last executing test programs: 13m14.669595043s ago: executing program 3 (id=37): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1000000d}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x20, 0x1, 0x4}, 0x4}}, 0x18) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001c80)) 13m14.046749511s ago: executing program 3 (id=39): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x210382, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250300000058000180440004002000010012004e200000000600000000000000002a0000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe(0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13m13.142269308s ago: executing program 3 (id=45): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 13m11.358813939s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000100)={@local, @random="560a8e390c76", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x5e, 0x0, @multicast2, @empty}, "6494548f67ed9740"}}}}, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 13m11.168701692s ago: executing program 3 (id=50): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_FLAGS={0x8, 0x8, 0x23c}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @main=@item_012={0x1, 0x0, 0x9, "c5"}]}}, 0x0}, 0x0) 13m10.880136199s ago: executing program 3 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='spmi_cmd\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 13m9.920863432s ago: executing program 32 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='spmi_cmd\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 12m49.028218647s ago: executing program 0 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000de0000000000000800"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) removexattr(0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) 12m48.899013433s ago: executing program 0 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e60100000102000009040201010102"], 0x0) r2 = dup(r1) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x94, 0x78, &(0x7f0000000380)="f2d4a584a4f1208dae61d857fc6557cf5b227d7569fbc4c29dfa66b0d4340ec7e3851885009405eedea8a419be661708f66c3953c9f14e810e7ae35f05f23c0a1428e423e38345bb42a576f307c47eeaaf6e45a71213899456c909c9385843a585c08a8a52eb549f8929255637d8326db88ed87b622966542ae68be889b1019ad76de959cfe10990660d03757fadc74dfe657364", &(0x7f0000000440)=""/120, 0x9, 0x0, 0xc5, 0xe3, &(0x7f00000006c0)="b2a0973171619e4068db3cb99f2ef8d8a89c8616b970605ac2763326e5a138e257e9e20519cf06b304ec6d9ae1d38fec1a562b08ba4a101d7bc902eed3bae39d18cf7def4de4c97a3523a5a9e70d7c65d2b09fa857f6c39f11313933537188df365a6e2e3d348b5851b2dad4934a8db0ae9463c66e2422e8ff43e4c013728a41fbda11e58d49bb77212715a0bde96c3488830bd4ac4aaa7fd2c9760e21a673440d6d4f85d54f4109844f84929da7cf36143149cd1acac5b63738ab8663fc8095b56dbc0593", &(0x7f00000007c0)="9afbd7722dd27a777ad3af9efa3926aa4e0c72864e2563678add1432b63ff22e2af85fb4a278fb343c9ed456a056f1eb467122422aafc2beca9653553f87d11fca228c99c9f89534255a76904c7fa82cd370467a5c5d9be62bb46dd0df46aacd75462a2932879b911b4b12d5cfbe14ef913b9c4fd1d617bac1f174d05698c6d763fcfbc997edeffaaa8f8622e826cd0e191944207e5b1b3a4a65f33c7fb63c4cbac3c217234ba3ae39a826f4ac3a1df245d75eb14211ee51a2179a41ced56254afd47f0ba061c0af653a4206568efe677fb07d4f399ff12adc1cffc014f7f798b8c2f0", 0x3, 0x0, 0x4}, 0x50) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x3, 0x5001) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0xffff, 0x2, {0x0}, 0x10000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="040e07062d0c"], 0xa) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x3d, 0xffffffff, 0x1e}, 0x2c) socket$kcm(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0xfa, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000500)={{0x3, 0x4, 0x1, 0x7, '\x00', 0x5}, 0x4, 0x3, 0x6, r5, 0x6, 0x7, 'syz0\x00', &(0x7f0000000340)=[':\x88:*$/*-[:{^\x00', '\x00', '/dev/video#\x00', '}+,$\'\\*[\x00', '/}}\x00', '[!(\x00'], 0x2b}) 12m45.650899413s ago: executing program 0 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) fstat(r3, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x8084) 12m42.78812304s ago: executing program 0 (id=125): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xe5, 0xf, 0xca, 0x20, 0xccd, 0xb2, 0x5a10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x70, 0xff, [{{0x9, 0x4, 0x63, 0x2, 0x0, 0xf6, 0x72, 0x5}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x17, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x40, 0x18, 0x28, "fea454b6be399664cb5dc5694f0784caac4e942ab860a54146931560110d6c29c6c5cbda1cd0dc7d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x0, 0x5, 0xc, "94d91422596fe634adc12c06"}, 0x0, 0x0, 0x0, 0x0}) 12m41.251865807s ago: executing program 0 (id=131): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r4, &(0x7f00000005c0)={0x2d, 0x0, r6, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 12m40.424021409s ago: executing program 0 (id=135): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4, 0x0, 0x40}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x174, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xff, 0x3, 0x80000000, 0x1, 0x3, 0x401}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x9, 0xfffb, 0x7cfd, 0x2, 0x8507, 0x2, 0x4}}, {0xc, 0x2, [0x46c, 0x2, 0x6, 0x9]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8000, 0xdf9a, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0xfff, 0x2, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0xa, 0x1, 0x7, 0x5]}}, {{0x1c, 0x1, {0x91, 0xab, 0xf76d, 0x7f, 0x2, 0x10, 0x0, 0x3}}, {0xa, 0x2, [0xc1, 0x3, 0x80]}}, {{0x1c, 0x1, {0x2, 0x69, 0x9, 0x9, 0x2, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x7]}}]}]}, 0x174}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250c000000050029000000000001002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000004200)=0xca9, 0x4) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000040)={0x3, @null, r7}) mkdir(&(0x7f0000000180)='./control\x00', 0xf0) 12m25.275398812s ago: executing program 33 (id=135): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4, 0x0, 0x40}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x174, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xff, 0x3, 0x80000000, 0x1, 0x3, 0x401}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x9, 0xfffb, 0x7cfd, 0x2, 0x8507, 0x2, 0x4}}, {0xc, 0x2, [0x46c, 0x2, 0x6, 0x9]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8000, 0xdf9a, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0xfff, 0x2, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0xa, 0x1, 0x7, 0x5]}}, {{0x1c, 0x1, {0x91, 0xab, 0xf76d, 0x7f, 0x2, 0x10, 0x0, 0x3}}, {0xa, 0x2, [0xc1, 0x3, 0x80]}}, {{0x1c, 0x1, {0x2, 0x69, 0x9, 0x9, 0x2, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x7]}}]}]}, 0x174}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250c000000050029000000000001002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000004200)=0xca9, 0x4) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000040)={0x3, @null, r7}) mkdir(&(0x7f0000000180)='./control\x00', 0xf0) 8.472595889s ago: executing program 6 (id=2578): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, 0x0, 0x56) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x80, 0x2}, 0x18) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340)={0xfffffffc, 0x3, 0x7ff, 0x2}, 0x10}, 0x94) (rerun: 32) r7 = bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x0, r3}, 0x10}}, 0x20) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x52, &(0x7f0000000440)=ANY=[], 0x0) (async, rerun: 32) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20045011}, 0x24048880) (rerun: 32) write(r7, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r8, @ANYBLOB="49fdb159f9f24f78d465531453dfea566c25231a5792cefbeb64951e1d644e6a4a84628c4a6117ddc9642480500eea902a8569d3bb1dd55f200a7a1d5c33a51b27b9f223", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) 8.200637109s ago: executing program 1 (id=2581): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) 7.995945203s ago: executing program 1 (id=2583): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x210382, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250300000058000180440004002000010012004e200000000600000000000000002a0000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg0\x00'}) fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe(0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.959126397s ago: executing program 1 (id=2586): r0 = socket$inet(0x2, 0x80c05, 0xd) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x7f9, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e04aa41cb01926ac67fa99d7c32fa271be4ed25a1754b3187eafe7da9b926a06eeb3cd9c068ea134e42954ad7144b99a687948f6945666490d47cd3df33c7e93c7480fa27757e7e1ccd10635a28e1df69dd2c541caa96374e98dddcfcbe33e4603ce7a4fab916e9ef14f7e87691547dd0d1e798d8e484e90209f17f841656ef7b92796188b2488b0256e69557094e6ff15b999aaaa41ebf8f8dc4b73d92bb137aea2b88ab4f49f55a1a59f0079122f98a5196e52cc"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x100, 0x0, 0x25c}, &(0x7f0000000180), &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 6.455264979s ago: executing program 6 (id=2589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5390, 0x2309}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x2cc}}]}]}]}, 0x3c}}, 0x4008880) 5.69188698s ago: executing program 6 (id=2590): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_emit_ethernet(0x114, &(0x7f0000000580)={@broadcast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, ',N', "8f0230", 0xe9f1, "e17f6f4bcf5b5c4354db596ceab15fa3d0b9d678c9ec58394ecd422aed0f5ca28da92e75c00e0c49792dc8791e333d6f0eef9e2abdd4ad8b79afe69ba8bfef6565b7a68ee3367edc30ccbf230ba38b8d44b059349ffabe8462d1122d4e1c9e37b3436d5029837e58b84ffe171dce910c8818507e8597e744f3521731c0425ff6bd167c13a9a4713972495a4159cf62c63f2d0f74616dab08ad953c6eb464248c901b608be9f69e7268a7fda7e3b557fe1df7f31440fb57031a0fa99aad2f50c9b25f32a11bdb7e61b88fec1e41774a1c71dfe6ac1b64b7502b970f704daad1b8a5cb469f489d03a3016d91db6f0b30f0ec1b001a2b7ef903850576c6be"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x2a9, 0xa8c, 0xd63, 0xd83]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4090) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x6, 0x5, 0x6, 0xe2, 0x9, 0x4d, 0x3, 0x10, 0x8b, 0xf, 0x8, 0x80, 0x3, 0xa2}, 0xe) poll(&(0x7f0000000600), 0x0, 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x1cc, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @algo_comp={0x9b, 0x3, {{'deflate\x00'}, 0x298, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c27"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x1038c2) sendfile(r3, r4, &(0x7f0000000040)=0x7fffffffffffffff, 0x100000001) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x40, 0x21, 0x6, {0x6, 0xd, "82616faa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.228979054s ago: executing program 2 (id=2592): syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) 5.221688035s ago: executing program 2 (id=2593): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x280, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000080)={0xfffffffc, 0xfa22, 0x285, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x2, {0x1, 0xfe, 0x2}, 0xfe}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x18280, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xa2f, 0xcb4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x35d1, 0x76f2}) r8 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r7, r8}}, './file0\x00'}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x17) ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f00000006c0)={0x10003, 0x1c0, 0x100, &(0x7f00000002c0)=[0x7, 0x9, 0xffffffffffffffff, 0x8000, 0x0, 0xfffffffffffffffd, 0x9, 0x9, 0x3, 0x1f5, 0x7ff, 0x8, 0x4, 0x0, 0x200, 0x3, 0x9, 0x1647, 0x7, 0x8, 0x9, 0xb, 0x6800, 0x7, 0x0, 0x3, 0x8, 0x7, 0x7, 0x5cf4, 0xf, 0x4, 0x8, 0x7, 0x7, 0x7, 0x7f, 0x4, 0x0, 0x7, 0xff, 0x3, 0x401, 0xe, 0x1, 0x1, 0x3, 0x8000000000000000, 0x62, 0x10, 0x3000, 0x8, 0x2, 0x7, 0x5, 0x80000001, 0x3, 0x4, 0x0, 0x3ff, 0x5, 0x81, 0x4, 0x40, 0x3b750dd5, 0x7fff, 0xce0f, 0x8, 0xff, 0x486, 0x2, 0x3, 0x9, 0x1, 0xfffffffffffffffb, 0x40, 0x5, 0x69b087a2, 0x1000, 0x0, 0xf2a5, 0x6, 0xffff, 0xe207, 0x4, 0x3, 0xaa, 0x2a8, 0xe, 0x4, 0x2, 0x90, 0x81, 0x2, 0x3, 0x5, 0x7, 0xaf, 0x8, 0x274, 0x541, 0x100000001, 0x5, 0x101, 0x101, 0x2e3, 0x5, 0xfffffffffffffffc, 0xa5, 0x1, 0x40, 0x9, 0x4, 0xc02, 0x2, 0x0, 0x8, 0x7, 0x9, 0x6, 0x4, 0x4, 0x8, 0x3, 0x3ff, 0x9, 0x8]}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r9, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x2, 0x6a, &(0x7f0000000780)="83af4cdf91c718d75d6b6362a4f9d40083c62940678483c2ea189625205ee12cdc7de6b8bb2df3408b0819e961ebf3b48a78b2d5990f15c91bb7358c14f332e9f4071d628129a3fa57fa57695dd8bc70bbb0d0394cecdbb4435154bfc8e223d382116b4c409a6fa03123"}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000880)={0x9, 0x0, [{0x0, 0x5, 0x4, 0x6, 0xffff, 0xeb05, 0x9}, {0xd, 0xb83, 0x0, 0x8, 0x0, 0x3, 0x10}, {0xc0000001, 0x1, 0x2, 0x4, 0x7f, 0x5, 0x2}, {0x80000019, 0xf1c, 0x0, 0x3, 0x1, 0x1, 0x9}, {0x40000000, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x5}, {0x80000019, 0x9, 0x6, 0x8, 0x7, 0x7, 0x800}, {0x7, 0x6, 0x3, 0x3, 0x3, 0x401, 0xfffffffb}, {0x7, 0xc, 0x4, 0x1, 0x4, 0x6, 0x9}, {0xb5199552f2fb805d, 0x7, 0x4, 0x8, 0x8, 0xffff, 0x1}]}) r11 = syz_open_procfs(r6, &(0x7f0000000a00)='net/ip_tables_targets\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000a40)='lp', 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r11, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r11, 0x0, 0x20, &(0x7f0000000bc0)={@dev, @initdev, 0x0}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000e00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x160, r13, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r17, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r18 = ioctl$KVM_GET_STATS_FD_vm(r11, 0xaece) setsockopt$IP_VS_SO_SET_STARTDAEMON(r18, 0x0, 0x48b, &(0x7f0000000f80)={0x3, 'macsec0\x00', 0x1}, 0x18) 5.221055051s ago: executing program 2 (id=2594): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x2, 0x7fff7ffe}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) timer_create(0x0, 0x0, &(0x7f00000004c0)) pidfd_getfd(0xffffffffffffffff, r3, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x598, &(0x7f00000000c0)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x7, 0x0, 0xdd5, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xffffffff, 0x203, 0x7, 0x10000009, 0x3, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0xc, 0x4, 0x400002, 0x22]}) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) 4.805234937s ago: executing program 4 (id=2595): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x200000000000011, 0x4000000000080002, 0x0) close(0x3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 4.436086977s ago: executing program 1 (id=2596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r4, r5, 0xd, &(0x7f0000000200)={0x3f, 0x5, 0x4}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.373063001s ago: executing program 4 (id=2597): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x210382, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250300000058000180440004002000010012004e200000000600000000000000002a0000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg0\x00'}) fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe(0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.44061018s ago: executing program 5 (id=2598): accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x7ff, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408b0}, 0x0) 3.393845482s ago: executing program 1 (id=2599): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="4000d60000000d2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xf9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0xda, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0x33d, 0xbb, 0x1, {0x22, 0xbbd}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x61, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x5, 0xcb, 0x10, 0x46}, 0xa1, &(0x7f0000000080)={0x5, 0xf, 0xa1, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x2, 0xfa, 0x60, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "42e9284a4a6cdd793cb524f3a11eb047"}, @generic={0x24, 0x10, 0x1, "9331fec602a4862fadbcb452c6bd53ac8a7f6916c8ea344a4f9cef05e6493c8694"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x9, 0x1, 0x1000, 0x6}, @generic={0x3a, 0x10, 0xa, "7ae3e8479e709964475e65f593c61b14b2c1795260c8bacc8dfdf46d2cbac6b2b4fe9c35732877e5f4fa3e4ee22fa14bbf097ff311f346"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "46d722cf213a3c854ba3e9aa4c6c564a"}]}}) 3.392731057s ago: executing program 4 (id=2600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0xd6970000) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000020000000000feffff07000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 3.225947223s ago: executing program 5 (id=2601): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x81}, {0xa, 0x4e24, 0x5, @private0, 0xedb}, 0x1, {[0x81, 0x80, 0x5, 0x10, 0xffff, 0xfffffffa, 0x9, 0x2]}}, 0x5c) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100)) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000240)={0x0, 0x0, 0x5, r2, 0x11ad}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@remote, 0xb, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x93b7c65379eac420}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x14c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7, 