c, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x26aac2ec2892b0de, 0x0, 0xffffff00, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x81, 0x0}]}) syz_fuse_handle_req(r2, &(0x7f0000002a00)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') sendfile(r5, r5, 0x0, 0x2000007ff) truncate(&(0x7f0000000180)='./file0\x00', 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYBLOB="800000006d61787ca2fcabdf98b4afc1a4760d6d60a1295ea94fa07f09b88c74a84993bfde6e13e8e08e18f60500921d8a12ac6a6225e7a0bf13c2305fdb77e11f71a6f7eeba000000000000000000"]) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r9, 0x411, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x6, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3d}, 0x60) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r11, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) close_range(r6, 0xffffffffffffffff, 0x0) 11.790435269s ago: executing program 2 (id=745): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x22}, @ioring_restriction_sqe_flags_required={0x3, 0x6}, @ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x6}], 0x7) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 10.072469106s ago: executing program 0 (id=748): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff0000000705810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x14, 0x5, 0x301, 0x1, 0xa, "95913511a244ed641462d4304c00"}) 9.74667149s ago: executing program 4 (id=749): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080584"], 0x88) 9.462642744s ago: executing program 5 (id=750): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00800000000086dd600a843500140600fe8000000000000000000000000000bbf7010000000000000000000053e46cce6ba91b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000540)=ANY=[], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10) 8.504549522s ago: executing program 4 (id=752): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000500010006000000050004f993c500000000000900020073798fa70bf90000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='16', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 7.521295685s ago: executing program 5 (id=753): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_create1(0x0) r3 = epoll_create1(0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x9, @remote}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa0002008}) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x4, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x9, 0x1, 0x10, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4058840}, 0x1004) 7.067117941s ago: executing program 4 (id=754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc088, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x9, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e320000003231f70008000000cb6349b4560f92205c6b983d18000020204faf19"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.843182668s ago: executing program 3 (id=755): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) lseek(r3, 0x5, 0x1) getdents64(r3, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x22}, @ioring_restriction_sqe_flags_required={0x3, 0x6}, @ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x6}], 0x7) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 6.055419197s ago: executing program 0 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$nci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = inotify_init() inotify_add_watch(r6, 0x0, 0x449) 5.548713084s ago: executing program 5 (id=757): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000500010006000000050004f993c500000000000900020073798fa70bf90000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 5.449849615s ago: executing program 3 (id=758): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000001bc0), 0x0, 0x4000820) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x2, 0xba7, 0x0, 0x0, 0x1000, 0x5, r1, 0x0, 0x100}}}, &(0x7f00000000c0)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 4.963837898s ago: executing program 3 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4049004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x7, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.526052383s ago: executing program 2 (id=760): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000500010006000000050004f993c500000000000900020073798fa70bf90000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='16', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 4.151020008s ago: executing program 3 (id=761): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000500010006000000050004f993c500000000000900020073798fa70bf90000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 3.887618905s ago: executing program 5 (id=762): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000500010006000000050004f993c500000000000900020073798fa70bf90000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='16', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 3.627290778s ago: executing program 0 (id=763): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00800000000086dd600a843500140600fe8000000000000000000000000000bbf7010000000000000000000053e46cce6ba91b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000540)=ANY=[], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10) 2.432164899s ago: executing program 4 (id=764): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$netlink(r4, &(0x7f0000000440), &(0x7f0000000500)=0xc) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.328274941s ago: executing program 2 (id=765): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa0002008}) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x4, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x9, 0x1, 0x10, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4058840}, 0x1004) 2.137775429s ago: executing program 0 (id=766): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56", 0xc00}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 1.7718055s ago: executing program 5 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004856) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x310}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, &(0x7f0000000300)={0x0, 0x22, 0x4, @thr={&(0x7f0000000040)="bc6777bfcebe866e12b83b554d2b1a8341512a841b3f8553f920c25a6bc2bb746bc6f205aad8812c44fb1f7a76df883fec0595b9f4a40685758ceb389d44a895207228fa5e99aa5cc27f1547aa5fa12e992a01aeb98f8c2f0f348f7c55187bc51c99ba77", &(0x7f0000000380)="de05d1cf051123e6414ad834158a22e0c92c228e196d6095dd1e21d980a49def40f02cdf966890884c75f4bd34d953e0a457cace1d39d659e17d6403c7fa9c35c6a94784b4d8a1c0e5f9b6a76402ff03ed415d4f913fe290ce1a7d0bb71ca73a01c06f1368acd005ece88701d5bb12ba6c65f5b7d23557887d271ed0a2a1d488d8026218acf79b86c7af4c16574e696bff6707a26a1986c23684cc6ff9a1ac13d7de1fa3de1caf798a2d77b5137ab90dfcc8dfbd03ab3644d898cef93e49f5ec0db6455b57651703debde582a4d96c6252f3d5849fd41c7c1d331da866f1d9841450bacf020f739e9caf46546ad83dca6e45a2b466170391311f5104766ece4d3faa76c6145b4bdcf5f96c915bd76ff60147c033e8ae359127bbf6f0f4a8d02ee8cb92ae0d7db86acf5ac5cc01884489b646cae9993152b19b101f96c8c52f29bff2d25a50f51c9805ea5b4d391aef147a30f7cc69c2077a055fdda9cb4531f55c92d53a8e32b866e593f4d4ae674ff9b54003298d21cf8802e86432fe639fb312f72be6b6dec3fcda0c3896660d1c8f968fee64ddd689dcc6ce93cf4d792061682f1f18aea9083c196ca4e6c51db6aeedb46c10283db1322c46ae23a4e0d7e0206415ca081e1500f8e7d73022da100b5c592521d227f02bffbf888c8d2d74732af419564b282c0cad188c99c9c43af5a7f981332e5c37d75b04270622285facdc2681f801913186d3834ad520b5f42246606cd132d716c047bceb713c33589b3bfd673baac737747e2d51afe598af55a474b7cb4c51264e8a4183bf2b9b33a14c365b1194f8d2804ac611cd4f58515e38f3814eaf6970e1b59fa4d207c3b7ce1a4b00fcde8ca949c4dd94f233ee25fa217f21eea7eec79585076d75794b578feae11f9a911ea91cfdf7a6980b5143430bddc5481f8d37a4793e0f00910242e339dd13a23d7f976ed57d76f8d14d7d0ea2c67eb1589139d65696775c036c58b76f5cc7d4bdf9439e1ab44784deb69b4446161be8005fa7922817b87ad2f763e90ebf71d2196eadb8da4cd6dfdbf69874db32978370d1eb62907a87853a76d711d3c79c5f50ddd6c104d3ba3a81db365c74bce484a337d50a1ea17c891e15a101d88bbbc4364adaf57e2d3e904ba996ab8f1081070fc74354a79bd6b8a0be1dc3a65e43badbbff0c3fdd196ed986865a1e6efeac229978a04a09bcb883b1da59109aeba96aafb4566da213100a976bab915da7fe8ab131ed105bacd889b031c0dc6b42e2e6c605997f04ad46efdbed50dd5b4cbb9cbe4cf452c1c8d6f5d3b7b0335dd38163d3b253d8fd58c481a8016bc1430a97c6544f99cceb226423e0342daa078000ce310f71f694b6b26c452650df8728555f68d8146877ee645e77e6aae3b71fcd2c7c35b829e60ad1e87ef86f978fd234fa8a24a74866e1b2459fb5701a3fb4b452c780e04ce35614ca3f124c5c53fd8c59d02100207b3f65f1b58bc56c08a87eca3b938cef1f6d29f632f21fe5bfead8deb2775dab506b9cbbdc01cc0a0a867cd2f3bd3f16d33359f7cdbb4c5bc2792721712964bc724d7b816f71442c867e7ec535a1d5e88eb70eb3d2f40ebf17580ed6dc1bb8d22c6936e340212f6b67d152aafe2879cfe5669b2214b59c1827e807a7f93aee3d8730aff0a305f214431c55fb29e65190c3ee9dcc7ae9ab3f7b72ce77fae1ddbdd34a7930cd24f3008142d87090e8dbe7963a5593064fe6359c267a8fbaba67d26d7c0e4711be24fef170c17739fa97e3d2e17f2972bc1758c01ba1c5fff67d5c0ad613e20c9d2bfd68ba060cf401120f1fd67ec71d609fac722aca3d6654e649b469164b8fba993228d1496bee1a02ab74f37d516b79c026cdc73874b4a4c60e5a970a596c61830bdcdd0c6fc98df4f268ce694c15634f8f2372cd79e1a9e636cf4b9701654ec888c5987e24feed49b1e825f58934c5389ffacec8b2429653b0005748f01df311877ad3ab63747b63aba6157df17caaea106388425f1f3362e38d40e0a713f0fff1fc6395b396f56acb56f61a2686fd146102ff3eef73da306b5d7c625fa6d40a362b14dd6e2c414f8fd0e345109c68b640b88fdd89a27df927947eb415c4d72c51887f0d409554297c7fb45bda24629b803bad0d7fc42e5d69bca9e752d122ef753c417f857853df6aa4df67bbf3686e6f0800705a5c8dce0d31740a5efb4b0aa72c82f90b4ce84b8b0066c56b71e08a106a8e20a233f2727a99d951f538066d87369ae3a4aa6ccebc193c7f7941cbf912de11c7969460d66bd42b03f901958d8f33d7c5850ad1f6d99ce415d613b1ab2c8641e24e45ff1dc4e15e17bb150a3141386988f445cf75631d2a4d7be23dd8c16253b25deac216c40742c149f348b4e4a6e05b361c4e5a3626d748be52604cb27b238516ecfbb1ed08d2778997db299aef71b4749159b2bf125c304543a583119e29fba979e5237be907c69541bbd42e120b2adba22c3dee9e3fa0d8cb60ef44398017067b7381b0ad2fb4fed02676de9c91a8376625cf11485a76624c7c625ae7fac97a675601a2a51e0024d0e678ffb1d0710143387564378717009ed180a6cd9712a3b5b4bab8f70ebde71996df8b812c055aacdbe6456c18f2d4b15f6f2d92d850e3ab27b8d9923d1e7c067dc961ccd42ebb97b67fe64252f221699131ffa9fe153be9f11bbb32b33fa580ace3c3fdcfbdc06858aa82b86eaf8324e5210f0860de3da90bdddffa1773a9ed7539b59e7eb37bebdfc48f82709ee6bd42c7d857646a4ceff2852981cdd8be0d2ae9125ae95883f426ad9a130e6bbc4ed06b1469a823f70ae509b3165b5c5e38553d0df5399d6024ed90c98156f943402bdc47a6545a4a1f150fbb2f8ed6c4c9bb52ebb7df33be0be63ee8a6c7463bfbf49789cddb712c0196811c8daaba1d3646b29d7fb568f5bbb6d5d295fa3eac9d9737217f8f5a238f3c5009e2fb9cebe7bb330925dad7a7f7ef213a6d52e8d259a5171b289eabc988fa35a2ff436bd3f790c4ab7f125dd9377a826da8f9e911d474ecc1624d3e7b4965c3a16a4ca1ed7c74385e8293096214357c1c21f81ea1861abd5e422e71e1c2dad3446c0a63e789926c6799fc15889a77b7f70c6990c575e68817c7660557ecb24ba8aa9679908c3ac1fbb02cf9651ee6cc220d9793ec6fa8476f643d379e8301eb9ee82ab970b67021a38de2ac79c6804826ed63d73e8c11269f51a79778324ba1981c52a0fc8bf5007328019a7698695b3692784d3925067dde1f3ce610a9bdc347bb2e40ee07259f76fb82401275b445a378cdeffdc2c96840b76b6ee2dadf22beea5c9f706861b5493caa6afc5fbd2afe4993d4684cc70f7c894ce1531b899fde5a1251b908d083b3acd0c601ff481b7dfd65a5a85069fbac96388cc52f491d378bb92ec9f85d64ae91e35e71a3ced9fb28815d40cefd1b05f59546bf16defe732adfef384865a64e7a57892ecda9203f5d5eef1546f8b00f4ffadfb0a053414a242ad5a7334f4844fbe621ad0e5ca89dfb9cc7d331be2a7bf9d558e3563a920ed53d3d2489537c453f120d9ff72d94a40d97adde55e77f2a146c1045859460424e511dc4b3c5c6b50e1513735806cb3418bb495e3f53dd67e7824e8a692d92dcf46b264a641e28c8b767b0ea475757d64616da9fce7249f92f2f895b077f776c0ec51c2852ffc75d7a54db83c07ba8b415e3afefac34a96bad96f47a115f785a7d10589e13afb2b74bccfaed395a724695a05e5dbd905a518f2dfcc7988054a928a782dbef02f76b620f2e487bf52ba331ba55bc612f8ee42dfc16ddbe03d8ccf6c56d34fbf20640e0dd3d4eae38095bd603b238ed6f70cedd26210228f35c1f72b932d6a60b943f11add4073b32b0fa440d3cba1c2000aa922a517b02d1fe12daad8a34577a1cad1ef3477d18d256b406e3eec34f46a1ce63b103c07aca61f0ae618f3760c24f191629e4babd4d8b6cbbdf1683ab3bdd8e1b136d0035a3af75ca824bc588f15f9d94e0e76d61354f9074885785f2ab8d8d05ff0633fc22f64000ff97911fe015c7dbcba94fdb5fa654cfe6039839899f18f501cd0dcf7203c516b6d02bd4bcb7d17d480d8ce36c960ac2ba598da4917dc1e431eda4ab0c922d64e68e55734d1745e3df30628bee33cd6708a545a54743bec6c0e20927aeb4060fd13abe2e2678bb8e88f8668ad8f21250cb2dba0c0b6e9f9dc22048d83e06637e27ccbb0961132daf9338105a347149752851834091b83a67ae630340487a3ca362d7351780cea28de0abf539ecdd269437ee59316280024255b25e5c07557183e62c2728e5852c15fcdfc1799af9cf5f9d76c62020c18f13e5ea951e0e97bf97917659c2f370d9643cb07b5cee31ab0292658d83b37d4972fdc44d98033414ddb1acd0d97ef0cc9f039efd6190c6f3d7bedded789f0a2a33fc112ee44b91e4a5ddaab75e003ead2e188525049aa62c7050151f8fb224af63cbc266aa76398a75f904bd9bcd5a3529a52c250bf2e2d8443f764cc7bd4636756d2a37e1f35a3292733108456c94be039254a274d062d9f9afb0d6f2d7822642830309c603236f32b9694159beb2ba5c88bf69a34a74ac03cc757a5b53c2a24b9c6ad090bedda9f108044086380d1a3985f6ef087bfbabf6f92f38649664fcae94be5a0902a9c3fc016cda5b37b360ef7fa4509655632b85461f0986a9b4524236ff08c4c5ba7c7882642cd1b45fe33cf7fd15c7def8dbbcd44b9289d39e02f3c5a7c34d5b010c489cd6bcf790608c4cba7add1ffeb73b08cc74fc277b3d648d92d409b7d381756566f64ebfc7a8205418b6de7c7fa84db3cc5155e33b8e59b09b18cac8b40070aebc259e10df5fb9805b2923abfa16be12cd7f0769294a50243fe92857f232e3d7dbd0962ced8512021ebd058788481a28961b6a81d48599bfd0a0142488957980d9db9583aaa90f6e400fe6665c1df6298c370dd2d770a6fc4a3d5a663567e9928221f8c762a9a6818c0ee6cec47c44b2a65da987c9e6d3db1b8f1e8dcc720b8d21b74d5edd41f385970b4932fb250a9f29bb68e5c9c741330fc87c9e9cc8d15341f1187aa9c753f58a57493d461f3fa4da15b4ce89eec7819ffb4d6e320b9c4e9409631348862bf39fcae1a01a81953426e6082f7792a2e1ff08c6e465604b2124e3add1ac9753515d545da4b192d102dc2d267f7156cc163eadc4dd042f4fdf3a2624496404f296610675a8fa5f03130439a9518e18c2a74498c136e00ef46fcfae587669e5e963b32d5ab91ef61aa2a5c959253707b91e234d9151296cfde7d34d796ac081b3a244f5b4aecaa505d9a5e95b57a84a1ccb20b6ba5cafd683ef3e49d2db3d0caa5c186f495d591dbc1908def9a60da92f03bbc3f0ea19071ec7e3be93162c87fa663fcdf3eee0967bab3e08aa24e103947688a0c14c666a57c3f87b1527987423d9e2796bb71348ccadd8bc4c7c3d5c12f0605af8081ae01037a91a9becdb94284d887f03b959ee02956ddc7df9783524c0a1f9c3f459ee7da6a101314fd2d87212865f9f2c4790f591302e7a5785fee99a505619235f3e1b6377090edadf5483b403547593d5efec142acca007e776f8b84e3453c0aa06979fe9c13139b20a558d1221b8bffe2b07b0d4bbc5d3a3ce637c37cce52e3a945b7198e47910cd576bd1c4f1ba11096720ca492930a4f91a324ecb0fce68af4b43c1ff43fa2aa761da67f45462a4635df9516e35b30c258d20da3530b74b803ce587f99f0bd73b2fa"}}, &(0x7f0000000340)) r8 = syz_open_dev$mtd(&(0x7f0000000080), 0x48a99fbe, 0x10b241) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEMERASE(r8, 0x40084d02, &(0x7f0000000000)={0x81, 0x200008}) lseek(r6, 0x4, 0x1) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) 1.40274701s ago: executing program 3 (id=768): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x80900, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000010029bd7000ffdbdf250000", @ANYRES32=0x0, @ANYBLOB="4db20200541f0300140003006c6f0000c7aa00000000000000000000300016802c00018028000100feffffff00000000261b879b000000000000000000000000000000000000000000000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x8851}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0xa0000003}) epoll_pwait2(r5, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x8000004}) pread64$ublk_bdev(r1, &(0x7f00000001c0)=""/174, 