last executing test programs: 5m31.638200698s ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x2c, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r3 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d00000000000100fffff00000000141000000030017"], 0x38}}, 0x0) r6 = socket(0x1e, 0x5, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x7, 0x0, 0x0) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r7, 0x0, 0x63) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1e, 0x4, @remote, 0xb}, 0xffffffffffffff2c) accept4$netrom(r7, &(0x7f0000000180)={{0x3, @bcast}, [@netrom, @rose, @remote, @rose, @rose, @rose, @default, @null]}, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 5m28.933694502s ago: executing program 4 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x5, 0x6, {{0x21, 0x4, 0x2, 0x1a, 0x84, 0x68, 0x0, 0x5, 0x0, 0x0, @loopback, @loopback, {[@generic={0x83, 0x7, "cf0ff87edf"}, @ssrr={0x89, 0x1f, 0x67, [@multicast1, @private=0xa010100, @empty, @multicast2, @multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0xb0, 0x1, 0x4, [{@private=0xa010102, 0x7}, {@loopback, 0x4}, {@broadcast}, {@empty, 0x8}, {@rand_addr=0x64010100, 0xe}]}, @timestamp={0x44, 0x1c, 0x3b, 0x0, 0x0, [0x1, 0x80000001, 0x8, 0x0, 0xfffffff8, 0xf390]}, @end]}}}}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) userfaultfd(0x80801) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001900)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) chdir(&(0x7f0000001180)='./bus\x00') r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m26.409707072s ago: executing program 4 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2f, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x3000000000000, 0x0, 0x81}, 0x10) 5m26.147548762s ago: executing program 4 (id=61): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b3fdb76ca000000bfa20000000000000701000900000056bf03000008000000004c079600000307000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) listen(r7, 0x58) write(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x9) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002103) 5m23.27448291s ago: executing program 4 (id=67): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x7a, 0x44, 0x40, 0xdba, 0x1000, 0x8099, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0xb9, 0x21}}]}}]}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) 5m21.201154773s ago: executing program 4 (id=79): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) socket(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000020c0)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="7b6ac00cb212ca9cb5e5963d90dd63be450b7999e68652196ea4d0b17202187b2e41bf648a982fc840b7bbcf7f5f638d2aaecf806dd6b946e1cc461688780ea1ff8884f3628ed1702156f320079ea7870000"], 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0x5450, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x80) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000200)=0x4) pipe2(&(0x7f0000000000), 0x84000) 5m4.058907229s ago: executing program 32 (id=79): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) socket(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000020c0)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="7b6ac00cb212ca9cb5e5963d90dd63be450b7999e68652196ea4d0b17202187b2e41bf648a982fc840b7bbcf7f5f638d2aaecf806dd6b946e1cc461688780ea1ff8884f3628ed1702156f320079ea7870000"], 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0x5450, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x80) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000200)=0x4) pipe2(&(0x7f0000000000), 0x84000) 14.132178524s ago: executing program 0 (id=1309): r0 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0xec0}, {0x0, 0xfffffdf4}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x30}, 0x0) 13.433736332s ago: executing program 0 (id=1311): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0xfffffff7, {{0xa, 0x4e22, 0x6e, @mcast2, 0xffffffff}}, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x108) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xb, 0xc8, 0x6, 0x23, "4083df4746c4447b"}}}, 0x10) 8.25977564s ago: executing program 0 (id=1330): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x8e, 0x5, 0xfffffffffffffff8, 0x7, 0x3b}, &(0x7f0000000180)={0x6, 0x7, 0xa0, 0x9, 0x0, 0x892, 0x800, 0x100000001}, &(0x7f00000001c0)={0x4, 0xbdd, 0x7, 0x4, 0x2, 0x97bb, 0x7, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xffff]}, 0x8}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x8, &(0x7f0000000200)={0x5, 0x2, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000040)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="f37d8115f260e90891f5be0ea8d5"], 0x0}, 0x0) 6.490796447s ago: executing program 2 (id=1335): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231da1da165220815b24431144fc05e1e207e12dbd9e26254d61bc9f47e4ec7e5e19a58ea2444e97a6daf57c895ec35c497d84e2f0c2e520e123f3cadf380a7e54836f7b5a9ba24b1bbe690b7f3de459adbe4d80a648ac2d8158e8b0948ea6ec4b8ac3ce4dafc8ed0f709c13a5ada9fa6c254b57e3cc83411e26dacb6aee290ced0bd65f18884b33dfd1229acd273f97d3edf7673747193ececc83e9ba1e1a73ceb8c347ac88333308df5e4d9ea133e2c6fa4bb1489980cf8ce20201bbba6334936fbc6bb7e6495ba48a3648fe57a0957de758182d3248601ab2bc9d2edf826255d5774021ae4d5d7f87a18927ac866b24e9fa2ca4fb5623c9e0ccbe491a61566f5f649047f97db9cea177ce08ec58c28e7e174f427b38c2e3c2d7165b321eeffe4fc03e8acc2c0ba7520699e8f6480261de487e33d3169790024cec06e3d776c98ccbc5da2ec0032c8241bedea3db12687a82e1eafa4ff828f5347e8ae0b22bcfa5de853d05381a04e8eb953a54c5ebb528bc03d4f7d74b1741f7833a7b90456ff847619b5893bd1515ed87cfd9aa44208572d1578849d5e7310b29e4a5af6026d9d5d2d6c18cc222fa375bc756e86d30a673420c4ac99c0b0a6baadd5bb53bf161074e85b105d5c8f704ea4fef269b3e2d62dc9e494393957a9aba76d7a7c79a1f37a9c0b20a69c47f74b489a8d60bb017272497f2cc7e3dd85a6622c0c1038978ca44170229f1ef25d11d2757940a5b6d35eab977937a5cccfb979dd79accb86476ae7da6fa96527a0ad6a7613c9008fd3cb2cbf81d7be93304dab9059c38cb54a191118bdf39148f6a7e44eca45272a3a2f1812ab6ac72f3009c235abcfe300a5599340b7baa1d6b07797a8fc29533b1d39b24642a867cc188327927d224045bb65e47238f7e260dbe81e2fdd8dac3f3da3724817975e008e0ccbfd958fec78f01cd6cf9d46594513d8a67c9ff5d1f745a7b1b82ee0d1b0babcbea6d4334f8f474c0f1d438d80da71e1158865621613cb9eb1b08f224fca3c26ed879fb13a7148d7a65ea7d2364b71568e2b56e7ab492866ff1d9f0d83647682fd3a31ca4c3735ed4accb26d45e9b26f80856a287fdd42a12de98d1b5d4f2278dd78a8b287a18d8edd003d338049214faef3d6c17b3117da3e1c60715480e1739b52ac39265803d5d6019559d028bbc2c874071c021c581458c67aea919e14db399a54314b1d734eaeafee4844ee9c208887b1c4b7c475997146ccd5f6df48262ab997fc0e5f3ef5e68506fd1d9835b7028c22933024dd9ea325dbb1f8172f9c564b973a1668fb8b566e484a6f821c7bf709aecc0794a71ecc8bcf2fd5ac8d0c76b19f4ce02fefa9780549df3f606a0e520b059f95cb4f749b8c9204f1a052a588ce8ccc519a89e5444aec50739e92a914782bd1c991ae6e403aec0655570e1f90d921695548a645c317d9c13d36da32f86bb104d4b36b66b1e766731dfca460354bd9194e90523afc4e36d9aadd8dc777cfe26c955dcf57736139668b29f4c8ad197050737ebba3d55eb30cc94bdc3a1e28c3573a98ca4d5502d9893755cf2dfec4843fa39eb0a9948b6589eceebfe750b2db0", 0xec0}, {0x0, 0xfffffdf4}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x30}, 0x0) 6.377704639s ago: executing program 2 (id=1336): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000100)='mountinfo\x00') mq_timedreceive(r2, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r6, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x801, 0xf5, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x84000) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)=@arm64_fp={0x604000000010008a, &(0x7f0000000000)=0x7ff}) 6.02639867s ago: executing program 5 (id=1337): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800, 0xf4000000}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 6.021558626s ago: executing program 1 (id=1338): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 5.849867074s ago: executing program 1 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r3 = fsopen(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) munlockall() (async) setresuid(0x0, 0xee00, 0x0) (async) madvise(&(0x7f0000d02000/0x3000)=nil, 0x3000, 0xd) (async) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff01, &(0x7f0000000200)) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r8], 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000180)) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 5.682780937s ago: executing program 3 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000b7080000000000007b8af8ff00000000b708000000c03f007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50080009500000000000000", @ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000500)="286e523aed6b183a6d04a974cc0823d93a29e3c9e8d1a17f563be30089070420ec953728935be9928ede7471f6b694ff69efd9d5bcfa1dddcc4fab17ccf9898367b864b211e859f6efe0517d46e6c40379ce4312acde48db500e4034ea7882b21f123a493d97bc0302be077ccd6ce1a0a4b9c828759f43629f7265f0a9ca548082942c757180d863d8385c152acfd577aab7b7cee510f44d7c25169bc96fbaf15547b8720d484e2cd40f26a2db99a600c4b1f9443a7b3ab7cce80abad71e", 0xbe}, {&(0x7f00000006c0)="e32188c95778476b7791cbad727175a83abec8633eb06b33cb5778fdf191aa51136fbee9c13688c7707b8a71539713399aa3b733b78d619f7608f0ebddff493fd1d421cbb242f488e6a8400baeac2b3288d41400b24afb4482d144b0fdcf85d5badb8308e09aa2949a6b9ad4f6fe1c539671c6906ba9fd14ab52c0f9a4eb8b", 0x7f}, {&(0x7f0000000f80)="ffb2994e9c5ea7524ed7d996e48fc15f7b70981d2d3f12586f18a43e7b6f6db54f6b39a2529cee51d84e29012dec0a6e9e38f8790df85ef9f548f2d054dc4bd20ac6f02f7fb4564fb0e19358f7faf4e9fe3aad4eb4404d5eab555d06e107ddca8940b1b32088773ac4b4bf85ea91e8ce25d230f88219a21c9cac2a206f1d8cb3ed2b52611712d1f8321e84995fc3b89aadd85a71c285034b52f1ddbb08f3783070223f0570bcae07676589c07731a54bc921f66ac9416d2bb9b272c4fa9074cdec3aafbcbf3629543750cd9c2b62535ebc249fa437ebb79b", 