0x6, "b6edac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "d18f747db64b45c60d0a7b397d24ad16ed39dbc4aed3e9d6e1d80b38282223df677a37b136ddfbb9dc85247f0ba265a0f2b05a37af9b30b478189d7c2b0644194e408874f198b4d064a682b9bbde9f70952e6f66a523863a3f05d5edd151a053fdf2923cb0efc6c198baa47fc8875f06600b7a0d73efa96e40e0f2f4af376eb8b1a77aba0ee80a293a4921a916d44d5f9363c4065ff3953a7f69d665ee9319113a522652e8ab9220025b09fc9d69f73ba4bcc6b2394c71"}, @NFTA_TABLE_USERDATA={0x42, 0x6, "92934fa5a09209b01119457c8ff1e40e8d75a651d9b6b71339487d5325d02df033ed668e6c1c07c1967ee1a7b4414cba9a6b36ea8be3111ad689130f5406"}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc3}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0xa07, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x25, 0x8, "b3ef8f18318563f0219de23a35aae0b64da2a426fe996b76d690617d5003536114"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSET={0x184, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_USERDATA={0x60, 0xd, 0x1, 0x0, "8678ab76171ff53ca2cda5dac98ac453f2461104473b950a504171d2a8eace701dce268c9106a08e94b0a36afecb4bcc91974b3ffdceda19355f288a8e736ec28c33abd41fdac2adb9dfb6f073393b5432fba23b9771831b446e8971"}, @NFTA_SET_DESC={0xe8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb77}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa354}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6444}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x228, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "bebc614586f4e84940cf57dd5762e89b2e7401a5d0ab5b0b14b0d5ea7a2d30f344e2ebf0973c987bf1c310b6d86b67ca94c20d2c914ca48a63125cade669864b84b5f7cbe363301eaa92e6a7a6965084b3c6b0a714231e29bfd16e5383f9fa7ef47b6203af59b7163e621e558bdcfdfe286de5dfe4969035ed7b24091d8c744de5399d3aaa61f428b2d70043a6f3d53eea018526181417fc2e986ce8ac0835bba501a64873beaf704aed0c44cf38f0b5dcf97987b39188e9842c42f55b2f"}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "90f1bb79512f8418db54f9b47ebfaaf3ae4d3b1d47729aa8627e469da741278f4226644a5a9ae535bdd1c66f52de84b734bc97f87ee389235a181f0f19cfad90904de667d70e68a5e3182c81bdced50a9d604f4ff16f2c5b247ae540b5aaae869f0d6674e72c49f55978be30c8dd2fa10ca47d630e9ca7dbbafba9b39ce90ee85a50c948a8671c29ee76"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "ee4ce062f6738dfb764e93a3b11ec9f064e9f18f9fde5c65c156a58cf92d5a3dd7be675fc667179be87369f6ba6b5b20c092b7d97c6edcd41aa6738dc461b8e735f2f79f30c26de7afef0c9a9b33cea65d9eeb5eab3b6a5eccd0ad6034e55810cda3b4c8c58e790a2767e79a47002745345caaa861855dbdc0a3bbccb3e5695fd56e19635f754d6a89434ef0091390d670aa46abe00c9a98afb8e251"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x688}, 0x1, 0x0, 0x0, 0x40085}, 0x20000011) r5 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x204000, 0x141) getsockname$inet6(r5, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000b00)=0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000b40)) ioctl$NBD_DISCONNECT(r5, 0xab08) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000b80)={0x8}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600802, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000c40)=@req={0x28, &(0x7f0000000c00)={'batadv_slave_0\x00', @ifru_names='veth0_to_bond\x00'}}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) syz_usb_connect$hid(0x871e645d360213f8, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0xa0, 0xea, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x7f, 0x2, 0x1, {0x22, 0x232}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xdb, 0x9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x9, 0x7, 0xe, 0x8, 0xf7}, 0xf, &(0x7f0000000d00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x5}]}, 0x1, [{0x93, &(0x7f0000000d40)=@string={0x93, 0x3, "fcf09364254115b56fac0d8856eb092aced69a26e281121a9a9d9781d24f5fde59e4a6d9b89a2afc571100ac154ef3127e3baec8444dfa5738b83a0cade8770574f55bf1c3861ce17c8db3f3ce75bda860cfe7b87a5572d4094214318689c6778bdf24b85f011ab1bd68a72fc7a670dfef05ffc0d4de0e268f1016815af16f76592b8e29928d1df36277834540adc7d56a"}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000e40)=0x5, 0x0, 0x4) sendmsg$tipc(r6, &(0x7f0000001080)={&(0x7f0000000e80)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000ec0)="04819efd2a3381ddbdc7120e79b181c759d5868b74a920150e0f530db16b5dfc999eebd78d2fc0e24f05411424724cd445e40689d03a547a562c2348ee93ed3d5165ba197839b1d4adab1918adb9d1faa6936d912797620e3f24a728223f6bf9a0673a34c92004940762fa2b268996c1f06e7deee997399e4d20b1620c6f6438413807d3192b1566f89156a386a9b0f09168e87766abfe80ccacb8fecf0e3d1e24373d810b9df1cbec02675a3966bab5d34ced2cfb995fede42de12adeb8f3d70dea362c1081120b7693d81053f901fd21eee02106e1c286318b9c6a287774911b", 0xe1}, {&(0x7f0000000fc0)="1e633576011fca1e4bd15e3ace084f31cefd84b77fd96386310f9d3638d9767edce7b126b75561751295509a4ae29c6c2f4783573ddefe1072ec", 0x3a}], 0x2, &(0x7f0000001040), 0x0, 0xc1}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000010c0)=0x3, &(0x7f0000001100)=0x4) getdents64(0xffffffffffffffff, &(0x7f0000001140)=""/172, 0xac) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fsetxattr(r4, &(0x7f0000001240)=@known='trusted.overlay.origin\x00', &(0x7f0000001280)='/sys/kernel/debug/binder/stats\x00', 0x1f, 0x1) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000001340)=@multiplanar_fd={0xfafc, 0x4, 0x4, 0x0, 0xf, {}, {0x2, 0x8, 0xc0, 0x7, 0x2, 0x81, "9702cb10"}, 0xffffffff, 0x4, {&(0x7f00000012c0)=[{0xff, 0x5413, {r5}, 0x5}, {0x9, 0x2, {}, 0x7fff}]}, 0xfffffffc, 0x0, r7}) getsockopt$sock_buf(r6, 0x1, 0x3, &(0x7f00000013c0)=""/15, &(0x7f0000001400)=0xf) 2.815933528s ago: executing program 6 (id=2602): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xffffffff, 0x3, 0x4, 0x59455247, [0x5, 0xb], [0x2, 0x3], 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x3d0, 0x0, 0x1a0, 0x1a0, 0x300, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff], [], 'tunl0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf3}}}, {{@ipv6={@private0, @remote, [], [], 'veth1_to_hsr\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @mcast2, [0xff, 0xff, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xff], 'xfrm0\x00', 'team0\x00', {}, {}, 0x42, 0x9, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) timer_create(0x2, &(0x7f0000000200)={0x0, 0x3, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x474, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r7 = socket$inet6_sctp(0xa, 0xc932bd01b4ba1913, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.35042918s ago: executing program 6 (id=2603): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x40000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x6, 0x0, 0xfffffd95, 0x2, 0x38000, 0x101, 0x313, 0x2, 0x4, 0x6, 0xbc, 0x40, 0x2, 0x1, 0x2, 0x43, 0x800, 0x4, 0xd, 0xc, 0x4, 0x500000, 0x800, 0xfff, 0xa, 0x9, 0x4, 0x3, 0x8, 0x401, 0x8, 0x80000000]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0xe, 0x5, 0x1, 0x7fffffff, 0x0}) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd062a011bd5000000010902240001"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r2, 0x8b32, &(0x7f0000000040)) 2.350106759s ago: executing program 4 (id=2604): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x801}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7d}, 0x2) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_io_uring_setup(0x3476, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0) (async) io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0) 2.312682864s ago: executing program 5 (id=2605): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d1b9b2a96f3dec, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1ac, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x58, 0x14, {{'cmac(aes)\x00'}, 0x60, 0x0, "b74a27a4f44bd05db8f139a0"}}]}, 0x1ac}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x2a, 0xa, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, 0x20, 0xb6cfa4117767c35d, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r3, 0x20, 0x781c, 0x6, 0x3, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}, @generic={0x94, 0xe, "9bd247e09578cd167aa45456"}, @ra={0x94, 0x4}]}}}}}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="29000300010003", 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x84) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES64], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000004050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.084090357s ago: executing program 5 (id=2606): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000400000000000000000000000018114000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) r8 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x83}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r9, 0x8b1a, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x0, 0x200a, 0x7, 0x9, 0x7, 0x1}}) 1.778896928s ago: executing program 2 (id=2607): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x270, 0x1d8, 0x1d8, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xffffff57, 0x0, {}, [@common=@unspec=@conntrack2={{}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xff000000, 0x0, 0x0, 0xff], @ipv6=@loopback, [0x0, 0x0, 0xff, 0xffffff00], @ipv4=@loopback, [0xff, 0xffffffff, 0xffffffff, 0xff000000], 0x40, 0x81, 0x33, 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x2000, 0xa90}, 0x40, 0x842}}, @common=@set={{}, {{0x2, [0x5, 0x7, 0x3, 0x4, 0x0, 0x5], 0x2}}}]}, @common=@unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x6e, 0x7ff, 0x8}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, [@inet=@rpfilter={{}, {0x3}}]}, @common=@inet=@SET3={0x0, 'SET\x00', 0x3, {{0x2, 0x3}, {0x1, 0x6, 0xa}, {0x1, 0x2, 0x7}, 0x68a, 0x5}}}], {{'\x00', 0x88000000, 0x70, 0x98}, {0x28}}}}, 0x2dc) 1.616228535s ago: executing program 2 (id=2608): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x200bc98, 0x10100, 0x3, 0x80000210}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xaa50e0d26e62c795, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x48044) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {0x2, 0xffe0}, {0x19, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_pidfd_open(r5, 0x0) ptrace(0xffffffffffffffff, r5) 1.508207137s ago: executing program 5 (id=2609): syz_usb_connect(0x3, 0xe8, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b316c910ce1ab2e93d5c010203010902d60002002a10000904ec0600fe02000309048104000e0100a807240126020400b40deb90a94aef33e509c09a395d4f850474c3824fec"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000315000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @local, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$clear(0x7, r1) syz_usb_connect(0x3, 0xe8, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b316c910ce1ab2e93d5c010203010902d60002002a10000904ec0600fe02000309048104000e0100a807240126020400b40deb90a94aef33e509c09a395d4f850474c3824fec"], 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000315000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @local, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async) keyctl$clear(0x7, r1) (async) 1.391801345s ago: executing program 2 (id=2610): mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) (async) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$char_usb(r0, &(0x7f0000000280)="e2", 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000bc0)={0xbf, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fchmod(r2, 0x1e6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x9) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x4aa3, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=r7], 0x5b0}, 0x20000000) (async) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=r7], 0x5b0}, 0x20000000) sendmsg$inet6(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="f1bf96e9cb453a02006fc36d89b822a9496552f570deaa19e3d8b925dd4e8510000000", 0x31}], 0x1, 0x0, 0xffffffffffffffa5}, 0x20000004) 924.78654ms ago: executing program 4 (id=2611): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x3, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1000000000002) r1 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x80009) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x48) (async, rerun: 64) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) (async, rerun: 64) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) (async) kcmp(0x0, 0x0, 0x4, r0, r1) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x5, 0x2, 0x0, 'queue1\x00', 0x200000}) (rerun: 32) unshare(0x10000) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_pidfd_open(0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x10010, 0xffffffffffffffff, 0xf2f11000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 727.760941ms ago: executing program 4 (id=2612): syz_clone(0x88000, &(0x7f0000000240)="9bc48dfc3c777c1e0acf57872ead9482dcd02e8956800318f85219fb266ceaecea582a2399c0871c5962ff4dbf2f25ed01e82e353211a567ab918867ccce9d4c0cd9d5a2275bffa1c323c5ab829da5bb42a294c9e6394659ba5945e14b4bd89b9bcd478017aa3ef9c41c3278296fda6b4716ff69", 0x74, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7c63b82f9c03fa4bf3373e953281d06816f1608591bf399d80b3f8926a5175ff0b58618975c74e837a099e22a2f7ac7f8ab713bf7a7dec6ce2f67c8618e8e158a5dabe91885be901f24af03a5f7f9f699a4a9fae443121c64cd3dc0521b197035beac3ad") r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000010000008500000075400000180100002020642500000400002020207b1af8ff00000000bfa10000000b765f2150865ec0e6df6c1aa3fd5ec431b6027331192000000007010000f8ffffffb702000008000000b7050000010000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000e20000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="9500000001000000050000000500"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b02000000000000a6020000f8ffffbfb703000008000000b704000001000000850000003300000018110000bad092216c3ee36d5d609c240ebbe9221587e43450cd01a582c772e2e4e1af673ea5196327b46e4478276f32a099b825b3fd80192d58a5b47a0c646e8424d04c173e6a88c19e1db1d0c043ad81f6ad47d402dd3045636340f27e4757f59452fd61afc5cfac28a6664d30", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a0001000000e400000000001c140000fe00000700130000"], 0x1c}}, 0x0) 468.003376ms ago: executing program 5 (id=2613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xbe5}]}}}]}, 0x38}}, 0x0) 264.391088ms ago: executing program 6 (id=2614): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x80045430, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1}) 0s ago: executing program 1 (id=2615): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x210382, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250300000058000180440004002000010012004e200000000600000000000000002a0000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg0\x00'}) fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) pipe(0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=2620): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) r1 = dup(r0) io_submit(0x0, 0x0, &(0x7f0000000500)) getpeername$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000440)={r2, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180), 0x12) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0xa, 0x5, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pselect6(0x40, &(0x7f0000001080)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000340)={'bond_slave_1\x00', @ifru_settings={0x3, 0x0, @fr=&(0x7f0000000280)={0x6, 0x4, 0x58, 0x7, 0x1, 0x3, 0x5}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @sched_cls=0x2e}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYRES16=r8, @ANYRES8=r6, @ANYBLOB="01002dbd7000fedbdf25010001000c00020008000000000000000c000004000780000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200408b0}, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) read$msr(r10, &(0x7f00000002c0)=""/128, 0x80) kernel console output (not intermixed with test programs): :sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 731.917493][T15173] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 732.486748][ T5911] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 732.592894][T15176] overlayfs: empty lowerdir [ 732.742809][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 732.749939][ T5911] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 732.978620][ T5911] usb 7-1: config 0 has no interface number 0 [ 732.992501][ T5911] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 733.010231][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.020919][ T5911] usb 7-1: Product: syz [ 733.025094][ T5911] usb 7-1: Manufacturer: syz [ 733.047098][ T5911] usb 7-1: SerialNumber: syz [ 733.143883][ T5911] usb 7-1: config 0 descriptor?? [ 733.172531][ T5911] hub 7-1:0.132: bad descriptor, ignoring hub [ 734.202135][ T5911] hub 7-1:0.132: probe with driver hub failed with error -5 [ 734.239436][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input54 [ 736.095348][T15213] kAFS: unparsable volume name [ 736.150980][T15216] netlink: 'syz.4.2170': attribute type 10 has an invalid length. [ 736.162592][T15216] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2170'. [ 736.441985][ T6396] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 737.161538][ T30] audit: type=1400 audit(2000000034.207:946): avc: denied { listen } for pid=15228 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 737.623104][ T6396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.846550][ T6396] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.929430][ T6396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.976704][ T6396] usb 6-1: Product: syz [ 737.980957][ T6396] usb 6-1: Manufacturer: syz [ 738.041341][ T6396] usb 6-1: SerialNumber: syz [ 738.731793][ T6396] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 738.778243][ T6396] usb 6-1: USB disconnect, device number 102 [ 738.818293][T15254] netlink: 'syz.1.2182': attribute type 12 has an invalid length. [ 738.909393][ T30] audit: type=1400 audit(2000000035.881:947): avc: denied { append } for pid=15260 comm="syz.2.2185" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 739.076125][T15267] syzkaller0: entered promiscuous mode [ 739.081775][T15267] syzkaller0: entered allmulticast mode [ 739.938426][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.950639][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.970138][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.984528][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.997516][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.039824][ T30] audit: type=1400 audit(2000000036.948:948): avc: denied { write } for pid=15277 comm="syz.5.2189" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 740.120899][T15279] lo speed is unknown, defaulting to 1000 [ 740.465165][T15279] chnl_net:caif_netlink_parms(): no params data found [ 740.483584][ T6472] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 740.946382][ T5911] usb 7-1: USB disconnect, device number 75 [ 740.963872][ T6472] usb 2-1: Using ep0 maxpacket: 16 [ 740.972042][ T6472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.986918][ T6472] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 741.006567][ T6472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.007268][T15308] fuse: Unknown parameter 'ÿÿ0x0000000000000003' [ 741.034137][ T6472] usb 2-1: config 0 descriptor?? [ 741.158921][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.301426][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.327933][T15279] bridge_slave_0: entered allmulticast mode [ 741.738323][T15279] bridge_slave_0: entered promiscuous mode [ 741.748052][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.833607][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.848514][ T30] audit: type=1400 audit(2000000038.622:949): avc: denied { shutdown } for pid=15291 comm="syz.1.