0xae, 0x2de) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000000)=0x1000000010) writev(0xffffffffffffffff, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002040)="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", 0xfb}, {0x0}, {&(0x7f00000021c0)="834279ddec7dee2e8ae5b3e114ceb4bc7f28ca7df2e1e461be6ccbc03a85085590e102132e1b99f45f59bc194d97156f0c018180241dc11a93d922ca9d0398d05335fc2af2e89d6bac8b92fac19ee2a4c994e6e59b1aeb35057f6e89142cdfe7ee0044e86ba7c8282d1830b1190b598e9bce62aa5059b595a7e6289eb0149267", 0x80}, {&(0x7f00000022c0)="3868011a0a8bade856eb8b05683c7309a7a9af91995d10329526f32b352116a3fb7637c0ce095da6811ad70f1e9de78b129b654408", 0x35}, {0x0}], 0x6) ioctl$BLKRRPART(r7, 0x125f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x7) 832.445001ms ago: executing program 4 (id=769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 599.893183ms ago: executing program 2 (id=770): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={0x0, 0x25c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/231) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x256, &(0x7f00000020c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6043009302203afffe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000000000000220aa78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502000100000000000000000800ee000418fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68ff3e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978021d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x2, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf7", 0x10}], 0x1}, 0x0) 421.317078ms ago: executing program 3 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 409.657803ms ago: executing program 4 (id=772): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$netlink(r4, &(0x7f0000000440), &(0x7f0000000500)=0xc) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 60.160701ms ago: executing program 2 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$nci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = inotify_init() inotify_add_watch(r6, 0x0, 0x449) 0s ago: executing program 0 (id=774): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) kernel console output (not intermixed with test programs): main item tag 0x3 [ 111.773455][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 111.788397][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 111.846445][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 111.882783][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 111.926270][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 112.030429][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x0 [ 112.144130][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x2 [ 112.213050][ T5737] logitech-hidpp-device 0003:046D:C088.0002: unknown main item tag 0x2 [ 112.271456][ T5737] logitech-hidpp-device 0003:046D:C088.0002: item fetching failed at offset 39/40 [ 112.425569][ T5737] logitech-hidpp-device 0003:046D:C088.0002: hidpp_probe:parse failed [ 112.502191][ T5737] logitech-hidpp-device 0003:046D:C088.0002: probe with driver logitech-hidpp-device failed with error -22 [ 112.812753][ T5737] usb 3-1: USB disconnect, device number 6 [ 113.219512][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'. [ 113.341066][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 113.341086][ T29] audit: type=1400 audit(1785592160.951:339): avc: denied { create } for pid=6205 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.512754][ T5737] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.286931][ T6207] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.314880][ T6209] dummy0: entered allmulticast mode [ 114.402473][ T29] audit: type=1400 audit(1785592160.991:340): avc: denied { setopt } for pid=6205 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.422169][ T29] audit: type=1400 audit(1785592160.991:341): avc: denied { bind } for pid=6205 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.431056][ T6209] dummy0: left allmulticast mode [ 114.443824][ T29] audit: type=1400 audit(1785592160.991:342): avc: denied { name_bind } for pid=6205 comm="syz.0.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.472286][ T29] audit: type=1400 audit(1785592161.001:343): avc: denied { node_bind } for pid=6205 comm="syz.0.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.501047][ T29] audit: type=1400 audit(1785592161.021:344): avc: denied { getopt } for pid=6205 comm="syz.0.106" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.525892][ T29] audit: type=1400 audit(1785592161.021:345): avc: denied { connect } for pid=6205 comm="syz.0.106" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.575872][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.657163][ T5737] usb 3-1: not running at top speed; connect to a high speed hub [ 114.875833][ T29] audit: type=1400 audit(1785592161.021:346): avc: denied { name_connect } for pid=6205 comm="syz.0.106" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.975026][ T5737] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 115.015251][ T6219] dummy0: entered allmulticast mode [ 115.022446][ T6219] dummy0: left allmulticast mode [ 115.154828][ T5737] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 115.287538][ T5737] usb 3-1: config 8 has no interface number 0 [ 115.320318][ T29] audit: type=1400 audit(1785592161.891:347): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.423904][ T5737] usb 3-1: config 8 has no interface number 1 [ 115.515399][ T5737] usb 3-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 115.558872][ T29] audit: type=1400 audit(1785592161.891:348): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.581668][ T5737] usb 3-1: config 8 interface 43 has no altsetting 0 [ 115.624993][ T5737] usb 3-1: config 8 interface 35 has no altsetting 0 [ 115.641952][ T5737] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 115.660007][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.684094][ T5737] usb 3-1: Product: syz [ 115.702061][ T5737] usb 3-1: Manufacturer: syz [ 115.713471][ T5737] usb 3-1: SerialNumber: syz [ 115.893244][ T5929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.911907][ T6230] FAT-fs (nbd3): unable to read boot sector [ 115.934523][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 116.676188][ T5737] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 116.716557][ T5737] scsi host1: usb-storage 3-1:8.43 [ 116.749275][ T5737] hub 3-1:8.35: Invalid hub with more than one config or interface [ 116.763946][ T5737] hub 3-1:8.35: probe with driver hub failed with error -22 [ 116.780501][ T5737] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 117.651926][ T5737] usb 3-1: USB disconnect, device number 7 [ 117.714590][ T5929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.415329][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.445263][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.457083][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.473578][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.482218][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.383887][ T5929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.688617][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 119.688630][ T29] audit: type=1400 audit(1785592167.201:354): avc: denied { write } for pid=6263 comm="syz.2.120" name="header" dev="configfs" ino=9837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.737197][ T29] audit: type=1400 audit(1785592167.281:355): avc: denied { write } for pid=6263 comm="syz.2.120" name="ss" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.766295][ T29] audit: type=1400 audit(1785592167.281:356): avc: denied { create } for pid=6263 comm="syz.2.120" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 119.833476][ T29] audit: type=1400 audit(1785592167.281:357): avc: denied { write } for pid=6263 comm="syz.2.120" name="ss" dev="configfs" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.861314][ T5929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.876833][ T29] audit: type=1400 audit(1785592167.281:358): avc: denied { write } for pid=6263 comm="syz.2.120" name="ss" dev="configfs" ino=9861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.910327][ T29] audit: type=1400 audit(1785592167.281:359): avc: denied { write } for pid=6263 comm="syz.2.120" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.969807][ T29] audit: type=1400 audit(1785592167.281:360): avc: denied { write } for pid=6263 comm="syz.2.120" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.128867][ T29] audit: type=1400 audit(1785592167.711:361): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.337442][ T29] audit: type=1400 audit(1785592167.711:362): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.590250][ T50] Bluetooth: hci3: command tx timeout [ 120.614767][ T29] audit: type=1400 audit(1785592167.711:363): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.810072][ T6292] fuse: Bad value for 'rootmode' [ 121.291020][ T5929] bridge_slave_1: left allmulticast mode [ 121.867136][ T5929] bridge_slave_1: left promiscuous mode [ 121.883142][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.134963][ T5929] bridge_slave_0: left allmulticast mode [ 122.204261][ T5929] bridge_slave_0: left promiscuous mode [ 122.344600][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.658445][ T50] Bluetooth: hci3: command tx timeout [ 122.894900][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.921308][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.951604][ T5929] bond0 (unregistering): Released all slaves [ 123.027876][ T5929] bond1 (unregistering): Released all slaves [ 123.137382][ T6308] dummy0: entered allmulticast mode [ 123.159917][ T6308] dummy0: left allmulticast mode [ 123.285410][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 123.330510][ T6342] fuse: Bad value for 'rootmode' [ 123.350447][ T5929] tipc: Left network mode [ 124.831450][ T50] Bluetooth: hci3: command tx timeout [ 125.970266][ T5929] hsr_slave_0: left promiscuous mode [ 125.992291][ T5929] hsr_slave_1: left promiscuous mode [ 126.049822][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.084093][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.131187][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.151438][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.179072][ T6394] fuse: Unknown parameter 'use00000000000000000000' [ 126.235377][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 126.235393][ T29] audit: type=1400 audit(1785592173.841:380): avc: denied { read } for pid=6391 comm="syz.0.148" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.248969][ T6392] process 'syz.0.148' launched '/dev/fd/7' with NULL argv: empty string added [ 126.334873][ T5929] veth1_macvtap: left promiscuous mode [ 126.378072][ T5929] veth0_macvtap: left promiscuous mode [ 126.378112][ T29] audit: type=1400 audit(1785592173.841:381): avc: denied { open } for pid=6391 comm="syz.0.148" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.411062][ T5929] veth1_vlan: left promiscuous mode [ 126.458146][ T5929] veth0_vlan: left promiscuous mode [ 126.469749][ T29] audit: type=1400 audit(1785592173.841:382): avc: denied { read } for pid=6391 comm="syz.0.148" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.499317][ T29] audit: type=1400 audit(1785592173.841:383): avc: denied { open } for pid=6391 comm="syz.0.148" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.526131][ T29] audit: type=1400 audit(1785592173.851:384): avc: denied { ioctl } for pid=6391 comm="syz.0.148" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.562522][ T29] audit: type=1400 audit(1785592173.851:385): avc: denied { execute } for pid=6391 comm="syz.0.148" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.584007][ T29] audit: type=1400 audit(1785592173.931:386): avc: denied { execute_no_trans } for pid=6391 comm="syz.0.148" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.708245][ T29] audit: type=1400 audit(1785592173.991:387): avc: denied { write } for pid=6371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.787176][ T29] audit: type=1400 audit(1785592174.031:388): avc: denied { write } for pid=6399 comm="syz.2.150" name="functions" dev="configfs" ino=8067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.898642][ T50] Bluetooth: hci3: command tx timeout [ 127.216705][ T29] audit: type=1400 audit(1785592174.071:389): avc: denied { write } for pid=6399 comm="syz.2.150" name="interface.ncm" dev="configfs" ino=11525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.225666][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 128.677407][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 128.721611][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 129.019939][ T6441] fuse: Unknown parameter 'use00000000000000000000' [ 129.059900][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 129.725258][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.166'. [ 130.936601][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.100307][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.110808][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.119581][ T6257] bridge_slave_0: entered allmulticast mode [ 131.129184][ T6257] bridge_slave_0: entered promiscuous mode [ 131.140576][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.148634][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.160606][ T6257] bridge_slave_1: entered allmulticast mode [ 131.178145][ T6257] bridge_slave_1: entered promiscuous mode [ 131.283447][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.335942][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.395968][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.407477][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.419148][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.431191][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.444954][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.456858][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.470084][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.482887][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.493307][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.504664][ T6464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 131.543319][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 131.543339][ T29] audit: type=1400 audit(1785592179.081:393): avc: denied { read write } for pid=6463 comm="syz.4.167" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.558160][ T6257] team0: Port device team_slave_0 added [ 131.595744][ T6257] team0: Port device team_slave_1 added [ 131.679323][ T29] audit: type=1400 audit(1785592179.081:394): avc: denied { open } for pid=6463 comm="syz.4.167" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.784343][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.816924][ T29] audit: type=1400 audit(1785592179.081:395): avc: denied { append } for pid=6463 comm="syz.4.167" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.819989][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.943641][ T6485] netlink: 76 bytes leftover after parsing attributes in process `syz.4.168'. [ 131.989103][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.004955][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.013250][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.110580][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.112333][ T6488] netlink: 