0xd8}, {&(0x7f0000000c00)="89bcb18a6eda67512b2d62b4891e229795a813e75e1ced3f00e0566d4e34e076ba5f6c477c12750a6907bb5ad532e3b7f4d9498bb1fbf975be61b6efe065cf1398be52e1fb4de689d38a31e88624783c7e79a552369e20", 0x57}, {&(0x7f0000001080)="8e80efdae05349eec2233201fa218b07ec6dd0f0acdcf23a43b5208f05e4cefccf606e1ca96b17c0b05ea6fbe694a43d9592caa5921a617fb04aef7668888c032fc8ac243d3771a5fccb320cbd8e34fa40211fe9098dcbc529e5b5298d6eb5008977c1a2fd73041bf3ef2e0c2eb0be49fae1187521c65465bfab471681168c8296d249d1d7207a16bfea18581270223ed967100752587389ac89b80867746789a840e32c5575f71c0f84db27139ce610ae7c8248a76dcd32f66f53d11917bc5ef9ba2c8710b342e7bc83a548de23c8c850d2f7c0877789f3f910feb0ca026b097dc34ac110e20133aa1ead7dad3c6946485f2fec137b3ecb47", 0xf9}, {&(0x7f0000001180)="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", 0xfb}, {&(0x7f00000003c0)="dad21c527354fee3", 0x8}, {&(0x7f0000001280)="9d37f055b5015d4d2c5fe7cb97214fceb7f0d53a919dc47e7f9b05bae22efa3a8b3edce301465fcdd6abdafa887111818970b13c8f17ae48e7b5371b84877d598efea1", 0x43}, {&(0x7f0000001300)="c0a0678ff2cbd6127a1fc84a3a232303ba69680469a9e15b824d972c2781e26c648c903e899a292ac344ce14265c318bf560e7b8bdc9c4f5d10e4c161b5db6d8d4fd5dbafa9061ff1f8835a858a632019c10543767dda5f5d435020207", 0x5d}], 0x9, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x30, 0x2040010}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)="5b6ba5d908ab30f0c8c8f3bf5aac7ff3421104b448e1135cdf780aeb115df3972b36cd6cd9be410ae7924449f01d0695be408eb1a8ec7d2ae77fa043129a60b172439b9e0516ea5d6d7568bce82da448ee6646a2c0417920ee1ac078c7e0b31ba5986d6fdcc93e66b4da994318e3d70cc1a07a0596c4b29aefe3546356bc97e6786e90e8682a9d68bc7604b551cb38eb7f1a042a2d3a406b0a5617af3fe540a0c71916b273ce6f761c9ff4519f11d17a", 0xb0}], 0x1, &(0x7f00000016c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x28, 0x8000}}], 0x2, 0x4008010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) keyctl$dh_compute(0x17, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={'ghash-generic\x00'}}) sendto$unix(r6, &(0x7f0000000080)="008e", 0x2, 0x80d1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000001c00)={&(0x7f0000000b00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f00000005c0)="86ddb1dc49d618ff51c7adc0dcfbdd39028b96d9cba330648382dc9e4f217ec2e00434ea88d316949746e537d0f5fa5603003e2f725e4385e03750737ece37e2c50b6f1d3ddb629c89384b9e3d959c7bc36eba9d063f8cd5c34b7aa1da8c4362ccc0b00b21a94a48db4e6ffa654f8698d8276d2124f8ebc80523d465842e297e888e7e55bb5c89f3b2480bd4ae9dfe51cd99f3144bbb3740e1c77dba79b0775fd1e41493c78df42ec67091fd49725bab02f19f7631bcaa5e2359a29b0e922c639cb70ad857a94a8dc9c856630b", 0xcd}, {&(0x7f0000000e00)="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"/333, 0x14d}, {&(0x7f0000000740)="8c4b7691e56305a43dc615395952584e4cf5d91e57463ffce505bb4a3a6ed5384ee8e9", 0x23}, {&(0x7f0000000780)="d443a3e9f8d60f93343208c635a30a95b9e0468b41995f6e4928abf7a907d6d6134a880759c9a09ccc825abbb83dd47be9a8422ce9edf4e6267831991fb71315ab5d4d83993ee3f9", 0x48}, {&(0x7f0000000c80)="85572db15801e2eaadf1d8eb858e23e15a9cbaa7225adcb860e16e1bd9e2b5656445748f1b0818e7c233461c77db0bed2fec42d5eb439be104fefadad524e1e07da518d6cdc514003ea0a3e4d4e59c1226ab01f3bbaf0be8cc4109ff8532fd8a212fab742b53413b9974c7996afc1c684999caf44cd78aaf85621aa18a5e07e5563302b6249a8eaed2992af5ac48be22762bffe7f9f1e15b5359f3cb631333ef5e02017fb3eae356190fec5259a420fb0dd1d5fb9048cb92bfd0", 0xba}, {&(0x7f00000008c0)="f25815ec380b6fa928d8778e71cbeda42b7b1840962a9e6099b91f75fda0dde54f80781f75773eb99c1fbaa545352b3c2605cef9f84dda503f5763e0332884c9aa72f3d273abfa76e16b0e58a443882cd5bdc8b4eba6b3493029500bd1eac4b38bb2f846dfcbe426aae95b0e1c3df80f8c2ac13913e272e1e9a10cfc0eef7e5d59a289a7a99db935bc28b075cb8cee099c9473ddc6187482cfb6b3766f5c", 0x9e}, {&(0x7f0000000980)="3e3fae343e2d57586715c123ea548c4efb54ee2cf356ea24d2c461931fe6f0d5bab24a5df58dce3e681666490ea0f4baff9b8191e67e06720458d4ae669dbd3d09672f7b20c25d726a51cadd665cd2cd792552421e75316440198a76073c9890b12f006d08262549050b81b413dfe09d3ae397730d7eae07aa63563b4f917a51562ce071872ccfbfa0471abd8b78ef08dccbeeb15bdb445dd9e5cfde9e87848a73fba81850931a4c245d1e2b6d975a02f85addc25af4cfb98554062fb3d7bd5edd84fe58f53b6c2a77b491a531590ddb37a9a14db5a2f87132f0b4d8bcdac592e7e57977e75e5b892ccdf5f402d5a4d58a3ca95fbdb265", 0xf7}, {&(0x7f0000000a80)}, {&(0x7f0000001c40)="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", 0x1002}, {&(0x7f0000000ac0)="b224203d5af333b38b755078fe83db54", 0x10}], 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400000000000000000000000100000002d3f2f5f62eb48cbc4cdb0f86ea4b0000000000001000000000000000000000000700000046e046545ab33830605254ea877be27278d501c547f192312262466febe064eafd3d38f6fad7ad8d7f16bbc9c8d9057c9d2fa4b77f633c135a60efae989ada15", @ANYRESOCT=r3, @ANYRESDEC=r8], 