last executing test programs: 2m6.728348085s ago: executing program 2 (id=1059): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xc}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0xfffffffb, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}, {0x4}], 0x12, 0x0, 0x0, 0x8000000}) (async, rerun: 64) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x233, &(0x7f0000000080)={0x0, 0x8000e656, 0x100, 0x10001, 0x55}, 0x0, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x81eb0000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030305fbd7781eb864bda21b7aded3030303430", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04ba8c2b85be226c95c78cb0469fbffbb3bb9e409b47354ec9b8aad747479914c87c79202c2344c9038555430893c09db1bee69782bc101eabcb22381c953402ada18fa1eede156f55579f8c526d80489e4071991e30ffceb8e4c1579a18bcf03db80feab110543909beb4de9e819a4c077cd22b50b3d4a77e4644d9496f", @ANYBLOB="b924c65cb83aecc9bf3832d85e62ff5768a656cd0c441871e20b490768182386b661933b33290b7416c1913a6769bc28932194fb5bfc18f35ac4b6b54ad27d2e213fd13f01a3a4a9d8b63fba67399cd1fc0e5bd7b389d66d3167a2092c1fd5dd4fd05e3495d6a5fd6313de2abcf46aab7c5f1ed95a0a91d0e0797ea67cb98e6ddcdbf7718c5d7491eec7af451b7aaa58dbb16dacc6432e2a351b1733cae0e1e7ef585c90678f63005a9ddffdfb371d91e448b47d1216e3e859ad247eddcbea06730df6c1a0e107dd03fe4ed5", @ANYBLOB="148660277a7e4c3c80e9074355618314ff443357241e960640427f7dc0776c43b820255089b519d077756c867c9722e1adddd412eba5b5e3582289965be4d73d853a90926edb9822d9eee5ddb5907bc73b9c7a8ecd899f183786fbf4c7db751fddf5db5293fb54493f6d140a19c307c2a201ae6a2ae98e6dea8fdb0a9031d2fb56e70819e3f650da4f2d91f8aa45a0222bd1596bbc28868a58e5f4805940e3c8565c5fddfc", @ANYRES32=r1, @ANYRESOCT=r0]) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000006400), 0x2000, &(0x7f0000000340)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0xf00) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYBLOB="e35662674009470afde3b57b9a5bc6c31e0ec630e8226baf82ced92db769de7ab70ea3b4165edbc83aac06071c16b6d44db478d758871b2afa703156327db6bcc9044cc0b7bbcad563c168ed5418b8f4059111d6078c2527247bc693315f1b718daebf9f64fb6ed66da77fe0e7ed2526a582b71d643c4512e776bc93d41e1518e87dd40c07ba6f25f100bf201f33f8fd498889a058e6d91b4895ee3370d19b8045d97c8728d9b9e7d912b64e36ab83b8416a8a38e88e005c5c6151d2018177c318b636b6a8807e0f0d9d664aeda2e5310aa7d2810523ef2b1e701542f6473f08d4a9f23f96b1c586ae8555"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r5}, 0x38) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000408000000000000569cbbfe7c6cd3555400000000000c18fa8be5f832", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000000800040000000040"], 0x28}}, 0x0) 2m6.528746575s ago: executing program 2 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) setuid(r0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000062102000100000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_init() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 2m6.144564701s ago: executing program 2 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind'}}, 0x4e}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind'}}, 0x4e}]}) (async) 2m6.035859145s ago: executing program 2 (id=1067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x7, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x9, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x6f, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 2m5.95756956s ago: executing program 2 (id=1068): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v2={0x2000000, [{0x2, 0xfffffff7}, {0x0, 0x6}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x3, 0xff, 0x9, 0x1}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x48800) tkill(r3, 0x17) tkill(r3, 0x23) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v1={0x1000000, [{0x6, 0xfffffffb}]}, 0x2, 0x2) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r3, 0x12) 2m5.09818938s ago: executing program 2 (id=1073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x88030) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) r7 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r7, 0x80044943, &(0x7f0000005f00)) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x5}, {0xfffb, 0x3}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x13, 0x0, 0x310) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x0, 0x0, @b}, 0x48, r1) 1m50.091781832s ago: executing program 32 (id=1073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x88030) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) r7 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r7, 0x80044943, &(0x7f0000005f00)) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x5}, {0xfffb, 0x3}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x13, 0x0, 0x310) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x0, 0x0, @b}, 0x48, r1) 22.634891903s ago: executing program 1 (id=1685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)}], 0x2, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x1148}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 22.634735136s ago: executing program 1 (id=1686): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 21.351001405s ago: executing program 1 (id=1692): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/hardlockup_count', 0x288000, 0x4) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001340)='blkio.bfq.time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000012c0)=ANY=[@ANYRES8=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 21.049856483s ago: executing program 1 (id=1695): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) shutdown(r0, 0x0) 20.143695577s ago: executing program 1 (id=1700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={[0x2]}, 0x8) 19.159528212s ago: executing program 1 (id=1705): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$inet6(0xa, 0x2, 0x0) 7.169694412s ago: executing program 3 (id=1758): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000001380)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x2, &(0x7f00000028c0)=""/4121, &(0x7f0000001440)=0x1019) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x32}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x4, 0x0, 0xffffffffffffffff, 0x1ffffffffffff6}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000001480)={r5, @in6={{0xa, 0x4e24, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, &(0x7f0000000280)=0x84) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x1000006d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x9, 0x497}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 6.186105436s ago: executing program 3 (id=1760): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001140)=""/4086, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$COMEDI_LOCK(r0, 0x6405) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x12b4, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x9}, 0x9, 0x7, 0x3, 0x72c, 0x0, 'syz0\x00', "c1f2eb036bb979372e109a5da5116c2c7890d9ff26fcf6c759720cb91860219c", "0ca28119df5bb290dda89f25ef2778dc817bda777c878825847f02250f28e45a", [{0x100, 0xfffc, {0x2, 0x2}}, {0x0, 0x800, {0x0, 0x2}}, {0x100, 0xcbb6, {0x3, 0xfb8}}, {0x10, 0x2, {0x1, 0x36}}, {0x0, 0x0, {0x1, 0x7}}, {0x2, 0xfff9, {0x2, 0x27}}, {0x8, 0x1fe, {0x2, 0x3d}}, {0x3, 0x2abe, {0x2, 0x4}}, {0x401, 0xffff, {0x0, 0x45b}}, {0x7, 0x1cc, {0x0, 0x4}}, {0x5, 0x7fff, {0x1, 0x95}}, {0x5, 0xfff8, {0x0, 0x1}}, {0x9, 0x1, {0x731beac3634abdb, 0x401}}, {0x2, 0x0, {0x3, 0xc7f6}}, {0xff, 0x2, {0x1, 0x10}}, {0x1000, 0x5, {0x5, 0x1ff}}, {0x8, 0x7ff, {0x0, 0x6}}, {0x401, 0x1, {0x2, 0x1}}, {0x2, 0x1, {0x3, 0x66}}, {0x360, 0xfffd, {0x3, 0xc5}}, {0x401, 0x6, {0x0, 0x40}}, {0xa, 0x6, {0x1, 0xfffffff3}}, {0x8001, 0x8, {0x0, 0xfc}}, {0x8001, 0xd, {0x2, 0x6}}, {0x81, 0x401, {0x1, 0xffffffd2}}, {0x0, 0xb, {0x2, 0x25d1}}, {0x6, 0x4, {0x2, 0x1}}, {0x6, 0x1, {0x1, 0xfffffffb}}, {0x401, 0xb, {0x1, 0x3}}, {0xcff5, 0x6, {0x0, 0x2}}, {0x800, 0x1, {0x2, 0x520}}, {0x2000, 0x8, {0x3, 0x8001}}, {0x97ea, 0x9, {0x1, 0x9}}, {0x5d0, 0x2, {0x3, 0xffffffff}}, {0x8, 0x0, {0x3, 0x4}}, {0x5e5, 0x7, {0x2, 0x4}}, {0x2, 0x9, {0x3, 0xfffffff8}}, {0x0, 0x1000, {0x2, 0x7e}}, {0xff, 0x7, {0x3, 0xfffff800}}, {0x7, 0x7ff, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x1, 0x1, 0xc, 0x1b, 'syz1\x00', "2c2ab4d3dd31b49cf02ce9427abfe4621f75102e271e84246d9a56f9942b2dcd", "0160d107ad0330e39d3639a9419c926192c56afe282eee7e7d8094fef80304e5", [{0xfffd, 0x14a0, {0x1, 0x9}}, {0x3}, {0x9, 0x20, {0x0, 0x4}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x2, {0x2, 0x2}}, {0x1, 0x696a, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0xfff}}, {0x89f6, 0x1, {0x7, 0x5}}, {0x6, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x3, 0x6}}, {0xb, 0xb0a0, {0x0, 0x3}}, {0x3, 0x9, {0x2, 0xd8e}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xe, 0x2, {0x0, 0xc}}, {0x4, 0x9, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x6}}, {0x7, 0x1000, {0x2, 0x460}}, {0x20e, 0x5, {0x0, 0x7fff}}, {0xbc9, 0xb, {0x1, 0xff}}, {0x0, 0x1, {0x2, 0xb}}, {0x7, 0x401, {0x3, 0x5}}, {0x5, 0x10, {0x0, 0x10001}}, {0x8, 0x0, {0x3, 0xae}}, {0x80, 0x9, {0x2, 0x6}}, {0x7fc0, 0x7, {0x2, 0x3}}, {0x101, 0x101, {0x2, 0x3}}, {0x1, 0xfff9, {0x2, 0x4}}, {0x7, 0x400, {0x2}}, {0x9, 0xb0, {0x1, 0x4}}, {0x7ff, 0xb438, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x5}}, {0xa0e, 0x6, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x5}}, {0x768f, 0xd, {0x0, 0x1}}, {0x200, 0x0, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x8}}, {0xa8d8, 0x800, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x2, 0x5, 0x39, 0x800, 0x6, 'syz1\x00', "9fc52f6daecb2651ede80bfbaf0169f27357dfaf59e3f49647fda1a9d37843fc", "559bbf6debe2ebfdd525ea32a68c5783d8996045641a1172c381199cf4a1a5d1", [{0x1800, 0x2, {0x3, 0x8bf1}}, {0x4, 0x5}, {0x8, 0x2, {0x3}}, {0x3, 0x8, {0x1, 0xd}}, {0x6, 0x2, {0x0, 0x5}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x7, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x2, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x3}}, {0x800, 0x0, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0x1}}, {0x60c2, 0x3, {0x1, 0x1ff}}, {0x3, 0x6, {0x2, 0xa0d}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x5}}, {0xb3, 0x8, {0x2, 0x4332d02f}}, {0x3, 0x29, {0x1, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x100}}, {0x7, 0x2, {0x0, 0x101}}, {0xfff8, 0x6, {0x1, 0xc}}, {0x3ff, 0x6, {0x0, 0x2}}, {0xd, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x800000}}, {0xa2, 0x4, {0x3, 0x1ff}}, {0x56, 0x7, {0x1, 0x87b2}}, {0x5, 0x5, {0x2}}, {0xffff, 0x800, {0x0, 0x100}}, {0x5, 0x1, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x7e70}}, {0x4, 0x9088, {0x3, 0xb31}}, {0x7fff, 0x2, {0x0, 0x2}}, {0x2, 0x535, {0x1, 0x7}}, {0x81, 0x9f, {0x0, 0x8d2}}, {0x25a0, 0xfc5b, {0x2, 0x1}}, {0x100, 0xfffb, {0x1}}, {0x9, 0x80, {0x0, 0x2}}, {0x9, 0x8, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xb249}, 0xe, 0x3, 0xffff, 0x3fe1, 0x1e, 'syz1\x00', "9adaa18042571dea59f5204a8800ce87b0b7e7afb9f4dc385a5a8ebf9f8dce8a", "79f5a09f8ca8fec775d971787dc27a5510fa497f9c6fbd78cc2f86f2f3a27f3b", [{0x8, 0x7, {0x1, 0x2c00}}, {0x100, 0x4180, {0x3, 0x1000}}, {0x4, 0x9, {0x0, 0x81}}, {0x100, 0x3, {0x0, 0x4}}, {0x9a, 0x0, {0x1}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x2c00, 0x0, {0x3, 0x9}}, {0x3, 0x3bbf, {0x0, 0x9}}, {0x7, 0x117, {0x2, 0x7fffffff}}, {0x2, 0x4, {0x0, 0x7}}, {0x76, 0x0, {0x0, 0x400}}, {0x81, 0x121, {0x3, 0x8e}}, {0x1, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x3, 0x9}}, {0xfffd, 0x4120}, {0x1ff, 0xa18c, {0x1, 0xa}}, {0x9, 0x0, {0x2, 0xd0000000}}, {0x3183, 0x400, {0x1, 0x8}}, {0xffff, 0x17f5, {0x0, 0x8c45}}, {0x46b, 0x3ff, {0x0, 0x41806f89}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x800000}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0xa, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x926a}}, {0x5, 0x0, {0x3, 0x767}}, {0x6, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0x502, {0x0, 0x5}}, {0x9, 0x80, {0x3, 0x9}}, {0x6, 0xbe, {0x0, 0x4}}, {0x800, 0x4, {0x3, 0x8000}}, {0x7fff, 0xc}, {0xb, 0xfff8, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x9, 0xdf, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x3, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x7, 0x4, 0xd, 0xe, 'syz1\x00', "378c9251613448636ec37d8d9dd05e6ec1013de1c3ad37742b3ae1f74d7a483d", "16b067138357e0909d50f56156f63a1595678155f0da62a386d9e43d80cc7ea1", [{0x101, 0x4, {0x0, 0x1}}, {0x7f, 0xad, {0x2, 0x7}}, {0xfffa, 0x3, {0x0, 0x1}}, {0x3ff, 0xa, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x7f}}, {0x9, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x5}}, {0x101, 0xfff, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x7}}, {0x4, 0xbf2, {0x3, 0x8}}, {0xa0, 0x9, {0x1, 0x3ff}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x401, {0x1, 0x31}}, {0x2, 0x5, {0x3, 0x6a9f}}, {0x9, 0x2, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xe}}, {0xfff9, 0xf982, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x8e9}}, {0xeb, 0x9001, {0x0, 0x6}}, {0xffff, 0xe1, {0xfb554788f9dac68d}}, {0x7f, 0x3, {0x0, 0x603}}, {0x6, 0x4, {0x3, 0x800}}, {0x5, 0x81, {0x3, 0x8}}, {0x8, 0x523e, {0x3, 0x2}}, {0x8, 0x9b6, {0x0, 0x4ec0}}, {0x5, 0x3, {0x2, 0x200}}, {0xecf, 0x4, {0x2, 0x2}}, {0x8, 0xffff, {0x0, 0x800}}, {0x6, 0xc000, {0x0, 0x2412}}, {0x9, 0x5, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xfffc, {0x1, 0xd}}, {0x7, 0x3, {0x1, 0x81}}, {0xa, 0x4, {0x2, 0x800}}, {0xde0f, 0x3, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0xea26}}, {0xb999, 