76 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.134809][ T29] audit: type=1400 audit(1785592179.731:396): avc: denied { write } for pid=6457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.212633][ T6498] fuse: Unknown parameter 'use00000000000000000000' [ 132.310348][ T29] audit: type=1400 audit(1785592179.911:397): avc: denied { write } for pid=6500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.347538][ T6257] hsr_slave_0: entered promiscuous mode [ 132.373207][ T6257] hsr_slave_1: entered promiscuous mode [ 132.503645][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 132.584112][ T6507] bridge0: port 3(syz_tun) entered blocking state [ 132.590978][ T6507] bridge0: port 3(syz_tun) entered disabled state [ 132.597630][ T6507] syz_tun: entered allmulticast mode [ 132.606564][ T6507] syz_tun: entered promiscuous mode [ 132.612631][ T6507] bridge0: port 3(syz_tun) entered blocking state [ 132.619326][ T6507] bridge0: port 3(syz_tun) entered listening state [ 132.645419][ T6509] bridge0: port 3(syz_tun) entered blocking state [ 132.657845][ T6509] bridge0: port 3(syz_tun) entered disabled state [ 132.666400][ T6509] syz_tun: entered allmulticast mode [ 132.674817][ T6509] syz_tun: entered promiscuous mode [ 132.681278][ T6509] bridge0: port 3(syz_tun) entered blocking state [ 132.687814][ T6509] bridge0: port 3(syz_tun) entered listening state [ 132.699399][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 132.708188][ C1] bridge0: topology change detected, propagating [ 132.728035][ T6509] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.746857][ T6519] CIFS mount error: No usable UNC path provided in device string! [ 132.746857][ T6519] [ 132.758048][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 132.758136][ C1] bridge0: topology change detected, propagating [ 132.766024][ T6509] CIFS mount error: No usable UNC path provided in device string! [ 132.766024][ T6509] [ 132.783967][ T6519] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.799786][ T6509] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.834159][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835522][ T29] audit: type=1400 audit(1785592180.431:398): avc: denied { mount } for pid=6518 comm="syz.0.178" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.843909][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932663][ T29] audit: type=1400 audit(1785592180.431:399): avc: denied { mount } for pid=6518 comm="syz.0.178" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 132.979338][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.055242][ T29] audit: type=1400 audit(1785592180.661:400): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.103977][ T29] audit: type=1400 audit(1785592180.691:401): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.305981][ T12] bridge0: port 3(syz_tun) entered disabled state [ 133.352807][ T12] bridge0: port 3(syz_tun) entered disabled state [ 133.390998][ T6540] fuse: Unknown parameter 'user_i00000000000000000000' [ 133.679090][ T29] audit: type=1400 audit(1785592181.291:402): avc: denied { write } for pid=6522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.740444][ T6257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.777861][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.797310][ T6257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.847505][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.888270][ T6257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.949342][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.970015][ T6257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.023612][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.242562][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 134.291826][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 134.523320][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.588090][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.662799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.671002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.803719][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'. [ 135.219779][ T5614] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 135.227336][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 135.714973][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.722138][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.746017][ T6588] fuse: Unknown parameter 'user_i00000000000000000000' [ 135.998775][ T6582] bond3: entered promiscuous mode [ 136.057989][ T6582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.087105][ T6583] dummy0: entered allmulticast mode [ 136.109419][ T6583] dummy0: left allmulticast mode [ 136.399461][ T6604] sctp_transport_update_pmtu: 66 callbacks suppressed [ 136.399524][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.419829][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.432222][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.443558][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.456084][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.468516][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.480134][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.492078][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.504346][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.516002][ T6604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.284977][ T6257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.295494][ T6257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.406831][ T6613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.548497][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.902191][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.919333][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 138.941960][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 138.969877][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.011894][ T24] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 139.112882][ T24] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 139.413498][ T5722] usb 5-1: USB disconnect, device number 2 [ 139.520137][ T5722] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 139.563836][ T5722] spcp8x5 5-1:1.0: device disconnected [ 139.590097][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.023893][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 140.909730][ T6257] veth0_vlan: entered promiscuous mode [ 140.926091][ T6257] veth1_vlan: entered promiscuous mode [ 140.980231][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 140.988002][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.008982][ T6661] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.012753][ T6662] dummy0: entered allmulticast mode [ 141.120588][ T6673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.211'. [ 141.242734][ T6662] dummy0: left allmulticast mode [ 142.245330][ T6257] veth0_macvtap: entered promiscuous mode [ 142.540511][ T6257] veth1_macvtap: entered promiscuous mode [ 142.679470][ T6682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.212'. [ 142.835442][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 142.835465][ T29] audit: type=1400 audit(1785592190.271:407): avc: denied { write } for pid=6683 comm="syz.3.213" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.073286][ T29] audit: type=1400 audit(1785592190.281:408): avc: denied { ioctl } for pid=6683 comm="syz.3.213" path="/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.157488][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.176866][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.182942][ T6692] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 143.202446][ T171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.241588][ T29] audit: type=1400 audit(1785592190.841:409): avc: denied { bind } for pid=6690 comm="syz.4.214" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.275169][ T6002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.300886][ T6002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.389133][ T6002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.588486][ T5826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.599568][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.627159][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.679007][ T42] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 143.706716][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.719920][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.744811][ T29] audit: type=1400 audit(1785592191.351:410): avc: denied { mounton } for pid=6257 comm="syz-executor" path="/root/syzkaller.9YMOxu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 143.777328][ T5826] usb 5-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 143.823532][ T5826] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.853214][ T5826] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 143.862818][ T42] usb 4-1: device descriptor read/64, error -71 [ 143.869146][ T5826] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 143.878379][ T5826] usb 5-1: Manufacturer: syz [ 143.883501][ T5826] usb 5-1: SerialNumber: syz [ 144.108489][ T42] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 146.133218][ T5826] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 146.161451][ T5826] usb 5-1: USB disconnect, device number 3 [ 146.413598][ T6717] CIFS mount error: No usable UNC path provided in device string! [ 146.413598][ T6717] [ 146.432123][ T6717] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.699111][ T5614] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 146.717546][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.152187][ T6741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.834276][ T29] audit: type=1400 audit(1785592195.441:411): avc: denied { write } for pid=6708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.660040][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.708605][ T6754] IPVS: length: 217 != 24 [ 148.991716][ T6747] sctp_transport_update_pmtu: 29 callbacks suppressed [ 148.991764][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.010484][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.022813][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.036048][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.057423][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.072913][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.085351][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.099474][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.112555][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.124925][ T6747] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.905916][ T6763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 149.937345][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 149.971504][ T29] audit: type=1400 audit(1785592197.581:412): avc: denied { write } for pid=6759 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.268765][ T42] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.398473][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.429103][ T42] usb 1-1: device descriptor read/64, error -71 [ 150.561618][ T24] usb 3-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 150.599720][ T24] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.638533][ T24] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 150.651844][ T29] audit: type=1400 audit(1785592198.251:413): avc: denied { write } for pid=6777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.685355][ T24] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 150.708745][ T42] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 150.719691][ T24] usb 3-1: Manufacturer: syz [ 150.736679][ T24] usb 3-1: SerialNumber: syz [ 151.038429][ T42] usb 1-1: device descriptor read/64, error -71 [ 151.039716][ T29] audit: type=1400 audit(1785592198.331:414): avc: denied { create } for pid=6797 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.557807][ T29] audit: type=1400 audit(1785592199.161:415): avc: denied { write } for pid=6801 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.079185][ T42] usb usb1-port1: attempt power cycle [ 152.233351][ T24] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 152.245354][ T24] usb 3-1: USB disconnect, device number 8 [ 152.367050][ T6814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.508548][ T42] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 153.432617][ T42] usb 1-1: device descriptor read/8, error -71 [ 153.997051][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.241'. [ 155.005407][ T29] audit: type=1400 audit(1785592202.441:416): avc: denied { write } for pid=6820 comm="syz.5.242" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.192605][ T29] audit: type=1400 audit(1785592202.521:417): avc: denied { write } for pid=6820 comm="syz.5.242" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.484928][ T6830] xt_hashlimit: max too large, truncated to 1048576 [ 157.187063][ T6850] sctp_transport_update_pmtu: 47 callbacks suppressed [ 157.187099][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.206553][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.221220][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.265867][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.292090][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.305739][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.369527][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.385568][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.403280][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.418515][ T6850] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.851670][ T6864] CIFS mount error: No usable UNC path provided in device string! [ 157.851670][ T6864] [ 157.862154][ T6864] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.022085][ T6869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 158.194597][ T29] audit: type=1400 audit(1785592205.801:418): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.286929][ T6878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.341416][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 158.350084][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.483843][ T29] audit: type=1400 audit(1785592207.091:419): avc: denied { write } for pid=6880 comm="syz.2.255" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.512926][ T6884] netlink: 256 bytes leftover after parsing attributes in process `syz.5.254'. [ 159.558438][ T29] audit: type=1400 audit(1785592207.141:420): avc: denied { write } for pid=6880 comm="syz.2.255" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.668714][ T5341] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 159.758668][ T29] audit: type=1400 audit(1785592207.371:421): avc: denied { write } for pid=6885 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.873182][ T29] audit: type=1400 audit(1785592207.481:422): avc: denied { write } for pid=6894 comm="syz.2.259" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.927992][ T5341] usb 4-1: device descriptor read/64, error -71 [ 159.930125][ T29] audit: type=1400 audit(1785592207.511:423): avc: denied { write } for pid=6894 comm="syz.2.259" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.959447][ T29] audit: type=1400 audit(1785592207.511:424): avc: denied { write } for pid=6894 comm="syz.2.259" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.998406][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.276147][ T6904] netlink: 56 bytes leftover after parsing attributes in process `syz.2.260'. [ 160.359151][ T5341] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 160.405425][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.454632][ T29] audit: type=1400 audit(1785592207.511:425): avc: denied { write } for pid=6894 comm="syz.2.259" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.479514][ T29] audit: type=1400 audit(1785592207.511:426): avc: denied { write } for pid=6894 comm="syz.2.259" name="header" dev="configfs" ino=9852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.502973][ T29] audit: type=1400 audit(1785592207.521:427): avc: denied { write } for pid=6894 comm="syz.2.259" name="fs" dev="configfs" ino=9859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.529300][ T29] audit: type=1400 audit(1785592207.521:428): avc: denied { write } for pid=6894 comm="syz.2.259" name="fs" dev="configfs" ino=9859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.538811][ T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 160.555830][ T29] audit: type=1400 audit(1785592207.521:429): avc: denied { write } for pid=6894 comm="syz.2.259" name="ss" dev="configfs" ino=9861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.659430][ T5341] usb 4-1: device descriptor read/64, error -71 [ 160.935106][ T29] audit: type=1400 audit(1785592207.521:430): avc: denied { write } for pid=6894 comm="syz.2.259" name="ss" dev="configfs" ino=9861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.090556][ T5341] usb usb4-port1: attempt power cycle [ 161.318225][ T29] audit: type=1400 audit(1785592207.521:431): avc: denied { write } for pid=6894 comm="syz.2.259" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.538603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 161.569007][ T42] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 161.586124][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.606367][ T29] audit: type=1400 audit(1785592207.521:432): avc: denied { write } for pid=6894 comm="syz.2.259" name="c.1" dev="configfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.723867][ T42] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 161.732863][ T29] audit: type=1400 audit(1785592207.661:433): avc: denied { map } for pid=6898 comm="syz.0.261" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 161.827968][ T42] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 161.885115][ T29] audit: type=1400 audit(1785592207.661:434): avc: denied { execute } for pid=6898 comm="syz.0.261" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 161.909408][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.093354][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.104295][ T6928] FAT-fs (nbd3): unable to read boot sector [ 162.176002][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.216165][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.266'. [ 162.303812][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 162.424472][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.833550][ T9] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 162.873486][ T6934] netlink: 256 bytes leftover after parsing attributes in process `syz.4.267'. [ 162.898550][ T9] usb 3-1: SPCP8x5 converter now attached to ttyUSB1 [ 163.196020][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.133845][ T804] usb 6-1: USB disconnect, device number 2 [ 164.415288][ T804] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 164.439807][ T5706] usb 3-1: USB disconnect, device number 9 [ 164.462430][ T804] spcp8x5 6-1:1.0: device disconnected [ 165.156079][ T6957] sctp_transport_update_pmtu: 47 callbacks suppressed [ 165.156126][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.174972][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.186437][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.197679][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.213155][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.225686][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.237019][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.248406][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.260085][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.272689][ T6957] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.027961][ T5706] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 166.045598][ T6966] netlink: 76 bytes leftover after parsing attributes in process `syz.5.273'. [ 166.045724][ T5706] spcp8x5 3-1:1.0: device disconnected [ 166.349010][ T804] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 166.533351][ T804] usb 5-1: device descriptor read/64, error -71 [ 166.822478][ T804] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 166.897999][ T6961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 167.140177][ T804] usb 5-1: device descriptor read/64, error -71 [ 167.206033][ T6984] netlink: 256 bytes leftover after parsing attributes in process `syz.0.279'. [ 167.250250][ T804] usb usb5-port1: attempt power cycle [ 167.506524][ T6996] FAT-fs (nbd0): unable to read boot sector [ 167.626003][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 167.656430][ T804] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 167.707365][ T804] usb 5-1: device descriptor read/8, error -71 [ 167.721917][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 167.722055][ T29] audit: type=1400 audit(1785592215.311:439): avc: denied { connect } for pid=6985 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.130578][ T804] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 168.209138][ T804] usb 5-1: device descriptor read/8, error -71 [ 168.338791][ T804] usb usb5-port1: unable to enumerate USB device [ 170.445477][ T7026] IPVS: length: 217 != 24 [ 171.586551][ T7032] FAT-fs (nbd3): unable to read boot sector [ 171.698912][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 173.355236][ T7059] sctp_transport_update_pmtu: 105 callbacks suppressed [ 173.355282][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.374571][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.387847][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.402355][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.429662][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.443850][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.457711][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.471242][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.484254][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.497292][ T7059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 174.403427][ T7067] fuse: Unknown parameter 'fd0x0000000000000003' [ 175.593467][ T7086] FAT-fs (nbd3): unable to read boot sector [ 175.706740][ T29] audit: type=1400 audit(1785592223.301:440): avc: denied { nlmsg_write } for pid=7079 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.758978][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 176.701744][ T29] audit: type=1400 audit(1785592224.311:441): avc: denied { write } for pid=7106 comm="syz.2.316" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.085073][ T29] audit: type=1400 audit(1785592224.311:442): avc: denied { write } for pid=7106 comm="syz.2.316" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.125864][ T29] audit: type=1400 audit(1785592224.311:443): avc: denied { write } for pid=7106 comm="syz.2.316" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.176500][ T29] audit: type=1400 audit(1785592224.311:444): avc: denied { write } for pid=7106 comm="syz.2.316" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.285623][ T7114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 177.598578][ T5722] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 177.748498][ T5722] usb 1-1: device descriptor read/64, error -71 [ 178.038482][ T5722] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 178.191319][ T5722] usb 1-1: device descriptor read/64, error -71 [ 178.330807][ T5722] usb usb1-port1: attempt power cycle [ 178.575349][ T7141] FAT-fs (nbd3): unable to read boot sector [ 178.619353][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 178.838597][ T5722] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 178.879079][ T5722] usb 1-1: device descriptor read/8, error -71 [ 179.388671][ T5722] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 179.419151][ T5722] usb 1-1: device descriptor read/8, error -71 [ 179.539113][ T5722] usb usb1-port1: unable to enumerate USB device [ 179.709269][ T29] audit: type=1400 audit(1785592227.321:445): avc: denied { write } for pid=7164 comm="syz.5.333" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.801395][ T29] audit: type=1400 audit(1785592227.351:446): avc: denied { write } for pid=7164 comm="syz.5.333" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.871229][ T7170] netlink: 76 bytes leftover after parsing attributes in process `syz.5.335'. [ 179.874661][ T29] audit: type=1400 audit(1785592227.351:447): avc: denied { write } for pid=7164 comm="syz.5.333" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.936977][ T29] audit: type=1400 audit(1785592227.351:448): avc: denied { write } for pid=7164 comm="syz.5.333" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.144770][ T7198] FAT-fs (nbd2): unable to read boot sector [ 181.170594][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'. [ 182.317071][ T29] audit: type=1400 audit(1785592229.921:449): avc: denied { write } for pid=7213 comm="syz.0.345" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.429972][ T29] audit: type=1400 audit(1785592229.921:450): avc: denied { write } for pid=7213 comm="syz.0.345" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.458183][ T7219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.348'. [ 182.468530][ T7221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 182.508813][ T29] audit: type=1400 audit(1785592229.961:451): avc: denied { write } for pid=7213 comm="syz.0.345" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.540272][ T29] audit: type=1400 audit(1785592229.971:452): avc: denied { write } for pid=7213 comm="syz.0.345" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.738498][ T5722] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 182.901938][ T5722] usb 4-1: device descriptor read/64, error -71 [ 183.170541][ T5722] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 183.339735][ T5722] usb 4-1: device descriptor read/64, error -71 [ 183.480647][ T5722] usb usb4-port1: attempt power cycle [ 183.552275][ T7253] FAT-fs (nbd0): unable to read boot sector [ 183.643724][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'. [ 183.978584][ T5722] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 184.084438][ T5722] usb 4-1: device descriptor read/8, error -71 [ 184.438424][ T5722] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 184.493704][ T29] audit: type=1400 audit(1785592232.101:453): avc: denied { write } for pid=7260 comm="syz.2.361" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.542659][ T5722] usb 4-1: device descriptor read/8, error -71 [ 184.607030][ T29] audit: type=1400 audit(1785592232.101:454): avc: denied { write } for pid=7260 comm="syz.2.361" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.666138][ T7265] netlink: 76 bytes leftover after parsing attributes in process `syz.4.363'. [ 184.680511][ T5722] usb usb4-port1: unable to enumerate USB device [ 184.728721][ T29] audit: type=1400 audit(1785592232.111:455): avc: denied { write } for pid=7260 comm="syz.2.361" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.754456][ T29] audit: type=1400 audit(1785592232.121:456): avc: denied { write } for pid=7260 comm="syz.2.361" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.892025][ T7276] xt_hashlimit: max too large, truncated to 1048576 [ 185.974797][ T5747] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.455164][ T7283] sctp_transport_update_pmtu: 47 callbacks suppressed [ 186.455221][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.475136][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.487318][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.502138][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.528198][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.540594][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.553109][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.565776][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.578585][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.590454][ T7283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 186.734634][ T5747] usb 5-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 186.748444][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 186.757526][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.893106][ T5747] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.382866][ T7283] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 187.703834][ T5747] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 187.744122][ T5747] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 187.782994][ T5747] usb 5-1: Manufacturer: syz [ 187.825171][ T5747] usb 5-1: SerialNumber: syz [ 188.153821][ T7306] FAT-fs (nbd3): unable to read boot sector [ 188.197710][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.372'. [ 188.847266][ T5747] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 188.882063][ T5747] usb 5-1: USB disconnect, device number 8 [ 189.103624][ T29] audit: type=1400 audit(1785592236.711:457): avc: denied { write } for pid=7312 comm="syz.4.375" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.111917][ T7315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.376'. [ 189.187052][ T29] audit: type=1400 audit(1785592236.731:458): avc: denied { write } for pid=7312 comm="syz.4.375" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.276281][ T29] audit: type=1400 audit(1785592236.761:459): avc: denied { write } for pid=7312 comm="syz.4.375" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.300859][ T7320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 189.329071][ T29] audit: type=1400 audit(1785592236.761:460): avc: denied { write } for pid=7312 comm="syz.4.375" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.445778][ T7325] xt_hashlimit: max too large, truncated to 1048576 [ 189.628656][ T804] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 189.929984][ T804] usb 3-1: device descriptor read/64, error -71 [ 190.300170][ T804] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 191.017310][ T5608] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 191.202543][ T804] usb 3-1: device descriptor read/64, error -71 [ 191.314117][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.358867][ T804] usb usb3-port1: attempt power cycle [ 191.512959][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 191.791660][ T7349] bond1: entered promiscuous mode [ 191.798396][ T804] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 191.819706][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.834898][ T7351] dummy0: entered allmulticast mode [ 191.841080][ T7351] dummy0: left allmulticast mode [ 192.230906][ T7357] FAT-fs (nbd5): unable to read boot sector [ 192.335196][ T804] usb 3-1: device descriptor read/8, error -71 [ 192.411269][ T29] audit: type=1400 audit(1785592240.011:461): avc: denied { read write } for pid=7358 comm="syz.4.388" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 