0x28}, 0x805) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r9, 0x8b22, &(0x7f0000000040)) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) 5.486700943s ago: executing program 2 (id=1342): syz_io_uring_setup(0x109, &(0x7f0000000240)={0x0, 0x114df, 0x2000, 0xffffffdf, 0x4008d}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = syz_io_uring_setup(0x7d0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x7f}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 4.668091353s ago: executing program 2 (id=1343): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xffffffffff7ffffe, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRES64=0x0], 0x0, 0xfffffca2, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x69) mount$fuse(0x0, 0x0, 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[]) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) write$cgroup_int(r4, &(0x7f0000000240)=0x6, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000020a060102000000000000000000000008050001000700000004009d800500020073797a320000000039b0f359905a73f501602d13166a15aa6047a1c242271dddb559d52554a1908ad866e1fe041e644ba93c34a354e5882b"], 0x2c}}, 0x40010) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @string=0x0}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.644134331s ago: executing program 3 (id=1344): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000019078ac1e0001ffffffff0e1390787fff01fffffffff38000000c000080"], 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) 4.421689366s ago: executing program 2 (id=1345): r0 = socket(0x23, 0x1, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800bd34612fe321ab9a000080000000183100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080007050000007b8af8ff00000000bfa200220000000007020000f8ffffffb70300bc2253000200000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x19, 0x0, 0x41100, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r1, 0x0, 0xffffffa9) accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000001340)={0x3, 0x1, {0x0, 0x0, 0x5, 0x3, 0x3}, 0x4}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000640)="66b9a00100000f32baa10066ed3e673ee100f0fe4c020f01c50f20c06635000004000f22c03e3e0fc71b0f01c4baf80c66b882f2508d66efbafc0cec0faa", 0x3e}], 0x1, 0x51, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000013c0)={@any, 0x2}) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="f4e7e82bcce6baf15c1235d90a589eeefea5188ea5e526a8d302bb373ea808a2a395f792a1dd985309464afc6eba569848d1db4a67e8c7f738852c3bbee73c8c50159bb517e30852d9285518390576f091c532155776481266d9ed7e483ce89b1d70ff6209974d1b2844e19a351ad3", @ANYRESDEC], 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r10) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x1054, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="3397ca3bb7109209c534a732e1a62b3c189eedd40f33541979dadb68af6c6e3573a9803c56cd75149c9b3a057e8dedd1b70227ee918c28e73eaa68cc2072d05bd4fc1cbd47e912ad1a111e27838ff09c8078d83ad19a3e572fb603986d71308ec2700e16bf2c9829bbc9ab75753630de8fe3660f4a2b09d3bce869a5e471b6fb961f5cd161b4d155b7e3ad424cf758e8bb31e2c2df98946bd6936d35d018932b928476ad1c7f693a09b3f5dc35e108fd57270049c8938967ff97b3bb5ae5227e53816ebf9ccb34455718c47aa4918efff8d969d776ce01f765de4328eaf40bfd2aa2135b9ab0a15951f6c9c5318762143774ea6321dd4e783020fd6017e96a7876045af669cc3221ca634d664304966dfbda630080f2b783a09b0727ac509b1225446bd48f008f664e52e433079e6a144d014f6662ffa178d0d4d9e30d213082c84aa30487e5956e323b182322b8baa2371e6404853e2298d955d006630fdf06383590bb42237466ac48ef090f5d02f5c1d8c7845ed19272173a12e75d1053a0ddf1ecfd5d66534eb5561e8478a98c76016566365f5d580bafdb42dd6ffe092b043a78037e39b415a3f9269abf0d884810bce84096966d7b4d34d0fa9e68563568fe9197292b6db2d1969d19b00726264f1a6d6c3cdb60afcee617938d0aa3ca0bf491950d4f0f6a57901e22376174a6e8ae56c839fab64a320e14228ac03e3d7b09eeb1482d2fe9158f937045b005a7e547381d239d8d8d56672727c60fb43511bc732f52d9eb19b3146d4a5354977bdc8181280905d4dfc886e94f12bfaf2b26b231233bca42b22555242eb69ca96b7a9b9216c928f94052d3958c4bfee6ee3902591b151848e7cd8188b1ac8e4cf8a5250a9fee973dee4187b09f757d92759e41141d52d3e62f0d514090744ae20ba304e07e8a854e91f81e223ef7490560721d23ad20720b721dcd02c56d609a89a4dd74499ebc90e3cca792930bef9c4ab81ed2a86d2fbf2944f8a94530cf46e518ce0ddcc233ff299a3b3b828a6603bd46abeccf200d3117937b28638ae5f35ffbeeb6712da1bbe6fec5c5ee3acb8c072a5e5b7348a335c0fe27eb4a0393bd95647b53b644d2942f80c84aee55682e58285307d4e958e3e4a51be1ccb8550eac0f7a93e9fe53d050f7f73d583f5e52c11defdd1cd8aa5f26d5924b1ad674d3e79f10165201894373d223b63c1821151f70d491fce3fb49c4a3a03ad890e26be1c89c02da0ecc9be882d4a8340147a0713c10fa99a07efe8b4125bab73de091df77eda8761cf34bb604e7354db1a5cdab55460867631ff380cc114145f7b2eb3d7fd722a8ec420ae4c8edd366d44d66d3be3499b76d13233d2bbbb0a2f10ee55d227