0x800, {0x7c48ba8a6319ef8e, 0x8}}, {0x2, 0x7, {0x2, 0x8}}, {0x0, 0x1ff, {0x4, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x3, 0x1, 0x75c0, 0x12, 'syz1\x00', "27c357d600d6e0ce33e318b4a9445dc21dd01a1a893f7cafddf3ab22c7654ac5", "502e137d0dcce16db6a5db2b658b3e81cdce03f39f972ebf9d7668c80d5124b3", [{0x7ff, 0x8000, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8000}}, {0x80, 0x3, {0x3, 0x2}}, {0x9, 0x10, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0xfd2}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xffff, 0xf, {0x3, 0x4}}, {0x7db, 0x8001, {0x0, 0x40}}, {0x8, 0x100, {0x0, 0x3}}, {0x7, 0x80f, {0x2, 0x1ff}}, {0x9, 0x2, {0x3, 0xffffffbe}}, {0xcc66, 0x6, {0x9fc5eccf7c7a9e07, 0x4}}, {0x5, 0x6, {0x3, 0x3}}, {0xfffb, 0x6, {0x0, 0x1000}}, {0xb, 0x1, {0x0, 0x4}}, {0xf, 0xff, {0x2, 0x80000000}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0xc, 0x1000, {0x2, 0x9}}, {0x8, 0x9598, {0x3, 0x5}}, {0x5, 0x10, {0x1, 0x101}}, {0x9, 0x2, {0x1, 0x73d}}, {0xbf6e, 0x7ff, {0x0, 0x8e}}, {0x3, 0xa, {0x1, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x9}}, {0x400, 0xf800, {0x2, 0x7}}, {0x4, 0x8000, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x4, 0x5f83, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0xc8}}, {0x9dc, 0xbdc, {0x2, 0x7}}, {0x41fa, 0xf, {0x1, 0x9a}}, {0x3, 0x5, {0x2, 0x144}}, {0xfffd, 0xe, {0x3, 0x10001}}, {0x9, 0xc, {0x2, 0xb}}, {0x0, 0xfff8, {0x1, 0x1}}, {0xa, 0x101, {0x3, 0xfff}}, {0x8, 0x7, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x7f17, 0x6, {0x1, 0x81}}, {0x295, 0x11, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40b4}, 0x40, 0xb, 0x2, 0x8, 0x15, 'syz0\x00', "d87f3eba32db69e75efbee28a08cc128db73a387206beb408720a810453e9647", "23e26a05842faf629ba616fe3e6072d5c3f9d05ecf26692ec898ccda1575db65", [{0x6, 0x8000, {0x0, 0x5}}, {0x5, 0x9, {0x0, 0xe0}}, {0x6, 0x200, {0x2, 0x5}}, {0x6cd6, 0x401, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0xfffffffc}}, {0x6fe1, 0x6, {0x0, 0x6}}, {0x0, 0x94, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x400}}, {0xf800, 0x100, {0x0, 0x6}}, {0x8, 0x200, {0x1}}, {0x3, 0x83, {0x3, 0x2}}, {0x831b, 0x5, {0x1, 0xc5d8}}, {0x2, 0xf, {0x3, 0x7}}, {0xe, 0x1ff, {0x1, 0x9}}, {0x5, 0x9}, {0x401, 0x3, {0x3, 0xf}}, {0x10, 0x5, {0x0, 0xff}}, {0xd454, 0x1000, {0x1, 0x5}}, {0x772, 0x6, {0x3, 0x4}}, {0x7ff, 0x8000, {0x3, 0x9}}, {0xde6e, 0x1, {0x2, 0x80}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x5, {0x0, 0x7fffffff}}, {0x4, 0x2, {0x2, 0x9}}, {0xbd82, 0x0, {0x2, 0x9}}, {0xfc01, 0x6, {0x3, 0x8}}, {0x1, 0x5b1c, {0x3, 0xffffcfd0}}, {0x5, 0x8, {0x1, 0x6}}, {0x9, 0x5, {0x1, 0xfffffffd}}, {0x3ff, 0x7, {0x2, 0x101}}, {0x7fff, 0x2, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x3a, 0x7, {0x1, 0x200000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x8}}, {0xf, 0x5acf, {0x3}}, {0x5, 0x5, {0x0, 0xbec}}, {0x2, 0x1, {0x2, 0x3ff}}, {0x3e, 0xff96, {0x3, 0xa6e}}, {0xa, 0x4, {0x1, 0x100}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x8, 0x1, 0x9, 0x7, 0x26, 'syz1\x00', "01b022b776924a7d9f233f423e0033e91c9774478cabe0f0514b59a9e1580c12", "9e2f42fbe6c1937e283d9f0581250ffe2b1e2c9e7055e984c83887ff46ba5fbf", [{0x4, 0x2143, {0x2, 0x7}}, {0x65a, 0x40, {0x3, 0x10000}}, {0x9711, 0x7, {0x0, 0xff}}, {0x9, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0x3}}, {0x800, 0x0, {0x2, 0x7}}, {0x3, 0x8000, {0x2, 0xffff0000}}, {0x6, 0xe9be, {0x2, 0xfffffffb}}, {0x4250, 0x5, {0x0, 0x1f}}, {0x5, 0x8001, {0x0, 0x7}}, {0x5, 0x2, {0x0, 0xffffffff}}, {0x7, 0xd, {0x3, 0xfffffff9}}, {0x150, 0x89a, {0x1, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x5, 0xc, {0x2, 0xfffffff7}}, {0x401, 0x81, {0x1, 0x101}}, {0x7ff, 0x3, {0x2, 0x7c}}, {0x6aae, 0x1, {0x2, 0x2}}, {0x5, 0x81, {0x4, 0x2}}, {0x2, 0x98f, {0x3, 0x2c1}}, {0x0, 0x9, {0x1, 0x1ff}}, {0x7f, 0x7, {0x0, 0x8}}, {0xff, 0x80, {0x3, 0x5}}, {0x8, 0x6, {0x1, 0x5}}, {0x40, 0x7, {0x1, 0x400}}, {0x1000, 0x7, {0x1, 0xb}}, {0x6, 0x101, {0x1, 0xf}}, {0x8, 0xfbb, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x8000}}, {0x9, 0x6, {0x3, 0x3ff}}, {0xf, 0xfffc, {0x2, 0x2c2}}, {0x9, 0x2, {0x2, 0x4}}, {0xff9d, 0x9, {0x3, 0x3}}, {0x5, 0xdcc, {0x2, 0xe}}, {0x9, 0x0, {0x2, 0xe}}, {0xb, 0x0, {0x1, 0x101}}, {0x40, 0x4, {0x1, 0x6}}, {0x9, 0x8, {0x2, 0xff}}, {0x9, 0x9, {0x2, 0x81}}, {0x3, 0x3, {0x2, 0x20002000}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) 4.91575197s ago: executing program 3 (id=1763): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e8", 0x85}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9c", 0x29}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.755792983s ago: executing program 3 (id=1764): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000051) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.178225269s ago: executing program 0 (id=1768): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.95380816s ago: executing program 0 (id=1769): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x4a0c00, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r1, r1, 0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.783030294s ago: executing program 3 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d69") ptrace$getregset(0x4205, r4, 0x2, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) 2.893290207s ago: executing program 33 (id=1705): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$inet6(0xa, 0x2, 0x0) 2.842316092s ago: executing program 3 (id=1773): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.404763681s ago: executing program 4 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="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", 0xff8}], 0x3, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0xf0, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfea"}], 0x1138}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.404468526s ago: executing program 0 (id=1775): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) 2.40429836s ago: executing program 4 (id=1776): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0xfb1, @loopback, 0x1}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 2.062711223s ago: executing program 4 (id=1777): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.902246058s ago: executing program 4 (id=1778): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e8", 0x85}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {&(0x7f0000000580)}, {0x0}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.678021086s ago: executing program 4 (id=1779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) shutdown(r0, 0x0) 1.677832171s ago: executing program 4 (id=1780): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.421638551s ago: executing program 0 (id=1781): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r1 = io_uring_setup(0x3ae5, &(0x7f0000000040)={0x0, 0x59b5, 0x6, 0x2, 0x21d}) io_uring_enter(r1, 0x3888, 0x51c1, 0x22, &(0x7f00000000c0)={[0x6]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) creat(0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 459.851732ms ago: executing program 0 (id=1782): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r6, 0x8b24, 0x0) 0s ago: executing program 0 (id=1783): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3005, &(0x7f0000000180)={0x0, 0x200089b7, 0x0, 0x1, 0x385}, &(0x7f0000000240), &(0x7f00000002c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T9259] RBP: 00007fb8c0a32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 111.440454][ T9259] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.440460][ T9259] R13: 00007fb8c0c16128 R14: 00007fb8c0c16090 R15: 00007ffc8804d5d8 [ 111.440473][ T9259] [ 111.440477][ T9259] Mem-Info: [ 111.538992][ T9259] active_anon:9728 inactive_anon:20771 isolated_anon:0 [ 111.538992][ T9259] active_file:1399 inactive_file:42894 isolated_file:0 [ 111.538992][ T9259] unevictable:1768 dirty:218 writeback:0 [ 111.538992][ T9259] slab_reclaimable:9208 slab_unreclaimable:68016 [ 111.538992][ T9259] mapped:25026 shmem:22907 pagetables:3601 [ 111.538992][ T9259] sec_pagetables:308 bounce:0 [ 111.538992][ T9259] kernel_misc_reclaimable:0 [ 111.538992][ T9259] free:409660 free_pcp:21590 free_cma:0 [ 111.557893][ T9259] Node 0 active_anon:38736kB inactive_anon:83084kB active_file:5596kB inactive_file:171376kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87816kB dirty:860kB writeback:0kB shmem:88092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:13480kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 111.568968][ T9259] Node 1 active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.581757][ T9259] Node 0 DMA free:12680kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:432kB local_pcp:120kB free_cma:0kB [ 111.595692][ T9259] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 111.598305][ T9259] Node 0 DMA32 free:158980kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38736kB inactive_anon:83084kB active_file:5596kB inactive_file:171332kB unevictable:3536kB writepending:860kB zspages:0kB present:2080628kB managed:1260940kB mlocked:0kB bounce:0kB free_pcp:60760kB local_pcp:5636kB free_cma:0kB [ 111.609495][ T9259] lowmem_reserve[]: 0 0 0 0 0 [ 111.611118][ T9259] Node 1 Normal free:1507280kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:31076kB local_pcp:13212kB free_cma:0kB [ 111.611450][ T9272] overlayfs: failed to clone lowerpath [ 111.622562][ T9259] lowmem_reserve[]: 0 0 0 0 0 [ 111.626196][ T9259] Node 0 DMA: 69*4kB (UM) 66*8kB (UM) 62*16kB (UM) 37*32kB (UM) 22*64kB (UM) 9*128kB (UM) 8*256kB (UM) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 12708kB [ 111.631478][ T9259] Node 0 DMA32: 2264*4kB (UME) 1681*8kB (UME) 1098*16kB (UME) 410*32kB (UME) 229*64kB (UME) 96*128kB (UME) 70*256kB (UME) 69*512kB (UME) 25*1024kB (UME) 0*2048kB 0*4096kB = 158984kB [ 111.637690][ T9259] Node 1 Normal: 241*4kB (UM) 216*8kB (UME) 223*16kB (UME) 236*32kB (UM) 219*64kB (UM) 203*128kB (UME) 187*256kB (UME) 183*512kB (UM) 165*1024kB (UM) 4*2048kB (UME) 281*4096kB (UM) = 1523508kB [ 111.649529][ T9259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.653842][ T9259] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 111.658369][ T9259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.663196][ T9259] Node 1 hugepages_total=3 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 111.667605][ T9259] 67196 total pagecache pages [ 111.669757][ T9259] 0 pages in swap cache [ 111.671195][ T9259] Free swap = 124996kB [ 111.672881][ T9259] Total swap = 124996kB [ 111.674876][ T9259] 1048443 pages RAM [ 111.676688][ T9259] 0 pages HighMem/MovableOnly [ 111.678834][ T9259] 283897 pages reserved [ 111.680779][ T9259] 0 pages cma reserved [ 111.719373][ T9275] __nla_validate_parse: 21 callbacks suppressed [ 111.719387][ T9275] netlink: 71 bytes leftover after parsing attributes in process `syz.3.960'. [ 112.125072][ C2] syz_tun: tun_net_xmit 42 [ 112.155003][ T6011] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.244527][ T9298] netlink: 'syz.1.966': attribute type 23 has an invalid length. [ 112.314823][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 112.381547][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 112.387302][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 112.391543][ T9303] bridge_slave_1: left allmulticast mode [ 112.394343][ T9303] bridge_slave_1: left promiscuous mode [ 112.401018][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.407832][ T9303] bridge_slave_0: left allmulticast mode [ 112.410564][ T9303] bridge_slave_0: left promiscuous mode [ 112.413507][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.471525][ T9302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.697189][ T9308] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 112.699857][ T9308] netlink: 'syz.3.969': attribute type 7 has an invalid length. [ 112.702484][ T9308] netlink: 'syz.3.969': attribute type 8 has an invalid length. [ 112.705172][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.969'. [ 112.867407][ T9314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=9314 comm=syz.3.971 [ 113.086769][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.976'. [ 113.089956][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.976'. [ 113.095929][ T9326] dlm: non-version read from control device 0 [ 113.100189][ T9326] netlink: 4376 bytes leftover after parsing attributes in process `syz.3.976'. [ 113.103339][ T9326] netlink: 4376 bytes leftover after parsing attributes in process `syz.3.976'. [ 113.113398][ T9328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9328 comm=syz.2.977 [ 113.164919][ C2] syz_tun: tun_net_xmit 42 [ 113.254076][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 113.254099][ T40] audit: type=1400 audit(1772677753.502:1223): avc: denied { mounton } for pid=9340 comm="syz.1.981" path="/proc/707/task" dev="proc" ino=27233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.276164][ T40] audit: type=1400 audit(1772677753.522:1224): avc: denied { associate } for pid=9342 comm="syz.1.981" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.280243][ T9344] netlink: 750 bytes leftover after parsing attributes in process `syz.2.982'. [ 113.316648][ T9346] : renamed from vlan0 (while UP) [ 113.322039][ T9346] overlayfs: failed to resolve './cgroup/cgroup.procs': -2 [ 113.328540][ T9346] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.984'. [ 113.364136][ T9351] overlayfs: failed to clone upperpath [ 113.457135][ T9359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.520815][ T9362] fuse: Unknown parameter 'fd#0x0000000000000007' [ 113.528448][ T9362] geneve3: entered promiscuous mode [ 113.531155][ T9362] geneve3: entered allmulticast mode [ 113.567886][ C3] syz_tun: tun_net_xmit 86 [ 113.651476][ T1457] IPVS: starting estimator thread 0... [ 113.656845][ T40] audit: type=1400 audit(1772677753.912:1225): avc: denied { map } for pid=9365 comm="syz.1.990" path="socket:[25415]" dev="sockfs" ino=25415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.672126][ T40] audit: type=1400 audit(1772677753.912:1226): avc: denied { read accept } for pid=9365 comm="syz.1.990" path="socket:[25415]" dev="sockfs" ino=25415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.694509][ T9369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9369 comm=syz.1.991 [ 113.744806][ T9367] IPVS: using max 44 ests per chain, 105600 per kthread [ 113.753674][ T40] audit: type=1400 audit(1772677754.002:1227): avc: denied { ioctl } for pid=9368 comm="syz.1.991" path="socket:[25425]" dev="sockfs" ino=25425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.754770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 114.206423][ C2] syz_tun: tun_net_xmit 42 [ 114.333714][ T9400] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 114.488398][ T9413] ucma_write: process 740 (syz.1.1005) changed security contexts after opening file descriptor, this is not allowed. [ 114.545898][ T40] audit: type=1326 audit(1772677754.802:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.1.1005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c099c799 code=0x7fc00000 [ 114.578247][ T40] audit: type=1400 audit(1772677754.832:1229): avc: denied { setopt } for pid=9418 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.586599][ T9419] tmpfs: Bad value for 'mpol' [ 114.677289][ T9429] input: syz0 as /devices/virtual/input/input13 [ 114.680099][ T9429] input: failed to attach handler leds to device input13, error: -6 [ 114.838255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.857234][ T6011] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.859773][ T6011] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 114.875690][ T6011] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 114.878191][ T6011] usb 5-1: can't read configurations, error -71 [ 114.971219][ T9453] loop2: detected capacity change from 0 to 7 [ 114.977895][ T9453] Dev loop2: unable to read RDB block 7 [ 114.979852][ T9453] loop2: unable to read partition table [ 114.981854][ T9453] loop2: partition table beyond EOD, truncated [ 114.984237][ T9453] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 115.069979][ T40] audit: type=1400 audit(1772677755.322:1230): avc: denied { setattr } for pid=9459 comm="syz.1.1011" name="NETLINK" dev="sockfs" ino=27329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.124607][ T40] audit: type=1400 audit(1772677755.372:1231): avc: denied { name_bind 0x1000000 } for pid=9467 comm="syz.1.1018" path="socket:[25561]" dev="sockfs" ino=25561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.244858][ C2] syz_tun: tun_net_xmit 42 [ 115.557558][ T40] audit: type=1400 audit(1772677755.812:1232): avc: denied { listen } for pid=9500 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.577301][ T9501] bond0: Removing last ns target with arp_interval on [ 115.707383][ T9518] trusted_key: syz.1.1025 sent an empty control message without MSG_MORE. [ 115.870643][ T9536] overlayfs: failed to get inode (-116) [ 115.872944][ T9536] overlayfs: failed to get inode (-116) [ 116.164971][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 116.174333][ T9560] orangefs_devreq_open: device cannot be opened in blocking mode [ 116.285008][ C2] syz_tun: tun_net_xmit 42 [ 116.315063][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 116.319497][ T9566] kAFS: unable to lookup cell 'syz1' [ 116.321001][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.329128][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.333542][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.337904][ T34] usb 8-1: Product: syz [ 116.344808][ T34] usb 8-1: Manufacturer: syz [ 116.346990][ T34] usb 8-1: SerialNumber: syz [ 116.361567][ T34] usb 8-1: config 0 descriptor?? [ 116.364965][ T9542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.372191][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 116.376177][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 116.510011][ T9575] tmpfs: Bad value for 'mpol' [ 116.510804][ T9574] tmpfs: Bad value for 'mpol' [ 116.512114][ T9575] trusted_key: encrypted_key: insufficient parameters specified [ 116.517327][ T9574] trusted_key: encrypted_key: insufficient parameters specified [ 117.309521][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 117.326489][ C2] syz_tun: tun_net_xmit 42 [ 117.385219][ T9542] raw-gadget.0 gadget.3: failed to queue resume event [ 117.426328][ T9579] raw-gadget.0 gadget.3: failed to queue suspend event [ 117.429748][ T9579] raw-gadget.0 gadget.3: failed to queue disconnect event [ 117.446127][ T34] usb 8-1: USB disconnect, device number 8 [ 117.628878][ T9607] xt_bpf: check failed: parse error [ 118.364843][ C2] syz_tun: tun_net_xmit 42 [ 118.455669][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 118.604805][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 118.608175][ T24] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 118.611787][ T24] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 118.622020][ T24] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.626357][ T24] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 118.637008][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 118.640842][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.644809][ T24] usb 8-1: Product: syz [ 118.646600][ T24] usb 8-1: Manufacturer: syz [ 118.648616][ T24] usb 8-1: SerialNumber: syz [ 118.668760][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 118.672767][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input14 [ 118.852870][ T9655] syzkaller1: entered promiscuous mode [ 118.855681][ T9655] syzkaller1: entered allmulticast mode [ 118.880959][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 118.880974][ T40] audit: type=1400 audit(1772677759.132:1235): avc: denied { setopt } for pid=9654 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.896640][ T9657] tmpfs: Bad value for 'mpol' [ 118.899640][ T9658] tmpfs: Bad value for 'mpol' [ 118.904895][ T24] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 118.912365][ T24] (id 0x00) [ 118.949317][ T9661] __nla_validate_parse: 75 callbacks suppressed [ 118.949330][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 118.964785][ T24] rc_core: IR keymap rc-imon-pad not found [ 118.967214][ T24] Registered IR keymap rc-empty [ 118.969436][ T24] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 118.973833][ T24] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.983966][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 119.046325][ T40] audit: type=1400 audit(1772677759.302:1236): avc: denied { create } for pid=9664 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.096338][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 119.105404][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input15 [ 119.115004][ T40] audit: type=1400 audit(1772677759.362:1237): avc: denied { append } for pid=9667 comm="syz.0.1070" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 119.123669][ T24] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:9> initialized [ 119.160064][ T9673] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 119.174776][ T9673] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 119.263366][ T9678] syzkaller0: entered promiscuous mode [ 119.266668][ T9678] syzkaller0: entered allmulticast mode [ 119.404853][ C2] syz_tun: tun_net_xmit 42 [ 119.690866][ T9679] imon:send_packet: packet tx failed (-71) [ 119.691221][ T9] usb 8-1: USB disconnect, device number 9 [ 119.704869][ T9679] imon:vfd_write: send packet #1 failed [ 119.896529][ T9634] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1058'. [ 120.442419][ T40] audit: type=1400 audit(1772677760.692:1238): avc: denied { read } for pid=9689 comm="syz.3.1076" dev="nsfs" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.450298][ T40] audit: type=1400 audit(1772677760.692:1239): avc: denied { open } for pid=9689 comm="syz.3.1076" path="net:[4026533208]" dev="nsfs" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.455792][ C2] syz_tun: tun_net_xmit 42 [ 120.491756][ T9692] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.551647][ T9699] overlayfs: missing 'lowerdir' [ 120.612150][ T40] audit: type=1400 audit(1772677760.862:1240): avc: denied { create } for pid=9707 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.620391][ T40] audit: type=1400 audit(1772677760.872:1241): avc: denied { read } for pid=9707 comm="syz.3.1084" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.628883][ T40] audit: type=1400 audit(1772677760.872:1242): avc: denied { open } for pid=9707 comm="syz.3.1084" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.638219][ T40] audit: type=1400 audit(1772677760.872:1243): avc: denied { ioctl } for pid=9707 comm="syz.3.1084" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.653607][ T40] audit: type=1400 audit(1772677760.882:1244): avc: denied { write } for pid=9707 comm="syz.3.1084" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.768214][ T9712] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 120.822419][ T9714] xfrm1: entered allmulticast mode [ 120.926460][ T53] syz_tun: tun_net_xmit 106 [ 120.955070][ T34] syz_tun: tun_net_xmit 122 [ 120.997421][ T9723] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1089'. [ 121.219785][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 121.398919][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.415106][ T34] syz_tun: tun_net_xmit 122 [ 121.457397][ T9746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1095'. [ 121.484850][ C2] syz_tun: tun_net_xmit 42 [ 121.604886][ T1457] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.754918][ T1457] usb 6-1: Using ep0 maxpacket: 8 [ 121.758137][ T1457] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.762106][ T1457] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.765735][ T1457] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 33056, setting to 1024 [ 121.769687][ T1457] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.773212][ T1457] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.777788][ T1457] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.781418][ T1457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.994978][ T1457] usb 6-1: GET_CAPABILITIES returned 0 [ 121.997946][ T1457] usbtmc 6-1:16.0: can't read capabilities [ 122.199167][ T9743] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 122.202797][ T9750] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 122.380368][ T9758] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 122.481751][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 122.504171][ T9766] block device autoloading is deprecated and will be removed. [ 122.525203][ C2] syz_tun: tun_net_xmit 42 [ 122.582656][ T9775] overlayfs: invalid origin (0000) [ 122.671537][ T9779] netlink: 'syz.3.1101': attribute type 13 has an invalid length. [ 122.677296][ T9779] syz_tun: refused to change device tx_queue_len [ 123.108316][ T9785] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 123.575845][ C2] syz_tun: tun_net_xmit 42 [ 123.625989][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.979139][ T9816] netlink: 'syz.3.1112': attribute type 21 has an invalid length. [ 123.981927][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1112'. [ 123.985819][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 124.198875][ T9824] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.353088][ T9] usb 6-1: USB disconnect, device number 5 [ 124.431110][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'. [ 124.605017][ C2] syz_tun: tun_net_xmit 42 [ 125.129099][ T9849] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.135769][ T9849] sp0: Synchronizing with TNC [ 125.143259][ T9848] [U] [ 125.377243][ T9861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50395 sclass=netlink_route_socket pid=9861 comm=syz.3.1124 [ 125.401389][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 125.401401][ T40] audit: type=1400 audit(1772677765.652:1253): avc: denied { mounton } for pid=9860 comm="syz.3.1124" path="/file0" dev="bpf" ino=29235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 125.465147][ T9867] tipc: Started in network mode [ 125.468060][ T9867] tipc: Node identity 080211000001, cluster identity 4711 [ 125.472326][ T9867] tipc: Enabled bearer , priority 0 [ 125.481840][ T40] audit: type=1400 audit(1772677765.732:1254): avc: denied { create } for pid=9866 comm="syz.3.1125" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.489216][ T40] audit: type=1400 audit(1772677765.732:1255): avc: denied { write } for pid=9866 comm="syz.3.1125" name="file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.496867][ T40] audit: type=1400 audit(1772677765.732:1256): avc: denied { open } for pid=9866 comm="syz.3.1125" path="/265/file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.505293][ T40] audit: type=1400 audit(1772677765.732:1257): avc: denied { ioctl } for pid=9866 comm="syz.3.1125" path="/265/file0" dev="tmpfs" ino=1464 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.513155][ T40] audit: type=1400 audit(1772677765.762:1258): avc: denied { unlink } for pid=5922 comm="syz-executor" name="file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.644966][ C2] syz_tun: tun_net_xmit 42 [ 125.674816][ T40] audit: type=1400 audit(1772677765.912:1259): avc: denied { ioctl } for pid=9876 comm="syz.3.1129" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.716131][ T9880] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1129'. [ 125.720543][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 125.730995][ T40] audit: type=1400 audit(1772677765.982:1260): avc: denied { shutdown } for pid=9881 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.763731][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 125.767965][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 125.774572][ T9884] erspan0: entered promiscuous mode [ 125.777112][ T9884] gretap0: entered promiscuous mode [ 125.879122][ T9892] vivid-000: kernel_thread() failed [ 125.965621][ T1457] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 126.114829][ T1457] usb 8-1: Using ep0 maxpacket: 8 [ 126.118854][ T1457] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.122710][ T1457] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.126778][ T1457] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.130018][ T1457] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.134436][ T1457] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.138987][ T1457] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.351236][ T1457] usb 8-1: GET_CAPABILITIES returned 0 [ 126.353256][ T1457] usbtmc 8-1:16.0: can't read capabilities [ 126.596546][ T1457] tipc: Node number set to 134418688 [ 126.685369][ C2] syz_tun: tun_net_xmit 42 [ 126.907175][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.913939][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.944852][ T1325] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 127.096443][ T1325] usb 6-1: not running at top speed; connect to a high speed hub [ 127.101148][ T1325] usb 6-1: config 10 has an invalid interface number: 244 but max is 1 [ 127.105496][ T1325] usb 6-1: config 10 has an invalid interface number: 157 but max is 1 [ 127.109758][ T1325] usb 6-1: config 10 has no interface number 0 [ 127.112656][ T1325] usb 6-1: config 10 has no interface number 1 [ 127.116587][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0xD has invalid wMaxPacketSize 0 [ 127.121027][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 127.126394][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 127.131370][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 127.136598][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 127.141496][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 127.146559][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 127.151618][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 127.156454][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 127.160096][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 127.163758][ T1325] usb 6-1: config 10 interface 157 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 127.167649][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 127.171226][ T1325] usb 6-1: config 10 interface 157 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 127.175121][ T1325] usb 6-1: config 10 interface 244 has no altsetting 0 [ 127.177453][ T1325] usb 6-1: config 10 interface 157 has no altsetting 0 [ 127.181330][ T1325] usb 6-1: New USB device found, idVendor=0403, idProduct=8348, bcdDevice=35.72 [ 127.184452][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.187455][ T1325] usb 6-1: Product: ꤈ጯ躟⾦覧⤩ᯟ핕㳭뺱⦡妊偒ꁒᙲﱓ鲒ꓩ돒ꮏ댛㥣츨猁늓樈㘪㹌慗흘输㷙鱶䈛㬼湔雮쪋ᇜ鐛ʒ䦓단拣㵩灕ƃ᫳옠ق楉쀲넶⌬㋞Ꟁﵩ헝棲Ƣ᎛㵈㈳﮹჌鈺靝뭺얋㫋㦄㗖蕶룂煏뷑셃ⷻ饙㏠慆츀ﯜ⌧䇂츴ⵦ [ 127.197687][ T1325] usb 6-1: Manufacturer: ㇔喷鱿句辱벓㻝띧鿯泹ㆻ궽炌蠏꬗ᙷꈢࠇⳏ嚜ᑍ彑쬝퇯뒵଍御१᱿婯ᯑ桗᭿⨑ᴞ⍶퉂⽹䚑決࿭或챬ᱎ頕馋ᛣℿ駆娤놊醐傍셑쏉襘峺-◺늂笪혜ﳜЖ䱜糹ꢙ룊舩▲짓㧮郥 [ 127.208954][ T1325] usb 6-1: SerialNumber: 茗初ᢓ䲟뫲郡뢣㻳ཕ助濡澎尦摙Ό肖䯧⨹✠夔퉛थӼᄶ猲䦎玧雒⟷샡릯浓첅̅쨎헼璝ᡗ㗺瞽㝘禊ᆡẹ펶ш팯奄懰⮳亨⻦⌚섢裗埓窽挸淀镣⢛ໃ펅ࡔ黆ꙪꙖ [ 127.431572][ T1325] ftdi_sio 6-1:10.244: FTDI USB Serial Device converter detected [ 127.435927][ T1325] ftdi_sio ttyUSB0: unknown device type: 0x3572 [ 127.440994][ T1325] ftdi_sio 6-1:10.157: FTDI USB Serial Device converter detected [ 127.445249][ T1325] ftdi_sio ttyUSB1: unknown device type: 0x3572 [ 127.452368][ T1325] usb 6-1: USB disconnect, device number 6 [ 127.455763][ T1325] ftdi_sio 6-1:10.244: device disconnected [ 127.466040][ T1325] ftdi_sio 6-1:10.157: device disconnected [ 127.724928][ C2] syz_tun: tun_net_xmit 42 [ 128.685969][ T6011] usb 8-1: USB disconnect, device number 10 [ 128.764830][ C2] syz_tun: tun_net_xmit 42 [ 128.836340][ T9947] kvm: kvm [9946]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 128.892973][ T9950] blktrace: Concurrent blktraces are not allowed on sg0 [ 128.961262][ T40] audit: type=1400 audit(1772677769.212:1261): avc: denied { unmount } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 129.008374][ T9953] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 129.021346][ T9953] bond1: entered promiscuous mode [ 129.023408][ T9953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.039746][ T9953] bond1: (slave bridge1): making interface the new active one [ 129.042463][ T9953] bridge1: entered promiscuous mode [ 129.044970][ T9953] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 129.805555][ C2] syz_tun: tun_net_xmit 42 [ 130.844889][ C2] syz_tun: tun_net_xmit 42 [ 131.150295][ T9928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.217233][ T9966] 9pnet_virtio: no channels available for device syz [ 131.243268][ T9966] team0: Device vlan2 is already an upper device of the team interface [ 131.312342][ T40] audit: type=1400 audit(1772677771.562:1262): avc: denied { setattr } for pid=9973 comm="syz.1.1157" name="" dev="pipefs" ino=31115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 131.366148][ T40] audit: type=1400 audit(1772677771.622:1263): avc: denied { ioctl } for pid=9980 comm="syz.1.1158" path="socket:[29355]" dev="sockfs" ino=29355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.438604][ T40] audit: type=1400 audit(1772677771.692:1264): avc: denied { read } for pid=9980 comm="syz.1.1158" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 131.447859][ T40] audit: type=1400 audit(1772677771.692:1265): avc: denied { open } for pid=9980 comm="syz.1.1158" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 131.587007][T10002] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.638932][T10005] erofs (device loop0): cannot find valid erofs superblock [ 131.652542][T10005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10005 comm=syz.0.1163 [ 131.699487][ T40] audit: type=1400 audit(1772677771.952:1266): avc: denied { accept } for pid=10012 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.701251][T10013] overlayfs: failed to resolve './file1/file0': -2 [ 131.719702][T10013] ipt_REJECT: ECHOREPLY no longer supported. [ 131.751451][T10016] Bluetooth: MGMT ver 1.23 [ 131.884883][ C2] syz_tun: tun_net_xmit 42 [ 132.605935][T10018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.610887][T10018] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.628539][T10018] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.636443][T10018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.639203][T10018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.643828][T10018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.655768][T10018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.658550][T10018] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.665048][T10018] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.670363][T10040] bond1: option mode: invalid value (224) [ 132.679949][T10040] bond1 (unregistering): Released all slaves [ 132.700435][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.703630][T10043] netlink: 'syz.3.1175': attribute type 21 has an invalid length. [ 132.707274][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.710839][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.713841][T10043] netlink: 'syz.3.1175': attribute type 21 has an invalid length. [ 132.717225][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.914901][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 132.926424][ C2] syz_tun: tun_net_xmit 42 [ 133.074973][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 133.078479][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.083053][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.087998][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.091174][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.095680][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.103016][ T40] audit: type=1400 audit(1772677773.352:1267): avc: denied { ioctl } for pid=10054 comm="syz.0.1179" path="socket:[30457]" dev="sockfs" ino=30457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.105539][ T34] usb 6-1: config 0 descriptor?? [ 133.208514][T10067] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 133.235165][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 133.522176][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 133.524626][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 133.527677][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 133.530068][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 133.532434][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 133.533239][T10072] netlink: 'syz.0.1184': attribute type 23 has an invalid length. [ 133.535339][ T34] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 133.541548][T10072] netem: change failed [ 133.556676][T10072] vcan1: entered allmulticast mode [ 133.622713][T10078] Invalid source name [ 133.624924][T10079] program syz.0.1186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.627123][T10078] UBIFS error (pid: 10078): cannot open "/dev/sg0", error -22 [ 133.725933][ T9] usb 6-1: USB disconnect, device number 7 [ 133.856729][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 133.859823][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 133.884838][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.964859][ C2] syz_tun: tun_net_xmit 42 [ 134.098523][T10100] syz.3.1193 (10100): drop_caches: 2 [ 134.685154][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.688066][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.014936][ C2] syz_tun: tun_net_xmit 42 [ 135.031645][ T5937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.039123][ T5937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.043502][ T5937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.051600][ T5937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.056520][ T5937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.204816][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 135.267464][T10121] chnl_net:caif_netlink_parms(): no params data found [ 135.353560][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.357080][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.360206][T10121] bridge_slave_0: entered allmulticast mode [ 135.364151][T10121] bridge_slave_0: entered promiscuous mode [ 135.369370][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.372498][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.375681][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 135.379115][T10121] bridge_slave_1: entered allmulticast mode [ 135.382135][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.384932][T10121] bridge_slave_1: entered promiscuous mode [ 135.387405][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.396113][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.400740][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.408987][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.415206][ T39] usb 6-1: config 0 descriptor?? [ 135.415369][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.425546][ T39] hub 6-1:0.0: USB hub found [ 135.441747][T10121] team0: Port device team_slave_0 added [ 135.445658][T10121] team0: Port device team_slave_1 added [ 135.465238][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.468269][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.479176][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.513573][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.516120][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.524976][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.553818][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.594793][T10121] hsr_slave_0: entered promiscuous mode [ 135.597378][T10121] hsr_slave_1: entered promiscuous mode [ 135.599696][T10121] debugfs: 'hsr0' already exists in 'hsr' [ 135.601657][T10121] Cannot create hsr debugfs directory [ 135.620580][ T39] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 