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 741.906789][T15279] bridge_slave_1: entered allmulticast mode [ 742.128940][T15279] bridge_slave_1: entered promiscuous mode [ 742.171648][ T6472] usbhid 2-1:0.0: can't add hid device: -71 [ 742.183285][ T6472] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 742.215802][ T6472] usb 2-1: USB disconnect, device number 85 [ 742.225658][ T5817] Bluetooth: hci5: command tx timeout [ 742.307076][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.320841][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.389181][T15279] team0: Port device team_slave_0 added [ 742.404043][T15279] team0: Port device team_slave_1 added [ 742.477010][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.489630][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.527561][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.543074][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.550494][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.577830][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.864671][T15279] hsr_slave_0: entered promiscuous mode [ 742.893274][T15279] hsr_slave_1: entered promiscuous mode [ 742.937753][ T6472] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 743.566312][ T4981] Bluetooth: hci1: Frame reassembly failed (-84) [ 743.579050][ T4981] Bluetooth: hci1: Frame reassembly failed (-84) [ 743.621387][ T6472] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 743.714972][ T6472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.754717][ T6472] usb 3-1: Product: syz [ 743.769033][ T6472] usb 3-1: Manufacturer: syz [ 743.784601][ T6472] usb 3-1: SerialNumber: syz [ 743.832599][ T7027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.844829][ T7027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.954637][ T7027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.966500][ T7027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.060572][ T7027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.064352][T11937] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 744.071060][ T7027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.267258][T11937] usb 6-1: Using ep0 maxpacket: 32 [ 744.279203][ T7027] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 744.300078][T11937] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 744.314082][T11937] usb 6-1: config 32 has no interface number 0 [ 744.336413][T11937] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.371083][T11937] usb 6-1: config 32 interface 85 has no altsetting 0 [ 744.402736][T11937] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 744.415456][ T7027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.447124][ T7027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.458019][T11937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.458878][ T5823] Bluetooth: hci5: command tx timeout [ 744.474638][T11937] usb 6-1: Product: syz [ 744.483901][T11937] usb 6-1: Manufacturer: syz [ 744.495268][T11937] usb 6-1: SerialNumber: syz [ 744.791898][ T7027] team0: left allmulticast mode [ 744.808802][ T7027] team_slave_0: left allmulticast mode [ 744.826205][ T7027] team_slave_1: left allmulticast mode [ 744.844783][ T7027] team0: left promiscuous mode [ 744.854223][ T7027] team_slave_0: left promiscuous mode [ 744.875827][ T7027] team_slave_1: left promiscuous mode [ 744.892366][ T7027] bridge0: port 2(team0) entered disabled state [ 744.924956][ T7027] gretap0: left allmulticast mode [ 744.937890][ T7027] gretap0: left promiscuous mode [ 744.953700][ T7027] bridge0: port 1(gretap0) entered disabled state [ 745.341432][T11937] appletouch 6-1:32.85: Failed to request geyser raw mode [ 745.354985][T11937] appletouch 6-1:32.85: probe with driver appletouch failed with error -5 [ 745.378181][T11937] usb 6-1: USB disconnect, device number 103 [ 745.742549][ T5823] Bluetooth: hci1: command 0x1003 tx timeout [ 745.751279][ T5817] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 746.067431][ T7027] dvmrp8 (unregistering): left allmulticast mode [ 746.138753][T15362] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 746.152727][T15363] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 746.251953][T15365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.262659][T15365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.271976][T15365] CIFS mount error: No usable UNC path provided in device string! [ 746.271976][T15365] [ 746.282196][T15365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 746.463195][ T7027] team0: Port device bridge1 removed [ 746.535777][ T7027] team0: Port device bridge2 removed [ 746.599853][ T7027] team0: Port device bridge3 removed [ 746.608538][T11937] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 746.651693][ T6472] usb 3-1: USB disconnect, device number 116 [ 746.672722][ T5817] Bluetooth: hci5: command tx timeout [ 746.707672][ T7027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.719466][ T7027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.729522][ T7027] bond0 (unregistering): Released all slaves [ 746.900719][ T7027] tipc: Left network mode [ 746.911191][T15346] lo speed is unknown, defaulting to 1000 [ 747.002278][T15375] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 747.011542][T15375] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 747.121795][T15375] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 747.129549][T15375] netlink: 'syz.1.2207': attribute type 2 has an invalid length. [ 747.167380][ T30] audit: type=1326 audit(2000000043.617:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.193637][ T30] audit: type=1326 audit(2000000043.617:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.222181][ T30] audit: type=1326 audit(2000000043.617:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.246542][ T30] audit: type=1326 audit(2000000043.617:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.348522][ T30] audit: type=1326 audit(2000000043.617:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.389152][T11937] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 747.447941][ T30] audit: type=1326 audit(2000000043.617:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.471822][ T30] audit: type=1326 audit(2000000043.617:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.572709][ T30] audit: type=1326 audit(2000000043.617:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.610098][T11937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.646681][T11937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.688278][T11937] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 747.697679][ T30] audit: type=1326 audit(2000000043.617:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 747.734592][T11937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.759342][T11937] usb 6-1: config 0 descriptor?? [ 747.785281][ T30] audit: type=1326 audit(2000000043.617:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.1.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571898f749 code=0x7ffc0000 [ 748.040284][T15279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.070892][T15279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 748.205335][T15279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 748.247247][T15279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 748.295677][T11937] cp2112 0003:10C4:EA90.001D: item fetching failed at offset 5/7 [ 748.327340][T11937] cp2112 0003:10C4:EA90.001D: parse failed [ 748.387341][T11937] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -22 [ 748.739234][T11937] usb 6-1: USB disconnect, device number 105 [ 748.823961][T15396] lo speed is unknown, defaulting to 1000 [ 748.896562][ T5817] Bluetooth: hci5: command tx timeout [ 749.505871][T11937] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 749.508211][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.634329][T15279] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.670049][ T7027] hsr_slave_0: left promiscuous mode [ 749.687341][ T7027] hsr_slave_1: left promiscuous mode [ 749.693331][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.701403][T11937] usb 3-1: config 8 has an invalid interface number: 233 but max is 0 [ 749.702051][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.711586][T11937] usb 3-1: config 8 has no interface number 0 [ 749.723373][T11937] usb 3-1: config 8 interface 233 has no altsetting 0 [ 749.724150][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.733361][T11937] usb 3-1: string descriptor 0 read error: -22 [ 749.738023][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.746511][T11937] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 749.760702][T11937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.781877][ T7027] veth1_macvtap: left promiscuous mode [ 749.782788][T11937] cp210x 3-1:8.233: cp210x converter detected [ 749.796053][ T7027] veth0_macvtap: left promiscuous mode [ 749.801748][ T7027] veth1_vlan: left promiscuous mode [ 749.807606][ T7027] veth0_vlan: left promiscuous mode [ 750.001135][T11937] cp210x 3-1:8.233: failed to get vendor val 0x370b size 1: -71 [ 750.039468][T11937] cp210x 3-1:8.233: querying part number failed [ 750.058663][T11937] usb 3-1: cp210x converter now attached to ttyUSB0 [ 750.084175][T11937] usb 3-1: USB disconnect, device number 117 [ 750.108830][T11937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 750.139116][T11937] cp210x 3-1:8.233: device disconnected [ 751.456690][T15449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2220'. [ 751.466360][ T7277] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 751.817564][ T7277] usb 2-1: device descriptor read/64, error -71 [ 751.924575][ T7027] team0 (unregistering): Port device team_slave_1 removed [ 752.078859][ T7027] team0 (unregistering): Port device team_slave_0 removed [ 752.092933][ T7277] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 752.152912][ T6472] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 752.317267][ T6472] usb 7-1: Using ep0 maxpacket: 16 [ 752.329644][ T6472] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 752.337663][ T6472] usb 7-1: config 0 has no interface number 0 [ 752.362999][ T6472] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.389201][ T6472] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 752.409813][ T7277] usb 2-1: device descriptor read/64, error -71 [ 752.412193][ T6472] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 752.456330][ T6472] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 752.464448][ T6472] usb 7-1: Product: syz [ 752.477712][ T6472] usb 7-1: SerialNumber: syz [ 752.577509][ T7277] usb usb2-port1: attempt power cycle [ 752.871098][ T6472] usb 7-1: config 0 descriptor?? [ 752.879684][ T6472] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 752.888639][ T6472] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input56 [ 752.972946][ T7277] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 753.045906][ T7277] usb 2-1: device descriptor read/8, error -71 [ 753.132937][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 753.135266][ T5876] usb 7-1: USB disconnect, device number 76 [ 753.140267][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 753.252799][ T5876] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 753.386548][ T7277] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 753.411270][ T7277] usb 2-1: device descriptor read/8, error -71 [ 753.555825][ T7277] usb usb2-port1: unable to enumerate USB device [ 753.834111][ T5911] lo speed is unknown, defaulting to 1000 [ 753.858893][ T5911] syz2: Port: 1 Link DOWN [ 753.957796][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.964922][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.079198][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.086375][ T4013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.745340][ T7277] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 754.799315][ T7027] IPVS: stop unused estimator thread 0... [ 754.970396][ T7277] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 754.994798][ T7277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.373899][ T7277] usb 2-1: config 0 has no interfaces? [ 755.401525][ T7277] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 755.466253][ T7277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.492186][ T7277] usb 2-1: config 0 descriptor?? [ 755.619324][T15279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.758805][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 755.758815][ T30] audit: type=1400 audit(2000000051.643:975): avc: denied { setopt } for pid=15475 comm="syz.1.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 755.792094][ T7277] usb 2-1: string descriptor 0 read error: -71 [ 755.833506][ T7277] usb 2-1: USB disconnect, device number 90 [ 756.637077][T15520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.645776][T15520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.861158][T11937] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 756.913977][T15279] veth0_vlan: entered promiscuous mode [ 756.926916][ T6472] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 756.951395][T15279] veth1_vlan: entered promiscuous mode [ 757.033852][T11937] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 757.055347][T15279] veth0_macvtap: entered promiscuous mode [ 757.062332][T11937] usb 7-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.092543][T15279] veth1_macvtap: entered promiscuous mode [ 757.107448][ T6472] usb 2-1: no configurations [ 757.112091][ T6472] usb 2-1: can't read configurations, error -22 [ 757.121309][T11937] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 757.148424][T11937] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 757.169215][T15279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.183364][T11937] usb 7-1: Manufacturer: syz [ 757.199156][T11937] usb 7-1: SerialNumber: syz [ 757.208357][T15279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.251806][ T7815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.273611][ T7815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.284394][ T6472] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 757.307965][ T7815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.324071][ T7815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.341652][T15542] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 757.985295][ T6472] usb 2-1: no configurations [ 757.997054][ T6472] usb 2-1: can't read configurations, error -22 [ 758.004100][ T6472] usb usb2-port1: attempt power cycle [ 758.038095][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.050994][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.119282][ T4981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.133695][ T4981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.229848][ T7277] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 758.575089][ T6472] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 758.599042][ T7277] usb 3-1: unable to get BOS descriptor or descriptor too short [ 758.613191][ T7277] usb 3-1: not running at top speed; connect to a high speed hub [ 758.622277][ T6472] usb 2-1: no configurations [ 758.623848][ T7277] usb 3-1: config 7 has an invalid interface number: 145 but max is 0 [ 758.628209][ T6472] usb 2-1: can't read configurations, error -22 [ 758.767599][T15559] binder: 15553:15559 ioctl c0306201 0 returned -14 [ 758.826497][T15559] JFS: discard option