fa3307affa1d76456df0756847024d605cc6a421581b580b8bfb42b17dc0423ade14b2c7819e0f3d55998629311f89a74f235aae1b75ee0245f85fcc3149dc3139ef209b61e83f4cf218ab35ac82693f6127ce1b28466c51ee2faf57b8e7e7395bf43b04908b1cbbcae6fd65b1f1aa1a10fa0380ebe28e1151975bab3053a7074b817178ff59135e9b4d5db15b14ff08dc15e80307358026693fbed1dc8fb67a8f2b59a7088a02bcac701e845187c9e3ccc54b3f9e54ffdf01efc8999c27df3be38039f755dc6112a74cc77ed0bb892a910e3405fa6700c2916ecea5a104746e75dd18f5d604553629d8d43dda0243fd9f337c13429d866509e80f421450cf9c8d4884eab0164c4dc5b25208383839e369df603602faf28a4e7545238901328b68456ef90a77ad3a3f6b6fd31784f22465a02bd37eb36aef69bc6f8fc1cb5d50ebd90f13bc5830573b76b75980ecdbc95bb0b21c9df637c9e155259fa3fe1f5a1d2d5b0e1dc1ea101a06c61f839d4295f64e051e1619b2cf3203955c9bb1b0858123c42f4f4bceea603544046bb2f98cbe700ba4d4ff4b92034b86899ab15ca43430630145ff4214c54e8631c76f04e6e7ddb0e7d552ebc0d977f56f6f227f63125caa7844adc463a495e5adc5be06cd0da10aefe9b32595c444b414bd4aac8a8fc116d83d27994c3662e0d007a811cd8e440cdd92103e68e3b2e70afbf69c141b301045c1dacac0e85a0c79592811cf36175064c3642897f949905b263fb7147adb9e94f1734965ef299f91fe4e55a311de776e211748b15e8ed68e96ef72744ef4744c81cb324825c70135fd0dbea6ec62ba31478f13fb515a8795af6304d5fc6360bc2a044ba5ca56bd7c91e15e7c10b15ea32965cd661b6cc833efd5c810bab91596ac25570858c83cd66c1558ffa8dbc1ef952d4e14e2b001755e37f4337bdf1b6d9d143c3dbaae71231bf3f0cddc025b8b47b251203474a64f29aea860eb22d24162e20eb6a7c6ddb761194c806d25ed866ad2bf160af03115f16cb5425e8f29fa490d11c0e322060f29ac5388a077c42e0dcd4df27be534cd6fbe2290e8d7eb1567a4dcead8f2374882c5da58d9567fbeaac1a9ccb0a0e398a12863f55f700eb6313486cfe4c0b86106af6a4812aee1990c0245dac4addf40a672acdb702ad45d72864d729a22ccb090eaed01a7cb07c6ea08203c2025091586bc9a3bef614d6a4783dce9adb362cfddd9567ea55c9973b71c9e8a2b0f7a467dc46cc6c18fba692ac69ffcd18b4fdfb8e1fa2dc0e69c844a1704b0b4c8480e91b97644d8b7ff8e47c584898b9a09925239f15ff43deba963d4de2d82d03e15113b4e0deb2710795d31d27b270a8439dc6c34aebef030f86b15a140ca4d23797921aecdb431552cd229bd2f5b5f049cd8faf963c25a23fef9849f150c69bb90b0865097c903890a1d4fe213410226fc2c74a51a6e99bfc0684365b652de61a66b0238fca573deb45c6f354e52965ea946a7f571a65a5ff87956da5b1498d565bbb339ea0939772eb0954e8c4db58dd6f8b8302b1f7d08767db0ff3125713db8a72cfef841c810d9a1a4d908962cae524da88bc0534fd610de702bd6233e0e890f84edc15a43f19af6f0827da3baa17884d3677ea548fdeb707377ee8bb819d6cf3b56492245232e4f7c5f3a77b5fe350c405062a782f9371d6bc0d5e4133fb8f5670ffdb354ea15adaf8a9884405cdff67fb76ebf49da39df2aa7edd7ef4e740f948cff57c486ed1db22e0a08f7138f9ec21157a97620fa5a203e9fef5cc462d4cd2e6542ddc7c10335c249c37d9cd784a1443caa249ec0cc7e602687e751409ad4d5903d40eb22a2770a1d8d3095d2bfa7829622930a39870b85304e83bc4015fbfa43f0d054a8f58b27bd8d1aa80f121f3bda61cd6774fbfe97ca717272ed951b4919030a92602b4a9bc8335cc9b07e7175d85eb176bb9b4b7199b979b54f8aa1addb4061f60745653000a6ebaf152869dd00604bdd0d9d3ccb472b82fb47eb31aee7a989966061cde602114868aab1bc4cfe143a1c0d266fb88f5f80db84f1968c4fd3e4fd30caea456e9946e30d824be5b55a5cc891324c39a5a80e96da94634678fe79a304f07f27797927cf075609c25dd5f448c1042262d2c250f5b5490506ea0f990468cfdea9ca39f8ef269cd61d12a33e873ba5e153552a0192be02d2af3f53ba9dfc029ef987311c112dbcdf7394807e39463853b7d45aa0aa0ef45e7546c777bfdc63443ae08f5320954b0f6fcc9e24cf4e3d84a0241738bb589562a6f4edead784c4de01d8cc987eaf524a35b7a2c2cafab380f0fea694f334b2a77e2b5c3d75c32ac099d42008230bf770134435a05a6f6e1fb054a97c515ac85253e649e76a9da2ebb9190ca969f3f01b6cbe64a200042160ff0b834ef11fd7b0a49eb62503bdb20f784ebc0de3193d7d66ef8faa05cba0f6c078ac97cff292700d30095be7bf81b4b9ed6049771bae0be1fbb1ec551378686da33182fe8e32ac52f4930912984d635cea98c08602059977ae7cf8c011c480b48ded69a1e49d9cc3c0778d4434eb2079e79576d1893dca316e793de47d16aa8cc1767f8020c239decb59076b5708566dc0db7e3048c105a61ebce86219fca1d41a3d53b605527974a2aa65f5d273ffde63a1b4003009d99f51297caba3f3250499c01de9197437da72f89de57d71bdae8e3f4c67a2ec453d90be56770cdeb000e857ec5848f7f1b414148a495fea85cd3d6f418b636a042cb5a3a16c569c3aa63a8b7f86ff0f49246fc8f7022b5ebd2922584d0f7f915d8903503ce0aef9239931c8614d6dbadb48a74185a14b20e10767544bbce86c6f807d7bd65984fc5d0bd5606b81625d5ce38b75485cc6e16e7a7efbaa3db03a8faa672eaf163907f5e2bc6b6455879891d94b936a399b0c19ef4dc4d067242073421e2d302e767114d621e62c5175fc74332fe82c32e4ec3e1405e93586d62a9497b4cfa1c86f797b393011c123794dd7ffb5b7c15121f8a67c1e032c8a42db7f8c17d121919bb3d754f86544621302b918f30bb778be32ecbc35a5d14ba5f8e7dc5ae121d41dd13982092ed94b6c01518c05087e32da410990903b8871935857ce5248e3d876d48ab9e4762aaa10d611091a908b3621349e1362c30a1ee94944f0d73293f1b5bc5fbbdfc75b71c2170f78d540c5f00b7f92f7b939fb7d44ddde2f7e47abe51f6ae135a0e3b5a6854ab045da64e673fc60b566088eca5f818dba1b483d755c7e27d069fdcdecba1570ef1e609c326cc84870349eba5e7d82f4ff7168f59935ea81cc829be584c2f9a43db34b7a04ffb02b2b02366b6d480f71de6ff51c3d4fbb5d49e15598e7c3c9827d992abdd23a05d2d655d1f0a7c33902c