135.658375][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.735033][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.781431][T10121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.786448][T10121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.791018][T10121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.796214][T10121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.837020][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.853208][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.856029][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.858629][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.861041][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.928071][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.965831][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.977803][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.990934][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.993872][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.038756][ T39] hid-generic 0003:046D:C31C.0008: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 136.049242][ C2] syz_tun: tun_net_xmit 42 [ 136.060263][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.062692][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.066595][ T12] bridge0: port 3(batadv0) entered disabled state [ 136.073459][ T12] bridge_slave_1: left allmulticast mode [ 136.076109][ T12] bridge_slave_1: left promiscuous mode [ 136.078140][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.088312][ T12] bridge_slave_0: left allmulticast mode [ 136.090197][ T12] bridge_slave_0: left promiscuous mode [ 136.092180][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.395302][ T8687] usb 6-1: USB disconnect, device number 8 [ 136.564107][ T12] bond0 (unregistering): Released all slaves [ 136.585228][ T12] team0: Port device bond1 removed [ 136.588417][ T12] bond1 (unregistering): Released all slaves [ 136.596026][ T12] bond2 (unregistering): Released all slaves [ 136.603094][ T12] bond3 (unregistering): Released all slaves [ 136.616805][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.619658][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.734996][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 136.770360][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.829059][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.885767][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 136.898747][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.903800][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.915778][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.920237][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.934412][ T39] usb 6-1: config 0 descriptor?? [ 136.950107][ T39] hub 6-1:0.0: USB hub found [ 137.030494][ T40] audit: type=1400 audit(1772677777.282:1268): avc: denied { create } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.041185][ T40] audit: type=1400 audit(1772677777.282:1269): avc: denied { bind } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.049108][ T40] audit: type=1400 audit(1772677777.282:1270): avc: denied { setopt } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.058481][ T40] audit: type=1400 audit(1772677777.282:1271): avc: denied { accept } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.066202][ T40] audit: type=1400 audit(1772677777.282:1272): avc: denied { write } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.074492][ T40] audit: type=1400 audit(1772677777.302:1273): avc: denied { read } for pid=10162 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.084836][ C2] syz_tun: tun_net_xmit 42 [ 137.084885][ T5937] Bluetooth: hci4: command tx timeout [ 137.086460][ T12] hsr_slave_0: left promiscuous mode [ 137.094391][ T12] hsr_slave_1: left promiscuous mode [ 137.096923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.099392][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.102290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.105301][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.109007][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 137.117360][ T12] veth1_macvtap: left promiscuous mode [ 137.119286][ T12] veth0_macvtap: left allmulticast mode [ 137.121178][ T12] veth0_macvtap: left promiscuous mode [ 137.123095][ T12] veth1_vlan: left allmulticast mode [ 137.125548][ T12] veth1_vlan: left promiscuous mode [ 137.127533][ T12] veth0_vlan: left promiscuous mode [ 137.143140][ T39] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 137.148171][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 137.150276][ T39] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 137.165019][ T39] usb 6-1: USB disconnect, device number 9 [ 137.227814][ T12] pim6reg (unregistering): left allmulticast mode [ 137.231969][ T12] pimreg (unregistering): left allmulticast mode [ 137.273273][ T12] macvlan0 (unregistering): left allmulticast mode [ 137.275355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.281800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.285659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.385131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.389134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.691024][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.712141][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.896971][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.900665][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.969320][T10121] veth0_vlan: entered promiscuous mode [ 138.036772][T10121] veth1_vlan: entered promiscuous mode [ 138.055313][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.125017][ C2] syz_tun: tun_net_xmit 42 [ 138.137014][T10121] veth0_macvtap: entered promiscuous mode [ 138.149702][T10121] veth1_macvtap: entered promiscuous mode [ 138.177279][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.186297][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.196663][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.200369][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.210874][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.218986][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.227271][ T40] audit: type=1400 audit(1772677778.482:1274): avc: denied { getopt } for pid=10182 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.765392][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.845073][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.894915][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.056718][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.060111][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.165450][ C2] syz_tun: tun_net_xmit 42 [ 139.204825][ T40] audit: type=1400 audit(1772677779.332:1275): avc: denied { mounton } for pid=10121 comm="syz-executor" path="/syzkaller.NInK9E/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 139.210074][ T5937] Bluetooth: hci4: command tx timeout [ 139.535593][T10218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.256787][ C2] syz_tun: tun_net_xmit 42 [ 141.368116][ C2] syz_tun: tun_net_xmit 42 [ 141.390327][ T5937] Bluetooth: hci4: command tx timeout syz1>0   ZX+4iLK   ,    4WyJ[ ? yQ @  @`    \  ; <  {  |@    V͹Cfp  N ./file0/file0./file0fuseh-s.file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF[ 142.479997][ C2] syz_tun: tun_net_xmit 42 [ 142.971465][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.152624][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 143.156753][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.161540][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.166301][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.170297][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.185048][ T39] usb 5-1: config 0 descriptor?? [ 143.201213][ T39] hub 5-1:0.0: USB hub found [ 143.407067][ T39] hub 5-1:0.0: 1 port detected [ 143.590779][ C2] syz_tun: tun_net_xmit 42 [ 143.592548][ T5937] Bluetooth: hci4: command tx timeout [ 143.622412][ T39] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 143.625458][ T39] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 143.630074][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 143.632205][ T39] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.805484][ T40] audit: type=1400 audit(1772677783.783:1276): avc: denied { append } for pid=10289 comm="syz.1.1231" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.815780][ T40] audit: type=1400 audit(1772677783.792:1277): avc: denied { map } for pid=10289 comm="syz.1.1231" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.822721][ T39] usb 5-1: USB disconnect, device number 12 [ 144.702193][ C2] syz_tun: tun_net_xmit 42 [ 145.206436][T10314] blktrace: Concurrent blktraces are not allowed on nullb0 [ 145.814167][ C2] syz_tun: tun_net_xmit 42 [ 146.924937][ C2] syz_tun: tun_net_xmit 42 [ 148.036363][ C2] syz_tun: tun_net_xmit 42 [ 149.152507][ C2] syz_tun: tun_net_xmit 42 [ 149.768709][T10394] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1264'. [ 149.842746][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'. [ 150.038105][T10407] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1268'. [ 150.042147][T10407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.208879][ T39] IPVS: starting estimator thread 0... [ 150.209417][ T40] audit: type=1400 audit(1772677789.781:1278): avc: denied { write } for pid=10415 comm="syz.4.1271" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 150.222087][ T40] audit: type=1400 audit(1772677789.781:1279): avc: denied { open } for pid=10415 comm="syz.4.1271" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 150.269523][ C2] syz_tun: tun_net_xmit 42 [ 150.334863][T10417] IPVS: using max 27 ests per chain, 64800 per kthread [ 150.568834][ T6011] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 150.731992][ T6011] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.735330][ T6011] usb 5-1: not running at top speed; connect to a high speed hub [ 150.739395][ T6011] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 150.743206][ T6011] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.749451][ T6011] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 150.752659][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.755473][ T6011] usb 5-1: Product: syz [ 150.757043][ T6011] usb 5-1: Manufacturer: syz [ 150.758743][ T6011] usb 5-1: SerialNumber: syz [ 150.774549][T10419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.003797][ T6011] usbhid 5-1:1.0: can't add hid device: -71 [ 151.006517][ T6011] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 151.013052][ T6011] usb 5-1: USB disconnect, device number 13 [ 151.370229][ C2] syz_tun: tun_net_xmit 42 [ 151.919292][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 152.023899][T10463] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 152.300051][ T6011] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 152.492660][ C2] syz_tun: tun_net_xmit 42 [ 152.937622][ T6011] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 152.944166][ T6011] usb 6-1: config 253 has no interface number 0 [ 152.946754][ T6011] usb 6-1: config 253 interface 130 has no altsetting 0 [ 152.955144][ T6011] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 152.958395][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.961285][ T6011] usb 6-1: Product: syz [ 152.963113][ T6011] usb 6-1: Manufacturer: syz [ 152.965226][ T6011] usb 6-1: SerialNumber: syz [ 153.592909][ C2] syz_tun: tun_net_xmit 42 [ 153.861878][ T6011] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 153.887783][ T6011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.894641][ T6011] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 153.897431][ T6011] usb 6-1: media controller created [ 153.952266][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.321172][ T6011] DVB: Unable to find symbol dib8000_attach() [ 154.323267][ T6011] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 154.565316][ T6011] rc_core: IR keymap rc-dib0700-nec not found [ 154.567459][ T6011] Registered IR keymap rc-empty [ 154.569423][ T6011] dvb-usb: could not initialize remote control. [ 154.571403][ T6011] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 154.576080][ T6011] dib0700: There's no endpoint for remote controller [ 154.704230][ C2] syz_tun: tun_net_xmit 42 [ 154.791573][ T39] usb 6-1: USB disconnect, device number 10 [ 154.814364][ T39] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 154.820156][T10523] sch_fq: defrate 0 ignored. [ 155.029137][T10529] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 155.033994][T10529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 155.078607][ T39] syz_tun: tun_net_xmit 90 [ 155.380573][T10545] x_tables: duplicate underflow at hook 1 [ 155.816699][ C2] syz_tun: tun_net_xmit 42 [ 155.911878][ T39] syz_tun: tun_net_xmit 90 [ 156.245143][T10557] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 156.938073][ C2] syz_tun: tun_net_xmit 42 [ 157.026242][ T40] audit: type=1400 audit(1772677796.154:1280): avc: denied { name_bind } for pid=10571 comm="syz.1.1314" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 158.049098][ C2] syz_tun: tun_net_xmit 42 [ 158.435407][ T39] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 159.089736][ T39] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 159.092796][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.095512][ T39] usb 6-1: Product: syz [ 159.106843][ T39] usb 6-1: Manufacturer: syz [ 159.108454][ T39] usb 6-1: SerialNumber: syz [ 159.111659][ T39] usb 6-1: config 0 descriptor?? [ 159.115654][ T39] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 159.131121][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.139092][ T39] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 