not supported on device [ 758.841110][T15559] Mount JFS Failure: -22 [ 758.845715][T15559] jfs_mount failed w/return code = -22 [ 759.408029][ T7277] usb 3-1: config 7 has no interface number 0 [ 759.417981][ T7277] usb 3-1: config 7 interface 145 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 759.433131][ T7277] usb 3-1: config 7 interface 145 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 759.444739][ T7277] usb 3-1: config 7 interface 145 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 759.457221][ T7277] usb 3-1: config 7 interface 145 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 759.477015][ T7277] usb 3-1: config 7 interface 145 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 759.489817][ T7277] usb 3-1: config 7 interface 145 has no altsetting 0 [ 759.502170][ T6472] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 759.503851][ T7277] usb 3-1: string descriptor 0 read error: -22 [ 759.519754][ T7277] usb 3-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=9a.92 [ 759.529459][ T7277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.545526][T15527] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 759.546680][ T6472] usb 2-1: no configurations [ 759.556546][ T7277] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 759.580337][ T6472] usb 2-1: can't read configurations, error -22 [ 759.596047][ T6472] usb usb2-port1: unable to enumerate USB device [ 759.774734][T11937] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 759.803653][ T6472] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 759.808228][T11937] usb 7-1: USB disconnect, device number 77 [ 759.860960][T15572] sit0: entered promiscuous mode [ 759.877583][T15572] netlink: 'syz.6.2241': attribute type 1 has an invalid length. [ 759.885348][T15572] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2241'. [ 759.895880][T15570] only policy match revision 0 supported [ 759.895896][T15570] unable to load match [ 759.906305][ T5911] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 759.946761][T15574] ipt_ECN: cannot use operation on non-tcp rule [ 760.003849][ T6472] usb 5-1: Using ep0 maxpacket: 16 [ 760.012673][ T6472] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 760.022502][ T6472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.032706][ T6472] usb 5-1: Product: syz [ 760.041709][ T6472] usb 5-1: Manufacturer: syz [ 760.046983][ T6472] usb 5-1: SerialNumber: syz [ 760.058759][ T6472] usb 5-1: config 0 descriptor?? [ 760.068832][ T6472] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.099131][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 760.128285][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.159476][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 760.177028][ T6472] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 760.195788][ T5911] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 760.223313][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.239846][T15022] udevd[15022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.257631][ T7277] gspca_sn9c20x: Write register 1002 failed -71 [ 760.266360][ T5911] usb 6-1: config 0 descriptor?? [ 760.278610][ T7277] gspca_sn9c20x: Device initialization failed [ 760.282112][T15565] overlay: ./file0 is not a directory [ 760.293617][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.303013][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.327895][ T7277] gspca_sn9c20x 3-1:7.145: probe with driver gspca_sn9c20x failed with error -71 [ 760.699523][ T7277] usb 3-1: USB disconnect, device number 118 [ 760.703857][ T6472] usb 5-1: USB disconnect, device number 3 [ 760.893520][ T30] audit: type=1400 audit(2000000056.395:976): avc: denied { map } for pid=15562 comm="syz.5.2238" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 760.955060][ T5911] logitech 0003:046D:C50C.001E: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.5-1/input0 [ 761.487497][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 762.121390][ T30] audit: type=1400 audit(2000000057.246:977): avc: denied { read } for pid=15596 comm="syz.1.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.269698][ T30] audit: type=1400 audit(2000000057.302:978): avc: denied { write } for pid=15596 comm="syz.1.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.453253][ T5890] usb 6-1: USB disconnect, device number 106 [ 762.751730][ T6095] usb 7-1: new low-speed USB device number 78 using dummy_hcd [ 763.193974][ T5911] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 763.297504][ T6095] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 763.328273][ T6095] usb 7-1: config 0 has no interface number 0 [ 763.339297][ T5911] usb 2-1: device descriptor read/64, error -71 [ 763.340461][ T30] audit: type=1400 audit(2000000058.743:979): avc: denied { ioctl } for pid=15619 comm="syz.4.2254" path="socket:[52092]" dev="sockfs" ino=52092 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 763.350276][ T6095] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.415657][ T6095] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 763.456616][ T6095] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 763.492878][ T6095] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 763.520346][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2255'. [ 763.530551][ T6095] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 763.563760][ T6095] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.585301][ T6095] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 764.013552][ T5911] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 764.022845][ T6095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.034800][ T6095] usb 7-1: config 0 descriptor?? [ 764.040651][T15607] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 764.048240][T15607] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 764.063528][ T6095] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 764.162648][ T5911] usb 2-1: device descriptor read/64, error -71 [ 764.244393][ T30] audit: type=1400 audit(2000000059.584:980): avc: denied { call } for pid=15628 comm="syz.2.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 764.269767][T15630] binder_alloc: 15628: pid 15628 spamming oneway? 1 buffers allocated for a total size of 4096 [ 764.298687][T15630] binder_alloc: 15628: pid 15628 spamming oneway? 2 buffers allocated for a total size of 5120 [ 764.334785][ T5911] usb usb2-port1: attempt power cycle [ 764.775555][T15643] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2250'. [ 764.784807][T15643] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2250'. [ 764.817896][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.829832][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.956520][T15644] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2260'. [ 765.104033][ T5911] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 765.190751][ T5911] usb 2-1: device descriptor read/8, error -71 [ 765.353095][ T5817] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 765.490837][ T5911] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 765.564740][T15640] ceph: No mds server is up or the cluster is laggy [ 765.631493][ T6095] libceph: connect (1)[c::]:6789 error -101 [ 765.655502][ T5911] usb 2-1: device descriptor read/8, error -71 [ 765.683207][ T6095] libceph: mon0 (1)[c::]:6789 connect error [ 765.826650][ T5911] usb usb2-port1: unable to enumerate USB device [ 766.344542][T15659] bridge0: port 3(gretap0) entered blocking state [ 766.351800][T15659] bridge0: port 3(gretap0) entered disabled state [ 766.359196][T15659] gretap0: entered allmulticast mode [ 766.372788][T15659] gretap0: entered promiscuous mode [ 766.381429][T15659] bridge0: port 3(gretap0) entered blocking state [ 766.387978][T15659] bridge0: port 3(gretap0) entered forwarding state [ 766.476042][T15659] tipc: New replicast peer: 255.255.255.255 [ 766.483653][T15659] tipc: Enabled bearer , priority 10 [ 766.505325][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 766.514403][T15659] tipc: Disabling bearer [ 767.162269][ T5911] usb 7-1: USB disconnect, device number 78 [ 767.171177][ T5911] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 767.277917][ T30] audit: type=1400 audit(2000000062.428:981): avc: denied { read } for pid=15662 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 767.355934][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 767.604887][ T5855] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 767.724794][ T5911] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 767.801207][ T5855] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 767.813991][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.825820][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.848499][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 767.857877][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 767.883140][ T5855] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.892310][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.929682][ T5855] usb 2-1: config 0 descriptor?? [ 768.053833][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 768.060970][ T5911] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 768.069966][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.081035][ T5911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 768.140010][ T5911] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.149272][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.157376][ T5911] usb 7-1: Product: syz [ 768.161633][ T5911] usb 7-1: Manufacturer: syz [ 768.166237][ T5911] usb 7-1: SerialNumber: syz [ 768.173328][T15680] netlink: 'syz.5.2269': attribute type 3 has an invalid length. [ 768.203564][ T5855] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 768.238232][ T5855] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 768.320847][ T5855] usb 2-1: USB disconnect, device number 99 [ 768.631281][T15695] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2270'. [ 769.000729][ T5911] usb 7-1: 0:2 : does not exist [ 769.011877][T15661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.047091][T15661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.178857][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'. [ 769.453832][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2263'. [ 769.598025][ T30] audit: type=1400 audit(2000000064.598:982): avc: denied { setopt } for pid=15709 comm="syz.5.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 769.996589][T15711] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2278'. [ 770.066300][ T5911] usb 7-1: USB disconnect, device number 79 [ 770.104561][T15022] udevd[15022]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.143181][T15718] use of bytesused == 0 is deprecated and will be removed in the future, [ 770.151743][T15718] use the actual size instead. [ 770.506361][T15725] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 770.796255][T15737] input: syz1 as /devices/virtual/input/input58 [ 770.866052][ T6396] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 771.025918][ T6396] usb 6-1: Using ep0 maxpacket: 32 [ 771.034727][ T6396] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 771.048500][ T6396] usb 6-1: config 0 has no interface number 0 [ 771.063643][ T6396] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 771.080839][ T6396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.095827][ T6396] usb 6-1: Product: syz [ 771.103377][ T6396] usb 6-1: Manufacturer: syz [ 771.110680][ T6396] usb 6-1: SerialNumber: syz [ 771.120574][ T6396] usb 6-1: config 0 descriptor?? [ 771.136320][ T6396] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 771.144838][ T6396] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 771.346354][ T6396] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 771.567982][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2282'. [ 771.578587][ T6396] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 771.611453][ T6396] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 771.645447][ T6396] usb 6-1: USB disconnect, device number 107 [ 771.657863][ T6396] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 771.763534][ T5911] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 772.458608][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 772.465469][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.475993][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 772.485349][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.502129][ T5911] usb 2-1: config 0 descriptor?? [ 772.525691][ T5911] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 772.877671][T15765] tipc: New replicast peer: 255.255.255.255 [ 772.884916][T15765] tipc: Enabled bearer , priority 10 [ 772.895407][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2292'. [ 772.904502][T15765] tipc: Disabling bearer [ 774.419030][T15773] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2295'. [ 774.447334][ T5911] gspca_vc032x: reg_r err -110 [ 774.459566][ T5911] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 774.597049][ T6396] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 775.538446][ T7277] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 775.567929][ T6396] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 775.606856][ T6396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.641516][ T6396] usb 7-1: Product: syz [ 775.656651][ T6396] usb 7-1: Manufacturer: syz [ 775.667581][ T6396] usb 7-1: SerialNumber: syz [ 775.679827][ T6396] usb 7-1: config 0 descriptor?? [ 775.710385][ T6396] hub 7-1:0.0: bad descriptor, ignoring hub [ 775.729754][ T7277] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.737661][ T6396] hub 7-1:0.0: probe with driver hub failed with error -5 [ 775.754960][ T7277] usb 6-1: not running at top speed; connect to a high speed hub [ 775.784764][ T7277] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 775.803866][ T7277] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 775.829883][ T7277] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 775.858112][ T7277] usb 6-1: config 17 has no interface number 0 [ 775.869042][ T7277] usb 6-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.900783][ T7277] usb 6-1: config 17 interface 8 has no altsetting 0 [ 775.933088][ T6396] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 775.951733][ T7277] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 775.962651][ T6396] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.976094][ T7277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.997616][ T6396] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 776.006249][ T7277] usb 6-1: Product: syz [ 776.010497][ T30] audit: type=1400 audit(2000000070.585:983): avc: denied { connect } for pid=15786 comm="syz.4.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 776.033183][ T7277] usb 6-1: Manufacturer: syz [ 776.037806][ T7277] usb 6-1: SerialNumber: syz [ 776.049083][ T6396] usb 7-1: media controller created [ 776.080160][ T6396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 776.496985][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.507311][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.047666][ T6396] DVB: Unable to find symbol dib7000p_attach() [ 778.055365][ T6396] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 778.112682][ T5890] usb 2-1: USB disconnect, device number 100 [ 778.169757][ T6396] rc_core: IR keymap rc-dib0700-rc5 not found [ 778.182267][ T6396] Registered IR keymap rc-empty [ 778.192552][ T6396] dvb-usb: could not initialize remote control. [ 778.202295][ T6396] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 778.236936][ T6396] usb 7-1: USB disconnect, device number 80 [ 778.741277][ T6396] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 778.790821][ T7277] usb 6-1: selecting invalid altsetting 0 [ 779.012459][ T7277] usb 6-1: USB disconnect, device number 108 [ 779.542585][T15022] udevd[15022]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.677013][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2305'. [ 779.743761][ T30] audit: type=1400 audit(2000000074.083:984): avc: denied { create } for pid=15816 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 779.866797][ T30] audit: type=1400 audit(2000000074.083:985): avc: denied { bind } for pid=15816 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 780.651530][T15842] tipc: New replicast peer: 255.255.255.255 [ 780.657820][T15842] tipc: Enabled bearer , priority 10 [ 780.666993][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2311'. [ 780.676046][T15842] tipc: Disabling bearer [ 782.486194][ T790] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 783.640735][ T790] usb 7-1: Using ep0 maxpacket: 32 [ 783.649839][ T790] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 783.658357][ T790] usb 7-1: config 0 has no interface number 0 [ 783.664714][ T790] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 783.675125][ T790] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 783.685248][ T790] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 783.733654][ T790] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 783.761308][ T790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.797793][ T790] usb 7-1: Product: syz [ 783.807858][ T790] usb 7-1: Manufacturer: syz [ 783.835806][ T790] usb 7-1: SerialNumber: syz [ 783.872483][ T790] usb 7-1: config 0 descriptor?? [ 783.902429][T15858] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 784.131723][ T790] usb-storage 7-1:0.20: USB Mass Storage device detected [ 784.220884][ T790] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 784.267925][ T790] scsi host1: usb-storage 7-1:0.20 [ 784.432360][ T790] usb 7-1: USB disconnect, device number 81 [ 785.630266][T15892] tipc: New replicast peer: 255.255.255.255 [ 785.636808][T15892] tipc: Enabled bearer , priority 10 [ 785.643331][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 785.652384][T15893] tipc: Disabling bearer [ 786.457991][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'. [ 786.586122][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2322'. [ 788.248472][ T6620] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 789.340747][ T6620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.354235][ T6620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.369896][ T6620] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 789.844552][ T6620] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 789.852712][ T6620] usb 7-1: Manufacturer: syz [ 789.859646][ T6620] usb 7-1: config 0 descriptor?? [ 791.061027][ T6620] uclogic 0003:256C:006D.0020: interface is invalid, ignoring [ 791.491911][ T790] usb 7-1: USB disconnect, device number 82 [ 796.130212][T16011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16011 comm=syz.5.2350 [ 796.557720][ T30] audit: type=1400 audit(2000000089.817:986): avc: denied { read write } for pid=9573 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.768979][ T30] audit: type=1400 audit(2000000089.817:987): avc: denied { open } for pid=9573 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.833647][ T30] audit: type=1400 audit(2000000089.817:988): avc: denied { ioctl } for pid=9573 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.888114][ T30] audit: type=1400 audit(2000000089.817:989): avc: denied { create } for pid=16012 comm="syz.6.