last executing test programs: 3m8.926864651s ago: executing program 1 (id=292): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7}) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c", 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002000)=@newtaction={0x1148, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x92, 0x1, 0x1, 0x7}}]}, {0x23, 0x6, "e2d79f248d2f3df1b205f4273257277af1f6eb62a5e4b4591e195dcf4eb566"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1058, 0x1, [@m_pedit={0xefc, 0x1d, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x8, 0x3, 0xffffffffffffffff, 0x4, 0x5}, 0x9, 0xa3, [{0x8, 0x6, 0x401, 0x7fff, 0x3ef, 0x1}, {0x8, 0x3, 0x7, 0x1, 0x0, 0x6}, {0x3, 0x3, 0x6, 0x7, 0xe, 0x7}]}, [{0x0, 0x1, 0x8, 0x4, 0xffff, 0x5}, {0x22, 0xf, 0x8001, 0xd4, 0x8, 0xffff8119}, {0x9, 0xd5, 0xb18, 0x4d5d, 0x754, 0x5796}, {0x8, 0x65, 0xfffffffc, 0x8, 0xfffffffc, 0x7}, {0x4, 0xa973, 0x0, 0x2, 0x6, 0x1}, {0xb9, 0x0, 0xad88, 0xa, 0x40, 0x2}, {0x1, 0x3, 0x1000000, 0x800, 0xca, 0x8}, {0x4, 0x9, 0xc, 0xc1, 0x61, 0x8001}, {0x6, 0x0, 0x3, 0x4, 0x3, 0x8}, {0xfffffff7, 0x73, 0x3, 0x80000000, 0xfffffffa, 0xa}, {0x7, 0x1ff, 0x7, 0x5, 0x8d, 0xffffff93}, {0x10001, 0x514, 0x1, 0x1, 0x4, 0x2}, {0x5de9, 0x6, 0x7ff, 0x401, 0x5, 0x28}, {0x3, 0x8, 0x5, 0x10, 0x9, 0x4}, {0xb, 0x101, 0x72, 0x6, 0xc6, 0xb36}, {0xb3e, 0x4, 0x10, 0x8a, 0x0, 0x3}, {0x2, 0x5, 0xd, 0xfffffff5, 0x200, 0x316}, {0x6, 0x5, 0x7, 0x8, 0x4, 0x224}, {0x3660, 0x200, 0x2, 0x8, 0x8, 0x9}, {0x2, 0x2ce, 0x3, 0x7, 0x1000, 0xffff8000}, {0x2, 0xc, 0x2, 0x0, 0xf97, 0x9}, {0xce, 0x3, 0x7ff, 0x8, 0x8, 0x6}, {0x80000000, 0x7, 0x7ff, 0xfffffffe, 0xa513, 0x4}, {0x8, 0x72d, 0x5, 0x9f, 0x3, 0x4}, {0x7, 0x5d, 0x9, 0x7, 0x9, 0xffffffff}, {0x1, 0x5, 0x40, 0xffffffff, 0x9, 0x9}, {0x6, 0x7f, 0x0, 0x6c5e, 0x6, 0x3c}, {0x49be, 0x0, 0xdf5, 0x8, 0xc, 0x2}, {0x5, 0x3, 0x1c, 0x7f, 0x0, 0xd9}, {0xe59, 0x9, 0x3, 0x400, 0x6, 0x33}, {0x9, 0x2, 0x80000000, 0x9, 0xe, 0x2d}, {0x1, 0x0, 0xe, 0x6, 0x9}, {0x3, 0xde35, 0x10000, 0x81, 0x9, 0x2}, {0x8, 0x1, 0x9, 0x3, 0x6, 0xfffffffc}, {0x17a4, 0x6, 0x10, 0x0, 0x7, 0xab8}, {0x10000, 0x7, 0x80000000, 0x8, 0xb6f, 0xfffffffd}, {0x9, 0x2, 0xfffffffc, 0xece, 0x4, 0x80}, {0x602, 0x2, 0x541b9851, 0x1, 0x1, 0x40}, {0x0, 0x401, 0x5, 0x2, 0x0, 0x4}, {0x6, 0x6, 0x9, 0x42a9, 0x407b, 0xa7c}, {0x5c1c, 0x7, 0x9, 0xda48, 0xf5e0, 0x401}, {0x1, 0x4c, 0x2, 0x100, 0x7}, {0x8, 0x0, 0x1, 0x2, 0x3, 0x81}, {0x401, 0x3, 0x8dc, 0x2, 0x2a, 0x3}, {0x40, 0x1ff, 0x8, 0x6000000, 0x8, 0x7}, {0x0, 0x80000001, 0x4, 0x5, 0xc8, 0x2567ec93}, {0x1ff, 0x20000000, 0x4, 0x3, 0x7ff, 0x80}, {0x17d1, 0xc0, 0x9, 0x7, 0x200, 0x3}, {0x6, 0x1c000000, 0xfff, 0x3, 0x6, 0xffffffff}, {0x9f, 0x9, 0x7, 0x4, 0x6c4a, 0x8}, {0x1, 0x101, 0x80, 0x6, 0x10001, 0x8}, {0xb, 0x0, 0x10, 0x1, 0x9a50, 0x5}, {0x1, 0xa0, 0x7ff, 0x29, 0x1, 0x1}, {0x401, 0x4, 0x8, 0x0, 0x1, 0x800}, {0x5f, 0x7fff, 0x1, 0x49, 0xf6200000}, {0x28, 0x8, 0x6c7f6ad5, 0x4, 0x0, 0x800}, {0xff, 0x6, 0xec, 0x0, 0x8d35, 0x7}, {0x1, 0x44f, 0x10001, 0x2, 0x2, 0x400}, {0xfffffff8, 0x5, 0xffc, 0x8, 0x3, 0x1}, {0x9, 0x5, 0x2, 0xc1, 0x531, 0x6}, {0x0, 0x8, 0x3, 0x3, 0x9, 0x6}, {0x5, 0x100, 0x9, 0x80, 0x7455b3a9, 0x1}, {0x7, 0x4, 0x327, 0x0, 0x101, 0xfffffffa}, {0xb, 0xc, 0x7d1, 0xf, 0xc, 0x5}, {0x7f, 0x20, 0x9, 0x73, 0x800, 0x3}, {0x200, 0x7, 0x6, 0x4, 0x6}, {0xca3, 0x2, 0x9, 0x0, 0x1, 0x25cb}, {0x0, 0x7, 0xfffffff7, 0x1, 0x7, 0x6}, {0xfffffff8, 0x9c1, 0x1, 0x0, 0xfffffc01, 0x7}, {0x5, 0x3, 0x8, 0x5, 0x8001, 0xb}, {0x5a9, 0x2, 0x8, 0xc, 0x4, 0x5}, {0x3, 0x3ff, 0x4, 0x39d, 0x9, 0xe}, {0x8, 0x3, 0x0, 0x800, 0xe, 0x744}, {0x80, 0x0, 0x0, 0x1, 0x8, 0x4}, {0x10, 0x80, 0x47, 0xffff, 0x1000000, 0x5}, {0x61, 0x5, 0x8, 0x40}, {0xead, 0x40, 0xa65, 0x1, 0x9, 0xb6}, {0x400, 0x80000000, 0x7, 0x8, 0x81, 0xbf4e}, {0xffffffff, 0x100, 0x1, 0x8, 0x0, 0x7ff}, {0xff, 0x0, 0x3, 0x9, 0x76, 0x8}, {0x8, 0xfffffff2, 0x2, 0xf, 0x3ff, 0x4c}, {0x8001, 0xffff, 0x5b, 0xffffff9b, 0x4, 0x7}, {0x4, 0x5, 0x7ff, 0x4, 0x9, 0x2}, {0x5feb, 0x2c35, 0xbed7, 0x5, 0xb, 0x1}, {0x7bef5f80, 0x80000000, 0x7, 0x2, 0x10, 0x8000}, {0x400, 0x1, 0xfffffffd, 0xadb, 0x9}, {0x3, 0x2, 0x4, 0x7, 0x3, 0xfffffffb}, {0x7, 0x2, 0x0, 0x9, 0x6, 0x1}, {0x7, 0x2, 0x7ff, 0x6, 0x0, 0x5}, {0x1ff, 0x0, 0xfffffffc, 0xfffffffa, 0x6, 0x5}, {0x8, 0x4, 0xffffffff, 0x8, 0x80000001}, {0x6c9, 0x8000, 0x8, 0x3, 0xd7, 0x800}, {0x7, 0x7, 0x9, 0xfffffc00, 0x9, 0x7}, {0x1, 0xe0a, 0x7ff, 0x101, 0xc, 0x9}, {0x2, 0x0, 0xe1, 0x5, 0x6, 0xfffffffa}, {0xe, 0x6, 0x0, 0x8, 0x2, 0x4}, {0x2, 0x10000, 0x3d5, 0x1c, 0x7fff, 0x2}, {0x1000, 0x7, 0x9, 0x42, 0x0, 0x401}, {0x6, 0x2, 0x1, 0x80000000, 0x0, 0x9}, {0x50, 0x9, 0xfffffff2, 0xd, 0x7f, 0x7}, {0x9, 0x4, 0x8, 0x900c, 0x0, 0x8}, {0x2, 0x1, 0x6, 0xfff, 0x80, 0x5}, {0x7, 0x3, 0x101, 0x400, 0x2e, 0x3}, {0x5, 0x101, 0x0, 0x400, 0x1}, {0x7, 0x0, 0x7, 0x7fffffff, 0xd68, 0x8}, {0xff, 0x2, 0x5, 0x1, 0x3, 0x5}, {0x7, 0x8, 0x81, 0x5, 0x7edd, 0x6}, {0xb, 0x9, 0x8, 0x8000, 0x2, 0xff}, {0x42e32e21, 0x9e, 0x64, 0x0, 0x7, 0x26}, {0x6, 0x4, 0x3ff, 0x5, 0x1, 0x401}, {0x101, 0x5, 0x80000000, 0x3, 0x1, 0x9}, {0x9, 0x702, 0x10b, 0x9, 0x9, 0x80000001}, {0x7, 0x800, 0xffff70f4, 0xffffffff, 0x1}, {0x401, 0x2, 0xcb98, 0xf83, 0x3, 0x1}, {0x800, 0x3, 0x6, 0xfa9, 0xffffffe8, 0x80}, {0x7, 0x1, 0x200, 0x744fa4b8, 0x10, 0x100}, {0x4, 0x9, 0x1, 0x0, 0x2, 0x4}, {0x7fffffff, 0x4, 0x56b, 0x1, 0x80, 0x739d}, {0x4, 0x10, 0x4d724bd8, 0x2, 0x75f3a09b}, {0x1000, 0x2321, 0x80000001, 0x87e, 0x7, 0x4f}, {0x2, 0x7ff, 0xd, 0x3, 0xda, 0x7}, {0xcc, 0x7f, 0x7, 0x9, 0xb3a, 0xe9c}, {0x3, 0x5, 0xf, 0x6d, 0x0, 0xcfd}, {0xb, 0x10001, 0xfffffff8, 0x4, 0x4a, 0xffffff80}, {0x1, 0x6, 0x7, 0x200, 0xffffff80, 0xe}, {0xfffffff8, 0xa6, 0x7fff, 0x40000000, 0x31db, 0xc}, {0x7fffffff, 0x4, 0x7fffffff, 0x8, 0xf88, 0x8}, {0x5, 0x0, 0xc, 0x6, 0xad5, 0x2}], [{0x5, 0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {}, {0x6, 0x2507bc4a4a91658d}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}]}}]}, {0x68, 0x6, "0cbdf957e78340c26e40d5153a825712ef3e05fc7a18cb877d8aebbbd4f6b5a0735d98fa499389e00a841e372f78ed3d31dfc085a03bf73bc820ca973a9360329d69c2da99efd3e4eea29d41ce8a2dd41e8606ecadc489d0084f2e9868243f6aa634fe9b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_xt={0x158, 0x5, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xde, 0x6, "8abb69a4b5df2ab8d9109fd59eb37b196c305acc154834d49eefa6ab00d07c54e7d0f5094e8d23c673ab73c8fef72c611c8af0faadb7075126074ecbca7a1d54321681976e0b972cf22ce4348e646295109eade2aaea3e6f6fb826f60d6db8e24b34a77255936e3dde27ced12c336b6a4eefef2abdfb11dbdd0bb2b5e07a2036d27133f6071b76747ad21d046292cb32126f375935f33c085eff010ef60b9f88703d12be26133cd4ae8c669ef1c8066ecf843207a556bc017029f1200d64ce5440d179fbdf3e825d2f142b1ed6c52a4ee33cd7ab5b2f1dd08a61"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1148}, 0x1, 0x2b1e}, 0x408d4) 3m8.033411832s ago: executing program 1 (id=299): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0xffef}, 0x20) 3m7.895055925s ago: executing program 1 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 3m5.718426218s ago: executing program 2 (id=315): sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x8084) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @empty, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) close_range(r2, r2, 0x0) 3m5.09667077s ago: executing program 2 (id=319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040850) connect$inet6(r1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x8008af00, &(0x7f00000003c0)={0x1}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9b", 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m4.117348033s ago: executing program 2 (id=321): syz_open_dev$usbfs(0x0, 0x100000001, 0xa401) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x30}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0xe, 0x8000, 0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) 3m3.060286454s ago: executing program 2 (id=322): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfffffffffffffb9b]}, 0x8, 0x80800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf650300000005000300990000000500030005000000050003001c0000003cd4713a745dbaec859d821f544b29e61fc9509c7ebcfac21f39cec759720196c1a4a0f1c75dcdef9bb9118f9b676d72bbb20ae977a04779307069b25c76d4be4558d1af7df35da01fe3e232f39d511fcc648e28b5348ac8e0f04d946a18346a3a5cecdf71211290e72656e73b2b5a92e6ea1a53da50d26ce90f558bce69ae99d51f8c593b4913c2bd90edd718eb8e7ea173a8faa5c16f3ba267514d2d1bd5728819a3663fd94502c561cc7c24d6f943bfbf20c62ed44963883e9e09f2adfbf7bdbaa9da93c47fd5e785eb00"/251], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m2.901783552s ago: executing program 2 (id=324): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0xff84, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) write$qrtrtun(r8, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000001c0)={0x1}) 3m2.117358647s ago: executing program 1 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 3m2.043789001s ago: executing program 2 (id=328): rt_tgsigqueueinfo(0x0, 0x0, 0x27, &(0x7f0000000300)={0xf, 0xffffc4ed, 0x80}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0xc3, 0x40, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x46, 0x2}, [@mixer_unit={0x8, 0x24, 0x5, 0x6, 0x1, "9549ba"}, @power_domain={0x11, 0x24, 0x10, 0x0, 0x7, 0x0, 0xd4, "09d90c01dab871af"}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x0, 0x5, 0x9, 0x6, 0x9, 0xb, 0x34a, 0x2}, @cluster_info_segment={0x6, 0x20, 0x2, 0x9f}, @mixer_unit={0x9, 0x24, 0x5, 0x5, 0x94, "817032b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x19, 0x40, {0xa, 0x25, 0x25, 0x6, 0x11, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x81, 0x0, 0x3, 0x80, 0x1, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x9, 0xdc, {0xa, 0x25, 0x25, 0x81, 0x71, 0xf}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x11, 0x4, 0x0, 0x8, 0x8}, 0x46, &(0x7f0000000140)={0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "4f4af5fe399818a9c2a4c0e11945da6f"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x7, 0xcd92}, @wireless={0xb, 0x10, 0x1, 0x4, 0xeb, 0x0, 0x28, 0x9, 0xf9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xc, 0x4, 0x9}]}, 0x2, [{0xac, &(0x7f0000000240)=@string={0xac, 0x3, "62ed620af3aab4c89a4f5accee59ff69c6321ea1567c22cf67ac61b38bdbff06e018e8a79a624382ab03d718d98ab53bdfd1dbbee335cabc07f6d6b2e18e5cda46f91fe0a4376353ea69a9f1eca8296204d0cc9fc6211949ce4a2635fb98963fb07be02acddc235f88ad692479d4a107ecc6235ce28204c8d3f77d8375e8d503550e7424630767288c210fc2869dd0c547b0b8a5c43c09e6235526ff7e6767f8162270e55c1bad43cb39"}}, {0x83, &(0x7f0000000300)=@string={0x83, 0x3, "fa16d555de05c6e550c899e86ead972061e431adbc174a6ee0307071f892ccff5b477205c30c6e42f207446b083c9f9f60d168d942cc559bab37318caea6784390220437d7b9cfff8d9acfc4aeaa56920b0f4fd2e54dd9c45140418ba97808166edafbd0eac9dc6d4e173709ff54abf713fc9142b69040757c8e778fe4a16f769f"}}]}) 3m0.782142185s ago: executing program 32 (id=328): rt_tgsigqueueinfo(0x0, 0x0, 0x27, &(0x7f0000000300)={0xf, 0xffffc4ed, 0x80}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0xc3, 0x40, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x46, 0x2}, [@mixer_unit={0x8, 0x24, 0x5, 0x6, 0x1, "9549ba"}, @power_domain={0x11, 0x24, 0x10, 0x0, 0x7, 0x0, 0xd4, "09d90c01dab871af"}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x0, 0x5, 0x9, 0x6, 0x9, 0xb, 0x34a, 0x2}, @cluster_info_segment={0x6, 0x20, 0x2, 0x9f}, @mixer_unit={0x9, 0x24, 0x5, 0x5, 0x94, "817032b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x19, 0x40, {0xa, 0x25, 0x25, 0x6, 0x11, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x81, 0x0, 0x3, 0x80, 0x1, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x9, 0xdc, {0xa, 0x25, 0x25, 0x81, 0x71, 0xf}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x11, 0x4, 0x0, 0x8, 0x8}, 0x46, &(0x7f0000000140)={0x5, 0xf, 0x46, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "4f4af5fe399818a9c2a4c0e11945da6f"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x7, 0xcd92}, @wireless={0xb, 0x10, 0x1, 0x4, 0xeb, 0x0, 0x28, 0x9, 0xf9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xc, 0x4, 0x9}]}, 0x2, [{0xac, &(0x7f0000000240)=@string={0xac, 0x3, "62ed620af3aab4c89a4f5accee59ff69c6321ea1567c22cf67ac61b38bdbff06e018e8a79a624382ab03d718d98ab53bdfd1dbbee335cabc07f6d6b2e18e5cda46f91fe0a4376353ea69a9f1eca8296204d0cc9fc6211949ce4a2635fb98963fb07be02acddc235f88ad692479d4a107ecc6235ce28204c8d3f77d8375e8d503550e7424630767288c210fc2869dd0c547b0b8a5c43c09e6235526ff7e6767f8162270e55c1bad43cb39"}}, {0x83, &(0x7f0000000300)=@string={0x83, 0x3, "fa16d555de05c6e550c899e86ead972061e431adbc174a6ee0307071f892ccff5b477205c30c6e42f207446b083c9f9f60d168d942cc559bab37318caea6784390220437d7b9cfff8d9acfc4aeaa56920b0f4fd2e54dd9c45140418ba97808166edafbd0eac9dc6d4e173709ff54abf713fc9142b69040757c8e778fe4a16f769f"}}]}) 2m58.577603462s ago: executing program 1 (id=342): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d", @ANYRES64], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket(0x10, 0x80802, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m55.102536594s ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(r0, 0xe, &(0x7f0000000040)={0x9, 0x8}, &(0x7f0000000380)) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x144, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) sync() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e, 0x80800) recvfrom$unix(r3, &(0x7f0000000240)=""/68, 0x44, 0x2000, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x4000, 0x40) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) utimensat(r5, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={{r6, r7/1000+10000}, {0x0, 0xea60}}, 0x0) 2m38.887292676s ago: executing program 33 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(r0, 0xe, &(0x7f0000000040)={0x9, 0x8}, &(0x7f0000000380)) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x144, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) sync() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e, 0x80800) recvfrom$unix(r3, &(0x7f0000000240)=""/68, 0x44, 0x2000, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x4000, 0x40) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) utimensat(r5, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={{r6, r7/1000+10000}, {0x0, 0xea60}}, 0x0) 14.245680129s ago: executing program 4 (id=1044): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24004044}, 0x4044880) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chmod(&(0x7f00000000c0)='./bus\x00', 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 11.947163261s ago: executing program 4 (id=1049): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000540)=[{0x41, 0x0, 0x0, 0xfd, @time={0x0, 0x2}, {0xfd}, {0xf}, @queue={0x8, {0x1, 0x8}}}], 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(0x3) pselect6(0x40, &(0x7f0000000140)={0x5, 0xffffffff, 0x8000, 0x7fffffff, 0x4, 0x4e15, 0x200, 0x6}, 0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x1ff, 0x1ff, 0x9, 0xba0, 0xb67, 0x1, 0x8, 0x3ff}, &(0x7f0000000280)={0x3, 0x1, 0xfffffffffffffffb, 0x7fff, 0x1ff, 0xd, 0x9, 0xa}, &(0x7f0000000300)={0x5, 0x2, 0x10000, 0x8, 0x5, 0x100000000, 0x84, 0x80000001}, &(0x7f0000000380)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = socket$inet6(0xa, 0xa, 0x1fc) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00', 0x4e21, 0x4a39, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x3c, 0x0, 0xee00}, {0xdb, 0x458, 0xc0000000000, 0x5, 0xfffffffffffffffd, 0x101, 0x0, 0x4}, {0x8, 0xffffffffffffffff, 0xa4e4, 0xf6}, 0x6, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d6}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3500, 0x1, 0x2, 0xff, 0x2, 0x1, 0xfffffff7}}, 0xe8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) symlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000200)='./file0\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100050000000000000000f4bb62ec96632b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = dup3(0xffffffffffffffff, r7, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, &(0x7f0000000480)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="830405000000000020001280080001006774700014000280080004"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.605377308s ago: executing program 4 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@verity_require}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000000c0)='^', 0x1, 0x4000080, &(0x7f0000004ff0)={0x2, 0xfffd, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xfffffff8, @empty, 0x8}}, 0x7, 0x7}, &(0x7f0000001640)=0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpriority(0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f0000000580)=[{0x63, 0x200, 0x0, 0x0}, {0xd5, 0x4c01, 0x3a, &(0x7f0000000500)="1a26926d72bd91105db561b7a05caa7a7328b33454224a32319dd15b62a84658edd8d43ce769018aac9ea5a02d41655fe7897edd2f369da7b73b"}], 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) socket(0x400000000010, 0x3, 0x0) 10.4308309s ago: executing program 3 (id=1057): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "c38f42fb60919e76316ee0b71c647356"}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='&}\xe9+%\x00', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x9]}, {0xf800, 0x1, 0x5}}, 0x841b, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4cd}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffe114, 0x4e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000300), 0x4) mount(&(0x7f0000000340)=@sg0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='binfmt_misc\x00', 0x100000, &(0x7f0000000400)=':%}/\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) connect$unix(r1, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f00000005c0)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000600)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000640)={0x0, 0x7, 0x1, 0x6, 0x2, [0x0, 0x0, 0x0], [0xea, 0x0, 0x9, 0x81], [0x1ff, 0x76, 0xb5b, 0x5], [0x7fffffffffffffff, 0xe, 0x7, 0x572]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000006c0)={r4, 0x4, 0xe8, 0x7, 0x3, [0x0, r5, r6, r7], [0x2, 0x3, 0x6, 0x3], [0x6, 0x1, 0x2, 0x8], [0xc2f, 0x3ff, 0x5, 