192.575206][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.386'. [ 192.594562][ T29] audit: type=1400 audit(1785592240.011:462): avc: denied { open } for pid=7358 comm="syz.4.388" path="/83/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 192.762928][ T7372] netlink: 76 bytes leftover after parsing attributes in process `syz.4.391'. [ 192.801548][ T29] audit: type=1400 audit(1785592240.011:463): avc: denied { ioctl } for pid=7358 comm="syz.4.388" path="/83/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 192.886497][ T29] audit: type=1400 audit(1785592240.221:464): avc: denied { write } for pid=7363 comm="syz.3.389" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.952031][ T29] audit: type=1400 audit(1785592240.231:465): avc: denied { write } for pid=7363 comm="syz.3.389" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.032701][ T29] audit: type=1400 audit(1785592240.231:466): avc: denied { write } for pid=7363 comm="syz.3.389" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.068781][ T5608] Bluetooth: hci5: command 0x1003 tx timeout [ 193.077995][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.158264][ T7383] xt_hashlimit: max too large, truncated to 1048576 [ 194.111999][ T7389] sctp_transport_update_pmtu: 48 callbacks suppressed [ 194.112087][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.135685][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.148044][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.159571][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.181727][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.194818][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.209042][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.223836][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.236822][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.252303][ T7389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.519991][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540130][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.886770][ T7399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 195.018552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.127721][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 195.298518][ T804] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 195.340617][ T7403] bond4: entered promiscuous mode [ 195.348440][ T7403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.407016][ T7407] dummy0: entered allmulticast mode [ 195.438599][ T804] usb 5-1: device descriptor read/64, error -71 [ 195.787964][ T7414] netlink: 76 bytes leftover after parsing attributes in process `syz.5.400'. [ 195.913318][ T7407] dummy0: left allmulticast mode [ 195.928505][ T804] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 196.068663][ T804] usb 5-1: device descriptor read/64, error -71 [ 196.076438][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 196.076449][ T29] audit: type=1400 audit(1785592243.681:468): avc: denied { write } for pid=7421 comm="syz.2.402" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.217598][ T29] audit: type=1400 audit(1785592243.721:469): avc: denied { write } for pid=7421 comm="syz.2.402" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.247763][ T804] usb usb5-port1: attempt power cycle [ 196.317440][ T29] audit: type=1400 audit(1785592243.731:470): avc: denied { write } for pid=7421 comm="syz.2.402" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.367591][ T29] audit: type=1400 audit(1785592243.731:471): avc: denied { write } for pid=7421 comm="syz.2.402" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.629039][ T804] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 196.686348][ T804] usb 5-1: device descriptor read/8, error -71 [ 196.883469][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 197.033630][ T804] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 197.159081][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 197.268697][ T804] usb 5-1: device descriptor read/8, error -71 [ 197.528831][ T804] usb usb5-port1: unable to enumerate USB device [ 197.818374][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 197.831109][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.857669][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 197.872646][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.879700][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 197.925837][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.955244][ T9] usb 3-1: config 0 descriptor?? [ 198.099857][ T5608] Bluetooth: hci5: command 0x1003 tx timeout [ 198.100132][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.138383][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x3 [ 199.148947][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 199.157633][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 199.166382][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 199.178105][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 199.274039][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 199.971731][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 200.022805][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x2 [ 200.085627][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x2 [ 200.090877][ T29] audit: type=1400 audit(1785592247.701:472): avc: denied { write } for pid=7471 comm="syz.0.414" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.177156][ T9] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 200.210940][ T29] audit: type=1400 audit(1785592247.721:473): avc: denied { write } for pid=7471 comm="syz.0.414" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.304850][ T7480] netlink: 220 bytes leftover after parsing attributes in process `syz.5.415'. [ 200.315871][ T29] audit: type=1400 audit(1785592247.731:474): avc: denied { write } for pid=7471 comm="syz.0.414" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.420331][ T29] audit: type=1400 audit(1785592247.731:475): avc: denied { write } for pid=7471 comm="syz.0.414" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.475900][ T9] logitech-hidpp-device 0003:046D:C088.0003: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.2-1/input0 [ 200.517125][ T9] usb 3-1: USB disconnect, device number 14 [ 200.631368][ T7484] fido_id[7484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 200.680962][ T5622] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 200.697215][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 200.848115][ T7497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 201.129662][ T5722] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 201.274609][ T5722] usb 4-1: device descriptor read/64, error -71 [ 201.550251][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 201.556379][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 201.558394][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.574029][ T5722] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 201.909294][ T5722] usb 4-1: device descriptor read/64, error -71 [ 202.072617][ T5722] usb usb4-port1: attempt power cycle [ 202.090802][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 202.459552][ T5722] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 202.511527][ T5722] usb 4-1: device descriptor read/8, error -71 [ 202.669546][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 202.680500][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.042779][ T7536] sctp_transport_update_pmtu: 104 callbacks suppressed [ 203.042822][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.062081][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.074123][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.087994][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.110037][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.126276][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.144454][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.156504][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.171730][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.186377][ T7536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.452563][ T5722] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 204.089411][ T5722] usb 4-1: device descriptor read/8, error -71 [ 204.276263][ T5722] usb usb4-port1: unable to enumerate USB device [ 206.466032][ T5772] Bluetooth: hci5: Frame reassembly failed (-84) [ 208.258919][ T5707] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 208.413160][ T5707] usb 6-1: device descriptor read/64, error -71 [ 208.507324][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 208.515947][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.238519][ T5707] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 209.418573][ T5707] usb 6-1: device descriptor read/64, error -71 [ 209.614964][ T5707] usb usb6-port1: attempt power cycle [ 210.401017][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'. [ 210.797830][ T7644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.462'. [ 212.615285][ T171] Bluetooth: hci5: Frame reassembly failed (-84) [ 212.770436][ T7670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 213.360767][ T804] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 213.969082][ T804] usb 1-1: device descriptor read/64, error -71 [ 214.299214][ T804] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 214.480498][ T7697] sctp_transport_update_pmtu: 105 callbacks suppressed [ 214.480562][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.501687][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.515408][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.530383][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.553464][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.566960][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.582436][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.593923][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.608536][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.620745][ T7697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 214.659251][ T804] usb 1-1: device descriptor read/64, error -71 [ 214.670915][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.037852][ T804] usb usb1-port1: attempt power cycle [ 215.412240][ T7703] evm: overlay not supported [ 215.725091][ T804] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 215.970278][ T804] usb 1-1: device descriptor read/8, error -71 [ 218.032093][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.486'. [ 218.331475][ T7745] bond1: entered promiscuous mode [ 218.339317][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.349785][ T7748] dummy0: entered allmulticast mode [ 218.392920][ T7748] dummy0: left allmulticast mode [ 219.090936][ T7758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 219.379035][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 219.668721][ T9] usb 1-1: device descriptor read/64, error -71 [ 220.375419][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.382985][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 221.158406][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 221.353368][ T7791] netlink: 220 bytes leftover after parsing attributes in process `syz.5.497'. [ 221.378393][ T9] usb 1-1: device descriptor read/64, error -71 [ 221.521567][ T9] usb usb1-port1: attempt power cycle [ 222.028503][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 222.558792][ T9] usb 1-1: device descriptor read/8, error -71 [ 222.711797][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'. [ 222.954704][ T7811] bond2: entered promiscuous mode [ 222.964906][ T7811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.602700][ T7814] dummy0: entered allmulticast mode [ 223.768488][ T7814] dummy0: left allmulticast mode [ 224.251153][ T7827] sctp_transport_update_pmtu: 106 callbacks suppressed [ 224.251234][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.271627][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.418966][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.432141][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.453129][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.481333][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.494268][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.507254][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.521248][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.546559][ T7827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.898796][ T7833] tipc: Enabling of bearer rejected, failed to enable media [ 226.004605][ T7853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 226.170225][ T7859] IPVS: length: 217 != 24 [ 226.308449][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 226.459408][ T9] usb 3-1: device descriptor read/64, error -71 [ 226.485959][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.5.516'. [ 226.888444][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 226.972664][ T7871] bond2: entered promiscuous mode [ 226.981039][ T7871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.990496][ T7874] dummy0: entered allmulticast mode [ 226.999894][ T7874] dummy0: left allmulticast mode [ 227.539715][ T9] usb 3-1: device descriptor read/64, error -71 [ 227.634039][ T7895] tipc: Enabling of bearer rejected, failed to enable media [ 227.901396][ T9] usb usb3-port1: attempt power cycle [ 228.187062][ T7913] IPVS: length: 217 != 24 [ 228.258492][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 228.879573][ T9] usb 3-1: device descriptor read/8, error -71 [ 229.406884][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 229.570302][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 229.653628][ T7935] bond3: entered promiscuous mode [ 229.662002][ T7935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.671016][ T7940] dummy0: entered allmulticast mode [ 229.678483][ T7940] dummy0: left allmulticast mode [ 230.181033][ T7946] IPVS: length: 217 != 24 [ 230.365656][ T7954] sctp_transport_update_pmtu: 105 callbacks suppressed [ 230.365704][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.400155][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.415252][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.429937][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.457133][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.478740][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.492630][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.507789][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.522246][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.542580][ T7954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 230.704223][ T7958] tipc: Enabling of bearer rejected, failed to enable media [ 231.285612][ T7969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 231.558608][ T24] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 231.815145][ T24] usb 3-1: device descriptor read/64, error -71 [ 232.092801][ T24] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 232.355027][ T24] usb 3-1: device descriptor read/64, error -71 [ 232.449606][ T5722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 232.493306][ T24] usb usb3-port1: attempt power cycle [ 232.723074][ T5722] usb 6-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 232.785319][ T5722] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.808396][ T5722] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 232.835682][ T5722] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 