5866cbe87d315a2ad245977a50127efaf4003a525567cbc3dbeea7f46cd9fdd34279230f0248f58cfbe22b526021ddfc7b335624c88ec744efa5d775f121c61b77048ed7a883f8c2523dde3e18dd40cdd0a68b83ec65c76b2fe6ba8865ab3fa756222974c2f29563937d380bc13932113b7e965180163735addeb1c3f0e6e075490373bb7d2decb707b5fa59234653681e2440880fbdf95382ea4f26f2900896775f98bc13d002706eff17815c96ecab229d43f4fa0ab3b5102c24acd6c5b62f9f26e9d7cd155ebd1a20d0007bc385e4da6b2fea6e466db8923e6d7927d2f6934bb3f21c389ec0d370062a1fcdf955c6569e53d78f42129c7c8dcffd6a80e492ce4b7d9c41b320bb592c136462f6bcaec1119d6e812df2f91faf929eed9319b31cd6d33d3abd791826fa516c0bcca0410640fbe73e510cd7cc5a7683c0c2ca2777c72d73abbf257ad7f1c2eaac86ff4616d380a3eac80d5f833270a7e34695398f4db9a59ca8a33cbab53a00a996d6d13687dda0ffa6216127eddb4cc520c7afd7ea91b4935e29d0563fcc4679b0fbf9359a8a56e9213d85c00a6e817359cccf4d42b37e107d06a5f2ca4cfac8fff2182821684b1f271ae4a79b2fb96ff02a3bb895c6831055cfaf720ca1dbc8f735aebdf43348d8840f8e39aebf88d4c8a167dbbee5ed3b64f48013a179c7e17b7efaf0f1015a5cffa91733f8f3cf17e5d5f77ad976a99f71c0183b586c9b9ec18fd678d80ea369c53b240545d1fb3c9246b3c5506b30cd2a49bb22de08dfce87d7f5e7d37722383d6f293c8cb026ed02e987405703cfe2f325aaec25e9f2c058eaa3b923a4511408ed8ad8f6fc3f1d3db357ade2bbfed544f2e0a41bacc1b96140893ac9a00f0d676c7e2b61a9a7daa66a194a5996e0e8f4321c4453403b6da31d42e32d0f59425aa219762eb5be683fcc73fec47133dae1e48fc29f49865eb4269c76d9c69fe4d8e8358bac52b2a508a6483b"}]}, 0x1054}, 0x1, 0x0, 0x0, 0x2404c000}, 0x20044040) 4.419624491s ago: executing program 0 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfff3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.40537361s ago: executing program 5 (id=1347): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket(0x25, 0x80801, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000ba000000ba000000070000000c00000003000013040000000c00000006000000010000000f00000002000000abbc52420500000006000000001000000b00020000000500000004000000050000000200000008000000ff0000000100000003000000000000006f320f00000002000093010000000600000005000000ffd8ffff0b00000000000000070000000c0000000000000c010000000500000000000008000000000700000000000001000000000000000009050000000000007f305f00"/213], &(0x7f0000000100), 0xdb, 0x0, 0x1, 0x4, 0x10000, @value=r0}, 0x28) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={0x0, 0x5, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000a80)={0x3, 0x8, @start={r7, 0x0, "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", "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"}, [0x9, 0x1, 0x3c28, 0x10, 0x8, 0x0, 0x10000, 0x0, 0xfe08, 0x4, 0x1ff, 0xfffffffffffffff7, 0xf9, 0x7, 0x6, 0x9, 0x8, 0x200, 0x100000000000000, 0x4, 0x1, 0x5919, 0xf9, 0x1, 0x845, 0x9, 0x2, 0x4, 0x4, 0x401, 0x2, 0x1, 0x400, 0xfffffffffffffff8, 0x1, 0x5, 0x6, 0x4, 0xc48, 0x67d, 0xf668, 0x8001, 0x4, 0x7, 0xfffffffffffffff0, 0xe0, 0x3800000, 0x8001, 0x4, 0x400, 0x1, 0x0, 0xffff, 0xfffffffffffffffc, 0x10, 0x6, 0x20000000000, 0x9, 0x3ff, 0x0, 0x3, 0xffffffffffff7fff, 0x6, 0x7fff]}) syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000001940), 0x3ff, 0x0) read$msr(r8, &(0x7f000001e240)=""/102385, 0x18ff1) read$alg(r4, &(0x7f0000000500)=""/240, 0xf0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) listen(0xffffffffffffffff, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_create(0x1ff) r9 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x800) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000014c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000240), {[{{@arp={@multicast2, @multicast1, 0xff000000, 0xffffffff, 0x8, 0x5, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x8, 0x3, 0xffff, 0x5, 0x0, 'veth1_to_team\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x125}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x2}}}, {{@arp={@private=0xa010100, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x8, 0x1, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x3, 0xa139, 0x3, 0x3, 0x50, 'wlan1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xaa9f, 0xc572}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @rand_addr=0x64010101, @multicast2, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x94, r10, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) read$usbfs(r0, &(0x7f0000000000)=""/202, 0xca) 4.379895071s ago: executing program 1 (id=1348): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x63, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x44, &(0x7f00000002c0)=0x1000000005) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000006c0)="64965eca599287ea4e2c2e1df20bd699f5c0587dbeb0ecb3d0a1f45b462d74835a4841652a54aa52353f1d8bdec02f81e0dfe2c4cf3fa644e0b4bd6d616be798beadb84f6c19019e51ebb3798ed446c4ab39e67bdb1049b6646780a060617c3a0b8f80f001be374e87bbcfa5d77cb393342f919e730fba3a7c98aaf5732ee24a3a117600b29c9a7be5289da3f6ee375cd938e672a25f336b09c23ad5d0826900a9f691d588a422a9c649f0c76bcf43aeaf2faaf325b5409250e7bd03b2af8520697b92867b2df8ef80e52917d1cc7fdb4bad48305a47ecbaf39f886c4a31aca1008dc90d022b201a148613f6668dab7228c9e7", 