0x9]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r1, 0x0, 0x7, 0xb, &(0x7f0000000740)="1d2c962b57a49b", &(0x7f0000000780)=""/11, 0x8, 0x0, 0xfe, 0x1000, &(0x7f00000007c0)="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", &(0x7f00000008c0)="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", 0x3, 0x0, 0x4}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001a40)={&(0x7f0000001940)=[0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000001ac0)={r8, 0x3, 0xffffffff, 0x1, &(0x7f0000001a80)=[{0x3, 0x3, 0x2, 0x2}]}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000001b00)=0xffffffff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001b40), 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r9, 0x8, &(0x7f0000003bc0)={0x10, 0x4}, &(0x7f0000003c00)) socket$packet(0x11, 0x2, 0x300) sendmsg$qrtr(r1, &(0x7f0000003e00)={&(0x7f0000003c40)={0x2a, 0x3, 0x1}, 0xc, &(0x7f0000003d80)=[{&(0x7f0000003c80)="6145ed7aee89c4b32ab75f8ad96e749e91e883892f7663d4655d825782347084105a14f3990a1fa0592976016e43ddaf88de2e2253ab8f87e28da60f1c5647705a07a2bf0e86bf8b97b6039111baffa4f713e3f910130ddfb5bcc24d108aecffc08acf024512bda016ceaec70534a1498a21e5fde8161e5f8a62a62e3e731956b34a3a74b8c5c17e829a4507bfc2340423473b143189beddc354acae8afbe51d657df4fb48df3c2c60ddce760bc453f8eeb01ebc3963b857987ad7c9bdb0f65616663baf", 0xc4}], 0x1, &(0x7f0000003dc0)=[{0x10, 0x103, 0x3}], 0x10}, 0x38) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000003e80)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x200c0000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), r3) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$netlink(0x10, 0x3, 0x2) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000004080)={0x0, 0x2}) 10.299812051s ago: executing program 3 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 8.491252308s ago: executing program 5 (id=1063): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2803c3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500001c0000eaff002f90780a010101e0000001"], 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0xffffffff, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x7e6b, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x5, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aaa, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x6, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0x40, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7d, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x1, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r8 = syz_open_dev$audion(&(0x7f0000000180), 0x8, 0x84b00) read$msr(r8, &(0x7f0000000240)=""/187, 0xbb) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000300)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000700)=ANY=[@ANYBLOB="30000200d070945735ee59d513ffd646da79f8f13178b263577e5d7de32b9cc298e7ea6cc0f2eda03b00000000000000002000000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r7, @ANYBLOB="08000b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 7.385207879s ago: executing program 3 (id=1072): socket(0x1d, 0x80802, 0x6) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9}, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)={0x0, 0x0, 0x21, &(0x7f00000016c0)=ANY=[@ANYBLOB="010f"]}) 6.6591621s ago: executing program 4 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 6.482292467s ago: executing program 6 (id=1075): r0 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x2}, {}, 0x10, 0x0, 0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000600)="263c1514138e81d88f9834c5bda06144277bfed2579dc0b8fd1900eb68d3517c2372b9dc6f5f16ab8befe3a241dcfa3fcf8eb4fdd174eb37e8bba7c2413e45d3b7e966799233d58afc541b13448df1bbff9891a30c592f55db5674299deb04a2ed3e004ea8eba47b6e690a0ea79cf67c5dd16caefcfaaf5b09dab56eeb11f9677d597b6a948a13d2c0f72ebe22432a80ae8835f77dee1270483b562f3b3e21c142010c360203b793377352a17604d41c78a03357f0655c7125fab0d9d728b68fa273311360c2816652f2394ac19511f7ae16edae560a58021da8a46777b0004e44f860d842fd82b7ad4b05d0f6220e91cde2c87cd3fd276b1f932f369190283828dcd5732b9cd2ef4097beb4db9d07fbd1ce9da794620cc0443e026006d899bb467915d43a36ade9aaee55403b3c256ad0a9acd7cbe80cd15b5812d1436bfea675192316e8fec27b009381b7985d0910567366a538e76e3ee594163df72adea7e15d180b195fcdebdca8fe518db922eda35a8049746842ddca98aa00469aa2fdeebf2789", 0x184, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x5, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r5, 0x2, 0x13, r4, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000000100)={0x8000000000000000, 0x4, 0x1, 0x3, 0x24, 0x6, 0x6, 0x8}) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x0) 6.347925594s ago: executing program 0 (id=1076): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003eb0e00000000000000000105000600200000000a00000040010000000500e5000007fbff001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 6.183457325s ago: executing program 0 (id=1077): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r1, 0x0, 0x4, 0x5b}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000340)={0x20, r1, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x400, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x8, 0x2, 0x3, 0x8, 0x26}, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="050103100b37efcbc81bf3803e508e4f29d29d560bc71511352a1f8b6eb6cef904ff7f0000000000009bc8be87247a2752865f239bc9"]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x26c241, 0x148) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\b'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) setpgid(r7, 0x0) setpgid(0x0, r7) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r8 = add_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="c119fcb6c9363f84bf32a9b9a64ffb868cc303a7127f70e6d68efd0af549e3a636c0d10800367a0dbdf0686c9035d496cbfe89", 0x33, 0x0) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="e3fb61bdc9ac86b81b6f0a10097f974f8c7de2329f358c46aa76a8b1b1078067e9cc971a3568abf5e72535a89d8925cc6459968bebffa40d5ce48aeaf89bc2971126f9a21c0d874854438b9ae7844a660560ee7d617021c1ad8cdb74ba7f9129d1dfd4c36fc784c52a72a35a535aee6e9b236a1f3272aa5b01edcd44bd83d135ae66249074a310ca72", 0x89, r8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x8) 6.135547645s ago: executing program 6 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x84) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000180000000d000009002700000600150005000000180016801400010002000000000002000000040000000000"], 0x3c}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x44000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000002100)={{&(0x7f0000002080)=""/43, 0x2b}, &(0x7f00000020c0), 0x1}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x9, 0x1000001, 0x8000, 0x4, 0x100000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r3, 0x0) 4.337095762s ago: executing program 5 (id=1079): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}}, 0x884) ioctl$FIOCLEX(r0, 0x5451) listen(r0, 0xda90) accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x800) 4.015342308s ago: executing program 3 (id=1080): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) socket(0x400000000010, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socket$kcm(0x2, 0xa, 0x2) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048040}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x3, 0x5, 0x84, 0x5, 0x6, 0x7f, 0x40, 0x80, 0x7, 0x6, 0x40, 0x34, 0x8}, 0xfffffe7c) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000020000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000444123816e6174000900010073797a310000000014000480080002407c40280f08000140000000001c000000000a05000000000000000000010000080800024000000001140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, 0x0, 0x4000000) r7 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x6, 0x1) r8 = gettid() sendmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001000000000a359000100000001000000"], 0x50, 0x20000001}, 0x40000) 3.478467995s ago: executing program 6 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.400992441s ago: executing program 6 (id=1082): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x20000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180840) write$P9_RLOPEN(r8, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x80, 0x2, 0x4}, 0x1d7}}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x3, 0xffffffff, 0x1, @private1, @empty, 0x1, 0x700, 0x4, 0x3ff}}) 3.288318169s ago: executing program 4 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000080ff000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.281350785s ago: executing program 5 (id=1084): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@seclabel}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000008426922b688dd8d33e7abe5400000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b4000000000200004801c0001800b00010074756e6e656c00000c00028008000140000000010900010073797a30000000001400000011000100596883ef387f7cfe762d"], 0xbc}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.175784658s ago: executing program 4 (id=1085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = semget$private(0x0, 0x4, 0xe) semctl$GETALL(r1, 0x0, 0xd, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) 2.660304837s ago: executing program 0 (id=1086): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000840)=@ethtool_channels={0x3c, 0x3, 0x88, 0x5, 0x8, 0xac, 0xfffffff7, 0x2, 0x2}}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff00000b000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 2.311350006s ago: executing program 0 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 2.232598788s ago: executing program 5 (id=1088): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x4008010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x9}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0xfeff, 0xa9) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0xf00, 0x0, 0x2, 0xf04b, 0xfffffffffffffffd, 0x0, 0x2}) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, 0x0, 0x0) 2.107659795s ago: executing program 5 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 2.025636639s ago: executing program 3 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000050001042088be"], 0xfdef) 1.235936501s ago: executing program 3 (id=1091): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fgetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000001c0)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xb14, 0xec000000, 0xcd}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_newrule={0x8c, 0x20, 0x800, 0x70bd27, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x3, 0x4, 0x0, 0x0, 0x8, 0xc}, [@FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c89}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x80}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x43}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x0, 0x7e7}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x9}, 0x28) bind$qrtr(r9, &(0x7f0000000000)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) 571.76641ms ago: executing program 6 (id=1092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000004000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 531.209637ms ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 493.636545ms ago: executing program 0 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="dbac3b90272991443a94c8dfa0e783eff5a372527118e40af88666a9f986acfe4b4e883d12c3c1d4313d14a8816e3c08646fe11816fcad9a3df5a610bfae6cc156c6dfb89a91daf589e5ea822e5338a65692b735be34cf26b454986ba179ee5e1b4de5a68f5949bdb63345b6947123c7d61790108134887c72fdd77e49691e805c7bb6e1900e46b9ae975c8201618d6b005a2161d42fca40511ecc715361c7fe2e0fe9bae8af84dc5a07290b06e7c6f429a2f85fec75c0ce6d8e5a3123f34c08cf135e2b61f417ea2b99a9ae7a96dd1c43913d4aac4abe3e3b5189725191a5c6bb6a54d0d09c02f829fd2054c1", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8], 0x80}}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc, 0x2}, {0xf, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) unshare(0x60000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xe}}}, 0x24}}, 0x0) 2.479969ms ago: executing program 6 (id=1095): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xaa17bfcc0c104563, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x105d0100, 0x0, 0x54}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfee0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r1, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x12, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) 0s ago: executing program 5 (id=1096): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000feffffff0105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) kernel console output (not intermixed with test programs): 52d, idProduct=0567, bcdDevice=99.29 [ 201.427597][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.481634][ T9] usb 5-1: Product: syz [ 201.504137][ T9] usb 5-1: Manufacturer: à š [ 201.539069][ T9] usb 5-1: SerialNumber: syz [ 201.711129][ T7828] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.855986][ T7856] syzkaller0: entered promiscuous mode [ 201.876404][ T7856] syzkaller0: entered allmulticast mode [ 202.009687][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 202.092910][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.229310][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.648409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 202.770567][ T9] usb-storage 5-1:11.203: USB Mass Storage device detected [ 202.834111][ T9] usb-storage 5-1:11.203: Quirks match for vid 152d pid 0567: 5000000 [ 202.897226][ T9] usb 5-1: USB disconnect, device number 17 [ 203.059993][ T7874] netlink: 136 bytes leftover after parsing attributes in process `syz.6.512'. [ 203.070521][ T7874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.088524][ T30] audit: type=1400 audit(1777759015.424:482): avc: denied { execute } for pid=7873 comm="syz.6.512" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 203.114756][ T804] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 203.257652][ T5620] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.280180][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 203.294122][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 203.322158][ T804] usb 6-1: no configurations [ 203.327384][ T804] usb 6-1: can't read configurations, error -22 [ 203.343040][ T5819] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.436778][ T5620] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 203.447008][ T5620] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 203.461053][ T5620] usb 4-1: Product: syz [ 203.465300][ T5620] usb 4-1: Manufacturer: syz [ 203.470097][ T5620] usb 4-1: SerialNumber: syz [ 203.529332][ T804] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 203.539958][ T5620] usb 4-1: config 0 descriptor?? [ 203.588769][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.589863][ T5726] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 203.613201][ T5620] ch341 4-1:0.0: ch341-uart converter detected [ 203.631015][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.653046][ T5819] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 203.671672][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.682804][ T30] audit: type=1400 audit(1777759015.966:483): avc: denied { setopt } for pid=7883 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.703591][ T5819] usb 1-1: config 0 descriptor?? [ 203.710824][ T30] audit: type=1400 audit(1777759016.004:484): avc: denied { map } for pid=7883 comm="syz.4.516" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.736923][ T30] audit: type=1400 audit(1777759016.004:485): avc: denied { ioctl } for pid=7883 comm="syz.4.516" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.766815][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 203.778158][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 203.786131][ T804] usb 6-1: no configurations [ 203.794220][ T5726] usb 7-1: config index 0 descriptor too short (expected 3405, got 77) [ 203.795318][ T804] usb 6-1: can't read configurations, error -22 [ 203.809427][ T804] usb usb6-port1: attempt power cycle [ 203.812692][ T5726] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.815808][ T30] audit: type=1400 audit(1777759016.088:486): avc: denied { module_request } for pid=7885 comm="syz.4.517" kmod="netdev-dummy0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 203.825584][ T5726] usb 7-1: config 0 has no interfaces? [ 203.858171][ T5726] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.868886][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.877698][ T5726] usb 7-1: Product: syz [ 203.882129][ T5726] usb 7-1: Manufacturer: syz [ 203.885397][ T7888] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 203.886842][ T5726] usb 7-1: SerialNumber: syz [ 203.902116][ T5726] usb 7-1: config 0 descriptor?? [ 203.942213][ T7888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.967399][ T7891] bond5: (slave veth7): Enslaving as an active interface with a down link [ 203.983218][ T7886] netlink: 14 bytes leftover after parsing attributes in process `syz.4.517'. [ 204.161982][ T9] usb 7-1: USB disconnect, device number 3 [ 204.230009][ T804] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 204.252993][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 204.259749][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.267771][ T804] usb 6-1: no configurations [ 204.272885][ T804] usb 6-1: can't read configurations, error -22 [ 204.336885][ T5798] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.358640][ T5819] usbhid 1-1:0.0: can't add hid device: -71 [ 204.364671][ T5819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.375040][ T5819] usb 1-1: USB disconnect, device number 16 [ 204.414308][ T804] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 204.444336][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 204.451030][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.458905][ T804] usb 6-1: no configurations [ 204.463514][ T804] usb 6-1: can't read configurations, error -22 [ 204.470492][ T804] usb usb6-port1: unable to enumerate USB device [ 204.510629][ T5798] usb 5-1: config index 0 descriptor too short (expected 3405, got 77) [ 204.519662][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.529819][ T5798] usb 5-1: config 0 has no interfaces? [ 204.536964][ T5798] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.546230][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.554717][ T5798] usb 5-1: Product: syz [ 204.558888][ T5798] usb 5-1: Manufacturer: syz [ 204.563633][ T5798] usb 5-1: SerialNumber: syz [ 204.569914][ T5798] usb 5-1: config 0 descriptor?? [ 204.638981][ T5620] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 204.751021][ T30] audit: type=1400 audit(1777759016.968:487): avc: denied { create } for pid=7894 comm="syz.6.