159.142190][ T39] usb 6-1: media controller created [ 159.148899][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.152598][ C2] syz_tun: tun_net_xmit 42 [ 159.192521][ T39] DVB: Unable to find symbol mt352_attach() [ 159.211743][ T39] DVB: Unable to find symbol nxt6000_attach() [ 159.224394][ T39] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 159.229458][ T39] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input17 [ 159.246499][ T39] dvb-usb: schedule remote query interval to 1000 msecs. [ 159.248912][ T39] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 159.252299][ T39] dvb-usb: bulk message failed: -22 (7/0) [ 159.254390][ T39] dvb-usb: bulk message failed: -22 (7/0) [ 159.351543][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.357394][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.381067][ T39] usb 6-1: USB disconnect, device number 11 [ 159.418080][ T39] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 160.260993][ C2] syz_tun: tun_net_xmit 42 [ 160.496294][ T39] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.657963][ T39] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 160.664644][ T39] usb 5-1: config 253 has no interface number 0 [ 160.669073][ T39] usb 5-1: config 253 interface 130 has no altsetting 0 [ 160.673520][ T39] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 160.676700][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.679501][ T39] usb 5-1: Product: syz [ 160.681031][ T39] usb 5-1: Manufacturer: syz [ 160.682806][ T39] usb 5-1: SerialNumber: syz [ 160.961916][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 161.020995][ T40] audit: type=1400 audit(1772677799.897:1281): avc: denied { bind } for pid=10632 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.043059][T10644] macvlan2: entered promiscuous mode [ 161.045114][T10644] macvlan2: entered allmulticast mode [ 161.047600][T10644] bond2: entered promiscuous mode [ 161.050374][T10644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.055567][T10644] bond2: left promiscuous mode [ 161.134780][ T39] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 161.149819][ T39] EXT4-fs error (device sda1): ext4_lookup:1785: inode #414: comm kworker/2:1: iget: checksum invalid [ 161.156369][ T39] usb 5-1: loading /lib/firmware/dvb-usb-dib0700-1.20.fw failed with error -74 [ 161.161165][ T39] usb 5-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -74 [ 161.164375][ T39] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dib0700-1.20.fw [ 161.372375][ C2] syz_tun: tun_net_xmit 42 [ 161.560522][ T40] audit: type=1326 audit(1772677800.393:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe59f9c799 code=0x7ffc0000 [ 161.573694][ T40] audit: type=1326 audit(1772677800.393:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe59f9c799 code=0x7ffc0000 [ 161.583635][ T40] audit: type=1326 audit(1772677800.393:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.592262][ T40] audit: type=1326 audit(1772677800.393:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.600198][ T40] audit: type=1326 audit(1772677800.393:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.608571][ T40] audit: type=1326 audit(1772677800.393:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.617554][ T40] audit: type=1326 audit(1772677800.393:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.626736][ T40] audit: type=1326 audit(1772677800.393:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe59f9c42b code=0x7ffc0000 [ 161.996021][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 161.999085][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 162.008619][T10673] team0: entered promiscuous mode [ 162.011357][T10673] team_slave_0: entered promiscuous mode [ 162.014864][T10673] team_slave_1: entered promiscuous mode [ 162.018149][T10673] bond0: entered promiscuous mode [ 162.020058][T10673] bond_slave_0: entered promiscuous mode [ 162.022168][T10673] bond_slave_1: entered promiscuous mode [ 162.025251][T10673] debugfs: 'hsr1' already exists in 'hsr' [ 162.027948][T10673] Cannot create hsr debugfs directory [ 162.269954][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 162.485855][ C2] syz_tun: tun_net_xmit 42 [ 162.838070][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 162.842295][ T34] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.845110][ T34] usb 9-1: config 0 has no interface number 0 [ 162.849163][ T34] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 162.852209][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.854866][ T34] usb 9-1: Product: syz [ 162.856288][ T34] usb 9-1: Manufacturer: syz [ 162.858032][ T34] usb 9-1: SerialNumber: syz [ 162.861436][ T34] usb 9-1: config 0 descriptor?? [ 162.865155][ T34] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 163.317841][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 163.317863][ T40] audit: type=1400 audit(1772677801.956:1319): avc: denied { map } for pid=10697 comm="syz.0.1344" path="socket:[35934]" dev="sockfs" ino=35934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.558022][T10710] kAFS: unable to lookup cell '' [ 163.595008][ C2] syz_tun: tun_net_xmit 42 [ 163.605328][ T40] audit: type=1400 audit(1772677802.302:1320): avc: denied { read } for pid=10703 comm="syz.3.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.770837][ T34] gspca_spca1528: reg_w err -71 [ 164.396554][ T34] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 164.402160][ T34] usb 9-1: USB disconnect, device number 2 [ 164.706466][ C2] syz_tun: tun_net_xmit 42 [ 165.252470][ T40] audit: type=1400 audit(1772677803.856:1321): avc: denied { read append } for pid=10734 comm="syz.3.1354" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 165.616589][T10743] syzkaller1: entered promiscuous mode [ 165.618638][T10743] syzkaller1: entered allmulticast mode [ 165.818657][ C2] syz_tun: tun_net_xmit 42 [ 165.892520][T10198] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 165.931401][T10747] kvm: pic: non byte write [ 166.052885][T10198] usb 6-1: Using ep0 maxpacket: 16 [ 166.091349][T10198] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 166.095867][T10198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.099856][T10198] usb 6-1: Product: syz [ 166.101946][T10198] usb 6-1: Manufacturer: syz [ 166.104277][T10198] usb 6-1: SerialNumber: syz [ 166.114807][T10198] usb 6-1: config 0 descriptor?? [ 166.555398][T10198] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.565883][T10198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.571046][T10198] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 166.574726][T10198] usb 6-1: media controller created [ 166.586860][T10198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.772622][T10198] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.782781][T10198] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 166.794762][T10198] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 166.841223][T10198] usb 6-1: USB disconnect, device number 12 [ 166.929237][ C2] syz_tun: tun_net_xmit 42 [ 167.057124][T10759] vlan2: entered allmulticast mode [ 167.058994][T10759] veth0_to_bond: entered allmulticast mode [ 167.150506][T10198] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 168.040639][ C2] syz_tun: tun_net_xmit 42 [ 169.152822][ C2] syz_tun: tun_net_xmit 42 [ 170.263154][ C2] syz_tun: tun_net_xmit 42 [ 171.374564][ C2] syz_tun: tun_net_xmit 42 [ 171.855351][T10832] comedi comedi3: reset error (fatal) [ 171.883588][ T5937] Bluetooth: hci2: unexpected event for opcode 0x200a [ 172.031455][T10868] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.133889][T10874] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 172.425677][ T213] Bluetooth: hci3: Frame reassembly failed (-84) [ 172.428063][ T213] Bluetooth: hci3: Frame reassembly failed (-84) [ 172.430585][ T79] Bluetooth: hci3: Frame reassembly failed (-84) [ 172.434773][ T79] Bluetooth: hci3: Frame reassembly failed (-84) [ 172.497884][ C2] syz_tun: tun_net_xmit 42 [ 172.776753][T10860] [U]  [ 173.181748][ T1457] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 173.452700][ T1457] usb 6-1: Using ep0 maxpacket: 32 [ 173.456459][ T1457] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.459595][ T1457] usb 6-1: config 0 has no interface number 0 [ 173.461875][ T1457] usb 6-1: config 0 interface 184 has no altsetting 0 [ 173.466286][ T1457] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.469826][ T1457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.472582][ T1457] usb 6-1: Product: syz [ 173.474047][ T1457] usb 6-1: Manufacturer: syz [ 173.475675][ T1457] usb 6-1: SerialNumber: syz [ 173.597236][ C2] syz_tun: tun_net_xmit 42 [ 173.828510][ T1457] usb 6-1: config 0 descriptor?? [ 174.197581][T10896] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.206618][ T5934] Bluetooth: hci4: command 0x0405 tx timeout [ 174.216384][T10896] syzkaller0: entered promiscuous mode [ 174.227740][T10896] syzkaller0: entered allmulticast mode [ 174.400498][ T40] audit: type=1326 audit(1772677812.418:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.421827][ T40] audit: type=1326 audit(1772677812.418:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.442617][ T40] audit: type=1326 audit(1772677812.428:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.456619][ T40] audit: type=1326 audit(1772677812.428:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.464610][ T40] audit: type=1326 audit(1772677812.428:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.474648][ T40] audit: type=1326 audit(1772677812.428:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.482402][ T40] audit: type=1326 audit(1772677812.428:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.491481][ T40] audit: type=1326 audit(1772677812.428:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.0.1410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8f19c799 code=0x7ffc0000 [ 174.578389][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 174.582164][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 174.623074][ T5926] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 174.623081][ T5937] Bluetooth: hci3: command 0x1003 tx timeout [ 174.708502][ C2] syz_tun: tun_net_xmit 42 [ 175.089875][ T40] audit: type=1400 audit(1772677813.055:1330): avc: denied { map } for pid=10923 comm="syz.4.1417" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 175.820363][ C2] syz_tun: tun_net_xmit 42 [ 176.196177][ T34] syz_tun: tun_net_xmit 86 [ 176.253380][T10946] syz.0.1425 (10946): /proc/10943/oom_adj is deprecated, please use /proc/10943/oom_score_adj instead. [ 176.729655][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 176.733735][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 176.737314][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 176.741151][ T1457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 176.747597][ T1457] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 176.767906][ T1457] usb 6-1: USB disconnect, device number 13 [ 176.931228][ C2] syz_tun: tun_net_xmit 42 [ 178.042596][ C2] syz_tun: tun_net_xmit 42 [ 179.165746][ C2] syz_tun: tun_net_xmit 42 [ 179.829676][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 180.265288][ C2] syz_tun: tun_net_xmit 42 [ 181.376599][ C2] syz_tun: tun_net_xmit 42 [ 181.650486][ T829] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 181.821460][ T829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.825022][ T829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.837274][ T829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.840528][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.843368][ T829] usb 6-1: Product: syz [ 181.844894][ T829] usb 6-1: Manufacturer: syz [ 181.846642][ T829] usb 6-1: SerialNumber: syz [ 182.116838][ T829] usb 6-1: 0:2 : does not exist [ 182.124263][ T829] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 182.151969][ T829] usb 6-1: USB disconnect, device number 14 [ 182.169152][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.487736][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 182.488952][ C2] syz_tun: tun_net_xmit 42 [ 182.496619][T11031] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 182.714346][T11044] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 183.033390][ T40] audit: type=1400 audit(1772677820.494:1331): avc: denied { wake_alarm } for pid=11051 comm="syz.1.1463" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.364185][ T829] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 183.538029][ T829] usb 6-1: config 0 has no interfaces? [ 183.540876][ T829] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 183.545248][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.552709][ T829] usb 6-1: config 0 descriptor?? [ 183.599425][ C2] syz_tun: tun_net_xmit 42 [ 183.799599][ T829] usb 6-1: USB disconnect, device number 15 [ 184.528956][T11057] comedi comedi3: reset error (fatal) [ 184.721387][ C2] syz_tun: tun_net_xmit 42 [ 185.041095][ T40] audit: type=1400 audit(1772677822.366:1332): avc: denied { block_suspend } for pid=11076 comm="syz.4.1471" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.009029][T11088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.054036][ T40] audit: type=1400 audit(1772677823.320:1333): avc: denied { mount } for pid=11091 comm="syz.0.1483" name="/" dev="ramfs" ino=36635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 187.223265][ T40] audit: type=1400 audit(1772677824.406:1334): avc: denied { write } for pid=11101 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.472892][T11111] pim6reg1: entered promiscuous mode [ 187.475316][T11111] pim6reg1: entered allmulticast mode [ 187.932847][T11117] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1479'. [ 187.936967][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 188.795569][ T40] audit: type=1400 audit(1772677825.884:1335): avc: denied { getopt } for pid=11123 comm="syz.1.