0xf3}, {&(0x7f00000000c0)="84885aeab609b1568b8d966af08261dc06097518ebac4c9f885488b925c63db23c13f8e7a03703e67e55e953347d1b9f9e069d1fd40aef85ab7a026e", 0x3c}], 0x2, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3, r3, r0, r6]}}], 0x80, 0x845}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r4, 0x7, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000300)={0x6a, {{0x2, 0x4e22, @broadcast}}}, 0x88) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x5a) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100e9f8dadf41e933e0000061ea012dbd7000fedbdf030000000108000100ffffff0014000400000605000300"], 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x40904) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x5e) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 3.646063788s ago: executing program 0 (id=1349): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2809}], 0x1, 0x0, 0x0, 0x9c) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000P0000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) 3.341292198s ago: executing program 5 (id=1350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='nilfs2\x00', 0x2208004, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.922380268s ago: executing program 1 (id=1351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000980)={{0x0, 0x0, 0x80, {0x2000, 0xdddd1000, 0x2}}, "33bbc66ccccd03ffe041c353abbb6d2204d8df727d03ebbf90925b32ad37532fad2b953073feab327baeb8b6d9e17ea075d473c46db69a0bc8c33d145102500d0a2d8ac9043545d03f30f98ad70365d4b997c6a9006af3cc496a9be3ed4070578217e84867bd62f56f7c8188335069eea0b9fa60b5ff93e9d76411110d08d337ad99066aba5055990b9c87c99838c0ba2ed32e78d8103d89a3745391721df970f8455516e7bef3e4ddd358ebdd7a0b6d066abd12957004ee5f596429f892090a7c0ab63fe6a714d8dad006eeb77529997cb4a377951dcc13932a43d7e8357ea181fa27d74938425e982ef3d4b33403bada35ac54dbc53aa138c08928f88592ef091a9c15b7076c17b6b32c1f95030ff283e8951e7031c4ed40bf41bbd32530e135067c43b56c8627ea717f31d592fba0dad62383389e506384c831133f2d4b8208e713aae826fcfb6007d95d6d29e3dda716aa65f68a2d9f84bd6232429cb13399bd4144058d3a66033c4402c0d2d347aad6eaf505b1860b08ce358d165f97d35181a7ee03f0e92bf6fb265852c8ae75487829d23c5c46c20a52e6ab5626175bd3105a36c81fbb32721776f5ae433348aa70234c8a9d00c32e91053b105999a8fb2879856ce022ab0c57767e20c8895d0d4a93b7c93aa3083ad44a13272bee8f4e1afca21d83a8d7d4bb3f7201636b56d66727c710e2e9a6033fc341aec27ba13443bcd918bd4b8603d6f95e79020c3d0ac3bf2e002a99549fe2420e43e0d5ea47df810e3b3202f703eaed97ed5ff3174d075f4ec9951e0dd762bbf8a73eb7abd49ab07a6fcd89353d4a00cf77f39dcb768b3460836d5618111e2042f44ed817996d827633fa8a0de047110dedafbfb60b7830bf48f14dcbf85f6ff1391402817340075ef4b1e302b9c1840f6e94000da7c44615a59dfbb2ee3410785ba3d6b8a3d2412d08822c86f303ddbdafbbfad1f29ab95aa1bceb059d0dfa63351f9ab66093b88a0aed936f3fb019388c7a483962f6892e8400c9fa0f1e698487f4ff37f613b54d081ed3aea4c29de34ce7e61c627c92d5b35b0c4b4b274db18ffbd4639b2c7d0f8504c7c67a5c2ba0bcb92f820bf25551491dababe068fff2f0830d8948c102a6d514027324a5d0f9846c79529eeb57172b0846952246c1d5cd6c01751175dfa8870cf3b63bca366f2daaf991e180ee8b40a96ec2f5c773f8540ae2a7e513a0ec67f0850dcc3e3db54603405c002f8cf2a7f7e7cacd2203e4331e91f5bc88bbe52bce18373d7890458435b4dc5796c33ffc451468caead4c43cba1708f4bb6f2e3ba2995cbac8927ea13f817dce4d3738b83521b04355361f5a60ef938e34dfbfe8dc22ef41e10fbb360966448c4a89be3c91f89b3d753e3098234d99bb09e58c1f6e2bc0f53676bc4d356948af1fe6f2a94ee0de018b6ef3096343b92dbcb35bf56e8d7e63c21cfcf4c3437fd3be7908ac85c7f6577f973bfa55622aaa8577c2326bc8b80357e71fbb79e01ad3dc79cbe0791c3d476fb8f82472fbc86c9b8e749ad4df1b5161b9c33938c2d8dc393cf08b70b2f6f6ff0ce431a84c2ed49d5907488c307198ee25edfb6048ed6aa541a116004524ef0e4d80961bee883b813ec725aaefeab4babaf1442635defd1bd6857a49dbef99f87138843ce089770811320c857a51b3cbb94cb7da858d94291cf29c92baaa7ada0b86cc7a571beb50c46b32424302f8546324cf1917fa0cbef327b036a71b4eb1d249d0388ad98493a97d6f2093b25dc284acc59830f55d011f8a2a1b211af506aed25f23ee0d1af14dee74d6d5d4e2de491daf03353554e7175417e1742a8c5e25521b8e7aa4128c4983f53ff407a771b823b6428fc42034b4fcc3fc65d8d66cdb6e13bbb1d72e882981eab427c100e45304df0b8f5e45ff7141d0a71f2b429e1248be0e9c5e045a48c1f453372d53219fc99e612a58202aeea324f43710da97e1157108ea91ae6d4b16b618746ac9c007d1ed106d8d7392986acf6b3f12317690875d459c4654dcc45e916e0017bad0679ee27dcdc10a659452dc7b476f1827c40e579a816ba0341583e322a086e8b790518a0dd7574a77436c621a0d1025fc389642600ed382c8a41ef6c96de494dff6577e8415e27048d3a5c284895e9c3186c166dca125b0cd305a2dc377dbe287845011e1a0bd5b522905239687182919fea37e9e97c46a33a6ff303ad0b60b9b195c5c81d306ef9c4a8515eedb317de5a1504703db4ace05c0d36aeebd5b0e4d2829a47d0361f7147bd3d0cb93294c6ed85c6823c4bd1af85a66b05d