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 204.771885][ T30] audit: type=1400 audit(1777759016.968:488): avc: denied { ioctl } for pid=7894 comm="syz.6.519" path="socket:[18544]" dev="sockfs" ino=18544 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 204.804028][ T5819] usb 5-1: USB disconnect, device number 18 [ 204.931149][ T5620] usb 4-1: USB disconnect, device number 13 [ 205.001730][ T5620] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 205.827797][ T5620] ch341 4-1:0.0: device disconnected [ 205.873129][ T5819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 206.048314][ T5819] usb 1-1: config 227 has an invalid interface number: 20 but max is 0 [ 206.054822][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.527'. [ 206.056627][ T5819] usb 1-1: config 227 has no interface number 0 [ 206.117582][ T5819] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 206.163542][ T5819] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024 [ 206.188567][ T5819] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024 [ 206.213785][ T5819] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 206.228262][ T5726] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 206.228968][ T5819] usb 1-1: config 227 interface 20 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 206.270627][ T5819] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0xA has invalid maxpacket 32 [ 206.280970][ T5819] usb 1-1: config 227 interface 20 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 206.294876][ T5819] usb 1-1: config 227 interface 20 has no altsetting 0 [ 206.313007][ T5819] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 206.322975][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.336954][ T5819] usb 1-1: Product: syz [ 206.349669][ T5819] usb 1-1: Manufacturer: syz [ 206.354627][ T5819] usb 1-1: SerialNumber: syz [ 206.363553][ T7902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.373660][ T7902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.538106][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 206.543811][ T5726] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 206.552710][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.564442][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.575579][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.587912][ T5620] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 206.602846][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.611359][ T5819] ipaq 1-1:227.20: PocketPC PDA converter detected [ 206.614399][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.620095][ T30] audit: type=1400 audit(1777759018.699:489): avc: denied { read } for pid=7923 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.630651][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.651429][ T5819] usb 1-1: active config #227 != 1 ?? [ 206.662120][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.679718][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.691195][ T5726] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 206.698674][ T5819] usb 1-1: USB disconnect, device number 17 [ 206.705910][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 206.714546][ T5726] usb 5-1: SerialNumber: syz [ 206.740102][ T5726] usb 5-1: config 0 descriptor?? [ 206.763013][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.773573][ T5620] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 206.783612][ T5726] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 206.793465][ T5620] usb 4-1: can't read configurations, error -71 [ 206.963447][ T7909] input: syz1 as /devices/virtual/input/input14 [ 207.346841][ T4962] bcm5974 5-1:0.0: could not read from device [ 207.583132][ T4962] bcm5974 5-1:0.0: could not read from device [ 207.608550][ T5726] usb 5-1: USB disconnect, device number 19 [ 207.695765][ T4962] bcm5974 5-1:0.0: could not read from device [ 207.911158][ T30] audit: type=1400 audit(1777759019.934:490): avc: denied { connect } for pid=7941 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.978425][ T30] audit: type=1400 audit(1777759019.990:491): avc: denied { read } for pid=7941 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.078796][ T5819] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 208.093150][ T7950] blktrace: Concurrent blktraces are not allowed on loop5 [ 208.174831][ T7951] netlink: 'syz.4.537': attribute type 7 has an invalid length. [ 208.207282][ T7951] netlink: 'syz.4.537': attribute type 8 has an invalid length. [ 208.291515][ T5819] usb 1-1: config index 0 descriptor too short (expected 3405, got 77) [ 208.309979][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.351161][ T5819] usb 1-1: config 0 has no interfaces? [ 208.386839][ T804] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.397196][ T5819] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.429134][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.474256][ T5819] usb 1-1: Product: syz [ 208.492397][ T5819] usb 1-1: Manufacturer: syz [ 208.518355][ T5819] usb 1-1: SerialNumber: syz [ 208.542197][ T5819] usb 1-1: config 0 descriptor?? [ 208.579174][ T804] usb 7-1: Using ep0 maxpacket: 8 [ 208.590952][ T804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 208.607825][ T804] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 208.618618][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.632569][ T804] usb 7-1: Product: syz [ 208.643034][ T804] usb 7-1: Manufacturer: syz [ 208.654556][ T804] usb 7-1: SerialNumber: syz [ 208.819450][ T5726] usb 1-1: USB disconnect, device number 18 [ 209.182861][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 209.182879][ T30] audit: type=1400 audit(1777759021.113:493): avc: denied { read write } for pid=7957 comm="syz.5.540" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.396591][ T30] audit: type=1400 audit(1777759021.319:494): avc: denied { read } for pid=7972 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.530534][ T5726] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 209.702494][ T30] audit: type=1400 audit(1777759021.506:495): avc: denied { create } for pid=7983 comm="syz.3.548" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.776651][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 209.787501][ T5726] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 209.798602][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.806648][ T5726] usb 5-1: Product: syz [ 209.812882][ T5726] usb 5-1: Manufacturer: syz [ 209.817494][ T5726] usb 5-1: SerialNumber: syz [ 209.989762][ T5819] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 210.026132][ T7992] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 210.046792][ T7992] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 210.155062][ T5819] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 210.177192][ T5819] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 210.193362][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.210088][ T5819] usb 1-1: Product: ã°Š [ 210.218345][ T5819] usb 1-1: SerialNumber: syz [ 210.342384][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 210.459968][ T5819] usb 1-1: 1:1 : bogus bTerminalLink 67 [ 210.549921][ T30] audit: type=1400 audit(1777759022.405:496): avc: denied { unlink } for pid=5613 comm="syz-executor" name="file0" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.576653][ T30] audit: type=1400 audit(1777759022.423:497): avc: denied { lock } for pid=7967 comm="syz.4.542" path="socket:[19050]" dev="sockfs" ino=19050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 210.637677][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 210.651182][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 210.687127][ T5726] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 210.690161][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 210.742598][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.743773][ T5726] usb 5-1: USB disconnect, device number 20 [ 210.767108][ T7996] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 210.788984][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.803926][ T5819] usb 1-1: USB disconnect, device number 19 [ 210.847661][ T9] usb 6-1: Product: syz [ 210.881008][ T9] usb 6-1: Manufacturer: syz [ 210.910590][ T9] usb 6-1: SerialNumber: syz [ 210.947468][ T9] usb 6-1: config 0 descriptor?? [ 210.954710][ T7996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.981963][ T7992] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 210.993747][ T8001] netlink: 14 bytes leftover after parsing attributes in process `syz.3.551'. [ 211.069814][ T7999] bond3: (slave veth7): Enslaving as an active interface with a down link [ 211.343384][ T7991] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 211.722083][ T804] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 211.746375][ T804] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 212.073487][ T8019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.457380][ T804] usb 7-1: USB disconnect, device number 4 [ 212.642669][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 213.259668][ T8033] hugetlbfs: syz.0.563 (8033): Using mlock ulimits for SHM_HUGETLB is obsolete [ 213.329435][ T8035] syzkaller0: entered promiscuous mode [ 213.335286][ T8035] syzkaller0: entered allmulticast mode [ 213.344555][ T8035] tc action pedit offset must be on 32 bit boundaries [ 213.410617][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 213.470420][ T5726] usb 6-1: USB disconnect, device number 14 [ 213.601633][ T804] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 213.620501][ T30] audit: type=1400 audit(1777759025.268:498): avc: denied { read append } for pid=8036 comm="syz.3.565" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 213.651367][ T30] audit: type=1400 audit(1777759025.268:499): avc: denied { open } for pid=8036 comm="syz.3.565" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 213.802225][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 213.813417][ T804] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.824723][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.845549][ T804] usb 5-1: config 0 descriptor?? [ 213.865145][ T804] cp210x 5-1:0.0: cp210x converter detected [ 213.889623][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.567'. [ 213.951178][ T8052] loop6: detected capacity change from 0 to 2640 [ 213.968346][ T5611] buffer_io_error: 32 callbacks suppressed [ 213.968357][ T5611] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.993337][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.016169][ T5611] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.036862][ T5611] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.058511][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.067122][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.076056][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.087774][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.096485][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.106350][ T8052] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.116093][ T8052] ldm_validate_partition_table(): Disk read failed. [ 214.124934][ T8052] Dev loop6: unable to read RDB block 0 [ 214.134873][ T8052] loop6: unable to read partition table [ 214.147684][ T8052] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 214.482802][ T804] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 214.499101][ T804] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 214.516786][ T804] usb 5-1: cp210x converter now attached to ttyUSB0 [ 214.622834][ T8058] netlink: 80 bytes leftover after parsing attributes in process `syz.3.572'. [ 214.642452][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 214.927298][ T804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 214.952529][ T5726] usb 5-1: USB disconnect, device number 21 [ 214.983783][ T5726] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.997679][ T5726] cp210x 5-1:0.0: device disconnected [ 215.106672][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.575'. [ 215.115781][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 215.126754][ T804] usb 4-1: config 67 has too many interfaces: 47, using maximum allowed: 32 [ 215.137398][ T804] usb 4-1: config 67 has an invalid interface number: 49 but max is 46 [ 215.150703][ T804] usb 4-1: config 67 has 1 interface, different from the descriptor's value: 47 [ 215.162211][ T804] usb 4-1: config 67 has no interface number 0 [ 215.169751][ T804] usb 4-1: config 67 interface 49 has no altsetting 0 [ 215.186377][ T804] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 215.214468][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.234279][ T804] usb 4-1: Product: syz [ 215.239862][ T5798] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 215.250768][ T804] usb 4-1: Manufacturer: syz [ 215.262413][ T804] usb 4-1: SerialNumber: syz [ 215.288272][ T8076] ip6t_REJECT: ECHOREPLY is not supported [ 215.451211][ T5610] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 215.503725][ T5798] usb 6-1: Using ep0 maxpacket: 8 [ 215.512213][ T5798] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.517852][ T8058] vlan2: entered allmulticast mode [ 215.530873][ T8058] macsec0: entered allmulticast mode [ 215.540859][ T5798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.556931][ T8058] veth1_macvtap: entered allmulticast mode [ 215.569330][ T5798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.589426][ T5798] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.602842][ T5798] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.612279][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.645645][ T804] radio-usb-si4713 4-1:67.49: Si4713 development board discovered: (10C4:8244) [ 215.686947][ T804] radio-usb-si4713 4-1:67.49: probe with driver radio-usb-si4713 failed with error -71 [ 215.720475][ T804] usbhid 4-1:67.49: couldn't find an input interrupt endpoint [ 215.764725][ T804] usb 4-1: USB disconnect, device number 16 [ 215.842453][ T5798] usb 6-1: GET_CAPABILITIES returned 0 [ 215.856708][ T5798] usbtmc 6-1:16.0: can't read capabilities [ 215.863922][ T30] audit: type=1400 audit(1777759027.374:500): avc: denied { map } for pid=8086 comm="syz.0.581" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.927455][ T30] audit: type=1400 audit(1777759027.374:501): avc: denied { execute } for pid=8086 comm="syz.0.581" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.956473][ T30] audit: type=1400 audit(1777759027.374:502): avc: denied { ioctl } for pid=8086 comm="syz.0.581" path="socket:[19285]" dev="sockfs" ino=19285 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.070383][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.079744][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.088845][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.097918][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.106991][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.119881][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.128991][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.142495][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.153545][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.162633][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.171688][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.180728][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.189764][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.198816][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.224767][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.233891][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 216.243543][ T30] audit: type=1400 audit(1777759027.711:503): avc: denied { mount } for pid=8086 comm="syz.0.581" name="/" dev="autofs" ino=19290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 216.254138][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.301994][ T24] usb 6-1: USB disconnect, device number 15 [ 216.320749][ T30] audit: type=1400 audit(1777759027.804:504): avc: denied { load_policy } for pid=8086 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.350093][ T8090] SELinux: failed to load policy [ 216.546413][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz.6.584'. [ 217.139465][ T8108] netlink: 'syz.5.587': attribute type 1 has an invalid length. [ 217.648459][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.695243][ T8108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.724003][ T8118] netlink: 14 bytes leftover after parsing attributes in process `syz.5.587'. [ 217.782241][ T8115] bond1: (slave veth3): Enslaving as an active interface with a down link [ 217.847507][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.856784][ T8117] bond1: (slave dummy0): making interface the new active one [ 217.860808][ T8117] dummy0: entered promiscuous mode [ 217.871052][ T8117] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 217.897345][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.917238][ T24] usb 5-1: config 0 descriptor?? [ 217.928333][ T24] cp210x 5-1:0.0: cp210x converter detected [ 217.928650][ T8118] bond1: (slave dummy0): Releasing active interface [ 217.962373][ T8118] dummy0 (unregistering): left promiscuous mode [ 218.119631][ T8123] ip6gre0: Master is either lo or non-ether device [ 218.353848][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.363632][ T24] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 218.372521][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.382477][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.383385][ T24] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 218.399430][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.412268][ T5798] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.443019][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.487305][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.511488][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.574852][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.680023][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.755767][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 218.802396][ T5726] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 218.804717][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.915531][ T5798] usb 4-1: config 0 has no interfaces? [ 218.947171][ T5726] hid-generic 0006:0008:0001.