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.070763][ C2] syz_tun: tun_net_xmit 42 [ 189.071836][ T40] audit: type=1400 audit(1772677825.931:1336): avc: denied { mounton } for pid=11127 comm="syz.3.1486" path="/356/file0" dev="tmpfs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 189.161428][T11142] netlink: 'syz.0.1490': attribute type 2 has an invalid length. [ 190.192642][ C2] syz_tun: tun_net_xmit 42 [ 191.293314][ C2] syz_tun: tun_net_xmit 42 [ 191.599473][ T40] audit: type=1400 audit(1772677828.505:1337): avc: denied { name_bind } for pid=11179 comm="syz.1.1505" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 192.280860][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 192.702681][ T40] audit: type=1400 audit(1772677829.534:1338): avc: denied { create } for pid=11209 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 193.018687][T11225] syz.4.1519 (11225): drop_caches: 2 [ 193.340432][T11231] bpq0: entered allmulticast mode [ 194.026322][T11246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.033764][T11246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.129607][T11246] vcan1: left allmulticast mode [ 194.191710][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.210578][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.215117][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.219107][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.890002][T11271] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 194.956331][T11273] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.960610][T11273] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 195.020229][ T40] audit: type=1400 audit(1772677831.705:1339): avc: denied { write } for pid=11270 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 195.035659][T11271] bond1: (slave gretap1): making interface the new active one [ 195.045814][T11271] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 195.093319][T11271] macvlan2: entered promiscuous mode [ 195.095383][T11271] macvlan2: entered allmulticast mode [ 195.735633][T11286] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 196.101981][T11271] bond1: entered promiscuous mode [ 196.105908][T11271] gretap1: entered promiscuous mode [ 196.114390][T11271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.145679][T11271] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 196.160545][T11271] bond1: left promiscuous mode [ 196.162975][T11271] gretap1: left promiscuous mode [ 196.189954][T11301] pim6reg1: entered promiscuous mode [ 196.191923][T11301] pim6reg1: entered allmulticast mode [ 196.216451][ T40] audit: type=1400 audit(1772677832.828:1340): avc: denied { set_context_mgr } for pid=11302 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.218001][T11303] binder_alloc: 11302: binder_alloc_buf, no vma [ 196.265152][ T40] audit: type=1400 audit(1772677832.828:1341): avc: denied { call } for pid=11302 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 197.973851][ C2] syz_tun: tun_net_xmit 42 [ 198.128890][ T40] audit: type=1400 audit(1772677834.615:1342): avc: denied { read write } for pid=11328 comm="syz.0.1556" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.147752][ T40] audit: type=1400 audit(1772677834.615:1343): avc: denied { open } for pid=11328 comm="syz.0.1556" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.159098][ T40] audit: type=1400 audit(1772677834.625:1344): avc: denied { ioctl } for pid=11328 comm="syz.0.1556" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.350779][T11336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11336 comm=syz.3.1558 [ 199.083487][ C2] syz_tun: tun_net_xmit 42 [ 200.184098][ C2] syz_tun: tun_net_xmit 42 [ 200.444406][T10198] syz_tun: tun_net_xmit 110 [ 200.975244][ T8687] syz_tun: tun_net_xmit 110 [ 200.976933][T10198] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 201.156464][T10198] usb 6-1: Using ep0 maxpacket: 32 [ 201.159683][T10198] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 201.162637][T10198] usb 6-1: config 0 has no interface number 0 [ 201.164785][T10198] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 201.170332][T10198] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 201.173529][T10198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.176316][T10198] usb 6-1: Product: syz [ 201.178120][T10198] usb 6-1: Manufacturer: syz [ 201.179771][T10198] usb 6-1: SerialNumber: syz [ 201.184664][T10198] usb 6-1: config 0 descriptor?? [ 201.188821][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.408149][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.749333][T11391] vlan2: entered promiscuous mode [ 201.751374][T11391] vlan2: entered allmulticast mode [ 201.753485][T11391] hsr_slave_1: entered allmulticast mode [ 201.762458][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 203.449596][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.519970][T10198] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 203.524955][T10198] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 203.529137][T10198] asix 6-1:0.188: probe with driver asix failed with error -71 [ 203.550775][T10198] usb 6-1: USB disconnect, device number 16 [ 204.122272][ T5994] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 204.139351][ T40] audit: type=1400 audit(1772677840.249:1345): avc: denied { create } for pid=11432 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.152082][T11434] 9p: Bad value for 'rfdno' [ 204.377726][ T5994] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.382602][ T5994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.387741][ T5994] usb 9-1: Product: syz [ 204.390492][ T5994] usb 9-1: Manufacturer: syz [ 204.392943][ T5994] usb 9-1: SerialNumber: syz [ 204.489671][ T5994] usb 9-1: config 0 descriptor?? [ 204.554494][T11441] syzkaller0: entered promiscuous mode [ 204.558082][T11441] syzkaller0: entered allmulticast mode [ 204.562888][T11441] 0: reclassify loop, rule prio 0, protocol 800 [ 204.769154][ T5994] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.314692][ T5937] Bluetooth: hci4: command 0x0405 tx timeout [ 205.329902][T11451] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 205.359930][T11451] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 205.364349][T11451] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 205.415542][T11453] bond3: (slave gretap2): making interface the new active one [ 205.419984][T11453] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 206.240103][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 207.121361][ T5994] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 207.131797][ T5994] usb 9-1: USB disconnect, device number 3 [ 207.259924][T11481] pim6reg1: entered promiscuous mode [ 207.262190][T11481] pim6reg1: entered allmulticast mode [ 207.692161][T11491] syzkaller0: entered promiscuous mode [ 207.694256][T11491] syzkaller0: entered allmulticast mode [ 208.179410][ T5994] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 208.350457][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.355329][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.359761][ T5994] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 208.363937][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.379571][ T5994] usb 6-1: config 0 descriptor?? [ 208.516945][ T40] audit: type=1400 audit(1772677844.338:1346): avc: denied { create } for pid=11520 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.527433][ T40] audit: type=1400 audit(1772677844.357:1347): avc: denied { setopt } for pid=11520 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.826813][ T5994] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 208.829552][ T5994] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 208.831921][ T5994] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 208.834292][ T5994] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 208.836622][ T5994] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 208.839408][ T5994] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 208.846515][ T5994] elan 0003:04F3:0755.0009: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 209.111233][ T24] usb 6-1: USB disconnect, device number 17 [ 211.374457][T11512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.748407][T10198] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 212.035189][T10198] usb 9-1: Using ep0 maxpacket: 16 [ 212.063138][T10198] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 212.067691][T10198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.071817][T10198] usb 9-1: Product: syz [ 212.074092][T10198] usb 9-1: Manufacturer: syz [ 212.076400][T10198] usb 9-1: SerialNumber: syz [ 212.125442][T10198] usb 9-1: config 0 descriptor?? [ 213.053017][T10198] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 214.047042][T10198] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 214.666485][ T24] usb 9-1: USB disconnect, device number 4 [ 214.956626][T10198] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 214.960903][T10198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.964784][T10198] usb 6-1: Product: syz [ 214.966857][T10198] usb 6-1: Manufacturer: syz [ 214.969098][T10198] usb 6-1: SerialNumber: syz [ 214.977277][T10198] usb 6-1: config 0 descriptor?? [ 214.983577][T10198] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 216.008252][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 216.450767][T10198] gspca_sunplus: reg_w_riv err -71 [ 216.454070][T10198] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 216.537498][T10198] usb 6-1: USB disconnect, device number 18 [ 218.026514][ T5937] Bluetooth: hci4: unexpected event for opcode 0x200a [ 218.337691][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 218.400051][T11637] netlink: 'syz.1.1664': attribute type 16 has an invalid length. [ 218.402773][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1664'. [ 218.406047][T11637] veth1_macvtap: entered allmulticast mode [ 218.714140][ T8687] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 218.873977][ T8687] usb 6-1: Using ep0 maxpacket: 32 [ 218.877998][ T8687] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 218.881484][ T8687] usb 6-1: config 0 has no interface number 0 [ 218.883918][ T8687] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 218.889727][ T8687] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 218.893572][ T8687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.897249][ T8687] usb 6-1: Product: syz [ 218.899169][ T8687] usb 6-1: Manufacturer: syz [ 218.901086][ T8687] usb 6-1: SerialNumber: syz [ 218.905278][ T8687] usb 6-1: config 0 descriptor?? [ 218.908558][T11639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.144234][T11639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.280274][ T34] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 219.450979][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 219.456533][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 219.461037][ T34] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 219.464832][ T34] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 219.468498][ T34] usb 8-1: config 4 has no interface number 0 [ 219.473234][ T34] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 219.476995][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.480131][ T34] usb 8-1: Product: syz [ 219.481819][ T34] usb 8-1: Manufacturer: syz [ 219.483784][ T34] usb 8-1: SerialNumber: syz [ 219.733454][ T34] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 219.736199][ T34] uvcvideo 8-1:4.147: Entity type for entity Output 33019 was not initialized! [ 219.739792][ T34] uvcvideo 8-1:4.147: Failed to create links for entity 33019 [ 219.742393][ T34] uvcvideo 8-1:4.147: Failed to register entities (-22). [ 219.769615][ T34] usb 8-1: USB disconnect, device number 11 [ 220.229956][T11668] kAFS: No cell specified [ 220.786914][ T8687] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.800454][ T8687] asix 6-1:0.188: probe with driver asix failed with error -71 [ 220.976174][ T8687] usb 6-1: USB disconnect, device number 19 [ 221.226619][ T5937] Bluetooth: hci1: unexpected event for opcode 0x200a [ 221.276282][T11679] syzkaller0: entered promiscuous mode [ 221.279732][T11679] syzkaller0: entered allmulticast mode [ 221.438816][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 222.764118][ T5937] Bluetooth: hci4: unexpected event for opcode 0x200a [ 223.123481][T11708] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 223.145468][T11708] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.353453][T11710] syzkaller0: entered promiscuous mode [ 223.356341][T11710] syzkaller0: entered allmulticast mode [ 224.067316][ T5994] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 224.171634][ T5937] Bluetooth: hci4: unexpected event for