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.949543][ T30] audit: type=1400 audit(2000000089.817:990): avc: denied { mounton } for pid=16012 comm="syz.6.2351" path="/281/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 796.983474][T16035] netlink: 'syz.6.2354': attribute type 1 has an invalid length. [ 797.046876][ T30] audit: type=1400 audit(2000000089.817:991): avc: denied { create } for pid=16012 comm="syz.6.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 797.067677][ T30] audit: type=1400 audit(2000000089.817:992): avc: denied { write } for pid=16012 comm="syz.6.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 797.093686][ T30] audit: type=1400 audit(2000000089.817:993): avc: denied { read } for pid=16012 comm="syz.6.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 797.242987][T16035] bond1: entered promiscuous mode [ 797.267832][ T30] audit: type=1400 audit(2000000089.854:994): avc: denied { create } for pid=16017 comm="syz.1.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 797.372490][T16035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.440426][ T30] audit: type=1400 audit(2000000089.863:995): avc: denied { read } for pid=16017 comm="syz.1.2342" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 797.830443][T16048] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2356'. [ 801.045652][T16071] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 801.053385][T16071] ALSA: mixer_oss: invalid index 1374389 [ 801.101641][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 801.172658][T16083] No source specified [ 801.844647][ T5855] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 802.002629][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 802.002645][ T30] audit: type=1400 audit(2000000094.905:1082): avc: denied { create } for pid=16097 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 802.030547][ T5855] usb 7-1: Using ep0 maxpacket: 32 [ 802.036292][ T30] audit: type=1400 audit(2000000094.905:1083): avc: denied { setopt } for pid=16097 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 802.056734][ T30] audit: type=1400 audit(2000000094.905:1084): avc: denied { write } for pid=16097 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 802.077190][ T5855] usb 7-1: config 0 has an invalid interface number: 157 but max is 0 [ 802.087785][ T5855] usb 7-1: config 0 has no interface number 0 [ 802.216206][ T5855] usb 7-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=1b.b7 [ 802.243392][ T6620] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 802.253532][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 802.261843][ T5855] usb 7-1: Product: syz [ 802.269379][ T5855] usb 7-1: Manufacturer: syz [ 802.274666][ T5855] usb 7-1: SerialNumber: syz [ 802.278583][ T30] audit: type=1400 audit(2000000095.167:1085): avc: denied { allowed } for pid=16101 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 802.319176][ T6472] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 802.327329][ T30] audit: type=1400 audit(2000000095.186:1086): avc: denied { create } for pid=16101 comm="syz.5.2371" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 802.328015][ T5855] usb 7-1: config 0 descriptor?? [ 802.355919][ T30] audit: type=1400 audit(2000000095.186:1087): avc: denied { create } for pid=16101 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.382628][ T5855] mct_u232 7-1:0.157: MCT U232 converter detected [ 802.390357][ T5855] mct_u232 ttyUSB0: expected endpoint missing [ 802.405268][ T30] audit: type=1400 audit(2000000095.186:1088): avc: denied { write } for pid=16101 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.446980][ T6620] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 802.456285][ T6620] usb 3-1: config 0 has no interface number 0 [ 802.460916][ T30] audit: type=1400 audit(2000000095.186:1089): avc: denied { connect } for pid=16101 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.462387][ T6620] usb 3-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 802.483518][ T30] audit: type=1400 audit(2000000095.186:1090): avc: denied { name_connect } for pid=16101 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 802.515476][ T6620] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 225 [ 802.536973][ T6472] usb 2-1: Using ep0 maxpacket: 8 [ 802.546472][T16104] can0: slcan on ttyS3. [ 802.586082][ T6472] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 802.597915][ T6472] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.608956][ T30] audit: type=1400 audit(2000000095.195:1091): avc: denied { shutdown } for pid=16101 comm="syz.5.2371" laddr=fe80::13 lport=46202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.631649][ T6472] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.744000][ T6620] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 802.753503][ T6620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.756248][ T6472] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.784854][ T6472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.785502][ T6620] usb 3-1: config 0 descriptor?? [ 802.974519][ T5855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 803.227700][ T6472] usb 2-1: Product: 䊦â®î¸·ë°œê¾¿ìš¦æ¦í’›ä«ã½©å§§ï¨¸æ¿¦ï–¼î¦Šëº‹æ¨©ê¯’艩èŒë·¶èŠšâ¦‰ã±¶ã¯¾è€¢ì…½åŽ‚깮攒㵟낥㿒ྨ﷧䚧邵êªãµ¡ç•§é‰®ê³“ൂ㔰곟濫Ꮊ⟘દ䨼ã¸ï›“ê¡ìƒ¹î§¬â´‚ଋ럶â›â¿ê†Œá¡¶â¨å‘¹â¯˜í‡Þ…椳㘯峕⚔郱 [ 803.258075][ T6472] usb 2-1: Manufacturer: য়鱉î–ê—­ãŽä¿…èš…æŒé¸ƒï˜®ï˜‡áŠâ²¡è­”å î·™å®“숞ꫂ렰㯯쵢䬄Ҫ蒔è朡ꡇ㻦ࢧá¤åˆŸíœ¡ê˜€éž¢2ë…䳿㚑⌆뚫ᇫ䥋â¬â—䕙Ѭ䘴麧씵å¦Ð°Þ¢é€™ã³žä­¬è®¹å’˜è„©íž»ï“¦à´§äƒŸâ¶ì©æŒá‘«î»¤áª‚æ¿ë®œæœ¡ã¨”ã’•ê˜ã ì§€å¢©è„¤ì£¦ç ¯ãŽ¼è¿¢îŒ†î㻋⪕⽙ჳ쎱埫寕ꔓæ”ᯣ텮᧿詙旙ᇔ嘱뗫鶿躷 [ 803.293631][ T6472] usb 2-1: SerialNumber: 旯놛쿴䪎䳘嫆⾨朕羗齼í•ã ®ã‹¾îŠ­ØªéŠ·ï•…î °ç¸æŒ¬ëžéœ­å‘˜ã·¯è¥¾â¨æ·‰ä’•ï·¹á’†â§Œê¼¦ì˜¼âŒ¯ë˜­å¶ï¶™à¢®ã†’ä…›ê´ë¯¸ä½²ë¶‡å“€ê£€â™›å™¢ç‘§ä‚­è²­å…®ãƒ™ä†¨éŠšë·²ãªà½§à¶¿ë¡•ä¢Œë¥†é³©áƒ³è’អïµá±“羸绗鈧á¨é¡¬ä‚¸ï˜–匎샦ﲠ൩뫚ꅧ溳䬉ᵲ筨ꅚ餚땙í¨ç¼ˆåº”㴀濞䄘㷕휊쨌₽囔€å›ì·ä™Žï…ˆã¢±ëŽ‡æ¼å›ºá·¾â›¤ [ 803.329450][T16096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.429217][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 803.439111][ T5855] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.452354][ T5855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 803.496327][ T5855] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 803.531144][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.553883][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.562837][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.771874][ T5855] usb 5-1: config 0 descriptor?? [ 803.784783][ T6472] usb 2-1: 0:2 : does not exist [ 803.825301][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 803.834338][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.426415][ T6472] usb 2-1: USB disconnect, device number 101 [ 804.435811][T16112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.579873][ T5876] usb 7-1: USB disconnect, device number 83 [ 804.662601][T15022] udevd[15022]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.676844][ T5876] mct_u232 7-1:0.157: device disconnected [ 804.704906][ T6620] usb 3-1: string descriptor 0 read error: -71 [ 804.733921][ T6620] keyspan 3-1:0.168: Keyspan 2 port adapter converter detected [ 804.742972][ T5855] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 804.759611][ T6620] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 1 [ 804.799036][ T6620] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 84 [ 804.814594][ T6620] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 2 [ 804.833864][ T6620] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 804.895766][ T6620] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 88 [ 804.947217][ T6620] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 6 [ 804.975386][ T6620] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 805.005943][ T6620] usb 3-1: USB disconnect, device number 119 [ 805.049870][ T6620] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 805.096948][ T5876] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 805.107028][ T6620] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 805.151876][ T6620] keyspan 3-1:0.168: device disconnected [ 805.418500][T16130] tmpfs: Unknown parameter 'usrquota_inodå_hardlimit' [ 805.426191][ T5876] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 806.473023][ T5876] usb 6-1: config 0 has no interface number 0 [ 806.483370][ T5876] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 806.508727][ T5876] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 806.519293][ T5876] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 806.956978][ T5876] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 806.966433][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.978189][ T5876] usb 6-1: config 0 descriptor?? [ 806.987365][ T5876] gspca_main: spca561-2.14.0 probing abcd:cdee [ 807.105044][ T5855] usb 5-1: USB disconnect, device number 4 [ 807.139442][T16103] can0 (unregistered): slcan off ttyS3. [ 807.209727][T16144] tipc: Enabling of bearer rejected, failed to enable media [ 807.223074][ T5876] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 807.238876][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.317074][ T5876] usb 6-1: MIDIStreaming interface descriptor not found [ 807.423305][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 807.670045][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.844356][ T6472] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 807.919297][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.271924][ T6472] usb 3-1: Using ep0 maxpacket: 32 [ 808.693218][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 808.693233][ T30] audit: type=1400 audit(2000000101.163:1130): avc: denied { remove_name } for pid=16151 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=7682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.785857][ T30] audit: type=1400 audit(2000000101.191:1131): avc: denied { unlink } for pid=16151 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=7682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 809.055502][ T5876] usb 6-1: USB disconnect, device number 109 [ 809.067214][ T6472] usb 3-1: device descriptor read/all, error -71 [ 809.539541][ T6095] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 809.599947][ T30] audit: type=1400 audit(2000000102.014:1132): avc: denied { read write } for pid=16169 comm="syz.4.2385" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 809.633632][T15022] udevd[15022]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.757927][ T6095] usb 7-1: Using ep0 maxpacket: 16 [ 809.765053][ T30] audit: type=1400 audit(2000000102.014:1133): avc: denied { open } for pid=16169 comm="syz.4.2385" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 809.817661][ T30] audit: type=1400 audit(2000000102.014:1134): avc: denied { ioctl } for pid=16169 comm="syz.4.2385" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 809.857642][ T30] audit: type=1400 audit(2000000102.201:1135): avc: denied { name_bind } for pid=16159 comm="syz.6.2382" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 810.335855][ T30] audit: type=1400 audit(2000000102.201:1136): avc: denied { node_bind } for pid=16159 comm="syz.6.2382" saddr=172.20.20.170 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 810.557644][ T30] audit: type=1400 audit(2000000102.903:1137): avc: denied { getopt } for pid=16193 comm="syz.2.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 810.637044][T16194] wireguard0: entered promiscuous mode [ 810.685138][T16194] wireguard0: entered allmulticast mode [ 811.017172][T16202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 811.453314][ T30] audit: type=1400 audit(2000000103.745:1138): avc: denied { read write } for pid=16208 comm="syz.4.2391" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.548925][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 811.588539][T16206] nbd: device at index 64 is going down [ 811.620346][ T30] audit: type=1400 audit(2000000103.773:1139): avc: denied { open } for pid=16208 comm="syz.4.2391" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.712712][T15022] udevd[15022]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 811.761632][T15022] udevd[15022]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 812.213894][T16217] 9p: Bad value for 'rfdno' [ 812.222951][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'. [ 812.379655][ T6095] usb 7-1: unable to get BOS descriptor or descriptor too short [ 812.391110][ T6095] usb 7-1: too many configurations: 36, using maximum allowed: 8 [ 812.400466][ T6095] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 812.421764][ T6095] usb 7-1: can't read configurations, error -71 [ 812.439917][T16223] tipc: Enabling of bearer rejected, failed to enable media [ 812.665330][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 814.208461][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 814.208478][ T30] audit: type=1400 audit(2000000106.326:1157): avc: denied { module_request } for pid=16233 comm="syz.1.2397" kmod="ip_set_has,port,net" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 814.375916][T16245] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2399'. [ 814.820622][ T30] audit: type=1400 audit(2000000106.897:1158): avc: denied { setopt } for pid=16233 comm="syz.1.2397" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 814.852257][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 815.082602][ T30] audit: type=1400 audit(2000000107.140:1159): avc: denied { ioctl } for pid=16252 comm="syz.4.2401" path="socket:[54388]" dev="sockfs" ino=54388 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 815.196761][ T30] audit: type=1400 audit(2000000107.243:1160): avc: denied { shutdown } for pid=16219 comm="syz.5.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 815.824518][T11937] libceph: connect (1)[c::]:6789 error -101 [ 815.841106][T11937] libceph: mon0 (1)[c::]:6789 connect error [ 815.898285][T16221] ceph: No mds server is up or the cluster is laggy [ 816.106278][ T30] audit: type=1400 audit(2000000108.094:1161): avc: denied { create } for pid=16266 comm="syz.4.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 816.127810][ T30] audit: type=1400 audit(2000000108.122:1162): avc: denied { connect } for pid=16266 comm="syz.4.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 816.553688][ T30] audit: type=1400 audit(2000000108.122:1163): avc: denied { write } for pid=16266 comm="syz.4.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 816.620188][ T3503] Bluetooth: hci1: Frame reassembly failed (-84) [ 817.009934][ T30] audit: type=1400 audit(2000000108.917:1164): avc: denied { firmware_load } for pid=16271 comm="syz.6.2405" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 817.243709][T16282] tipc: Enabling of bearer rejected, failed to enable media [ 817.500943][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2407'. [ 818.262080][ T30] audit: type=1400 audit(2000000109.236:1165): avc: denied { execute } for pid=16278 comm="syz.2.2406" path="/463/cpuacct.usage_percpu" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 818.438816][ T30] audit: type=1400 audit(2000000109.254:1166): avc: denied { mount } for pid=16278 comm="syz.2.2406" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 818.781384][ T5817] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 819.162946][T16297] overlayfs: overlapping lowerdir path [ 819.720673][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 819.720687][ T30] audit: type=1400 audit(2000000111.471:1173): avc: denied { bind } for pid=16301 comm="syz.6.