232.872867][ T5722] usb 6-1: Manufacturer: syz [ 232.888452][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 232.899842][ T5722] usb 6-1: SerialNumber: syz [ 232.950150][ T24] usb 3-1: device descriptor read/8, error -71 [ 233.013289][ T8000] syzkaller0: entered promiscuous mode [ 233.033300][ T8000] syzkaller0: entered allmulticast mode [ 233.074221][ T8002] IPVS: length: 217 != 24 [ 233.175502][ T5722] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 233.218792][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 233.234722][ T5722] usb 6-1: USB disconnect, device number 6 [ 233.270214][ T24] usb 3-1: device descriptor read/8, error -71 [ 233.350692][ T8005] FAT-fs (nbd4): unable to read boot sector [ 233.414480][ T24] usb usb3-port1: unable to enumerate USB device [ 233.429849][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 234.251251][ T8014] tipc: Started in network mode [ 234.256282][ T8014] tipc: Node identity 364d6b529d11, cluster identity 4711 [ 234.265310][ T8014] tipc: Enabled bearer , priority 0 [ 234.282669][ T8014] tipc: Resetting bearer [ 234.317617][ T8013] tipc: Disabling bearer [ 234.338485][ T5747] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.598350][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 234.605471][ T5747] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 234.615147][ T5747] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.633414][ T5747] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.675495][ T5747] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.690150][ T5747] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 234.711923][ T5747] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.764340][ T5747] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.794948][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.034160][ T8036] netlink: 56 bytes leftover after parsing attributes in process `syz.2.559'. [ 235.380045][ T5747] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 236.151528][ T8042] IPVS: length: 217 != 24 [ 236.559584][ T8045] sctp_transport_update_pmtu: 47 callbacks suppressed [ 236.559630][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.580687][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.594044][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.607757][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.628883][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.641520][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.653937][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.666395][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.679962][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.695898][ T8045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.310770][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 237.967266][ T8058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 238.042226][ T8063] FAT-fs (nbd5): unable to read boot sector [ 238.181693][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.566'. [ 238.877873][ T5747] usb 1-1: USB disconnect, device number 20 [ 238.890086][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 238.968455][ T187] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 239.022723][ T8073] tipc: Started in network mode [ 239.042255][ T8073] tipc: Node identity ba4c5b7b06bf, cluster identity 4711 [ 239.075668][ T8073] tipc: Enabled bearer , priority 0 [ 239.099262][ T187] usb 4-1: device descriptor read/64, error -71 [ 239.122999][ T8073] tipc: Resetting bearer [ 239.272976][ T8072] tipc: Disabling bearer [ 239.368487][ T187] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 239.508438][ T187] usb 4-1: device descriptor read/64, error -71 [ 239.638696][ T187] usb usb4-port1: attempt power cycle [ 240.008454][ T187] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 240.069728][ T187] usb 4-1: device descriptor read/8, error -71 [ 240.135841][ T8100] IPVS: length: 217 != 24 [ 240.344636][ T187] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 240.389032][ T187] usb 4-1: device descriptor read/8, error -71 [ 240.520168][ T187] usb usb4-port1: unable to enumerate USB device [ 240.527593][ T8108] IPVS: length: 217 != 24 [ 241.018562][ T804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.173440][ T8121] FAT-fs (nbd0): unable to read boot sector [ 241.186175][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 241.253002][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'. [ 241.286978][ T804] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 241.385482][ T804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.489920][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.597220][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.734679][ T804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.881253][ T804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.921348][ T8127] sctp_transport_update_pmtu: 105 callbacks suppressed [ 241.921362][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.938782][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.949126][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.959454][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.970069][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.980299][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.990536][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 242.000784][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 242.011026][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 242.022599][ T8127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 242.044369][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.211013][ T8130] tipc: Started in network mode [ 242.234268][ T8130] tipc: Node identity 82d34ffec894, cluster identity 4711 [ 242.276709][ T8130] tipc: Enabled bearer , priority 0 [ 242.321980][ T804] usb 5-1: usb_control_msg returned -32 [ 242.395791][ T8133] tipc: Resetting bearer [ 242.491183][ T8139] netlink: 56 bytes leftover after parsing attributes in process `syz.5.585'. [ 242.676397][ T804] usbtmc 5-1:16.0: can't read capabilities [ 242.755325][ T8129] tipc: Disabling bearer [ 242.898555][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 242.907132][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 243.247364][ T29] audit: type=1400 audit(1785592290.751:476): avc: denied { write } for pid=8111 comm="syz.4.580" name="usbtmc0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 245.330968][ T8162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 245.610588][ T804] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 245.669611][ T187] usb 5-1: USB disconnect, device number 13 [ 245.751422][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 245.788557][ T804] usb 6-1: device descriptor read/64, error -71 [ 245.912654][ T29] audit: type=1400 audit(1785592293.521:477): avc: denied { search } for pid=8172 comm="syz.4.594" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 245.995228][ T29] audit: type=1400 audit(1785592293.521:478): avc: denied { search } for pid=8172 comm="syz.4.594" name="usb_gadget" dev="configfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.027716][ T8175] IPVS: length: 217 != 24 [ 246.032428][ T804] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 246.093525][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 246.121290][ T29] audit: type=1400 audit(1785592293.521:479): avc: denied { search } for pid=8172 comm="syz.4.594" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.162558][ T8168] bond5: entered promiscuous mode [ 246.171696][ T8168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.181584][ T8171] dummy0: entered allmulticast mode [ 246.249407][ T29] audit: type=1400 audit(1785592293.521:480): avc: denied { search } for pid=8172 comm="syz.4.594" name="usb_gadget" dev="configfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.353827][ T29] audit: type=1400 audit(1785592293.521:481): avc: denied { search } for pid=8172 comm="syz.4.594" name="g1" dev="configfs" ino=8066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.466149][ T29] audit: type=1400 audit(1785592293.521:482): avc: denied { search } for pid=8172 comm="syz.4.594" name="functions" dev="configfs" ino=8067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.558924][ T29] audit: type=1400 audit(1785592293.521:483): avc: denied { search } for pid=8172 comm="syz.4.594" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.668427][ T804] usb 6-1: device descriptor read/64, error -71 [ 246.675374][ T29] audit: type=1400 audit(1785592293.521:484): avc: denied { search } for pid=8172 comm="syz.4.594" name="usb_gadget" dev="configfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.704610][ T8171] dummy0: left allmulticast mode [ 246.705711][ T29] audit: type=1400 audit(1785592293.521:485): avc: denied { search } for pid=8172 comm="syz.4.594" name="g1" dev="configfs" ino=8066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.793487][ T804] usb usb6-port1: attempt power cycle [ 247.132554][ T8184] sctp_transport_update_pmtu: 47 callbacks suppressed [ 247.132597][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.154567][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.167354][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.202446][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.238550][ T804] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 247.255945][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.269577][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.286324][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.300962][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.316009][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.331585][ T8184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 247.470886][ T804] usb 6-1: device descriptor read/8, error -71 [ 247.788930][ T804] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 248.483880][ T8195] FAT-fs (nbd2): unable to read boot sector [ 248.612823][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 248.867992][ T804] usb 6-1: device descriptor read/8, error -71 [ 249.180527][ T8200] syzkaller0: entered promiscuous mode [ 249.296438][ T804] usb usb6-port1: unable to enumerate USB device [ 249.364764][ T8200] syzkaller0: entered allmulticast mode [ 249.372043][ T8210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.436263][ T8202] tipc: Enabled bearer , priority 0 [ 249.476397][ T8200] tipc: Resetting bearer [ 249.510378][ T8192] tipc: Resetting bearer [ 249.532204][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 249.563298][ T8192] tipc: Disabling bearer [ 249.791484][ T8215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.215198][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 250.215217][ T29] audit: type=1400 audit(1785592297.821:492): avc: denied { write } for pid=8220 comm="syz.2.606" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.647187][ T804] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 250.655337][ T29] audit: type=1400 audit(1785592297.821:493): avc: denied { add_name } for pid=8220 comm="syz.2.606" name="dwMaxVideoFrameBufferSize" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.799083][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 250.852733][ T8232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'. [ 250.985686][ T5614] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 251.181937][ T8230] bond3: entered promiscuous mode [ 251.189330][ T8230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.199970][ T8233] dummy0: entered allmulticast mode [ 251.208243][ T8233] dummy0: left allmulticast mode [ 251.804823][ T804] usb 6-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 252.767220][ T29] audit: type=1400 audit(1785592300.231:494): avc: denied { write } for pid=8239 comm="syz.3.610" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.933807][ T29] audit: type=1400 audit(1785592300.311:495): avc: denied { write } for pid=8239 comm="syz.3.610" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.140208][ T29] audit: type=1400 audit(1785592300.481:496): avc: denied { write } for pid=8239 comm="syz.3.610" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.829900][ T804] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.843610][ T804] usb 6-1: string descriptor 0 read error: -71 [ 253.851477][ T804] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 253.863356][ T804] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 253.933298][ T804] usb 6-1: can't set config #36, error -71 [ 253.948598][ T804] usb 6-1: USB disconnect, device number 11 [ 254.057076][ T8245] netlink: 76 bytes leftover after parsing attributes in process `syz.5.613'. [ 254.203107][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 254.635595][ T8260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.612'. [ 254.885597][ T8215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.708766][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.715453][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736987][ T8215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.982699][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.620'. [ 256.009947][ T8215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.538234][ T8277] bond3: entered promiscuous mode [ 256.546398][ T8277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.638146][ T8278] dummy0: entered allmulticast mode [ 256.644021][ T8278] dummy0: left allmulticast mode [ 256.669945][ T5722] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 257.075233][ T5722] usb 4-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 257.238188][ T6002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.364522][ T7573] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.376768][ T7573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.468773][ T5722] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.472096][ T7573] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.017847][ T5722] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 258.028125][ T5722] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 258.036808][ T5722] usb 4-1: Manufacturer: syz [ 258.045293][ T5722] usb 4-1: SerialNumber: syz [ 258.064049][ T8295] netlink: 76 bytes leftover after parsing attributes in process `syz.4.625'. [ 258.267140][ T29] audit: type=1400 audit(1785592305.871:497): avc: denied { open } for pid=8301 comm="syz.5.629" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 258.279679][ T8303] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 258.314043][ T5722] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 258.327007][ T5722] usb 4-1: USB disconnect, device number 24 [ 259.084398][ T29] audit: type=1400 audit(1785592306.331:498): avc: denied { read write } for pid=8301 comm="syz.5.629" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 259.422380][ T8320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 260.480692][ T29] audit: type=1400 audit(1785592306.331:499): avc: denied { open } for pid=8301 comm="syz.5.629" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 260.906037][ T29] audit: type=1400 audit(1785592306.401:500): avc: denied { ioctl } for pid=8301 comm="syz.5.629" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.130431][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.634'. [ 262.085917][ T8326] bond4: entered promiscuous mode [ 262.247911][ T8326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.294635][ T8328] dummy0: entered allmulticast