opcode 0x200a [ 224.240102][ T5994] usb 8-1: config index 0 descriptor too short (expected 65183, got 72) [ 224.245801][ T5994] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 224.249233][ T5994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.252389][ T5994] usb 8-1: Product: syz [ 224.254306][ T5994] usb 8-1: Manufacturer: syz [ 224.256092][ T5994] usb 8-1: SerialNumber: syz [ 224.268542][ T5994] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.286778][ T9] EXT4-fs error (device sda1): ext4_lookup:1785: inode #312: comm kworker/0:0: iget: checksum invalid [ 224.294005][ T9] usb 8-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 224.298045][ T9] usb 8-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 224.301520][ T9] usb 8-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 225.087041][T11737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.164182][T11727] [U]  [ 225.286508][ T40] audit: type=1400 audit(1772677860.041:1348): avc: denied { setopt } for pid=11735 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.299812][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 225.303065][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 225.331341][ T39] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 225.340549][ T39] usb 5-1: USB disconnect, device number 14 [ 225.811683][ T40] audit: type=1400 audit(1772677860.528:1349): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 226.297766][T11768] syzkaller0: entered promiscuous mode [ 226.299795][T11768] syzkaller0: entered allmulticast mode [ 226.672158][T11786] netlink: 'syz.4.1710': attribute type 7 has an invalid length. [ 226.735027][T11748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.737462][T11748] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 226.834512][T11748] tipc: Resetting bearer [ 226.920817][T11748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.923596][T11748] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 226.952672][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 227.025815][ T1457] usb 8-1: USB disconnect, device number 12 [ 227.809194][T11829] syzkaller0: entered promiscuous mode [ 227.811809][T11829] syzkaller0: entered allmulticast mode [ 230.243849][ T40] audit: type=1400 audit(1772677864.664:1350): avc: denied { append } for pid=11851 comm="syz.3.1726" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 230.567912][T11863] usb usb7: usbfs: process 11863 (syz.0.1727) did not claim interface 5 before use [ 230.567964][T11862] pim6reg1: entered promiscuous mode [ 230.573673][T11862] pim6reg1: entered allmulticast mode [ 231.531529][T11874] syzkaller0: entered promiscuous mode [ 231.533915][T11874] syzkaller0: entered allmulticast mode [ 231.878283][ T40] audit: type=1400 audit(1772677866.199:1351): avc: denied { create } for pid=11884 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.892198][ T40] audit: type=1400 audit(1772677866.208:1352): avc: denied { write } for pid=11884 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.905751][ T40] audit: type=1400 audit(1772677866.227:1353): avc: denied { read } for pid=11884 comm="syz.0.1737" path="socket:[41353]" dev="sockfs" ino=41353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.921805][ T829] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 232.106141][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 232.111175][ T829] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 232.115581][ T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.121594][ T829] usb 9-1: config 0 descriptor?? [ 232.125575][T11882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.540600][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 232.620825][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.630423][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.636592][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.639652][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.642144][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.644534][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.646983][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.649439][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.651844][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.654212][ T829] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 232.691903][ T829] asus 0003:0B05:1ABE.000A: hidraw1: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 232.796172][ T829] usb 9-1: USB disconnect, device number 5 [ 233.623138][T11900] pim6reg1: entered promiscuous mode [ 233.625623][T11900] pim6reg1: entered allmulticast mode [ 235.097757][T11915] syzkaller0: entered promiscuous mode [ 235.099993][T11915] syzkaller0: entered allmulticast mode [ 235.594523][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 236.755951][T11939] pim6reg1: entered promiscuous mode [ 236.757760][T11939] pim6reg1: entered allmulticast mode [ 237.606363][ T40] audit: type=1400 audit(1772677871.561:1354): avc: denied { connect } for pid=11942 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 238.098182][ T24] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 238.293909][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.297736][ T24] usb 5-1: config 250 has an invalid interface number: 59 but max is 0 [ 238.300697][ T24] usb 5-1: config 250 has no interface number 0 [ 238.303583][ T24] usb 5-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 238.307573][ T24] usb 5-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.313270][ T24] usb 5-1: config 250 interface 59 has no altsetting 0 [ 238.318691][ T24] usb 5-1: string descriptor 0 read error: -22 [ 238.321033][ T24] usb 5-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 238.326961][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.332962][T11953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.568674][ T8687] usb 5-1: USB disconnect, device number 15 [ 239.024163][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 241.199871][T11993] batman_adv: batadv0: Adding interface: macvtap1 [ 241.202347][T11993] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.303972][T11993] batman_adv: batadv0: Interface activated: macvtap1 [ 241.967033][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 242.917517][ T5937] Bluetooth: hci4: unexpected event for opcode 0x200a [ 243.693989][ T1325] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 243.888182][ T1325] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.892551][ T1325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.896442][ T1325] usb 9-1: Product: syz [ 243.898123][ T1325] usb 9-1: Manufacturer: syz [ 243.899818][ T1325] usb 9-1: SerialNumber: syz [ 243.913379][ T1325] usb 9-1: config 0 descriptor?? [ 244.134055][ T1325] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 245.690643][ T1325] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 245.697298][ T1325] usb 9-1: USB disconnect, device number 6 [ 259.517144][T11748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.519775][T11748] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 259.523882][ T6011] ------------[ cut here ]------------ [ 259.525910][ T6011] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 259.528261][ T6011] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: kworker/1:3/6011 [ 259.531768][ T6011] Modules linked in: [ 259.533376][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.537068][ T6011] Tainted: [L]=SOFTLOCKUP [ 259.538565][ T6011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.542024][ T6011] Workqueue: events l2cap_chan_timeout [ 259.543976][ T6011] RIP: 0010:__queue_work+0xd0c/0x1150 [ 259.545812][ T6011] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 98 b7 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 e5 38 00 90 0f 0b 90 e9 b2 f5 [ 259.552313][ T6011] RSP: 0018:ffffc900040dfa30 EFLAGS: 00010046 [ 259.554391][ T6011] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005db114b [ 259.557125][ T6011] RDX: ffff8880553dd178 RSI: ffffffff8a874670 RDI: ffffffff90dc87e0 [ 259.559822][ T6011] RBP: ffff88802ed88a40 R08: 0000000000000005 R09: 0000000000000000 [ 259.562527][ T6011] R10: 0000000000200000 R11: 0000000000000000 R12: ffff8880553dd000 [ 259.565193][ T6011] R13: ffff88802c108000 R14: ffff88802ed88a88 R15: ffff88802ed88a48 [ 259.567880][ T6011] FS: 0000000000000000(0000) GS:ffff8880d6445000(0000) knlGS:0000000000000000 [ 259.570957][ T6011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.573214][ T6011] CR2: 00007fa0d5687f88 CR3: 0000000038f58000 CR4: 0000000000352ef0 [ 259.575900][ T6011] Call Trace: [ 259.577059][ T6011] [ 259.578082][ T6011] ? __cancel_work+0x2b5/0x340 [ 259.579717][ T6011] ? lockdep_hardirqs_on+0x78/0x100 [ 259.581485][ T6011] ? __cancel_work+0x245/0x340 [ 259.583124][ T6011] __queue_delayed_work+0x365/0x470 [ 259.584888][ T6011] queue_delayed_work_on+0x180/0x1e0 [ 259.586681][ T6011] l2cap_chan_del+0x649/0x930 [ 259.588351][ T6011] l2cap_chan_close+0x3b0/0xa70 [ 259.590001][ T6011] ? debug_object_deactivate+0x2e4/0x3b0 [ 259.591947][ T6011] ? __pfx_l2cap_chan_close+0x10/0x10 [ 259.593776][ T6011] l2cap_chan_timeout+0x196/0x330 [ 259.595501][ T6011] process_one_work+0x9d7/0x1920 [ 259.597191][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 259.599020][ T6011] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 259.600890][ T6011] worker_thread+0x5da/0xe40 [ 259.602494][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 259.604234][ T6011] ? kthread+0x13a/0x450 [ 259.605682][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 259.607424][ T6011] kthread+0x370/0x450 [ 259.608820][ T6011] ? __pfx_kthread+0x10/0x10 [ 259.610397][ T6011] ret_from_fork+0x754/0xd80 [ 259.611995][ T6011] ? __pfx_ret_from_fork+0x10/0x10 [ 259.613738][ T6011] ? __switch_to+0x7b4/0x1120 [ 259.615419][ T6011] ? __pfx_kthread+0x10/0x10 [ 259.617020][ T6011] ret_from_fork_asm+0x1a/0x30 [ 259.618668][ T6011] [ 259.619739][ T6011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.622196][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.625827][ T6011] Tainted: [L]=SOFTLOCKUP [ 259.627309][ T6011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.630807][ T6011] Workqueue: events l2cap_chan_timeout [ 259.632677][ T6011] Call Trace: [ 259.633843][ T6011] [ 259.634887][ T6011] dump_stack_lvl+0x100/0x190 [ 259.636609][ T6011] vpanic+0x552/0x970 [ 259.638013][ T6011] ? __pfx_vpanic+0x10/0x10 [ 259.639593][ T6011] panic+0xd1/0xe0 [ 259.640912][ T6011] ? __pfx_panic+0x10/0x10 [ 259.642455][ T6011] ? check_panic_on_warn+0x1f/0x90 [ 259.644299][ T6011] check_panic_on_warn.cold+0x19/0x34 [ 259.646108][ T6011] ? __queue_work+0xd08/0x1150 [ 259.647750][ T6011] __warn.cold+0x191/0x348 [ 259.649276][ T6011] __report_bug+0x296/0x3d0 [ 259.650915][ T6011] ? __queue_work+0xd08/0x1150 [ 259.652537][ T6011] ? __pfx___report_bug+0x10/0x10 [ 259.654249][ T6011] ? __pfx_hci_conn_timeout+0x10/0x10 [ 259.656085][ T6011] ? __pfx_debug_object_assert_init+0x10/0x10 [ 259.658138][ T6011] report_bug_entry+0xe1/0x290 [ 259.659856][ T6011] ? __queue_work+0xd0c/0x1150 [ 259.661531][ T6011] handle_bug+0x1cd/0x2a0 [ 259.663029][ T6011] exc_invalid_op+0x17/0x50 [ 259.664578][ T6011] asm_exc_invalid_op+0x1a/0x20 [ 259.666234][ T6011] RIP: 0010:__queue_work+0xd0c/0x1150 [ 259.668059][ T6011] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 98 b7 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 e5 38 00 90 0f 0b 90 e9 b2 f5 [ 259.674475][ T6011] RSP: 0018:ffffc900040dfa30 EFLAGS: 00010046 [ 259.676574][ T6011] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005db114b [ 259.679247][ T6011] RDX: ffff8880553dd178 RSI: ffffffff8a874670 RDI: ffffffff90dc87e0 [ 259.681933][ T6011] RBP: ffff88802ed88a40 R08: 0000000000000005 R09: 0000000000000000 [ 259.684600][ T6011] R10: 0000000000200000 R11: 0000000000000000 R12: ffff8880553dd000 [ 259.687289][ T6011] R13: ffff88802c108000 R14: ffff88802ed88a88 R15: ffff88802ed88a48 [ 259.689994][ T6011] ? __pfx_hci_conn_timeout+0x10/0x10 [ 259.691827][ T6011] ? __cancel_work+0x2b5/0x340 [ 259.693453][ T6011] ? lockdep_hardirqs_on+0x78/0x100 [ 259.695252][ T6011] ? __cancel_work+0x245/0x340 [ 259.696888][ T6011] __queue_delayed_work+0x365/0x470 [ 259.698663][ T6011] queue_delayed_work_on+0x180/0x1e0 [ 259.700458][ T6011] l2cap_chan_del+0x649/0x930 [ 259.702107][ T6011] l2cap_chan_close+0x3b0/0xa70 [ 259.703781][ T6011] ? debug_object_deactivate+0x2e4/0x3b0 [ 259.705672][ T6011] ? __pfx_l2cap_chan_close+0x10/0x10 [ 259.707497][ T6011] l2cap_chan_timeout+0x196/0x330 [ 259.709209][ T6011] process_one_work+0x9d7/0x1920 [ 259.710932][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 259.712748][ T6011] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 259.714622][ T6011] worker_thread+0x5da/0xe40 [ 259.716195][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 259.717922][ T6011] ? kthread+0x13a/0x450 [ 259.719452][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 259.721196][ T6011] kthread+0x370/0x450 [ 259.722609][ T6011] ? __pfx_kthread+0x10/0x10 [ 259.724184][ T6011] ret_from_fork+0x754/0xd80 [ 259.725763][ T6011] ? __pfx_ret_from_fork+0x10/0x10 [ 259.727508][ T6011] ? __switch_to+0x7b4/0x1120 [ 259.729115][ T6011] ? __pfx_kthread+0x10/0x10 [ 259.730689][ T6011] ret_from_fork_asm+0x1a/0x30 [ 259.732351][ T6011] [ 259.734247][ T6011] Kernel Offset: disabled [ 259.735752][ T6011] Rebooting in 86400 seconds..