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 218.959161][ T5798] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.995368][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.026233][ T5798] usb 4-1: Product: syz [ 219.035770][ T5798] usb 4-1: Manufacturer: syz [ 219.054635][ T5798] usb 4-1: SerialNumber: syz [ 219.086454][ T5798] usb 4-1: config 0 descriptor?? [ 219.115289][ T5798] usb 5-1: USB disconnect, device number 22 [ 219.145378][ T5798] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.187096][ T5798] cp210x 5-1:0.0: device disconnected [ 219.408019][ T24] usb 4-1: USB disconnect, device number 17 [ 220.459688][ T2703] block nbd0: Possible stuck request ffff888028345080: control (read@0,1024B). Runtime 90 seconds [ 220.470395][ T2703] block nbd0: Possible stuck request ffff888028345240: control (read@1024,1024B). Runtime 90 seconds [ 220.481326][ T2703] block nbd0: Possible stuck request ffff888028345400: control (read@2048,1024B). Runtime 90 seconds [ 220.493298][ T2703] block nbd0: Possible stuck request ffff8880283455c0: control (read@3072,1024B). Runtime 90 seconds [ 221.049284][ T30] audit: type=1400 audit(1777759032.221:505): avc: denied { wake_alarm } for pid=8174 comm="syz.6.604" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.124764][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 221.198826][ T8176] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 221.521093][ T5711] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 221.616344][ T5620] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 221.707033][ T5711] usb 5-1: config index 0 descriptor too short (expected 3405, got 77) [ 221.755650][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.785660][ T5711] usb 5-1: config 0 has no interfaces? [ 221.797898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.827447][ T5711] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.897343][ T5620] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 221.909454][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.932101][ T5711] usb 5-1: Product: syz [ 221.948567][ T5620] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 221.960105][ T5711] usb 5-1: Manufacturer: syz [ 221.965469][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.973677][ T5711] usb 5-1: SerialNumber: syz [ 221.984089][ T5620] usb 6-1: Product: ã°Š [ 221.992913][ T5711] usb 5-1: config 0 descriptor?? [ 222.000497][ T5620] usb 6-1: SerialNumber: syz [ 222.146947][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 222.278647][ T5620] usb 6-1: 1:1 : bogus bTerminalLink 67 [ 222.355520][ T5711] usb 5-1: USB disconnect, device number 23 [ 222.699938][ T5620] usb 6-1: USB disconnect, device number 16 [ 223.392462][ T8204] netlink: 48 bytes leftover after parsing attributes in process `syz.5.613'. [ 223.612944][ T8209] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 223.641750][ T8207] ip6t_REJECT: ECHOREPLY is not supported [ 224.320490][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 224.345396][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 224.411534][ T8218] [U] [ 224.414538][ T8218] [U] [ 224.417233][ T8218] [U] [ 224.419914][ T8218] [U] [ 224.451978][ T8218] [U] [ 224.454710][ T8218] [U] [ 224.457394][ T8218] [U] [ 224.460077][ T8218] [U] [ 224.482343][ T8218] [U] [ 224.485064][ T8218] [U] [ 224.487748][ T8218] [U] [ 225.346491][ T8239] syzkaller0: entered promiscuous mode [ 225.368353][ T8239] syzkaller0: entered allmulticast mode [ 225.390998][ T8245] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 225.399269][ T53] syzkaller0: tun_net_xmit 48 [ 225.424562][ T8239] syzkaller0: tun_net_xmit 1280 [ 225.497570][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 225.645453][ T30] audit: type=1400 audit(1777759036.526:506): avc: denied { getopt } for pid=8246 comm="syz.5.627" laddr=172.20.20.10 lport=256 faddr=172.20.20.8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.682368][ T8224] [U] [ 225.728012][ T5620] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 225.860935][ T8256] bond0: entered promiscuous mode [ 225.870763][ T8256] batadv0: entered promiscuous mode [ 225.930598][ T8256] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 225.930728][ T8258] raw_sendmsg: syz.4.630 forgot to set AF_INET. Fix it! [ 225.993487][ T8256] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 226.035023][ T5620] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.204993][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.235916][ T5620] usb 1-1: config 0 descriptor?? [ 226.253390][ T5620] cp210x 1-1:0.0: cp210x converter detected [ 226.331946][ T30] audit: type=1400 audit(1777759037.172:507): avc: denied { getopt } for pid=8260 comm="syz.6.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.680516][ T5620] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 226.714204][ T5620] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 226.744481][ T5620] usb 1-1: cp210x converter now attached to ttyUSB0 [ 226.821744][ T8270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 227.164212][ T5620] usb 1-1: USB disconnect, device number 20 [ 227.350135][ T5620] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.359211][ T5620] cp210x 1-1:0.0: device disconnected [ 228.198740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 228.209008][ T5726] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 228.391239][ T5726] usb 5-1: device descriptor read/64, error -71 [ 228.924774][ T5726] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 229.224869][ T5726] usb 5-1: device descriptor read/64, error -71 [ 229.366083][ T5726] usb usb5-port1: attempt power cycle [ 229.752074][ T5726] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 229.868721][ T5726] usb 5-1: device descriptor read/8, error -71 [ 229.910937][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.107486][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.142318][ T5726] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 230.230574][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.261798][ T5726] usb 5-1: device descriptor read/8, error -71 [ 230.262693][ T5798] IPVS: starting estimator thread 0... [ 230.278229][ T24] usb 4-1: config 0 descriptor?? [ 230.306182][ T24] cp210x 4-1:0.0: cp210x converter detected [ 230.368017][ T8323] IPVS: using max 42 ests per chain, 100800 per kthread [ 230.407337][ T5726] usb usb5-port1: unable to enumerate USB device [ 231.106354][ T24] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 231.115066][ T24] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 231.126891][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 231.170899][ T5726] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 231.316340][ T30] audit: type=1400 audit(1777759041.832:508): avc: denied { create } for pid=8334 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.404537][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 231.421255][ T5726] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.444842][ T5726] usb 6-1: config 0 has no interface number 0 [ 231.521774][ T30] audit: type=1400 audit(1777759041.991:509): avc: denied { write } for pid=8332 comm="syz.6.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.606906][ T5726] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.697705][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.711088][ T30] audit: type=1400 audit(1777759042.150:510): avc: denied { ioctl } for pid=8338 comm="syz.4.656" path="socket:[20120]" dev="sockfs" ino=20120 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.752467][ T5726] usb 6-1: Product: syz [ 231.767901][ T5726] usb 6-1: Manufacturer: syz [ 231.776776][ T5726] usb 6-1: SerialNumber: syz [ 231.777705][ T804] usb 4-1: USB disconnect, device number 18 [ 231.811057][ T804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.824467][ T5726] usb 6-1: config 0 descriptor?? [ 231.831686][ T804] cp210x 4-1:0.0: device disconnected [ 231.856039][ T5726] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.959866][ T30] audit: type=1800 audit(1777759042.431:511): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.658" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 232.161570][ T5726] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 232.204955][ T5726] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 232.431458][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.482277][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.548560][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.585091][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.806451][ T8370] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 232.837270][ T30] audit: type=1400 audit(1777759043.254:512): avc: denied { mount } for pid=8367 comm="syz.4.664" name="/" dev="ramfs" ino=20798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.852870][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 232.870510][ T24] usb 6-1: USB disconnect, device number 17 [ 232.904293][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 232.948045][ T8370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.970093][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 233.010367][ T24] quatech2 6-1:0.51: device disconnected [ 233.020189][ T8370] netlink: 14 bytes leftover after parsing attributes in process `syz.3.662'. [ 233.324083][ T8374] bond4: (slave veth9): Enslaving as an active interface with a down link [ 233.530842][ T8396] ip6t_REJECT: ECHOREPLY is not supported [ 234.311603][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 234.484846][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.503656][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.597221][ T24] usb 1-1: config 0 descriptor?? [ 234.720236][ T24] cp210x 1-1:0.0: cp210x converter detected [ 235.218501][ T8408] nbd1: detected capacity change from 0 to 128 [ 235.243918][ T24] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 235.266939][ T5610] block nbd1: Receive control failed (result -104) [ 235.273953][ T5623] block nbd1: Receive control failed (result -32) [ 235.286502][ T24] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 235.325455][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 235.752565][ T24] usb 1-1: USB disconnect, device number 21 [ 235.787549][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.813380][ T24] cp210x 1-1:0.0: device disconnected [ 235.839337][ T804] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 236.036158][ T804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 236.046639][ T804] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.458995][ T804] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.478846][ T804] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 236.490889][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.763598][ T804] usb 7-1: Product: syz [ 236.822796][ T804] usb 7-1: Manufacturer: syz [ 236.833331][ T804] usb 7-1: SerialNumber: syz [ 236.878992][ T804] usb 7-1: selecting invalid altsetting 1 [ 236.911910][ T804] usb 7-1: unit 6 not found! [ 237.490993][ T30] audit: type=1804 audit(1777759047.606:513): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.687" name="/newroot/157/file0" dev="tmpfs" ino=831 res=1 errno=0 [ 237.694151][ T804] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 239.123471][ T30] audit: type=1804 audit(1777759047.793:514): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.686" name="/newroot/131/file0" dev="tmpfs" ino=722 res=1 errno=0 [ 239.334659][ T804] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 239.357794][ T804] usb 7-1: USB disconnect, device number 5 [ 239.771849][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.801013][ T8465] loop6: detected capacity change from 0 to 2640 [ 239.818098][ T8465] buffer_io_error: 16 callbacks suppressed [ 239.818110][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.832979][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.842563][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.867451][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.875840][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.928559][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.951178][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.988465][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.004657][ T8465] ldm_validate_partition_table(): Disk read failed. [ 240.025953][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.047123][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.076105][ T8465] Dev loop6: unable to read RDB block 0 [ 240.083912][ T8465] loop6: unable to read partition table [ 240.090383][ T8465] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 240.452525][ T8474] Cannot find del_set index 2 as target [ 240.989983][ T804] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 242.529952][ T804] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.741311][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.825071][ T804] usb 1-1: config 0 descriptor?? [ 242.844506][ T804] cp210x 1-1:0.0: cp210x converter detected [ 242.899367][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 243.104813][ T8518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 243.274946][ T804] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 243.304540][ T804] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 243.327831][ T804] usb 1-1: cp210x converter now attached to ttyUSB0 [ 243.564923][ T30] audit: type=1800 audit(1777759053.286:515): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.710" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 243.668041][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 243.694482][ T8531] SET target dimension over the limit! [ 243.700035][ T30] audit: type=1400 audit(1777759053.408:516): avc: denied { mount } for pid=8530 comm="syz.3.713" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 243.788399][ T5610] Bluetooth: hci0: unexpected event for opcode 0x040d [ 243.803627][ T804] usb 1-1: USB disconnect, device number 22 [ 243.884230][ T804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.928993][ T804] cp210x 1-1:0.0: device disconnected [ 244.489578][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.715'. [ 244.658265][ T8550] loop6: detected capacity change from 0 to 2640 [ 244.679694][ T8550] ldm_validate_partition_table(): Disk read failed. [ 244.703193][ T8550] Dev loop6: unable to read RDB block 0 [ 244.726883][ T8550] loop6: unable to read partition table [ 244.746975][ T8550] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 245.563860][ T24] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 245.668421][ T804] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 245.853914][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.864285][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 245.878738][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.919499][ T804] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 245.938677][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.947042][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.970783][ T804] usb 6-1: config 0 descriptor?? [ 245.991543][ T24] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 246.007459][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 246.025593][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.053529][ T24] usb 5-1: config 0 descriptor?? [ 246.076310][ T8571] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 246.561384][ T24] hid_parser_main: 7 callbacks suppressed [ 246.562796][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.612241][ T804] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 246.652934][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.700793][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.726947][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.744249][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.759142][ T8568] IPVS: dh: FWM 3 0x00000003 - no destination available [ 246.787415][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.797959][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.827839][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.851452][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.871098][ T5620] usb 6-1: USB disconnect, device number 18 [ 246.877740][ T24] topre 0003:0853:0148.0003: unknown main item tag 0x0 [ 246.911161][ T5741] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 246.949196][ T24] topre 0003:0853:0148.0003: hidraw1: USB HID v7f.fd Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 246.952398][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.730'. [ 247.086050][ T5741] usb 7-1: Using ep0 maxpacket: 32 [ 247.099733][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.124963][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.231055][ T5741] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.240277][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.267319][ T5741] usb 7-1: config 0 descriptor?? [ 247.275508][ T5741] hub 7-1:0.0: USB hub found [ 247.725053][ T5741] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 248.415270][ T5620] usb 5-1: USB disconnect, device number 28 [ 248.542990][ T8599] netlink: 'syz.0.733': attribute type 11 has an invalid length. [ 248.577421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.588234][ T30] audit: type=1400 audit(1777759058.002:517): avc: denied { getopt } for pid=8598 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.782976][ T5741] hid-generic 0003:046D:C31C.0005: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 249.326256][ T5741] usb 7-1: USB disconnect, device number 6 [ 249.402932][ T8608] fido_id[8608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 249.608519][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 250.132748][ T8629] netlink: 108 bytes leftover after parsing attributes in process `syz.4.743'. [ 250.198010][ T5871] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 250.322815][ T5871] bond1: (slave veth3): making interface the new active one [ 250.342488][ T5871] bond1: active interface up! [ 250.594056][ T8642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.369521][ T8654] blktrace: Concurrent blktraces are not allowed on loop5 [ 251.483658][ T5819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 251.521605][ T8660] netlink: 'syz.3.752': attribute type 7 has an invalid length. [ 251.533026][ T8660] netlink: 'syz.3.752': attribute type 8 has an invalid length. [ 251.579417][ T30] audit: type=1400 audit(1777759060.782:518): avc: denied { bind } for pid=8655 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.735536][ T30] audit: type=1400 audit(1777759060.782:519): avc: denied { setopt } for pid=8655 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.759516][ T5819] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.772285][ T5819] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.258955][ T5819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.279344][ T30] audit: type=1400 audit(1777759061.437:520): avc: denied { mount } for pid=8655 comm="syz.4.753" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 252.321124][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.356667][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.386035][ T5819] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.401551][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.416963][ T5819] usb 1-1: Product: syz [ 252.426306][ T5819] usb 1-1: Manufacturer: syz [ 252.449768][ T5819] cdc_wdm 1-1:1.0: skipping garbage [ 252.458139][ T5819] cdc_wdm 1-1:1.0: skipping garbage [ 252.471097][ T5819] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 252.477666][ T5819] cdc_wdm 1-1:1.0: Unknown control protocol [ 252.959526][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.980958][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.990699][ T2703] block nbd0: Possible stuck request ffff888028345080: control (read@0,1024B). Runtime 120 seconds [ 253.001454][ T2703] block nbd0: Possible stuck request ffff888028345240: control (read@1024,1024B). Runtime 120 seconds [ 253.012428][ T2703] block nbd0: Possible stuck request ffff888028345400: control (read@2048,1024B). Runtime 120 seconds [ 253.024739][ T2703] block nbd0: Possible stuck request ffff8880283455c0: control (read@3072,1024B). Runtime 120 seconds [ 253.214656][ T5620] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 253.587919][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.761'. [ 253.627375][ T30] audit: type=1400 audit(1777759062.710:521): avc: denied { map } for pid=8647 comm="syz.0.749" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.684116][ T5620] usb 4-1: config index 0 descriptor too short (expected 3405, got 77) [ 253.697751][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.720320][ T5620] usb 4-1: config 0 has no interfaces? [ 253.738836][ T5620] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.756278][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.770613][ T5620] usb 4-1: Product: syz [ 253.779921][ T5620] usb 4-1: Manufacturer: syz [ 253.787749][ T5620] usb 4-1: SerialNumber: syz [ 253.801077][ T5620] usb 4-1: config 0 descriptor?? [ 254.032852][ T804] usb 4-1: USB disconnect, device number 19 [ 254.059110][ T5726] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 254.197942][ T5726] usb 6-1: device descriptor read/64, error -71 [ 254.425912][ T8707] loop6: detected capacity change from 0 to 2640 [ 254.435507][ T8707] buffer_io_error: 32 callbacks suppressed [ 254.435523][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.449565][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.454567][ T5726] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 254.457866][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.477660][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.485822][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.493900][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.502871][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.510857][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.521214][ T8707] ldm_validate_partition_table(): Disk read failed. [ 254.530779][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.538870][ T8707] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.548299][ T8707] Dev loop6: unable to read RDB block 0 [ 254.554455][ T8707] loop6: unable to read partition table [ 254.567034][ T8707] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 254.610878][ T5726] usb 6-1: device descriptor read/64, error -71 [ 254.806676][ T5726] usb usb6-port1: attempt power cycle [ 255.277239][ T5726] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 255.286109][ T5620] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 255.312378][ T5726] usb 6-1: device descriptor read/8, error -71 [ 255.319968][ T5711] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 255.450619][ T5620] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.470235][ T5711] usb 4-1: device descriptor read/64, error -71 [ 255.476598][ T5620] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.487623][ T5620] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.497104][ T5620] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.513048][ T5620] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.522461][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.530582][ T5620] usb 5-1: Product: syz [ 255.535095][ T5620] usb 5-1: Manufacturer: syz [ 255.543845][ T5620] cdc_wdm 5-1:1.0: skipping garbage [ 255.550319][ T5620] cdc_wdm 5-1:1.0: skipping garbage [ 255.560493][ T5620] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 255.566559][ T5620] cdc_wdm 5-1:1.0: Unknown control protocol [ 255.576431][ T5726] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 255.602152][ T5726] usb 6-1: device descriptor read/8, error -71 [ 255.726291][ T5726] usb usb6-port1: unable to enumerate USB device [ 255.736709][ T5711] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.762982][ T8712] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 255.772694][ T8712] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 255.800165][ T8712] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 255.813621][ T804] usb 1-1: USB disconnect, device number 23 [ 255.886972][ T5711] usb 4-1: device descriptor read/64, error -71 [ 255.920669][ T30] audit: type=1400 audit(1777759064.862:522): avc: denied { bind } for pid=8728 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.094857][ T5711] usb usb4-port1: attempt power cycle [ 256.378580][ T8711] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 256.387789][ T8711] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 256.396342][ T8711] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 256.417308][ T5620] usb 5-1: USB disconnect, device number 29 [ 256.474162][ T5711] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 256.579517][ T5711] usb 4-1: device descriptor read/8, error -71 [ 256.610436][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 256.965798][ T5711] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.105149][ T5711] usb 4-1: device descriptor read/8, error -71 [ 257.168461][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'. [ 257.232995][ T5711] usb usb4-port1: unable to enumerate USB device [ 257.463096][ T8746] SET target dimension over the limit! [ 257.545039][ T804] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 257.842858][ T5798] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 257.888016][ T804] usb 6-1: config index 0 descriptor too short (expected 3405, got 77) [ 257.896344][ T804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.924089][ T804] usb 6-1: config 0 has no interfaces? [ 257.947452][ T804] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.956959][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.966875][ T804] usb 6-1: Product: syz [ 257.971410][ T804] usb 6-1: Manufacturer: syz [ 257.978004][ T804] usb 6-1: SerialNumber: syz [ 257.988454][ T8760] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 257.999868][ T804] usb 6-1: config 0 descriptor?? [ 258.023518][ T5798] usb 7-1: device descriptor read/64, error -71 [ 258.071056][ T8760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.101445][ T8764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.108444][ T8764] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 258.122563][ T8764] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 258.192138][ T8770] ip6t_REJECT: ECHOREPLY is not supported [ 258.241122][ T804] usb 6-1: USB disconnect, device number 23 [ 258.312070][ T5798] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 258.461626][ T5798] usb 7-1: device descriptor read/64, error -71 [ 258.579815][ T5798] usb usb7-port1: attempt power cycle [ 258.953440][ T5798] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 259.006730][ T5798] usb 7-1: device descriptor read/8, error -71 [ 259.273890][ T5798] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 259.521541][ T5798] usb 7-1: device descriptor read/8, error -71 [ 259.690794][ T5798] usb usb7-port1: unable to enumerate USB device [ 259.960612][ T804] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 260.310069][ T8800] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 260.897818][ T8800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.953831][ T8801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.963046][ T8801] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 260.975127][ T8801] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 261.015661][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 261.022753][ T804] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 261.048064][ T804] usb 6-1: too many endpoints for config 0 interface 0 altsetting 40: 39, using maximum allowed: 30 [ 261.069875][ T804] usb 6-1: config 0 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 261.114619][ T804] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.131028][ T804] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 261.149585][ T804] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 261.157832][ T5798] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 261.178155][ T804] usb 6-1: Product: syz [ 261.187987][ T804] usb 6-1: Manufacturer: syz [ 261.202525][ T804] usb 6-1: SerialNumber: syz [ 261.236469][ T804] usb 6-1: config 0 descriptor?? [ 261.452596][ T5798] usb 4-1: config index 0 descriptor too short (expected 3405, got 77) [ 261.462833][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.474258][ T5798] usb 4-1: config 0 has no interfaces? [ 261.581521][ T804] imon_raw 6-1:0.0: IR endpoint missing [ 261.590150][ T804] usb 6-1: USB disconnect, device number 24 [ 261.596680][ T5798] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.607289][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.631037][ T5798] usb 4-1: Product: syz [ 261.637173][ T5798] usb 4-1: Manufacturer: syz [ 261.641885][ T5798] usb 4-1: SerialNumber: syz [ 261.651197][ T5798] usb 4-1: config 0 descriptor?? [ 261.890386][ T5620] usb 4-1: USB disconnect, device number 24 [ 262.558097][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.564505][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.602679][ T8841] fuseblk: Bad value for 'rootmode' [ 263.798643][ T30] audit: type=1400 audit(1777759072.217:523): avc: denied { read } for pid=8833 comm="syz.5.811" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 264.217423][ T30] audit: type=1400 audit(1777759072.217:524): avc: denied { open } for pid=8833 comm="syz.5.811" path="/88/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 264.767895][ T8855] ip6t_REJECT: ECHOREPLY is not supported [ 265.012250][ T804] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 265.206789][ T804] usb 7-1: Using ep0 maxpacket: 8 [ 265.224665][ T804] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 265.251337][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 265.276007][ T804] usb 7-1: Product: syz [ 265.321165][ T804] usb 7-1: Manufacturer: syz [ 265.337487][ T804] usb 7-1: SerialNumber: syz [ 265.363632][ T804] usb 7-1: config 0 descriptor?? [ 265.494730][ T804] gspca_main: sq905-2.14.0 probing 2770:9120 [ 265.503966][ T30] audit: type=1400 audit(1777759073.827:525): avc: denied { mounton } for pid=8863 comm="syz.5.822" path="/bus" dev="ramfs" ino=23049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 265.504169][ T8864] overlayfs: conflicting options: nfs_export=on,index=off [ 265.988837][ T804] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 265.996166][ T804] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 266.026867][ T804] usb 7-1: USB disconnect, device number 11 [ 267.347457][ T8892] blktrace: Concurrent blktraces are not allowed on loop5 [ 267.364909][ T2703] block nbd1: Connection timed out, retrying (0/2 alive) [ 267.510278][ T8896] netlink: 'syz.4.831': attribute type 7 has an invalid length. [ 267.550837][ T8896] netlink: 'syz.4.831': attribute type 8 has an invalid length. [ 267.609584][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.6.834'. [ 267.611513][ T6151] block nbd1: Dead connection, failed to find a fallback [ 267.641868][ T6151] block nbd1: shutting down sockets [ 267.730441][ T6151] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.782720][ T6151] buffer_io_error: 11 callbacks suppressed [ 267.782737][ T6151] Buffer I/O error on dev nbd1, logical block 0, async page read [ 267.948927][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.019410][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.073717][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.139600][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.171711][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.184769][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.227862][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.241666][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.253122][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.265334][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.313698][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.365993][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.402973][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.421255][ T5726] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 268.458525][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.498606][ T5611] ldm_validate_partition_table(): Disk read failed. [ 268.533083][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.585288][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.604231][ T5726] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 268.624474][ T5726] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 268.654084][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.671486][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.681900][ T5726] usb 4-1: Product: ã°Š [ 268.687562][ T5726] usb 4-1: SerialNumber: syz [ 268.696988][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 268.804093][ T5611] Dev nbd1: unable to read RDB block 0 [ 268.906495][ T5611] nbd1: unable to read partition table [ 269.162110][ T5726] usb 4-1: 1:1 : bogus bTerminalLink 67 [ 269.243144][ T8904] Cannot find del_set index 2 as target [ 269.523479][ T5611] ldm_validate_partition_table(): Disk read failed. [ 269.554679][ T5611] Dev nbd1: unable to read RDB block 0 [ 269.565030][ T5611] nbd1: unable to read partition table [ 269.738420][ T8908] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.837'. [ 269.793631][ T5726] usb 4-1: USB disconnect, device number 25 [ 270.279556][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.837'. [ 270.293010][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.837'. [ 270.299958][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.333065][ T8908] macsec1: entered promiscuous mode [ 270.340714][ T8908] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 270.351043][ T8908] macsec1: entered allmulticast mode [ 270.358747][ T8908] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 270.371408][ T8908] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 270.408479][ T8908] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 270.468161][ T5620] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 270.676758][ T8928] syzkaller1: entered promiscuous mode [ 270.700355][ T8928] syzkaller1: entered allmulticast mode [ 270.761042][ T8933] ip6t_REJECT: ECHOREPLY is not supported [ 271.013555][ T8923] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 271.083682][ T5620] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 271.123901][ T30] audit: type=1800 audit(1777759079.077:526): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.842" name="/" dev="tmpfs" ino=1 res=0 errno=0 [ 271.217897][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.5.847'. [ 271.275574][ T5620] usb 1-1: config index 0 