mode [ 262.297450][ T8346] netlink: 76 bytes leftover after parsing attributes in process `syz.4.639'. [ 262.312974][ T8328] dummy0: left allmulticast mode [ 262.642772][ T5707] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 262.899727][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 263.004847][ T8362] sctp_transport_update_pmtu: 47 callbacks suppressed [ 263.004881][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.026063][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.039960][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.051800][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.075727][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.087459][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.098561][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.110230][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.122675][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.134175][ T8362] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.505265][ T5707] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.760977][ T5707] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 263.780113][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.787118][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 263.796749][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.807644][ T5707] usb 4-1: config 0 descriptor?? [ 265.303996][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x3 [ 265.312544][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.324343][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.332771][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.341198][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.351274][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.362236][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 265.373030][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x2 [ 265.383401][ T5707] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x2 [ 265.391867][ T5707] logitech-hidpp-device 0003:046D:C088.0004: item fetching failed at offset 39/40 [ 265.411741][ T5707] logitech-hidpp-device 0003:046D:C088.0004: hidpp_probe:parse failed [ 265.420164][ T5707] logitech-hidpp-device 0003:046D:C088.0004: probe with driver logitech-hidpp-device failed with error -22 [ 265.463558][ T5707] usb 4-1: USB disconnect, device number 25 [ 266.920121][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.651'. [ 267.822843][ T8409] netlink: 76 bytes leftover after parsing attributes in process `syz.0.654'. [ 267.931304][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 268.046108][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 268.813651][ T8414] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 268.872785][ T8421] sctp_transport_update_pmtu: 163 callbacks suppressed [ 268.872804][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.899566][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.909925][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.921161][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.931984][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.942290][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.953161][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.963744][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.974649][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.985016][ T8421] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 269.035380][ T8416] dummy0: entered allmulticast mode [ 269.062822][ T8416] dummy0: left allmulticast mode [ 269.211201][ T1040] Bluetooth: hci5: Frame reassembly failed (-84) [ 269.273717][ T50] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 269.408584][ T804] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 270.130297][ T804] usb 1-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 270.168878][ T804] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.217071][ T804] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 270.244566][ T804] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 270.277601][ T804] usb 1-1: Manufacturer: syz [ 270.288160][ T804] usb 1-1: SerialNumber: syz [ 270.596489][ T8453] netlink: 56 bytes leftover after parsing attributes in process `syz.3.664'. [ 271.233782][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 271.249506][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 271.410384][ T804] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 271.704180][ T804] usb 1-1: USB disconnect, device number 21 [ 272.082391][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.668'. [ 273.087849][ T8472] netlink: 76 bytes leftover after parsing attributes in process `syz.4.669'. [ 273.240476][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 273.362766][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 273.721077][ T8483] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.501382][ T8503] netlink: 56 bytes leftover after parsing attributes in process `syz.3.676'. [ 274.588555][ T8486] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.233455][ T8483] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.302614][ T8486] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.497005][ T8483] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.640721][ T8517] netlink: 56 bytes leftover after parsing attributes in process `syz.0.679'. [ 275.779065][ T8486] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.152440][ T8483] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.581490][ T8486] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.768508][ T6002] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.917534][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'. [ 276.987897][ T1040] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.352510][ T7573] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.427732][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.519109][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.553145][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.865844][ T1040] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.027631][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.358258][ T8536] netlink: 76 bytes leftover after parsing attributes in process `syz.5.685'. [ 280.590516][ T8568] tipc: Enabled bearer , priority 0 [ 280.637867][ T8557] tipc: Resetting bearer [ 281.221970][ T8556] tipc: Disabling bearer [ 281.283944][ T8574] sctp_transport_update_pmtu: 163 callbacks suppressed [ 281.284008][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.304677][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.316208][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.328116][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.349098][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.360985][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.377660][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.390263][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.402294][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.413599][ T8574] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.375329][ T8592] FAT-fs (nbd0): unable to read boot sector [ 282.396231][ T8589] netlink: 76 bytes leftover after parsing attributes in process `syz.3.699'. [ 282.410695][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 282.646866][ T8603] netlink: 56 bytes leftover after parsing attributes in process `syz.5.700'. [ 284.525794][ T8621] netlink: 76 bytes leftover after parsing attributes in process `syz.5.703'. [ 284.617775][ T29] audit: type=1400 audit(1785592332.221:501): avc: denied { write } for pid=8624 comm="syz.2.706" name="0x409" dev="configfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.681391][ T29] audit: type=1400 audit(1785592332.281:502): avc: denied { write } for pid=8624 comm="syz.2.706" name="720p" dev="configfs" ino=9872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.034709][ T8635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'. [ 285.828732][ T8638] syzkaller0: entered promiscuous mode [ 285.834744][ T8638] syzkaller0: entered allmulticast mode [ 285.848056][ T8638] tipc: Enabled bearer , priority 0 [ 285.872173][ T8638] tipc: Resetting bearer [ 285.934327][ T8637] tipc: Resetting bearer [ 286.036542][ T8637] tipc: Disabling bearer [ 286.243532][ T8648] netlink: 56 bytes leftover after parsing attributes in process `syz.3.709'. [ 286.816636][ T8651] sctp_transport_update_pmtu: 105 callbacks suppressed [ 286.816660][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.837969][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.850748][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.863253][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.886892][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.902281][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.916916][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.929725][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.943406][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.958015][ T8651] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.850226][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 287.885639][ T8657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.929364][ T29] audit: type=1400 audit(1785592335.531:503): avc: denied { read write } for pid=8658 comm="syz.5.714" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 287.995090][ T29] audit: type=1400 audit(1785592335.531:504): avc: denied { open } for pid=8658 comm="syz.5.714" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 288.038420][ T5707] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 288.081996][ T8657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.104157][ T29] audit: type=1400 audit(1785592335.541:505): avc: denied { ioctl } for pid=8658 comm="syz.5.714" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 288.164055][ T8664] netlink: 76 bytes leftover after parsing attributes in process `syz.3.715'. [ 288.192527][ T8662] syzkaller0: entered promiscuous mode [ 288.218590][ T8662] syzkaller0: entered allmulticast mode [ 288.238699][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 288.249842][ T5707] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.264134][ T8657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.265382][ T5707] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 288.392783][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.400335][ T5707] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 288.412896][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.432461][ T5707] usb 3-1: config 0 descriptor?? [ 288.529590][ T8657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.530280][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x3 [ 289.566189][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.577599][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.588633][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.599524][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.612535][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.622115][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x0 [ 289.631565][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x2 [ 289.645087][ T5707] logitech-hidpp-device 0003:046D:C088.0005: unknown main item tag 0x2 [ 289.656019][ T5707] logitech-hidpp-device 0003:046D:C088.0005: item fetching failed at offset 39/40 [ 289.673213][ T5707] logitech-hidpp-device 0003:046D:C088.0005: hidpp_probe:parse failed [ 289.685167][ T5707] logitech-hidpp-device 0003:046D:C088.0005: probe with driver logitech-hidpp-device failed with error -22 [ 289.730664][ T5707] usb 3-1: USB disconnect, device number 23 [ 289.975496][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.459893][ T6706] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.767273][ T6706] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.979875][ T6706] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.989086][ T8707] netlink: 56 bytes leftover after parsing attributes in process `syz.5.724'. [ 294.828948][ T8720] netlink: 56 bytes leftover after parsing attributes in process `syz.4.726'. [ 295.523933][ T29] audit: type=1400 audit(1785592343.051:506): avc: denied { create } for pid=8721 comm="" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.607694][ T8728] sctp_transport_update_pmtu: 47 callbacks suppressed [ 295.607747][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.626892][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.639495][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.652328][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.674979][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.690367][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.703082][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.715359][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.728824][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.741073][ T8728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 295.839937][ T29] audit: type=1400 audit(1785592343.051:507): avc: denied { mounton } for pid=8721 comm="" path="/110/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 297.426374][ T8736] netlink: 76 bytes leftover after parsing attributes in process `syz.2.730'. [ 298.307325][ T187] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 299.143114][ T171] Bluetooth: hci5: Frame reassembly failed (-84) [ 299.188647][ T187] usb 6-1: Using ep0 maxpacket: 8 [ 299.259978][ T187] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.284818][ T187] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 299.317799][ T187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.333051][ T187] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 299.410280][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.444592][ T187] usb 6-1: config 0 descriptor?? [ 299.565505][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.739'. [ 300.663096][ T8780] netlink: 56 bytes leftover after parsing attributes in process `syz.4.741'. [ 300.817954][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x3 [ 300.829208][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.837995][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.848958][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.859288][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.869234][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.880895][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x0 [ 300.892198][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x2 [ 300.902681][ T187] logitech-hidpp-device 0003:046D:C088.0006: unknown main item tag 0x2 [ 300.913678][ T187] logitech-hidpp-device 0003:046D:C088.0006: item fetching failed at offset 39/40 [ 300.929286][ T187] logitech-hidpp-device 0003:046D:C088.0006: hidpp_probe:parse failed [ 300.938168][ T187] logitech-hidpp-device 0003:046D:C088.0006: probe with driver logitech-hidpp-device failed with error -22 [ 300.998103][ T187] usb 6-1: USB disconnect, device number 12 [ 301.103324][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.491927][ T8816] netlink: 56 bytes leftover after parsing attributes in process `syz.3.747'. [ 303.538557][ T187] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.815504][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.860731][ T187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.875022][ T187] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.997258][ T187] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 