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 820.136614][ T30] audit: type=1400 audit(2000000111.509:1174): avc: denied { write } for pid=16301 comm="syz.6.2411" path="socket:[54548]" dev="sockfs" ino=54548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 820.492166][ T30] audit: type=1400 audit(2000000112.088:1175): avc: denied { bind } for pid=16306 comm="syz.4.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 820.549096][T16307] tipc: Started in network mode [ 820.554093][T16307] tipc: Node identity 2ef1caa555cc, cluster identity 4711 [ 820.561581][T16307] tipc: Enabled bearer , priority 0 [ 820.569698][T16307] syzkaller0: entered promiscuous mode [ 820.575260][T16307] syzkaller0: entered allmulticast mode [ 820.595904][T16307] tipc: Resetting bearer [ 820.679502][T16304] tipc: Resetting bearer [ 820.790651][ T30] audit: type=1400 audit(2000000112.463:1176): avc: denied { getopt } for pid=16323 comm="syz.5.2417" laddr=fe80::10 lport=37391 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 820.859211][ T30] audit: type=1400 audit(2000000112.463:1177): avc: denied { ioctl } for pid=16323 comm="syz.5.2417" path="socket:[55394]" dev="sockfs" ino=55394 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 820.896379][T16304] tipc: Disabling bearer [ 820.950244][ T30] audit: type=1400 audit(2000000112.622:1178): avc: denied { mount } for pid=16327 comm="syz.2.2418" name="/" dev="ramfs" ino=54586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 821.164122][ T30] audit: type=1400 audit(2000000112.668:1179): avc: denied { nlmsg_read } for pid=16327 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 821.312943][T16332] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2420'. [ 821.731710][ T6396] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 821.801680][T16347] futex_wake_op: syz.4.2422 tries to shift op by -1; fix this program [ 821.913572][ T6396] usb 2-1: Using ep0 maxpacket: 16 [ 822.073249][T16353] openvswitch: netlink: IP tunnel dst address not specified [ 822.150451][ T6396] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 822.154195][T16352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=16352 comm=syz.6.2423 [ 822.183087][ T6396] usb 2-1: config index 0 descriptor too short (expected 65535, got 18) [ 822.228169][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2423'. [ 822.269822][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 822.289391][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 822.322836][ T30] audit: type=1400 audit(2000000113.856:1180): avc: denied { connect } for pid=16346 comm="syz.4.2422" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 822.324759][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 822.384568][ T30] audit: type=1400 audit(2000000113.903:1181): avc: denied { setopt } for pid=16346 comm="syz.4.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 822.415085][ T30] audit: type=1400 audit(2000000113.950:1182): avc: denied { create } for pid=16359 comm="syz.5.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 822.500625][ T6396] usb 2-1: config index 1 descriptor too short (expected 65535, got 18) [ 822.528706][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 822.579824][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 822.610413][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 822.665848][ T6396] usb 2-1: config index 2 descriptor too short (expected 65535, got 18) [ 822.681204][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 822.697610][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 822.727287][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 822.749764][ T6396] usb 2-1: config index 3 descriptor too short (expected 65535, got 18) [ 822.760712][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 822.888374][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 822.904236][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 822.922203][ T6396] usb 2-1: config index 4 descriptor too short (expected 65535, got 18) [ 822.930990][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 822.996929][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 823.083191][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 823.139863][T16367] overlayfs: upper fs does not support file handles, falling back to index=off. [ 823.187054][ T6396] usb 2-1: config index 5 descriptor too short (expected 65535, got 18) [ 823.195486][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 823.240667][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 823.270880][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 823.294920][ T6396] usb 2-1: config index 6 descriptor too short (expected 65535, got 18) [ 823.303484][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 823.316733][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 823.361009][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 823.399637][ T6396] usb 2-1: config index 7 descriptor too short (expected 65535, got 18) [ 823.414131][ T6396] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 823.435658][ T6396] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 823.470398][ T6396] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 823.496131][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.514434][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.531774][ T6396] usb 2-1: string descriptor 0 read error: -71 [ 823.569510][ T6396] usb 2-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 823.597827][ T6396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 823.637676][ T6396] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 823.657162][ T6396] usb 2-1: no configuration chosen from 8 choices [ 823.670300][ T6396] usb 2-1: USB disconnect, device number 102 [ 824.143467][T16384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2432'. [ 824.516297][T16387] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2435'. [ 825.019594][T16409] xt_recent: Unsupported userspace flags (000000b1) [ 825.032571][T16409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.052138][T16409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.227271][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 825.349224][ T6472] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 825.398950][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 825.405278][ T5855] usb 5-1: config 0 has no interfaces? [ 825.411213][ T5855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.420814][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.466697][ T5855] usb 5-1: config 0 descriptor?? [ 825.488536][T16417] netlink: 'syz.5.2442': attribute type 1 has an invalid length. [ 825.849863][ T5855] usb 5-1: USB disconnect, device number 5 [ 825.893319][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 825.893335][ T30] audit: type=1400 audit(2000000117.252:1196): avc: denied { write } for pid=16419 comm="syz.1.2443" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 825.937253][ T6472] usb 3-1: Using ep0 maxpacket: 8 [ 825.956949][ T30] audit: type=1400 audit(2000000117.317:1197): avc: denied { create } for pid=16419 comm="syz.1.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 825.968227][ T6472] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 825.977870][ T30] audit: type=1400 audit(2000000117.317:1198): avc: denied { bind } for pid=16419 comm="syz.1.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 826.005324][ T6472] usb 3-1: config 0 has no interface number 0 [ 826.007463][ T6472] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7c.d4 [ 826.027701][ T6472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.036098][ T6472] usb 3-1: Product: syz [ 826.040846][ T6472] usb 3-1: Manufacturer: syz [ 826.045496][ T6472] usb 3-1: SerialNumber: syz [ 826.072478][ T6472] usb 3-1: config 0 descriptor?? [ 826.087193][ T30] audit: type=1400 audit(2000000117.373:1199): avc: denied { read } for pid=16419 comm="syz.1.2443" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 826.110561][ T30] audit: type=1400 audit(2000000117.373:1200): avc: denied { open } for pid=16419 comm="syz.1.2443" path="/242/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 826.225820][ T30] audit: type=1400 audit(2000000117.402:1201): avc: denied { create } for pid=16422 comm="syz.6.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 826.598542][ T6472] usbhid 3-1:0.55: couldn't find an input interrupt endpoint [ 826.613762][ T5823] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 826.617666][ T6472] usb 3-1: USB disconnect, device number 122 [ 826.643416][ T30] audit: type=1400 audit(2000000117.411:1202): avc: denied { ioctl } for pid=16422 comm="syz.6.2444" path="socket:[54801]" dev="sockfs" ino=54801 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 826.750300][ T30] audit: type=1400 audit(2000000117.411:1203): avc: denied { ioctl } for pid=16422 comm="syz.6.2444" path="socket:[55596]" dev="sockfs" ino=55596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 826.790839][ T30] audit: type=1400 audit(2000000117.925:1204): avc: denied { write } for pid=16427 comm="syz.1.2445" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 826.818737][ T30] audit: type=1400 audit(2000000117.944:1205): avc: denied { append } for pid=16429 comm="syz.5.2446" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 827.023272][ T5890] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 828.166354][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 828.183456][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.195039][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 828.207240][ T5890] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 828.216954][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 829.212107][T16452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2450'. [ 829.224366][ T5890] usb 5-1: Product: syz [ 829.231055][ T5890] usb 5-1: Manufacturer: syz [ 829.241948][ T5890] usb 5-1: SerialNumber: syz [ 829.264948][ T5890] usb 5-1: config 0 descriptor?? [ 831.178381][ T6095] usb 5-1: USB disconnect, device number 6 [ 831.419512][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 831.419530][ T30] audit: type=1400 audit(2000000122.406:1210): avc: denied { create } for pid=16462 comm="syz.2.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 831.431243][T16477] openvswitch: netlink: Geneve option length err (len 272, max 255). [ 831.786866][ T30] audit: type=1400 audit(2000000122.425:1211): avc: denied { read } for pid=16462 comm="syz.2.2455" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 831.825793][ T30] audit: type=1400 audit(2000000122.425:1212): avc: denied { open } for pid=16462 comm="syz.2.2455" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 831.878947][ T5823] Bluetooth: hci5: unexpected event 0x08 length: 11 > 4 [ 831.891912][ T6095] IPVS: starting estimator thread 0... [ 831.909040][ T30] audit: type=1400 audit(2000000122.434:1213): avc: denied { create } for pid=16462 comm="syz.2.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 831.929155][ T30] audit: type=1400 audit(2000000122.471:1214): avc: denied { ioctl } for pid=16468 comm="syz.1.2456" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 831.971361][ T30] audit: type=1400 audit(2000000122.939:1215): avc: denied { create } for pid=16488 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 831.993890][ T30] audit: type=1400 audit(2000000122.958:1216): avc: denied { read } for pid=16488 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 832.014288][ T30] audit: type=1400 audit(2000000122.958:1217): avc: denied { setopt } for pid=16488 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 832.035184][T16486] IPVS: using max 67 ests per chain, 160800 per kthread [ 832.042537][ T30] audit: type=1400 audit(2000000122.967:1218): avc: denied { write } for pid=16488 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 832.062909][ T30] audit: type=1400 audit(2000000123.023:1219): avc: denied { bind } for pid=16488 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 833.777479][ T5919] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 834.008054][ T5919] usb 6-1: config 0 has no interfaces? [ 834.021406][ T5919] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 834.040035][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.082340][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 834.229747][ T5919] usb 6-1: config 0 descriptor?? [ 835.093549][T16512] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2466'. [ 835.338114][ T6620] usb 6-1: USB disconnect, device number 110 [ 835.433677][ T5919] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 835.492943][ T5919] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 836.623490][ T790] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 836.682895][T16540] bridge1: entered promiscuous mode [ 837.539855][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 837.539870][ T30] audit: type=1400 audit(2000000128.140:1226): avc: denied { create } for pid=16544 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 837.628495][ T30] audit: type=1400 audit(2000000128.140:1227): avc: denied { read } for pid=16544 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 837.629060][ T790] usb 2-1: Using ep0 maxpacket: 8 [ 837.683216][ T790] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 837.700986][ T790] usb 2-1: config 0 has no interface number 0 [ 837.717071][ T790] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 837.737345][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.753576][ T790] usb 2-1: Product: syz [ 837.771828][ T790] usb 2-1: Manufacturer: syz [ 837.776460][ T790] usb 2-1: SerialNumber: syz [ 837.803632][ T790] usb 2-1: config 0 descriptor?? [ 837.842700][ T5876] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 837.853629][ T30] audit: type=1400 audit(2000000128.449:1228): avc: denied { ioctl } for pid=16548 comm="syz.2.2477" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 837.906783][T16549] input: syz0 as /devices/virtual/input/input60 [ 837.914194][ T30] audit: type=1400 audit(2000000128.495:1229): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=4187 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.951066][ T30] audit: type=1400 audit(2000000128.523:1230): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4187 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.975599][ T30] audit: type=1400 audit(2000000128.523:1231): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4187 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 838.002732][ T5876] usb 6-1: device descriptor read/64, error -71 [ 838.012385][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 838.012409][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 838.015072][ T30] audit: type=1400 audit(2000000128.589:1232): avc: denied { nosuid_transition } for pid=16550 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 838.019762][ T30] audit: type=1400 audit(2000000128.598:1233): avc: denied { transition } for pid=16550 comm="syz.6.2478" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 838.020089][ T30] audit: type=1400 audit(2000000128.598:1234): avc: denied { entrypoint } for pid=16550 comm="syz.6.2478" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=427 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 838.020314][ T30] audit: type=1400 audit(2000000128.598:1235): avc: denied { noatsecure } for pid=16550 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 838.064571][T16536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 838.079466][T16536] loop6: detected capacity change from 0 to 524288000 [ 838.291589][T16555] loop6: detected capacity change from 524288000 to 1 [ 838.307290][ T790] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 838.307382][ T790] uvcvideo 2-1:0.31: No valid video chain found. [ 838.327819][ T790] usb 2-1: USB disconnect, device number 103 [ 838.755349][ T5876] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 839.041255][ T5876] usb 6-1: device descriptor read/64, error -71 [ 839.270456][T16570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2480'. [ 839.457010][ T5876] usb usb6-port1: attempt power cycle [ 839.648295][T16582] tipc: Enabling of bearer rejected, failed to enable media [ 839.746582][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2486'. [ 840.725986][ T5876] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 840.750755][ T5876] usb 6-1: device descriptor read/8, error -71 [ 840.897653][T16591] macvlan2: entered promiscuous mode [ 840.903041][T16591] bridge0: entered promiscuous mode [ 841.742873][T16608] overlay: ./file0 is not a directory [ 841.782163][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 843.273134][ T790] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 843.380436][ T5868] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 843.434820][ T790] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 843.453361][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 843.477345][ T790] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 843.489326][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.508213][ T790] usb 3-1: Product: syz [ 843.518983][ T790] usb 3-1: Manufacturer: syz [ 843.529617][ T790] usb 3-1: SerialNumber: syz [ 843.550791][ T790] usb 3-1: config 0 descriptor?? [ 843.562875][ T790] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 843.572466][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 843.582888][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.613261][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.634201][ T5868] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 