descriptor too short (expected 3661, got 77) [ 271.287324][ T5620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.322397][ T5620] usb 1-1: config 0 has no interfaces? [ 271.340369][ T5620] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.363506][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.391075][ T5620] usb 1-1: Product: syz [ 271.400039][ T5620] usb 1-1: Manufacturer: syz [ 271.410458][ T5620] usb 1-1: SerialNumber: syz [ 271.431978][ T5620] usb 1-1: config 0 descriptor?? [ 271.630195][ T8954] netlink: 'syz.6.851': attribute type 1 has an invalid length. [ 271.638722][ T5711] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 271.670981][ T5726] usb 1-1: USB disconnect, device number 24 [ 271.702961][ T8954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.729924][ T8951] bond1: (slave veth3): Enslaving as an active interface with a down link [ 271.747233][ T8951] netlink: 14 bytes leftover after parsing attributes in process `syz.6.851'. [ 271.776524][ T5620] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 271.798333][ T5711] usb 4-1: device descriptor read/64, error -71 [ 271.926078][ T5620] usb 6-1: device descriptor read/64, error -71 [ 271.945122][ T30] audit: type=1400 audit(1777759079.853:527): avc: denied { node_bind } for pid=8958 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 271.945494][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 271.984624][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'. [ 271.993973][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 272.064985][ T5711] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 272.194821][ T5620] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 272.225255][ T5711] usb 4-1: device descriptor read/64, error -71 [ 272.607333][ T5620] usb 6-1: device descriptor read/64, error -71 [ 272.614251][ T5711] usb usb4-port1: attempt power cycle [ 272.788187][ T5620] usb usb6-port1: attempt power cycle [ 273.073428][ T5711] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 273.169062][ T5711] usb 4-1: device descriptor read/8, error -71 [ 273.188863][ T5620] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 273.294385][ T5620] usb 6-1: device descriptor read/8, error -71 [ 273.346453][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 273.361665][ T8989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8989 comm=syz.0.861 [ 273.497416][ T5711] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 273.519086][ T5711] usb 4-1: device descriptor read/8, error -71 [ 273.566199][ T5620] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 273.625280][ T5798] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 273.652648][ T5711] usb usb4-port1: unable to enumerate USB device [ 273.681461][ T5620] usb 6-1: device descriptor read/8, error -71 [ 273.697190][ T8998] overlayfs: conflicting options: nfs_export=on,index=off [ 273.710650][ T5741] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 273.808411][ T5620] usb usb6-port1: unable to enumerate USB device [ 273.818805][ T5798] usb 7-1: config index 0 descriptor too short (expected 3405, got 77) [ 273.827109][ T5798] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.837467][ T5798] usb 7-1: config 0 has no interfaces? [ 273.844798][ T5798] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 273.853874][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.861930][ T5798] usb 7-1: Product: syz [ 273.866093][ T5798] usb 7-1: Manufacturer: syz [ 273.870665][ T5798] usb 7-1: SerialNumber: syz [ 273.872335][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.882806][ T5798] usb 7-1: config 0 descriptor?? [ 273.900269][ T5741] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 273.909701][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.917771][ T5741] usb 1-1: Product: syz [ 273.922053][ T5741] usb 1-1: Manufacturer: syz [ 273.927437][ T5741] usb 1-1: SerialNumber: syz [ 273.933695][ T5741] usb 1-1: config 0 descriptor?? [ 273.940073][ T5741] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 274.041945][ T5819] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 274.113392][ T5741] usb 7-1: USB disconnect, device number 12 [ 274.153918][ T5711] usb 1-1: USB disconnect, device number 25 [ 274.224885][ T5819] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.233628][ T5819] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 274.244428][ T5819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.253663][ T5819] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 274.264696][ T5819] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 274.277214][ T5819] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.286263][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.294379][ T5819] usb 5-1: Product: syz [ 274.298598][ T5819] usb 5-1: Manufacturer: syz [ 274.307756][ T5819] cdc_wdm 5-1:1.0: skipping garbage [ 274.313029][ T5819] cdc_wdm 5-1:1.0: skipping garbage [ 274.319143][ T5819] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 274.325718][ T5819] cdc_wdm 5-1:1.0: Unknown control protocol [ 274.541759][ T9000] mmap: syz.4.865 (9000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 274.626389][ T5711] usb 5-1: USB disconnect, device number 30 [ 275.111440][ T5819] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 275.150656][ T9009] kernel profiling enabled (shift: 63) [ 275.157284][ T9009] profiling shift: 63 too large [ 275.171014][ T9009] netlink: 'syz.5.869': attribute type 9 has an invalid length. [ 275.290064][ T5819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 275.366207][ T5819] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 275.410499][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.486298][ T5819] usb 4-1: Product: ã°Š [ 275.529164][ T5819] usb 4-1: SerialNumber: syz [ 276.406078][ T5819] usb 4-1: 1:1 : bogus bTerminalLink 67 [ 276.494966][ T30] audit: type=1400 audit(1777759083.896:528): avc: denied { read } for pid=9014 comm="syz.4.871" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 276.751236][ T5819] usb 4-1: USB disconnect, device number 30 [ 277.493797][ T9016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.634843][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.676711][ T9016] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 277.904856][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.877'. [ 278.024638][ T30] audit: type=1400 audit(1777759085.543:529): avc: denied { watch watch_reads } for pid=9036 comm="syz.6.880" path="/91" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 278.026219][ T9016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.064739][ T9040] fuse: Bad value for 'fd' [ 278.162904][ T9016] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 278.250067][ T9045] binder: 9036:9045 ioctl c0306201 200000000080 returned -14 [ 278.275124][ T9016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.310959][ T9045] binder: 9036:9045 ioctl c0306201 2000000003c0 returned -14 [ 278.322019][ T9016] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 278.403425][ T9016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.466006][ T9016] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 278.497507][ T9016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.522255][ T9016] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 278.557379][ T9016] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 278.591436][ T9016] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.608870][ T9016] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 278.644483][ T9016] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 278.936390][ T5620] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 278.944028][ T5711] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 279.142394][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 279.147616][ T5620] usb 4-1: Using ep0 maxpacket: 16 [ 279.156695][ T5620] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 279.170923][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.183354][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.203443][ T5711] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.213600][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.224445][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.235906][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.252352][ T5711] usb 1-1: config 0 descriptor?? [ 279.279136][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.294281][ T5711] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 279.315346][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.344843][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.357953][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.376711][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.389361][ T5620] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 279.398465][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 279.406554][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 279.420606][ T5620] usb 4-1: SerialNumber: syz [ 279.430588][ T5620] usb 4-1: config 0 descriptor?? [ 279.451812][ T5620] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 279.688814][ T804] usb 1-1: USB disconnect, device number 26 [ 279.786978][ T30] audit: type=1400 audit(1777759087.190:530): avc: denied { open } for pid=9043 comm="syz.3.881" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 279.936230][ T9044] input: syz1 as /devices/virtual/input/input19 [ 279.991647][ T30] audit: type=1400 audit(1777759087.190:531): avc: denied { ioctl } for pid=9043 comm="syz.3.881" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 280.161598][ T9061] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 280.274997][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 280.421525][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 280.467021][ T4962] bcm5974 4-1:0.0: could not read from device [ 280.530200][ T4962] bcm5974 4-1:0.0: could not read from device [ 280.535313][ T5620] usb 4-1: USB disconnect, device number 31 [ 280.562038][ T4962] bcm5974 4-1:0.0: could not read from device [ 280.582313][ T4962] bcm5974 4-1:0.0: could not read from device [ 280.593762][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 280.636601][ T9071] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 280.677954][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.763556][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.921110][ T9077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.886'. [ 281.264902][ T9080] netlink: 'syz.3.889': attribute type 4 has an invalid length. [ 281.274078][ T9080] netlink: 17 bytes leftover after parsing attributes in process `syz.3.889'. [ 281.425706][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 281.637845][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 282.628564][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 282.676281][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 282.768006][ T9071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.815222][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 282.893610][ T9098] binder: 9093:9098 ioctl c0306201 200000000640 returned -22 [ 282.903263][ T9098] [U] [ 282.905979][ T9098] [U] [ 282.908672][ T9098] [U] [ 282.911360][ T9098] [U] [ 282.914206][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.921104][ T9098] [U] [ 282.923805][ T9098] [U] [ 282.926489][ T9098] [U] [ 282.929170][ T9098] [U] [ 282.932811][ T9098] [U] [ 282.935509][ T9098] [U] [ 282.938280][ T9098] [U] [ 282.992810][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 283.008731][ T9074] bond4: (slave veth7): Enslaving as an active interface with a down link [ 283.635244][ T9093] [U] [ 284.129560][ T5819] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 284.346317][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.472721][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65456, setting to 64 [ 284.572193][ T5620] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 284.592154][ T5819] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.623089][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.650184][ T5819] usb 6-1: config 0 descriptor?? [ 284.666769][ T9119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 284.678118][ T5819] hub 6-1:0.0: USB hub found [ 284.752203][ T5620] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 284.770782][ T5620] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 284.795704][ T5620] usb 7-1: config 220 has no interface number 2 [ 284.818521][ T5620] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 284.845570][ T5620] usb 7-1: config 220 interface 0 has no altsetting 0 [ 284.855277][ T5620] usb 7-1: config 220 interface 76 has no altsetting 0 [ 284.862237][ T5620] usb 7-1: config 220 interface 1 has no altsetting 0 [ 284.874898][ T5620] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 284.884128][ T5620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.892283][ T5620] usb 7-1: Product: syz [ 284.896474][ T5620] usb 7-1: Manufacturer: syz [ 284.901078][ T5620] usb 7-1: SerialNumber: syz [ 284.919244][ T5819] hub 6-1:0.0: 1 port detected [ 284.985848][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 285.021222][ T9136] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 285.048699][ T804] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 285.120553][ T9138] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.905'. [ 285.129901][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.136063][ T2703] block nbd0: Possible stuck request ffff888028345080: control (read@0,1024B). Runtime 150 seconds [ 285.147129][ T2703] block nbd0: Possible stuck request ffff888028345240: control (read@1024,1024B). Runtime 150 seconds [ 285.159311][ T2703] block nbd0: Possible stuck request ffff888028345400: control (read@2048,1024B). Runtime 150 seconds [ 285.208875][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 285.229555][ T804] usb 4-1: config 0 has no interfaces? [ 285.238941][ T804] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 285.249182][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.294831][ T2703] block nbd0: Possible stuck request ffff8880283455c0: control (read@3072,1024B). Runtime 150 seconds [ 285.327032][ T804] usb 4-1: config 0 descriptor?? [ 285.646001][ T5819] usb 6-1: USB disconnect, device number 29 [ 285.652103][ T5620] usb 7-1: selecting invalid altsetting 0 [ 285.664101][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.685634][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.706311][ T5620] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 285.737366][ T5620] uvcvideo 7-1:220.0: No valid video chain found. [ 285.886986][ T9146] program syz.5.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.950224][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 286.818238][ T5620] usb 7-1: selecting invalid altsetting 0 [ 286.824099][ T5620] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 286.826400][ T5819] usb 4-1: USB disconnect, device number 32 [ 286.837147][ T5620] usb 7-1: USB disconnect, device number 13 [ 288.353485][ T9169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.911'. [ 288.615464][ T9171] syzkaller0: entered promiscuous mode [ 288.621216][ T9171] syzkaller0: entered allmulticast mode [ 289.449553][ T9197] Cannot find del_set index 2 as target [ 289.889414][ T804] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 289.920201][ T9209] ip6t_REJECT: ECHOREPLY is not supported [ 290.104451][ T804] usb 6-1: config 0 has no interfaces? [ 290.123157][ T804] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.202650][ T804] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.252003][ T804] usb 6-1: Manufacturer: syz [ 290.443792][ T804] usb 6-1: config 0 descriptor?? [ 291.057460][ T9196] netlink: 'syz.5.923': attribute type 27 has an invalid length. [ 291.115374][ T30] audit: type=1400 audit(1777759097.727:532): avc: denied { setopt } for pid=9195 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.233516][ T804] usb 6-1: USB disconnect, device number 30 [ 291.470393][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 291.737996][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 291.980660][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.391513][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.414373][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.428334][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.452503][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.472644][ T9] usb 7-1: config 0 descriptor?? [ 292.633151][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.934'. [ 292.795636][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 292.823975][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 292.859499][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 292.874569][ T9] usb 7-1: USB disconnect, device number 14 [ 293.076619][ T9243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62729 sclass=netlink_route_socket pid=9243 comm=syz.0.932 [ 293.146930][ T9247] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 293.154808][ T9247] UDF-fs: Scanning with blocksize 512 failed [ 293.168464][ T9247] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 293.176542][ T9247] UDF-fs: Scanning with blocksize 1024 failed [ 293.184183][ T9247] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 293.191780][ T9247] UDF-fs: Scanning with blocksize 2048 failed [ 293.200634][ T9247] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 293.208491][ T9247] UDF-fs: Scanning with blocksize 4096 failed [ 293.243957][ T9247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.255767][ T9247] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 293.264895][ T9247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 293.501643][ T804] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 293.676974][ T804] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 293.698489][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.725171][ T804] usb 6-1: Product: syz [ 293.739477][ T804] usb 6-1: Manufacturer: syz [ 293.750024][ T804] usb 6-1: SerialNumber: syz [ 293.754686][ T30] audit: type=1400 audit(1777759100.263:533): avc: denied { read } for pid=9253 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.801662][ T804] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.868401][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'. [ 293.870342][ T30] audit: type=1400 audit(1777759100.375:534): avc: denied { firmware_load } for pid=5819 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 293.938478][ T5819] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.046233][ T5620] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 294.390234][ T5620] usb 5-1: not running at top speed; connect to a high speed hub [ 295.314708][ T5819] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 295.900889][ T5620] usb 5-1: config 11 has an invalid interface number: 47 but max is 0 [ 295.914518][ T5620] usb 5-1: config 11 has no interface number 0 [ 295.927337][ T5819] ath9k_htc: Failed to initialize the device [ 296.045264][ T804] usb 6-1: USB disconnect, device number 31 [ 296.057777][ T804] usb 6-1: ath9k_htc: USB layer deinitialized [ 296.110187][ T5620] usb 5-1: config 11 interface 47 has no altsetting 0 [ 296.137944][ T5620] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=6d.bf [ 296.147533][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.155879][ T5620] usb 5-1: Product: syz [ 296.168329][ T5620] usb 5-1: Manufacturer: syz [ 296.173194][ T5620] usb 5-1: SerialNumber: syz [ 296.513368][ T5620] usb 5-1: USB disconnect, device number 31 [ 296.553915][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:11.