304.123286][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.367861][ T187] spcp8x5 1-1:1.0: required endpoints missing [ 305.006536][ T8836] netlink: 56 bytes leftover after parsing attributes in process `syz.4.752'. [ 305.541667][ T8842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.751'. [ 307.235438][ T804] usb 1-1: USB disconnect, device number 22 [ 307.508501][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 307.928379][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 307.984557][ T42] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.087145][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.5.757'. [ 308.130246][ T42] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 308.282994][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.312646][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 308.364103][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.415436][ T42] usb 5-1: config 0 descriptor?? [ 308.988362][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x3 [ 309.003094][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.012585][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.027070][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.037283][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.054821][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.063812][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x0 [ 309.072457][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x2 [ 309.080893][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x2 [ 309.089423][ T42] logitech-hidpp-device 0003:046D:C088.0007: unknown main item tag 0x6 [ 309.116524][ T42] logitech-hidpp-device 0003:046D:C088.0007: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.4-1/input0 [ 309.225081][ T804] usb 5-1: USB disconnect, device number 14 [ 309.348892][ T8887] netlink: 56 bytes leftover after parsing attributes in process `syz.2.760'. [ 309.627173][ T8882] fido_id[8882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 309.935159][ T8902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.761'. [ 310.016220][ T8903] netlink: 56 bytes leftover after parsing attributes in process `syz.5.762'. [ 311.520931][ T8913] sctp_transport_update_pmtu: 108 callbacks suppressed [ 311.520980][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.541335][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.555155][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.568179][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.592762][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.606270][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.619246][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.631673][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.644460][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.657550][ T8913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 312.356700][ T8913] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 312.499405][ T29] audit: type=1400 audit(1785592360.101:508): avc: denied { write } for pid=8922 comm="syz.5.767" name="instances" dev="tracefs" ino=3669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.548528][ T29] audit: type=1400 audit(1785592360.141:509): avc: denied { add_name } for pid=8922 comm="syz.5.767" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.550316][ T8928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.768'. [ 312.606788][ T29] audit: type=1400 audit(1785592360.141:510): avc: denied { create } for pid=8922 comm="syz.5.767" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 312.654078][ T29] audit: type=1400 audit(1785592360.241:511): avc: denied { write } for pid=8922 comm="syz.5.767" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 312.731231][ T29] audit: type=1400 audit(1785592360.241:512): avc: denied { open } for pid=8922 comm="syz.5.767" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 312.856333][ T8940] syzkaller0: entered promiscuous mode [ 312.869309][ T8940] syzkaller0: entered allmulticast mode [ 312.882411][ T5707] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 312.990191][ T8942] syzkaller0: entered promiscuous mode [ 312.996418][ T8942] syzkaller0: entered allmulticast mode [ 313.068398][ T5707] usb 6-1: Using ep0 maxpacket: 8 [ 313.284193][ T5707] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 313.294737][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.303174][ T5707] usb 6-1: Product: syz [ 313.307395][ T5707] usb 6-1: Manufacturer: syz [ 313.312079][ T5707] usb 6-1: SerialNumber: syz [ 313.336385][ T5707] usb 6-1: config 0 descriptor?? [ 313.373217][ T5707] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 313.395828][ T8953] ================================================================== [ 313.404048][ T8953] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 313.411785][ T8953] Read of size 8 at addr ffff88802d3cb818 by task syz.4.772/8953 [ 313.419606][ T8953] [ 313.421924][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.4.772 Not tainted syzkaller #0 PREEMPT(full) [ 313.421946][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.421958][ T8953] Call Trace: [ 313.421968][ T8953] [ 313.421976][ T8953] dump_stack_lvl+0x100/0x190 [ 313.422002][ T8953] print_report+0x13d/0x4b0 [ 313.422033][ T8953] ? __virt_addr_valid+0x239/0x430 [ 313.422062][ T8953] ? dvb_device_open+0x33f/0x3b0 [ 313.422088][ T8953] kasan_report+0xdf/0x1c0 [ 313.422115][ T8953] ? dvb_device_open+0x33f/0x3b0 [ 313.422142][ T8953] ? __pfx_dvb_device_open+0x10/0x10 [ 313.422168][ T8953] dvb_device_open+0x33f/0x3b0 [ 313.422196][ T8953] ? __pfx_dvb_device_open+0x10/0x10 [ 313.422222][ T8953] chrdev_open+0x234/0x6a0 [ 313.422243][ T8953] ? __pfx_chrdev_open+0x10/0x10 [ 313.422263][ T8953] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 313.422292][ T8953] do_dentry_open+0x6ab/0x14d0 [ 313.422309][ T8953] ? __pfx_chrdev_open+0x10/0x10 [ 313.422329][ T8953] vfs_open+0x82/0x3f0 [ 313.422351][ T8953] path_openat+0x2873/0x4280 [ 313.422375][ T8953] ? __pfx_path_openat+0x10/0x10 [ 313.422398][ T8953] do_file_open+0x20e/0x430 [ 313.422418][ T8953] ? __pfx_do_file_open+0x10/0x10 [ 313.422444][ T8953] ? alloc_fd+0x471/0x7a0 [ 313.422465][ T8953] ? do_getname+0x191/0x390 [ 313.422490][ T8953] do_sys_openat2+0x10f/0x1e0 [ 313.422511][ T8953] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.422542][ T8953] __x64_sys_openat+0x12d/0x210 [ 313.422566][ T8953] ? __pfx___x64_sys_openat+0x10/0x10 [ 313.422589][ T8953] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 313.422618][ T8953] do_syscall_64+0x115/0x870 [ 313.422642][ T8953] ? clear_bhb_loop+0x40/0x90 [ 313.422664][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.422684][ T8953] RIP: 0033:0x7fc95115e84e [ 313.422700][ T8953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.422718][ T8953] RSP: 002b:00007fc951fd9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.422738][ T8953] RAX: ffffffffffffffda RBX: 00007fc951fda6c0 RCX: 00007fc95115e84e [ 313.422752][ T8953] RDX: 0000000000040402 RSI: 00007fc951fd9c00 RDI: ffffffffffffff9c [ 313.422767][ T8953] RBP: 00007fc951fd9c00 R08: 0000000000000000 R09: 0000000000000000 [ 313.422780][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 313.422793][ T8953] R13: 00007fc9514263f8 R14: 00007fc951426360 R15: 00007ffc6b6ddd98 [ 313.422813][ T8953] [ 313.422820][ T8953] [ 313.671341][ T8953] Allocated by task 1: [ 313.675416][ T8953] kasan_save_stack+0x30/0x50 [ 313.680115][ T8953] kasan_save_track+0x14/0x30 [ 313.684808][ T8953] __kasan_kmalloc+0xaa/0xb0 [ 313.689414][ T8953] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 313.694794][ T8953] dvb_register_device+0x1d6/0x1e20 [ 313.700186][ T8953] dvb_register_frontend+0x552/0x820 [ 313.705503][ T8953] vidtv_bridge_probe+0x44b/0xa30 [ 313.710540][ T8953] platform_probe+0x106/0x1d0 [ 313.715410][ T8953] really_probe+0x241/0xa60 [ 313.719928][ T8953] __driver_probe_device+0x20e/0x450 [ 313.725230][ T8953] driver_probe_device+0x4a/0x140 [ 313.730704][ T8953] __driver_attach+0x21f/0x5b0 [ 313.735575][ T8953] bus_for_each_dev+0x13e/0x1d0 [ 313.740470][ T8953] bus_add_driver+0x305/0x5b0 [ 313.745172][ T8953] driver_register+0x1e2/0x360 [ 313.750030][ T8953] vidtv_bridge_init+0x52/0x80 [ 313.754793][ T8953] do_one_initcall+0x11d/0x700 [ 313.759572][ T8953] kernel_init_freeable+0x6ea/0x7b0 [ 313.764771][ T8953] kernel_init+0x1f/0x1e0 [ 313.769104][ T8953] ret_from_fork+0x72b/0xd50 [ 313.773718][ T8953] ret_from_fork_asm+0x1a/0x30 [ 313.778482][ T8953] [ 313.780797][ T8953] Freed by task 8913: [ 313.784937][ T8953] kasan_save_stack+0x30/0x50 [ 313.789614][ T8953] kasan_save_track+0x14/0x30 [ 313.794292][ T8953] kasan_save_free_info+0x3b/0x70 [ 313.799630][ T8953] __kasan_slab_free+0x5f/0x80 [ 313.804504][ T8953] kfree+0x22b/0x6c0 [ 313.808433][ T8953] dvb_device_put.part.0+0x57/0x90 [ 313.813569][ T8953] dvb_device_open+0x2ba/0x3b0 [ 313.818411][ T8953] chrdev_open+0x234/0x6a0 [ 313.822862][ T8953] do_dentry_open+0x6ab/0x14d0 [ 313.827621][ T8953] vfs_open+0x82/0x3f0 [ 313.832223][ T8953] path_openat+0x2873/0x4280 [ 313.837105][ T8953] do_file_open+0x20e/0x430 [ 313.841662][ T8953] do_sys_openat2+0x10f/0x1e0 [ 313.846360][ T8953] __x64_sys_openat+0x12d/0x210 [ 313.851213][ T8953] do_syscall_64+0x115/0x870 [ 313.855814][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.861875][ T8953] [ 313.864203][ T8953] The buggy address belongs to the object at ffff88802d3cb800 [ 313.864203][ T8953] which belongs to the cache kmalloc-256 of size 256 [ 313.878347][ T8953] The buggy address is located 24 bytes inside of [ 313.878347][ T8953] freed 256-byte region [ffff88802d3cb800, ffff88802d3cb900) [ 313.892073][ T8953] [ 313.894425][ T8953] The buggy address belongs to the physical page: [ 313.900924][ T8953] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d3ca [ 313.907371][ T5707] gspca_sonixj: reg_w1 err -110 [ 313.909791][ T8953] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 313.909814][ T8953] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 313.909837][ T8953] page_type: f5(slab) [ 313.909859][ T8953] raw: 00fff00000000040 ffff88813fe23b40 dead000000000100 dead000000000122 [ 313.909881][ T8953] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 313.952809][ T8953] head: 00fff00000000040 ffff88813fe23b40 dead000000000100 dead000000000122 [ 313.961579][ T8953] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 313.970256][ T8953] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 313.978918][ T8953] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 313.987570][ T8953] page dumped because: kasan: bad access detected [ 313.993965][ T8953] page_owner tracks the page as allocated [ 313.999661][ T8953] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16713608913, free_ts 0 [ 314.019373][ T8953] post_alloc_hook+0xfd/0x120 [ 314.024069][ T8953] get_page_from_freelist+0xf48/0x3530 [ 314.029521][ T8953] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 314.035408][ T8953] new_slab+0xa2/0x640 [ 314.039466][ T8953] refill_objects+0xe3/0x410 [ 314.044047][ T8953] __pcs_replace_empty_main+0x376/0x680 [ 314.049592][ T8953] __kmalloc_cache_noprof+0x479/0x6c0 [ 314.054962][ T8953] dvb_register_device+0x1d6/0x1e20 [ 314.060162][ T8953] dvb_register_frontend+0x552/0x820 [ 314.065445][ T8953] vidtv_bridge_probe+0x44b/0xa30 [ 314.070469][ T8953] platform_probe+0x106/0x1d0 [ 314.075168][ T8953] really_probe+0x241/0xa60 [ 314.079685][ T8953] __driver_probe_device+0x20e/0x450 [ 314.085171][ T8953] driver_probe_device+0x4a/0x140 [ 314.090201][ T8953] __driver_attach+0x21f/0x5b0 [ 314.094972][ T8953] bus_for_each_dev+0x13e/0x1d0 [ 314.099820][ T8953] page_owner free stack trace missing [ 314.105179][ T8953] [ 314.107491][ T8953] Memory state around the buggy address: [ 314.113121][ T8953] ffff88802d3cb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.121364][ T8953] ffff88802d3cb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.129517][ T8953] >ffff88802d3cb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.138702][ T8953] ^ [ 314.143538][ T8953] ffff88802d3cb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.151598][ T8953] ffff88802d3cb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.159652][ T8953] ================================================================== [ 314.199601][ T5707] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 314.287857][ T29] audit: type=1400 audit(1785592361.891:513): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 314.361852][ T29] audit: type=1400 audit(1785592361.891:514): avc: denied { search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.468543][ T8953] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.475842][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.4.772 Not tainted syzkaller #0 PREEMPT(full) [ 314.485046][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.495106][ T8953] Call Trace: [ 314.498831][ T8953] [ 314.501768][ T8953] dump_stack_lvl+0x100/0x190 [ 314.506458][ T8953] vpanic+0x552/0x970 [ 314.510450][ T8953] ? __pfx_vpanic+0x10/0x10 [ 314.514974][ T8953] ? dvb_device_open+0x33f/0x3b0 [ 314.519922][ T8953] panic+0xd1/0xe0 [ 314.523665][ T8953] ? __pfx_panic+0x10/0x10 [ 314.528078][ T8953] ? dvb_device_open+0x33f/0x3b0 [ 314.533013][ T8953] ? preempt_schedule_common+0x42/0xc0 [ 314.538821][ T8953] check_panic_on_warn.cold+0x19/0x34 [ 314.544195][ T8953] end_report.part.0+0x3a/0x90 [ 314.548969][ T8953] kasan_report.cold+0xe/0x18 [ 314.553650][ T8953] ? dvb_device_open+0x33f/0x3b0 [ 314.558600][ T8953] ? __pfx_dvb_device_open+0x10/0x10 [ 314.564334][ T8953] dvb_device_open+0x33f/0x3b0 [ 314.569274][ T8953] ? __pfx_dvb_device_open+0x10/0x10 [ 314.574562][ T8953] chrdev_open+0x234/0x6a0 [ 314.578989][ T8953] ? __pfx_chrdev_open+0x10/0x10 [ 314.583922][ T8953] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 314.590250][ T8953] do_dentry_open+0x6ab/0x14d0 [ 314.595011][ T8953] ? __pfx_chrdev_open+0x10/0x10 [ 314.599955][ T8953] vfs_open+0x82/0x3f0 [ 314.604025][ T8953] path_openat+0x2873/0x4280 [ 314.608617][ T8953] ? __pfx_path_openat+0x10/0x10 [ 314.613558][ T8953] do_file_open+0x20e/0x430 [ 314.618068][ T8953] ? __pfx_do_file_open+0x10/0x10 [ 314.623113][ T8953] ? alloc_fd+0x471/0x7a0 [ 314.627447][ T8953] ? do_getname+0x191/0x390 [ 314.631949][ T8953] do_sys_openat2+0x10f/0x1e0 [ 314.636643][ T8953] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.641845][ T8953] __x64_sys_openat+0x12d/0x210 [ 314.646695][ T8953] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.652090][ T8953] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 314.658079][ T8953] do_syscall_64+0x115/0x870 [ 314.662674][ T8953] ? clear_bhb_loop+0x40/0x90 [ 314.667351][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.673240][ T8953] RIP: 0033:0x7fc95115e84e [ 314.677661][ T8953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.697280][ T8953] RSP: 002b:00007fc951fd9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.705716][ T8953] RAX: ffffffffffffffda RBX: 00007fc951fda6c0 RCX: 00007fc95115e84e [ 314.714242][ T8953] RDX: 0000000000040402 RSI: 00007fc951fd9c00 RDI: ffffffffffffff9c [ 314.722233][ T8953] RBP: 00007fc951fd9c00 R08: 0000000000000000 R09: 0000000000000000 [ 314.730220][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 314.738213][ T8953] R13: 00007fc9514263f8 R14: 00007fc951426360 R15: 00007ffc6b6ddd98 [ 314.746637][ T8953] [ 314.749883][ T8953] Kernel Offset: disabled [ 314.754215][ T8953] Rebooting in 86400 seconds..