843.655793][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.677676][ T5868] usb 2-1: config 0 descriptor?? [ 843.788652][ T790] usb 3-1: USB disconnect, device number 123 [ 844.250302][T16620] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.2496'. [ 844.297262][ T5868] logitech 0003:046D:C29C.0023: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 844.312378][ T5855] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 844.472149][ T5855] usb 5-1: device descriptor read/64, error -71 [ 845.225541][T16541] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 845.282931][ T5855] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 845.571731][ T5855] usb 5-1: device descriptor read/64, error -71 [ 845.642563][T16649] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2504'. [ 845.690102][ T5855] usb usb5-port1: attempt power cycle [ 846.042616][T16541] usb 7-1: Using ep0 maxpacket: 32 [ 846.056979][T16541] usb 7-1: unable to get BOS descriptor or descriptor too short [ 846.067185][T16541] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 846.075728][T16541] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 846.080420][T16650] tipc: Enabling of bearer rejected, failed to enable media [ 846.098420][ T5868] logitech 0003:046D:C29C.0023: no inputs found [ 846.106981][T16541] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 846.131314][T16541] usb 7-1: config 128 has no interface number 0 [ 846.138615][T16541] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 846.191613][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 846.375536][T16541] usb 7-1: config 128 interface 127 has no altsetting 0 [ 846.387552][ T5868] usb 2-1: USB disconnect, device number 104 [ 846.418947][T16541] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 846.448356][T16541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.539407][T16541] usb 7-1: Product: syz [ 846.586591][T16541] usb 7-1: Manufacturer: syz [ 846.651022][T16541] usb 7-1: SerialNumber: syz [ 846.778077][T16639] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 846.946274][ T5855] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 846.994169][ T5855] usb 5-1: device descriptor read/8, error -71 [ 847.016975][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 847.016990][ T30] audit: type=1400 audit(2000000137.017:1246): avc: denied { relabelfrom } for pid=16656 comm="syz.5.2507" name="SCTPv6" dev="sockfs" ino=55960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 847.047490][T16657] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 847.058971][ T30] audit: type=1400 audit(2000000137.045:1247): avc: denied { relabelto } for pid=16656 comm="syz.5.2507" name="SCTPv6" dev="sockfs" ino=55960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 847.091065][ T30] audit: type=1400 audit(2000000137.082:1248): avc: denied { ioctl } for pid=16656 comm="syz.5.2507" path="socket:[55960]" dev="sockfs" ino=55960 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 847.094416][T16541] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.249930][ T5855] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 847.282307][ T5855] usb 5-1: device descriptor read/8, error -71 [ 847.315013][T16541] usb 7-1: USB disconnect, device number 86 [ 847.410692][ T5855] usb usb5-port1: unable to enumerate USB device [ 847.449061][T15964] udevd[15964]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.481285][ T30] audit: type=1400 audit(2000000137.447:1249): avc: denied { create } for pid=16669 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 848.804189][ T5855] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 849.673657][ T5855] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.727085][ T5855] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.767598][ T5855] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.858579][ T5855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 849.865223][ T5855] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 849.896986][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.926012][ T30] audit: type=1400 audit(2000000139.739:1250): avc: denied { ioctl } for pid=16683 comm="syz.6.2516" path="socket:[56421]" dev="sockfs" ino=56421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 849.958116][ T5855] usb 5-1: config 0 descriptor?? [ 850.076470][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2516'. [ 850.168934][T16686] bridge_slave_1 (unregistering): left allmulticast mode [ 850.176269][T16686] bridge_slave_1 (unregistering): left promiscuous mode [ 850.208798][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.243651][ T30] audit: type=1400 audit(2000000140.010:1251): avc: denied { create } for pid=16689 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 850.311515][ T30] audit: type=1400 audit(2000000140.010:1252): avc: denied { ioctl } for pid=16689 comm="syz.2.2518" path="socket:[56430]" dev="sockfs" ino=56430 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 850.410711][ T5855] usbhid 5-1:0.0: can't add hid device: -71 [ 850.417074][ T5855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 850.438961][ T5855] usb 5-1: USB disconnect, device number 11 [ 850.558901][T16693] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2517'. [ 850.973119][T16697] tipc: Enabling of bearer rejected, failed to enable media [ 851.100115][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 851.967715][ T30] audit: type=1400 audit(2000000141.647:1253): avc: denied { read write } for pid=16701 comm="syz.6.2524" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.057582][ T30] audit: type=1400 audit(2000000141.666:1254): avc: denied { open } for pid=16701 comm="syz.6.2524" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.089709][ T5817] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 853.201335][ T30] audit: type=1400 audit(2000000141.666:1255): avc: denied { open } for pid=16701 comm="syz.6.2524" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 853.235970][ T30] audit: type=1400 audit(2000000141.806:1256): avc: denied { watch_reads } for pid=16701 comm="syz.6.2524" path="/320" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 853.749569][ T30] audit: type=1400 audit(2000000143.303:1257): avc: denied { write } for pid=16705 comm="syz.5.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 854.244410][ T5868] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 854.277215][ T30] audit: type=1400 audit(2000000143.808:1258): avc: denied { write } for pid=16727 comm="syz.4.2529" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 854.385686][ T30] audit: type=1400 audit(2000000143.836:1259): avc: denied { write } for pid=16727 comm="syz.4.2529" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 854.859511][ T30] audit: type=1400 audit(2000000144.201:1260): avc: denied { ioctl } for pid=16729 comm="syz.6.2530" path="socket:[56492]" dev="sockfs" ino=56492 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 854.917739][ T5868] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 854.928451][ T5868] usb 6-1: config 0 has no interface number 0 [ 854.969391][ T5868] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 854.978554][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.986957][ T5868] usb 6-1: Product: syz [ 854.991408][ T5868] usb 6-1: Manufacturer: syz [ 854.996068][ T5868] usb 6-1: SerialNumber: syz [ 855.014954][ T5868] usb 6-1: config 0 descriptor?? [ 855.170887][ T30] audit: type=1400 audit(2000000144.631:1261): avc: denied { write } for pid=16715 comm="syz.1.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 855.306670][ T5868] asix 6-1:0.251: probe with driver asix failed with error -71 [ 855.415051][T16749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2533'. [ 855.729248][ T30] audit: type=1400 audit(2000000144.771:1262): avc: denied { read } for pid=16715 comm="syz.1.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 855.751713][ T5868] usb 6-1: USB disconnect, device number 115 [ 855.762306][ T30] audit: type=1326 audit(2000000145.192:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16708 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78318f749 code=0x7fc00000 [ 855.835795][T16754] audit: audit_backlog=65 > audit_backlog_limit=64 [ 856.565946][T16773] tipc: Enabling of bearer rejected, failed to enable media [ 858.632831][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 859.283125][T16793] tipc: New replicast peer: 255.255.255.255 [ 859.290407][T16793] tipc: Enabled bearer , priority 10 [ 859.301333][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2539'. [ 859.310447][T16793] tipc: Disabling bearer [ 860.834285][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 861.295261][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2545'. [ 861.304337][T16806] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2545'. [ 861.316917][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2545'. [ 861.330241][T16806] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2545'. [ 861.339339][T16806] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2545'. [ 862.493334][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 862.493352][ T30] audit: type=1400 audit(2000000151.441:1458): avc: denied { append } for pid=16803 comm="syz.6.2546" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 862.543632][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 862.557543][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'. [ 862.569511][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 862.662829][ T30] audit: type=1400 audit(2000000151.609:1459): avc: denied { write } for pid=16813 comm="syz.2.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 862.732562][T16818] mkiss: ax0: crc mode is auto. [ 862.742641][ T30] audit: type=1400 audit(2000000151.609:1460): avc: denied { ioctl } for pid=16813 comm="syz.2.2547" path="socket:[56298]" dev="sockfs" ino=56298 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 863.040209][ T5919] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 863.268553][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.302427][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.358439][ T5919] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 863.446335][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.456925][ T790] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 863.476902][ T5919] usb 6-1: config 0 descriptor?? [ 864.284845][ T790] usb 2-1: device not accepting address 105, error -71 [ 864.579416][T11937] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 864.626575][ T5919] usbhid 6-1:0.0: can't add hid device: -71 [ 864.636335][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 864.649983][ T5919] usb 6-1: USB disconnect, device number 116 [ 864.729058][ T6472] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 864.750709][T11937] usb 3-1: Using ep0 maxpacket: 32 [ 864.760171][T11937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 864.769274][T16845] tipc: Enabling of bearer rejected, failed to enable media [ 864.772775][T11937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 864.799764][T11937] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.832215][T11937] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 864.871425][T11937] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 864.881537][T16846] __nla_validate_parse: 1 callbacks suppressed [ 864.881547][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 864.916734][T11937] usb 3-1: Product: syz [ 864.941087][T11937] usb 3-1: Manufacturer: syz [ 864.979934][T11937] usb 3-1: SerialNumber: syz [ 865.177261][T11937] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input62 [ 865.328937][ T6472] usb 7-1: Using ep0 maxpacket: 16 [ 865.702404][ T6472] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 865.714205][ T6472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.728454][ T6472] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 865.738273][ T6472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.746753][ T6472] usb 7-1: Product: syz [ 865.751070][ T6472] usb 7-1: Manufacturer: syz [ 865.755798][ T6472] usb 7-1: SerialNumber: syz [ 865.763241][ T6472] usb 7-1: config 0 descriptor?? [ 865.774854][ T6472] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 865.784311][ T6472] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 865.856803][ T30] audit: type=1400 audit(2000000154.630:1461): avc: denied { connect } for pid=16847 comm="syz.1.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 866.059099][T16856] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16856 comm=syz.1.2560 [ 866.108450][ T790] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 866.414605][ T790] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 866.430800][ T790] usb 6-1: config 0 has no interface number 0 [ 866.509330][ T790] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 866.520140][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.521533][T16862] tipc: Enabled bearer , priority 0 [ 866.543571][ T790] usb 6-1: Product: syz [ 866.632985][T16863] sctp: [Deprecated]: syz.4.2559 (pid 16863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.632985][T16863] Use struct sctp_sack_info instead [ 866.648189][ T790] usb 6-1: Manufacturer: syz [ 866.661889][ T790] usb 6-1: SerialNumber: syz [ 866.675346][ T790] usb 6-1: config 0 descriptor?? [ 866.718354][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.731934][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.746016][T16842] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2554'. [ 866.756624][T16842] fuse: Unknown parameter 'access' [ 866.764388][T16842] tipc: Disabling bearer [ 866.787918][ T5868] usb 3-1: USB disconnect, device number 124 [ 866.830694][ T5868] appletouch 3-1:1.0: input: appletouch disconnected [ 866.893034][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.901756][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.945067][T16870] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 866.967425][T16870] bridge0: port 4(team0) entered disabled state [ 866.974140][T16870] bridge0: port 3(dummy0) entered disabled state [ 866.980663][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.987965][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.996852][ T6472] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 867.011583][ T6472] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 867.056115][ T6472] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 867.074146][ T6472] em28xx 7-1:0.0: No AC97 audio processor [ 867.090415][ T6472] usb 7-1: USB disconnect, device number 87 [ 867.100456][ T6472] em28xx 7-1:0.0: Disconnecting em28xx [ 867.110650][ T6472] em28xx 7-1:0.0: Freeing device [ 867.119726][T16870] bridge0: port 4(team0) entered blocking state [ 867.126106][T16870] bridge0: port 4(team0) entered forwarding state [ 867.132789][T16870] bridge0: port 3(dummy0) entered blocking state [ 867.139265][T16870] bridge0: port 3(dummy0) entered forwarding state [ 867.145987][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.153111][T16870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.160582][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.167758][T16870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.200254][T16870] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 867.435236][T16878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=16878 comm=syz.2.2566 [ 867.581256][ T790] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 867.611255][ T790] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 867.632170][ T790] asix 6-1:0.251: probe with driver asix failed with error -71 [ 867.664453][ T790] usb 6-1: USB disconnect, device number 117 [ 867.695371][T16883] tipc: Enabling of bearer rejected, failed to enable media [ 867.751049][T16886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2569'. [ 867.760570][ T6472] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 867.793805][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2568'. [ 867.956160][ T6472] usb 2-1: device descriptor read/64, error -71 [ 868.267977][ T6472] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 868.492564][ T6472] usb 2-1: device descriptor read/64, error -71 [ 868.597546][T16891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16891 comm=syz.4.2570 [ 868.674241][ T6472] usb usb2-port1: attempt power cycle [ 868.980418][ T5868] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 869.090960][ T6472] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 869.261869][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 869.274807][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.286126][ T6472] usb 2-1: device descriptor read/8, error -71 [ 869.322375][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.335913][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 869.350367][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 869.359847][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.382248][ T5868] usb 6-1: config 0 descriptor?? [ 869.405740][T16906] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 869.539903][ T6472] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 869.573451][ T6472] usb 2-1: device descriptor read/8, error -71 [ 869.700690][ T6472] usb usb2-port1: unable to enumerate USB device [ 869.853585][T16914] overlayfs: missing 'lowerdir' [ 869.892065][ T5868] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0024/input/input63 [ 869.945589][ T5868] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 870.127319][ T5876] usb 6-1: USB disconnect, device number 118 [ 870.251157][T16917] fido_id[16917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 870.662504][ T30] audit: type=1400 audit(2000000159.120:1462): avc: denied { listen } for pid=16933 comm="syz.4.