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.659980][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 296.953067][ T5620] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 297.183839][ T5620] usb 5-1: not running at top speed; connect to a high speed hub [ 297.272981][ T5620] usb 5-1: config 11 has an invalid interface number: 47 but max is 0 [ 297.293793][ T5620] usb 5-1: config 11 has no interface number 0 [ 297.318930][ T5620] usb 5-1: config 11 interface 47 has no altsetting 0 [ 297.336262][ T5620] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=6d.bf [ 297.477795][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.485925][ T5620] usb 5-1: Product: syz [ 297.491847][ T5620] usb 5-1: Manufacturer: syz [ 297.496561][ T5620] usb 5-1: SerialNumber: syz [ 298.085448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 298.179512][ T5620] usb 5-1: can't set config #11, error -71 [ 298.192103][ T5620] usb 5-1: USB disconnect, device number 32 [ 299.369149][ T5620] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 299.552993][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.6.961'. [ 299.750951][ T9332] netlink: 676 bytes leftover after parsing attributes in process `syz.3.965'. [ 299.956701][ T9336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.052852][ T5620] usb 1-1: device descriptor read/64, error -71 [ 300.470007][ T5620] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 300.470067][ T30] audit: type=1400 audit(1777759106.542:535): avc: denied { write } for pid=9340 comm="syz.6.968" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 300.938796][ T5620] usb 1-1: Using ep0 maxpacket: 8 [ 300.958070][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 300.977563][ T5620] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.996235][ T5620] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.074947][ T5620] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.085505][ T5620] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.098966][ T5620] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.108100][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.195483][ T5741] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 301.344566][ T5620] usb 1-1: GET_CAPABILITIES returned 0 [ 301.353517][ T5620] usbtmc 1-1:16.0: can't read capabilities [ 301.378289][ T5741] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.412920][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.461629][ T5741] usb 5-1: config 0 descriptor?? [ 301.486090][ T5741] cp210x 5-1:0.0: cp210x converter detected [ 301.666516][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.975'. [ 301.920938][ T5741] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 302.037848][ T5819] usb 1-1: USB disconnect, device number 28 [ 302.099929][ T5741] usb 5-1: cp210x converter now attached to ttyUSB0 [ 302.736649][ T5747] usb 5-1: USB disconnect, device number 33 [ 302.745853][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 302.806144][ T5747] cp210x 5-1:0.0: device disconnected [ 303.282959][ T30] audit: type=1400 audit(1777759109.172:536): avc: denied { connect } for pid=9376 comm="syz.6.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.321718][ T5819] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 303.395200][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.6.978'. [ 303.471920][ T5819] usb 6-1: device descriptor read/64, error -71 [ 303.496107][ T30] audit: type=1400 audit(1777759109.350:537): avc: denied { setattr } for pid=9376 comm="syz.6.978" name="NETLINK" dev="sockfs" ino=25177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.642254][ T5747] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 303.717073][ T5741] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 303.738454][ T5819] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 303.823979][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 303.830833][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.842959][ T5747] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.877394][ T5819] usb 6-1: device descriptor read/64, error -71 [ 303.883376][ T5741] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 303.892485][ T5741] usb 1-1: config 0 has no interface number 0 [ 303.899058][ T5741] usb 1-1: config 0 interface 41 has no altsetting 0 [ 303.906419][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.921456][ T5741] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 303.937873][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.950035][ T5741] usb 1-1: Product: syz [ 303.950937][ T5747] usb 5-1: Product: syz [ 303.961607][ T5741] usb 1-1: Manufacturer: syz [ 303.969655][ T5741] usb 1-1: SerialNumber: syz [ 303.983786][ T5747] usb 5-1: Manufacturer: syz [ 303.992171][ T5741] usb 1-1: config 0 descriptor?? [ 304.004703][ T5747] usb 5-1: SerialNumber: syz [ 304.009835][ T5819] usb usb6-port1: attempt power cycle [ 304.039704][ T5747] usb 5-1: config 0 descriptor?? [ 304.059661][ T5747] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.086329][ T5747] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 304.401299][ T5819] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 304.422862][ T5819] usb 6-1: device descriptor read/8, error -71 [ 304.622143][ T9404] ip6t_REJECT: ECHOREPLY is not supported [ 304.700219][ T5819] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 304.708666][ T5747] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 304.756653][ T5819] usb 6-1: device descriptor read/8, error -71 [ 304.884006][ T5819] usb usb6-port1: unable to enumerate USB device [ 304.897889][ T5741] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 305.200250][ T9394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.237954][ T5747] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 305.252143][ T9394] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 305.273114][ T5747] em28xx 5-1:0.0: board has no eeprom [ 305.308154][ T9409] can: request_module (can-proto-3) failed. [ 305.335325][ T5741] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 305.378995][ T5741] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 305.408914][ T5741] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 305.430591][ T5741] usb 1-1: USB disconnect, device number 29 [ 305.755950][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 306.441713][ T9428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.870123][ T5747] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 306.937938][ T5747] em28xx 5-1:0.0: dvb set to bulk mode. [ 306.952592][ T5819] em28xx 5-1:0.0: Binding DVB extension [ 306.975522][ T5747] usb 5-1: USB disconnect, device number 34 [ 307.027026][ T5747] em28xx 5-1:0.0: Disconnecting em28xx [ 307.774264][ T5819] em28xx 5-1:0.0: Registering input extension [ 307.791749][ T5747] em28xx 5-1:0.0: Closing input extension [ 307.863449][ T5620] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 307.931202][ T5747] em28xx 5-1:0.0: Freeing device [ 307.947587][ T30] audit: type=1400 audit(1777759113.542:538): avc: denied { write } for pid=9448 comm="syz.6.997" path="socket:[26008]" dev="sockfs" ino=26008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.954282][ T9449] dlm: no locking on control device [ 308.066298][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 308.125665][ T5620] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 308.147954][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.162246][ T5620] usb 4-1: config 0 descriptor?? [ 308.185874][ T5620] as10x_usb: device has been detected [ 308.210441][ T5620] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 308.362833][ T5620] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 308.559340][ T30] audit: type=1400 audit(1777759114.122:539): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 308.653676][ T5620] as10x_usb: error during firmware upload part1 [ 308.672006][ T5620] Registered device nBox DVB-T Dongle [ 308.685567][ T5620] usb 4-1: USB disconnect, device number 33 [ 308.702508][ T9466] netlink: 'syz.5.1001': attribute type 1 has an invalid length. [ 308.872987][ T9466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.889928][ T5620] Unregistered device nBox DVB-T Dongle [ 308.898721][ T5620] as10x_usb: device has been disconnected [ 308.963658][ T9474] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1001'. [ 309.218784][ T9469] bond2: (slave veth5): Enslaving as an active interface with a down link [ 310.769908][ T30] audit: type=1400 audit(1777759116.181:540): avc: denied { write } for pid=9468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.111563][ T30] audit: type=1400 audit(1777759116.406:541): avc: denied { accept } for pid=9502 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.161174][ T5726] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 311.186425][ T30] audit: type=1400 audit(1777759116.527:542): avc: denied { write } for pid=9501 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.316745][ T5272] veth0_macvtap: left promiscuous mode [ 311.322364][ T5726] usb 6-1: device descriptor read/64, error -71 [ 311.646425][ T5726] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 311.817173][ T5726] usb 6-1: device descriptor read/64, error -71 [ 311.945626][ T5726] usb usb6-port1: attempt power cycle [ 312.685163][ T5726] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 312.712439][ T30] audit: type=1400 audit(1777759117.997:543): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 312.780677][ T5726] usb 6-1: device descriptor read/8, error -71 [ 312.833305][ T9533] blktrace: Concurrent blktraces are not allowed on loop5 [ 312.955314][ T9536] netlink: 'syz.0.1015': attribute type 7 has an invalid length. [ 312.965402][ T9536] netlink: 'syz.0.1015': attribute type 8 has an invalid length. [ 313.096327][ T5726] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 313.121495][ T5726] usb 6-1: device descriptor read/8, error -71 [ 313.163985][ T5741] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 313.382069][ T9543] xt_TPROXY: Can be used only with -p tcp or -p udp [ 313.568621][ T5726] usb usb6-port1: unable to enumerate USB device [ 313.691861][ T30] audit: type=1400 audit(1777759118.923:544): avc: denied { write } for pid=9525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.740655][ T5741] usb 5-1: Using ep0 maxpacket: 8 [ 313.759471][ T5741] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.800427][ T5741] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.845182][ T5741] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.918073][ T5741] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.945485][ T5741] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.954786][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.030119][ T30] audit: type=1400 audit(1777759119.241:545): avc: denied { write } for pid=9550 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.613016][ T5741] usb 5-1: GET_CAPABILITIES returned 0 [ 314.618825][ T5741] usbtmc 5-1:16.0: can't read capabilities [ 314.754109][ T5741] usb 5-1: USB disconnect, device number 35 [ 314.917186][ T30] audit: type=1400 audit(1777759120.074:546): avc: denied { ioctl } for pid=9560 comm="syz.6.1019" path="socket:[26183]" dev="sockfs" ino=26183 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.170582][ T30] audit: type=1400 audit(1777759120.280:547): avc: denied { accept } for pid=9561 comm="syz.5.1020" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.286119][ T6151] block nbd0: Possible stuck request ffff888028345080: control (read@0,1024B). Runtime 180 seconds [ 317.335303][ T6151] block nbd0: Possible stuck request ffff888028345240: control (read@1024,1024B). Runtime 180 seconds [ 317.363281][ T9596] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 317.384728][ T6151] block nbd0: Possible stuck request ffff888028345400: control (read@2048,1024B). Runtime 180 seconds [ 317.497898][ T6151] block nbd0: Possible stuck request ffff8880283455c0: control (read@3072,1024B). Runtime 180 seconds [ 318.415926][ T9621] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 318.444487][ T9621] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 318.468955][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 318.575624][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1033'. [ 318.611531][ T9625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1033'. [ 318.689968][ T5819] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 318.696010][ T9631] netlink: 'syz.6.1034': attribute type 1 has an invalid length. [ 318.864820][ T9631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.904036][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.921657][ T5819] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 318.931571][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.941755][ T5819] usb 6-1: Product: syz [ 318.946612][ T5819] usb 6-1: Manufacturer: syz [ 318.951254][ T5819] usb 6-1: SerialNumber: syz [ 318.960071][ T5819] usb 6-1: config 0 descriptor?? [ 318.962622][ T9628] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1034'. [ 318.989718][ T9633] bond2: (slave veth5): Enslaving as an active interface with a down link [ 318.995250][ T5819] mvusb_mdio 6-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 319.029336][ T9639] blktrace: Concurrent blktraces are not allowed on loop5 [ 319.116087][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 319.166443][ T9641] netlink: 'syz.4.1036': attribute type 7 has an invalid length. [ 319.177808][ T9641] netlink: 'syz.4.1036': attribute type 8 has an invalid length. [ 319.196853][ T30] audit: type=1800 audit(1777759124.070:548): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1038" name="file1" dev="tmpfs" ino=701 res=0 errno=0 [ 319.253490][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1032'. [ 319.297356][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 319.305423][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.327731][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.340296][ T30] audit: type=1400 audit(1777759124.192:549): avc: denied { read } for pid=9622 comm="syz.5.1032" lport=37707 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.366543][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.377175][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.384367][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1032'. [ 319.391011][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.410987][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.543254][ T5741] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 319.604650][ T9649] Cannot find del_set index 2 as target [ 319.803402][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 319.823408][ T29] usbtmc 1-1:16.0: can't read capabilities [ 319.829534][ T5741] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 319.851903][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 319.882088][ T5741] usb 7-1: Product: syz [ 319.905290][ T5741] usb 7-1: config 0 descriptor?? [ 319.925929][ T5741] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 319.937983][ T30] audit: type=1400 audit(1777759124.762:550): avc: denied { read } for pid=9651 comm="syz.4.1040" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 319.966293][ T5741] usb 7-1: Detected FT232H [ 319.992879][ T30] audit: type=1400 audit(1777759124.762:551): avc: denied { open } for pid=9651 comm="syz.4.1040" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.108384][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.152010][ T29] usb 1-1: USB disconnect, device number 30 [ 321.049013][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 322.243425][ T804] usb 6-1: USB disconnect, device number 40 [ 322.428283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.471039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 322.586724][ T5741] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 322.658485][ T5741] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 322.696134][ T5741] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 322.738739][ T5741] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 322.798030][ T5741] usb 7-1: USB disconnect, device number 15 [ 322.827634][ T5741] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 322.880565][ T5741] ftdi_sio 7-1:0.0: device disconnected [ 322.966609][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 323.161773][ T9711] Cannot find del_set index 2 as target [ 323.464962][ T5741] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 323.615545][ T5741] usb 7-1: device descriptor read/64, error -71 [ 323.664249][ T9716] syzkaller0: entered promiscuous mode [ 323.688282][ T9716] syzkaller0: entered allmulticast mode [ 323.719941][ T9716] tc action pedit offset must be on 32 bit boundaries [ 323.903327][ T5741] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 324.074439][ T5741] usb 7-1: device descriptor read/64, error -71 [ 324.181225][ T5747] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 324.215643][ T5741] usb usb7-port1: attempt power cycle [ 324.353637][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 324.365575][ T5747] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 324.376951][ T5747] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 324.398551][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.429768][ T5747] usb 5-1: Product: syz [ 324.440070][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 324.451414][ T5747] usb 5-1: Manufacturer: syz [ 324.464364][ T5747] usb 5-1: SerialNumber: syz [ 324.468519][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 324.484004][ T5747] usb 5-1: config 0 descriptor?? [ 324.539318][ T5747] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 324.572066][ T5747] usb 5-1: setting power ON [ 324.591022][ T5747] dvb-usb: bulk message failed: -22 (2/0) [ 324.609500][ T5741] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 324.626848][ T5747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.642487][ T5741] usb 7-1: device descriptor read/8, error -71 [ 324.655283][ T5747] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 324.697507][ T5747] usb 5-1: media controller created [ 324.819497][ T30] audit: type=1400 audit(1777759129.329:552): avc: denied { getopt } for pid=9718 comm="syz.4.1055" lport=58518 faddr=255.255.255.254 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 324.846223][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.930353][ T5741] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 324.932086][ T9746] dvb-usb: bulk message failed: -22 (3/0) [ 325.202188][ T5741] usb 7-1: device descriptor read/8, error -71 [ 325.267491][ T5747] usb 5-1: selecting invalid altsetting 6 [ 325.292619][ T5747] usb 5-1: digital interface selection failed (-22) [ 325.311159][ T5747] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 325.324734][ T5741] usb usb7-port1: unable to enumerate USB device [ 325.332258][ T5747] usb 5-1: setting power OFF [ 325.351016][ T5747] dvb-usb: bulk message failed: -22 (2/0) [ 325.383678][ T5747] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 325.406521][ T5747] (NULL device *): no alternate interface [ 325.575974][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1061'. [ 325.611179][ T9749] 9pnet_fd: Insufficient options for proto=fd [ 326.053474][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 326.292158][ T9765] netlink: 'syz.6.1067': attribute type 4 has an invalid length. [ 327.172704][ T30] audit: type=1400 audit(1777759131.528:553): avc: denied { write } for pid=9781 comm="syz.6.1071" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 327.658499][ T5747] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 327.673452][ T5747] usb 5-1: USB disconnect, device number 36 [ 327.793429][ T804] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 328.028012][ T29] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 328.040559][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1075'. [ 328.104915][ T30] audit: type=1400 audit(1777759132.408:554): avc: denied { write } for pid=9761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.221377][ T29] usb 4-1: device descriptor read/64, error -71 [ 328.227921][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.453205][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 328.572851][ T5620] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 328.590323][ T30] audit: type=1804 audit(1777759132.838:555): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1078" name="/newroot/139/file0" dev="tmpfs" ino=745 res=1 errno=0 [ 328.893878][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 330.092740][ T30] audit: type=1400 audit(1777759134.270:556): avc: denied { write } for pid=9815 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.143707][ T5620] usb 1-1: device descriptor read/64, error -71 [ 330.193700][ T29] usb 4-1: device descriptor read/64, error -71 [ 330.239119][ T30] audit: type=1400 audit(1777759134.401:557): avc: denied { ioctl } for pid=9817 comm="syz.5.1079" path="socket:[26602]" dev="sockfs" ino=26602 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.325926][ T29] usb usb4-port1: attempt power cycle [ 330.411054][ T5620] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 330.561151][ T5620] usb 1-1: device descriptor read/64, error -71 [ 330.601587][ T30] audit: type=1400 audit(1777759134.738:558): avc: denied { write } for pid=9820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.692809][ T5620] usb usb1-port1: attempt power cycle [ 330.740402][ T30] audit: type=1400 audit(1777759134.869:559): avc: denied { write } for pid=9834 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.786410][ T29] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 330.828200][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 330.834976][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.883487][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.915320][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.933784][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.950294][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.962513][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.073443][ T5620] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 331.105989][ T5620] usb 1-1: device descriptor read/8, error -71 [ 331.151823][ T9844] overlayfs: missing 'lowerdir' [ 331.189725][ T29] usb 4-1: GET_CAPABILITIES returned 0 [ 331.195533][ T29] usbtmc 4-1:16.0: can't read capabilities [ 331.321680][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 331.394159][ T5620] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 331.426566][ T5620] usb 1-1: device descriptor read/8, error -71 [ 331.511610][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 331.512159][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 331.579348][ T5620] usb usb1-port1: unable to enumerate USB device [ 331.655713][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.675808][ T29] usb 5-1: device descriptor read/64, error -71 [ 331.694250][ T10] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 331.743199][ T5726] usb 4-1: USB disconnect, device number 36 [ 331.759981][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.774816][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.787185][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.809654][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.828999][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.840467][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.851580][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.862827][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.871414][ T9857] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 331.873639][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.891659][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.902071][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.912830][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.923923][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.936801][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.938498][ T9857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.947567][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.965139][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.976886][ T29] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 331.977458][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 331.995044][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 332.003660][ T10] usb 7-1: SerialNumber: syz [ 332.016518][ T10] usb 7-1: config 0 descriptor?? [ 332.031652][ T9861] bond5: (slave veth9): Enslaving as an active interface with a down link [ 332.045486][ T9857] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1086'. [ 332.153177][ T29] usb 5-1: device descriptor read/64, error -71 [ 332.283339][ T29] usb usb5-port1: attempt power cycle [ 332.299309][ T9841] netlink: 'syz.6.1082': attribute type 29 has an invalid length. [ 332.341880][ T9841] netlink: 'syz.6.1082': attribute type 29 has an invalid length. [ 332.374108][ T9841] netlink: 'syz.6.1082': attribute type 32 has an invalid length. [ 332.392284][ T9841] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1082'. [ 332.466630][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 332.597833][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1089'. [ 332.676383][ T29] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 332.723886][ T29] usb 5-1: device descriptor read/8, error -71 [ 332.997369][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 333.040363][ T29] usb 5-1: device descriptor read/8, error -71 [ 333.177128][ T29] usb usb5-port1: unable to enumerate USB device [ 333.207444][ T29] usb 7-1: USB disconnect, device number 21 [ 333.243606][ T30] audit: type=1400 audit(1777759138.207:560): avc: denied { ioctl } for pid=9887 comm="syz.3.1091" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 333.642837][ T30] audit: type=1400 audit(1777759138.591:561): avc: denied { bind } for pid=9887 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 334.376768][ T31] INFO: task syz.1.351:7156 blocked for more than 143 seconds. [ 334.543903][ T31] Tainted: G L syzkaller #0 [ 334.570846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.591083][ T31] task:syz.1.351 state:D stack:26152 pid:7156 tgid:7150 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 334.604637][ T31] Call Trace: [ 334.626652][ T31] [ 334.634160][ T31] __schedule+0x10e9/0x6820 [ 334.647172][ T31] ? __pfx___schedule+0x10/0x10 [ 334.655990][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 334.671438][ T31] ? find_held_lock+0x2b/0x80 [ 334.683838][ T31] ? schedule+0x2bf/0x390 [ 334.693056][ T31] schedule+0xdd/0x390 [ 334.703295][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.712271][ T31] __mutex_lock+0xced/0x1b10 [ 334.724670][ T31] ? sync_bdevs+0x153/0x480 [ 334.734985][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.747936][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 334.754804][ T31] ? iput.part.0+0x1a0/0xf50 [ 334.769953][ T31] ? sync_bdevs+0x153/0x480 [ 334.782094][ T31] sync_bdevs+0x153/0x480 [ 334.791032][ T31] ksys_sync+0xb0/0xf0 [ 334.800578][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 334.811065][ T31] ? rcu_is_watching+0x12/0xc0 [ 334.822609][ T31] ? do_syscall_64+0x90/0xf80 [ 334.830531][ T31] __do_sys_sync+0xe/0x20 [ 334.843892][ T31] do_syscall_64+0x10b/0xf80 [ 334.854177][ T31] ? clear_bhb_loop+0x40/0x90 [ 334.864395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.938776][ T31] RIP: 0033:0x7f2fac39cdd9 [ 334.947715][ T31] RSP: 002b:00007f2fad177028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 334.956811][ T31] RAX: ffffffffffffffda RBX: 00007f2fac616090 RCX: 00007f2fac39cdd9 [ 334.965350][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.973359][ T31] RBP: 00007f2fac616090 R08: 0000000000000000 R09: 0000000000000000 [ 334.982059][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.990128][ T31] R13: 00007f2fac616128 R14: 00007f2fac616090 R15: 00007ffe27a47938 [ 335.002026][ T31] [ 335.011539][ T31] [ 335.011539][ T31] Showing all locks held in the system: [ 335.030171][ T31] 1 lock held by khungtaskd/31: [ 335.046388][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 335.073313][ T31] 2 locks held by getty/5366: [ 335.087623][ T31] #0: ffff8880349880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 335.105322][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 335.118110][ T31] 3 locks held by kworker/1:3/5620: [ 335.124325][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 335.139996][ T31] #1: ffffc9000207fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 335.152087][ T31] #2: ffffffff8e7f0ef8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 335.167048][ T31] 1 lock held by udevd/6426: [ 335.173665][ T31] #0: ffff88802828a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 335.185859][ T31] 1 lock held by syz.1.351/7156: [ 335.197597][ T31] #0: ffff88802828a350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 335.214897][ T31] 1 lock held by syz.3.1091/9887: [ 335.221316][ T31] #0: ffffffff8e7f0ef8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 335.232164][ T31] 1 lock held by syz.3.1091/9889: [ 335.237446][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 335.248776][ T31] 2 locks held by syz.0.1094/9908: [ 335.255623][ T31] #0: ffffffff905f29a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 335.265382][ T31] #1: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 335.277394][ T31] [ 335.282014][ T31] ============================================= [ 335.282014][ T31] [ 335.350802][ T31] NMI backtrace for cpu 1 [ 335.350822][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 335.350847][ T31] Tainted: [L]=SOFTLOCKUP [ 335.350853][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.350863][ T31] Call Trace: [ 335.350869][ T31] [ 335.350875][ T31] dump_stack_lvl+0x100/0x190 [ 335.350902][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 335.350926][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.350949][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 335.350979][ T31] sys_info+0x141/0x190 [ 335.351005][ T31] watchdog+0xcb1/0x1030 [ 335.351031][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 335.351050][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.351070][ T31] ? __kthread_parkme+0x18c/0x230 [ 335.351090][ T31] ? kthread+0x13a/0x450 [ 335.351109][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.351127][ T31] kthread+0x370/0x450 [ 335.351146][ T31] ? __pfx_kthread+0x10/0x10 [ 335.351166][ T31] ret_from_fork+0x72b/0xd50 [ 335.351189][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.351212][ T31] ? __switch_to+0x800/0x1100 [ 335.351239][ T31] ? __pfx_kthread+0x10/0x10 [ 335.351261][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.351297][ T31] [ 335.351304][ T31] Sending NMI from CPU 1 to CPUs 0: [ 335.483256][ C0] NMI backtrace for cpu 0 [ 335.483272][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.483292][ C0] Tainted: [L]=SOFTLOCKUP [ 335.483297][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.483306][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 335.483328][ C0] Code: 46 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 80 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 335.483341][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 335.483355][ C0] RAX: 00000000014ebe29 RBX: ffffffff8e4955c0 RCX: ffffffff8b8a1045 [ 335.483364][ C0] RDX: 0000000000000000 RSI: ffffffff8df1fea8 RDI: ffffffff8c1c3600 [ 335.483373][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 335.483382][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 335.483390][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d79b50 [ 335.483400][ C0] FS: 0000000000000000(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 335.483414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.483423][ C0] CR2: 00007f95d4dea2f8 CR3: 000000002b66d000 CR4: 00000000003526f0 [ 335.483431][ C0] Call Trace: [ 335.483438][ C0] [ 335.483442][ C0] default_idle+0x9/0x10 [ 335.483463][ C0] default_idle_call+0x6c/0xb0 [ 335.483479][ C0] do_idle+0x464/0x590 [ 335.483493][ C0] ? __pfx_do_idle+0x10/0x10 [ 335.483505][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 335.483522][ C0] cpu_startup_entry+0x4f/0x60 [ 335.483534][ C0] rest_init+0x251/0x260 [ 335.483552][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 335.483570][ C0] start_kernel+0x484/0x490 [ 335.483586][ C0] x86_64_start_reservations+0x24/0x30 [ 335.483603][ C0] x86_64_start_kernel+0x12b/0x130 [ 335.483618][ C0] common_startup_64+0x13e/0x148 [ 335.483644][ C0] [ 335.681073][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 335.687935][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 335.698604][ T31] Tainted: [L]=SOFTLOCKUP [ 335.702903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.712933][ T31] Call Trace: [ 335.716187][ T31] [ 335.719093][ T31] dump_stack_lvl+0x100/0x190 [ 335.723751][ T31] vpanic+0x552/0x970 [ 335.727708][ T31] ? __pfx_vpanic+0x10/0x10 [ 335.732184][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 335.738318][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 335.744453][ T31] panic+0xd1/0xe0 [ 335.748147][ T31] ? __pfx_panic+0x10/0x10 [ 335.752534][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 335.758673][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 335.764813][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 335.770959][ T31] ? watchdog.cold+0x1ec/0x234 [ 335.775709][ T31] ? watchdog+0xcc1/0x1030 [ 335.780101][ T31] watchdog.cold+0x1fd/0x234 [ 335.784665][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 335.790444][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.795096][ T31] ? __kthread_parkme+0x18c/0x230 [ 335.800093][ T31] ? kthread+0x13a/0x450 [ 335.804308][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.808956][ T31] kthread+0x370/0x450 [ 335.813002][ T31] ? __pfx_kthread+0x10/0x10 [ 335.817573][ T31] ret_from_fork+0x72b/0xd50 [ 335.822151][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.827236][ T31] ? __switch_to+0x800/0x1100 [ 335.831889][ T31] ? __pfx_kthread+0x10/0x10 [ 335.836457][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.841203][ T31] [ 335.844555][ T31] Kernel Offset: disabled [ 335.848853][ T31] Rebooting in 86400 seconds..