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 870.720725][T16938] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 870.771871][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 870.778080][T16938] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 870.780402][T16942] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 870.920278][ T30] audit: type=1400 audit(2000000159.364:1463): avc: denied { mount } for pid=16945 comm="syz.5.2582" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 870.972896][T16950] tipc: Enabling of bearer rejected, failed to enable media [ 870.995267][ T30] audit: type=1400 audit(2000000159.364:1464): avc: denied { mounton } for pid=16945 comm="syz.5.2582" path="/308/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 871.088593][ T30] audit: type=1400 audit(2000000159.364:1465): avc: denied { getattr } for pid=16945 comm="syz.5.2582" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 871.175803][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 871.196883][ T790] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 871.991110][ T30] audit: type=1400 audit(2000000160.374:1466): avc: denied { connect } for pid=16957 comm="syz.1.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 872.054332][ T790] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 872.062471][ T790] usb 6-1: config 0 has no interface number 0 [ 872.073877][T16959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 872.080504][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.093572][T16959] vhci_hcd vhci_hcd.0: Device attached [ 872.105758][T16959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 872.112384][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 872.128460][ T790] usb 6-1: config 0 interface 41 has no altsetting 0 [ 872.130440][T16959] vhci_hcd vhci_hcd.0: Device attached [ 872.157107][ T790] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 872.164773][T16959] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(19) [ 872.172745][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 872.185472][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.206877][ T30] audit: type=1400 audit(2000000160.552:1467): avc: denied { map } for pid=16966 comm="syz.2.2587" path="socket:[57732]" dev="sockfs" ino=57732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 872.429461][T16959] vhci_hcd vhci_hcd.0: Device attached [ 872.690928][T16971] netlink: 'syz.2.2587': attribute type 10 has an invalid length. [ 872.698866][T16971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2587'. [ 872.710113][T16971] batman_adv: batadv0: Adding interface: virt_wifi0 [ 872.716802][T16971] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.743013][T16971] batman_adv: batadv0: Interface activated: virt_wifi0 [ 872.777126][ T30] audit: type=1400 audit(2000000160.552:1468): avc: denied { read } for pid=16966 comm="syz.2.2587" path="socket:[57732]" dev="sockfs" ino=57732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 872.822052][T11937] usb 36-1: SetAddress Request (2) to port 0 [ 872.851379][T11937] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 872.867421][T16973] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(22) [ 872.874054][T16973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.904311][ T30] audit: type=1400 audit(2000000160.552:1469): avc: denied { create } for pid=16966 comm="syz.2.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 872.957018][T16979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.966815][ T790] usb 6-1: Product: syz [ 872.971011][ T790] usb 6-1: Manufacturer: syz [ 872.976379][ T790] usb 6-1: SerialNumber: syz [ 872.981627][T16979] batadv_slave_0: entered promiscuous mode [ 872.991244][ T790] usb 6-1: config 0 descriptor?? [ 873.006418][T16973] vhci_hcd vhci_hcd.0: Device attached [ 873.012058][ T30] audit: type=1400 audit(2000000160.561:1470): avc: denied { sys_admin } for pid=16966 comm="syz.2.2587" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 873.038781][T16979] batadv_slave_0: entered allmulticast mode [ 873.045501][T16959] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(27) [ 873.052122][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 873.059695][T16980] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 873.066294][T16980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 873.082314][T16959] vhci_hcd vhci_hcd.0: Device attached [ 873.136454][T16980] vhci_hcd vhci_hcd.0: Device attached [ 873.187712][T16973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 873.219175][T16973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 873.254018][ T30] audit: type=1400 audit(2000000161.552:1471): avc: denied { read } for pid=16986 comm="syz.2.2591" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 873.256826][T16959] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 873.283745][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 873.323797][T16959] vhci_hcd vhci_hcd.0: Device attached [ 873.442907][ T790] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 873.480897][T16983] vhci_hcd: connection closed [ 873.481178][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.484722][T16985] vhci_hcd: connection closed [ 873.487126][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.502610][T16981] vhci_hcd: connection closed [ 873.502915][T16974] vhci_hcd: connection closed [ 873.504724][T16960] vhci_hcd: connection closed [ 873.508668][T16965] vhci_hcd: connection closed [ 873.516340][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.519197][T16962] vhci_hcd: connection reset by peer [ 873.522209][ T5868] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 873.544927][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.552162][T16972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2588'. [ 873.558888][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.567037][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.574199][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.580113][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.585988][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.594975][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.600266][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.609143][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.615492][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.620848][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.629642][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.637893][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.643671][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.652738][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.659289][ T3535] vhci_hcd vhci_hcd.1: stop threads [ 873.664684][ T3535] vhci_hcd vhci_hcd.1: release socket [ 873.675635][ T3535] vhci_hcd vhci_hcd.1: disconnect device [ 873.741251][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 873.748573][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.770564][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.792433][ T5868] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 873.805583][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.831212][ T5868] usb 7-1: config 0 descriptor?? [ 873.992625][ T790] usb 6-1: USB disconnect, device number 119 [ 874.077549][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.113278][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.504136][ T5868] ft260 0003:0403:6030.0025: unknown main item tag 0x7 [ 874.545260][T17008] tipc: Enabling of bearer rejected, failed to enable media [ 874.668736][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 874.796597][ T5868] ft260 0003:0403:6030.0025: chip code: 6424 8183 [ 875.018987][ T5868] ft260 0003:0403:6030.0025: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 875.257744][ T5868] ft260 0003:0403:6030.0025: failed to retrieve status: -71, no wakeup [ 875.313914][ T5868] ft260 0003:0403:6030.0025: failed to retrieve status: -71 [ 875.373427][ T5868] ft260 0003:0403:6030.0025: failed to reset I2C controller: -71 [ 875.485649][ T5868] usb 7-1: USB disconnect, device number 88 [ 875.752760][ T790] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 875.902784][ T790] usb 2-1: device descriptor read/64, error -71 [ 876.200647][ T790] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 876.619469][ T790] usb 2-1: device descriptor read/64, error -71 [ 876.670734][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 876.670749][ T30] audit: type=1400 audit(2000000164.752:1482): avc: denied { setopt } for pid=17023 comm="syz.4.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 876.746968][ T790] usb usb2-port1: attempt power cycle [ 876.819479][T17038] comedi comedi2: comedi_config --init_data is deprecated [ 877.237103][ T7277] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 877.247854][ T790] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 877.281086][ T790] usb 2-1: device descriptor read/8, error -71 [ 877.342325][ T30] audit: type=1400 audit(2000000165.378:1483): avc: denied { listen } for pid=17047 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 877.394604][ T30] audit: type=1400 audit(2000000165.388:1484): avc: denied { accept } for pid=17047 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 877.416909][ T7277] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.427901][ T30] audit: type=1400 audit(2000000165.388:1485): avc: denied { write } for pid=17047 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 877.430090][ T7277] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.459646][ T7277] usb 7-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 877.469402][ T7277] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.514693][ T7277] usb 7-1: config 0 descriptor?? [ 877.547605][ T790] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 877.570431][ T790] usb 2-1: device descriptor read/8, error -71 [ 877.598619][ T30] audit: type=1400 audit(2000000165.612:1486): avc: denied { setattr } for pid=17052 comm="syz.2.2610" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 877.697351][ T790] usb usb2-port1: unable to enumerate USB device [ 877.745324][ T7277] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 877.805554][ T6620] usb 7-1: USB disconnect, device number 89 [ 877.953454][ T7277] usb 6-1: Using ep0 maxpacket: 16 [ 877.973080][ T7277] usb 6-1: config 0 has an invalid interface number: 236 but max is 1 [ 878.006782][ T7277] usb 6-1: config 0 has an invalid interface number: 129 but max is 1 [ 878.017958][ T7277] usb 6-1: config 0 has no interface number 0 [ 878.024054][ T7277] usb 6-1: config 0 has no interface number 1 [ 878.031353][ T7277] usb 6-1: config 0 interface 236 has no altsetting 0 [ 878.038132][ T7277] usb 6-1: config 0 interface 129 has no altsetting 0 [ 878.048181][ T7277] usb 6-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 878.064634][ T7277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.081682][ T7277] usb 6-1: Product: syz [ 878.086796][ T7277] usb 6-1: Manufacturer: syz [ 878.091398][ T7277] usb 6-1: SerialNumber: syz [ 878.114302][ T7277] usb 6-1: config 0 descriptor?? [ 878.242272][ T30] audit: type=1400 audit(2000000166.220:1487): avc: denied { wake_alarm } for pid=17062 comm="syz.4.2612" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.341113][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.353451][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.381224][T11937] usb 36-1: device descriptor read/8, error -110 [ 878.407937][ T7277] ir_usb 6-1:0.236: required endpoints missing [ 878.602091][ T5876] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 878.676248][ T7277] usb 6-1: selecting invalid altsetting 0 [ 878.743092][ T7277] uvcvideo 6-1:0.129: Found UVC 2.26 device syz (1ace:e9b2) [ 878.787285][ T30] audit: type=1400 audit(2000000166.697:1488): avc: denied { kexec_image_load } for pid=17062 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 878.798789][ T7277] uvcvideo 6-1:0.129: No valid video chain found. [ 878.845963][ T7277] usb 6-1: USB disconnect, device number 120 [ 879.044052][T17077] tipc: Enabling of bearer rejected, failed to enable media [ 879.070530][ T30] audit: type=1400 audit(2000000166.996:1489): avc: denied { ioctl } for pid=17078 comm="syz.5.2616" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 879.112598][ T30] audit: type=1400 audit(2000000167.015:1490): avc: denied { set_context_mgr } for pid=17078 comm="syz.5.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 879.903416][ T30] audit: type=1400 audit(2000000167.417:1491): avc: denied { create } for pid=17080 comm="syz.6.2617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 880.104227][T17085] binder_alloc: 17078: pid 17078 spamming oneway? 1 buffers allocated for a total size of 4096 [ 880.200773][T17088] binder_alloc: 17078: pid 17078 spamming oneway? 2 buffers allocated for a total size of 5120 [ 880.282259][T17092] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 880.294350][T17092] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 880.302772][T17092] CPU: 0 UID: 0 PID: 17092 Comm: syz.1.2620 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.305728][T11937] usb usb36-port1: attempt power cycle [ 880.313716][T17092] Tainted: [L]=SOFTLOCKUP [ 880.313726][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 880.313739][T17092] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 880.313769][T17092] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 880.313789][T17092] RSP: 0018:ffffc9000c49fae0 EFLAGS: 00010202 [ 880.313806][T17092] RAX: dffffc0000000000 RBX: ffff8880781d15a0 RCX: ffffc9001a0d4000 [ 880.313819][T17092] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 880.313836][T17092] RBP: ffff8880781d1638 R08: 0000000000000005 R09: 0000000000000000 [ 880.313848][T17092] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001893f6b [ 880.313862][T17092] R13: 0000000000000000 R14: ffff888033f417c0 R15: 0000000000000038 [ 880.313873][T17092] FS: 00007f57198696c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 880.313893][T17092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.313904][T17092] CR2: 0000200000003480 CR3: 000000002e51d000 CR4: 00000000003526f0 [ 880.313915][T17092] Call Trace: [ 880.313921][T17092] [ 880.313931][T17092] __kernfs_new_node+0x7b4/0x990 [ 880.439331][T17092] ? __pfx___kernfs_new_node+0x10/0x10 [ 880.444787][T17092] ? find_held_lock+0x2b/0x80 [ 880.449479][T17092] ? kernfs_root+0xee/0x2a0 [ 880.453987][T17092] kernfs_new_node+0x13c/0x1e0 [ 880.458755][T17092] ? kasan_save_track+0x14/0x30 [ 880.463602][T17092] kernfs_create_dir_ns+0x4c/0x1a0 [ 880.468703][T17092] cgroup_mkdir+0x40f/0x12e0 [ 880.473367][T17092] ? __pfx_cgroup_mkdir+0x10/0x10 [ 880.478390][T17092] kernfs_iop_mkdir+0x111/0x190 [ 880.483249][T17092] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 880.488274][T17092] vfs_mkdir+0x731/0xb60 [ 880.492519][T17092] do_mkdirat+0x442/0x5e0 [ 880.496856][T17092] ? __pfx_do_mkdirat+0x10/0x10 [ 880.501706][T17092] ? strncpy_from_user+0x203/0x2e0 [ 880.506814][T17092] ? getname_flags.part.0+0x1c5/0x550 [ 880.512175][T17092] __x64_sys_mkdir+0xef/0x140 [ 880.516844][T17092] do_syscall_64+0xcd/0xf80 [ 880.521337][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.527216][T17092] RIP: 0033:0x7f571898f749 [ 880.531613][T17092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.551206][T17092] RSP: 002b:00007f5719869038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 880.559601][T17092] RAX: ffffffffffffffda RBX: 00007f5718be5fa0 RCX: 00007f571898f749 [ 880.567555][T17092] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 880.575508][T17092] RBP: 00007f5718a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 880.583461][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.591411][T17092] R13: 00007f5718be6038 R14: 00007f5718be5fa0 R15: 00007ffc4a39d948 [ 880.599373][T17092] [ 880.602373][T17092] Modules linked in: [ 880.606854][T17092] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 880.691140][T17092] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 880.725031][T17092] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 880.809021][T15945] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 880.977116][T15945] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 880.987653][T17092] RSP: 0018:ffffc9000c49fae0 EFLAGS: 00010202 [ 880.994747][T17092] RAX: dffffc0000000000 RBX: ffff8880781d15a0 RCX: ffffc9001a0d4000 [ 881.021549][T17092] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 881.029907][T17092] RBP: ffff8880781d1638 R08: 0000000000000005 R09: 0000000000000000 [ 881.078183][T17092] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001893f6b [ 881.086742][T17092] R13: 0000000000000000 R14: ffff888033f417c0 R15: 0000000000000038 [ 881.171522][T17092] FS: 00007f57198696c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 881.203976][T11937] usb usb36-port1: unable to enumerate USB device [ 881.227463][T17092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.234087][T17092] CR2: 000055867b40c0c0 CR3: 000000002e51d000 CR4: 00000000003526f0 [ 881.292650][T17092] Kernel panic - not syncing: Fatal exception [ 881.299068][T17092] Kernel Offset: disabled [ 881.303399][T17092] Rebooting in 86400 seconds..