2682ed5f9a070c028d701d7d63f546bc4a8eadeb5d9a1f018bd5dd98ed210eedac3a67c1b79c8f5123bd6d27392c8fd255bbda82b82c43e8d8da280107333eaf869173ea39cac0201e798091cd50ce4465f716c6b599462eaca25f646dddde0ceddf5e3d15bf6fa087ec10e1d62c84284690953538266d799613d9883e68165205c1cbdfed7cbd773f0bef594e1f68d1b907dd05187a935f0e8deb827be02a3cd63c29567e3e9beb69354fccc0cdede86ef2b5ee0e51cb68fc8b0e1fbd5b4866997f6d8c3dcdbd9599a4825d5b5735d8561f67dee5e994e75b589a9819baa6a8a038f4019267e977f8394ced90ebee8c08b261bc1f884c938b1d524403f0a9a59f7508968b87609d5819a4314c72472488b2e012b2b69586a6a0fc660158353bc4f200650f13dcaec6ac099294b01d74c583a74330cb574029514697a923e1b79455a02d879837d3461dd99943d7da5ddac9308633f7d85c7f22d4c952c1a40571b818b69054fa7187cdcd4d0791d1151cc7773f5286c7593136595cf88c44f99210509c072536db0609a672f20ed4566536385b674ac25abe93e8b4b8df8e68e973d845a4fbf8612118f27fd4575b72acee64ed65d6d81d560a6a6450a3ef8d6e57aa4540995fa2c04703518c20765576be7ba5237f2ecb691c6c277c5121a3bdeaff5d35636eaac9cca06e3ddc3e2f063d6a7ac2f8438b9da9067d48bdaf6667eb3ae50d316aec50e6707b4a268630bec88e06390a26f761c34d4a317dad18da944dfa6e0f38688d953c47ec1647116d41d8a2b65617b8f995b1ca66ff9fdbcfd4d0d06cd5495aa22066c16a79ef74e0e1c47889efbbfc9061153400f33500e0c829cb8d40f965cc9ca037bf997eee941ea37551af5586466465ba6f157e7e5084892fdbe2d8ea179f5e9388885f9ab46c9309c94b0e0fb52f0bada530be5ae7d8217126276be0d33e25b6058624f35f003a8ddeea29a403807c605db26448520a2c79add4765f0a67ec4091d5cb361d048de26bad12f5b69acf42baa2737b17419e6822e0f76ed75975ba46e423daab9af018d7c8c37c37b54e1c4e6819146b2f94e9b85ee4adc1ec76c64a35a51d581cda4937d89966785f062dd7938d20b02b55ccd4f6a0bf9ce420a9a167560338417232e403f693c1282e550292bee74a61426a09a0ce10f1468241b6548ba88d3090ef59b969d478f46569b1141f8eeae9775000ea8d1416349362a64717beb3c1dbdc8123c7a005c903a190f4d542e19584b3892d5d1b324ff7fa6b8c894401f8c8bafa3322013c5e3707b66a3ff4f0549a1aa2011e552d8fc84e85808e9924175f5468fe84ea03a7087777a98c96ac78b7cae1d95bb071d1ce83f12ec88110c9497fff742ea89664c3e4cdd6ce5e466ea19408a28818ff5c0cc2518ef9d8b24f9d05b3e43ab602c00d2d9ad54d0d4e83df9413d02ae4942a342374aadac503d01df9bf917c3bb82b51c66a39c3147502621ae2967b5aad7bb0924d4de904de2cd0784b03c209db080b9dfac20b13ed389fa89653aec05f61966b3240c2c524b4dc05634d2b6bb9f8c3cbff65bbf393c8169e20c3a6babbe870b0903845dd5778efb15a26e1eed7637fc4e05360f25200bc4aebb98c54364110f0b8d7064283b9373a09a0e557b1e31a5dfa0a675918d1c93590438dc421a220a181a6de20d5b5cc24095dfeaeb642c3c941ba816f614de2ed9562645186a3dec711f69821b550ee0879375fa215d78b3d9970ad19069af82561d75f4548f4f74c6c2c7082cbd9776adf16b13e470a0ab2f20fe9e1b1d3c0c42c1ec50ef4277613b4bfc8ad0d8911be7f3c742d64118a91d6d8f32ccf3049cace36f086a2a46ce29c366fe01802e5cdc7f48c31f47dbe6b35c1c900467d95f3594371996251c352811e9db6aede5077715acfe675ae7ee5d44b552df5b89e956447fbec582fbf0d01a483130f6d124e76ba2a1e19c11547431d58f508ad44c4a7fae67dd3f80c212c36579834c533a14ee14d4d7d6497128377be50a4c62341dad8b0d79d3425d0b186b2f589a9c122eef91806b9870cd1b6a035c8094d05cd0e977214e349a56910597934303c2964115c026a1b8a456fbce63879b639037736d75391f10cd1f6ca23b4af12ce54f35884d99ba37ffbaeb6ac2161d765f41a6cfe6cdecd10588f3281a90df9112829c3b109c8b6fd9eeebd41557425c453f297dbede6fe33957cc09f5a03f619b0493ffcde86ea66893ab86a95b64fb996ed70500d8b8e013f0ff92f997b50e38248d894f9735a707f5e27cf2beb3a8d7263479b3e6411aad1f28fae1159fe12b25d26e182b318a9f62946c4b8f8167188f4e4f114d89aca5463952c223722d92690c86904c186df9507e4374a45d0d46dcaf4fca2adaf14d0c953453ce30581cc868e06446ad060ff24356c7946bea047e2e694b3d3ee29379d0afb7d8c41f9fe5ff3f0864a78620e86bd704ccb35ed87141e9db139ac2b7afd46c229bb32ee740c181b2f04750c6acb01327ccc81db04e437e649fa3ec3207c5495cdf616a489fe786aac222190d99a4ab4f00a5bdcfebd8c27038f6b95c4b0e455630ac413cdcd29f77d03bd8a702eec6eb8609eee3f12219f41267be2b3f56729ed6090c7247604218f549598b3321fe2104b4e11a8af679da2ee9ad184341df07c38744b4cf1a0bbc9a3769c3ca7cb82dbe18a47dd809317682557848b9360b6a5d1fafb3f50e97023095559358a255e2d68b5b7cc7fd3390367124a32172581eef823204bde24c3e3175c2df9a415a973319ca31730ce89f39c9a8f6d00c8b88088b4d0eebd9c10b3cc9504717bbb63f1853a86bea55ada6d594285833bbc14098090698ed5f66beb2e9d433efe750513ce82562f4fe4c9f3cc389bdc1b51b328067542fef2de4fec02824b95d71d895dd7441c719795ea7f906cc7faeaf4c3e8214784400f198f921e1ab00481971dcf1a44c78b03a57c896f108e813b52a11dcb2ff2e29796fa3ae5a6769069a2888bc5c684e1917470005d64ee28e6b4c8f0095c773a6b60716559eb39bf41757265a1fdc83de4cd8ea1c8d60b19fc462686d1fa3a911d7c729e538be0bf44fef56df48a90e9afa0f6fcb10a95682fb9beda7d4c3700a414cdad5ed792a859e6506d28869583927a6328f5c12d208853260271444f003e12503d0b4591b9b4c581b196fa3cc5d3afb1e84e97e96706a7dd9b135e6016860f5e9bf438d88c67720759d954fe3482d298199a426e0d9243b1e9184f4edcbe552833c32c37bf1288caf9e7a6bc24e4869123da2bb9e8a0d29a169ed1427b65871b34f7f27b4db85b408f1e0ece995eadcbc83e4a94ae4a44c1d80208b8d4a31fd481fe7b7a5a826dce6d9ea633d7197edff579a9c6f3e4fe6f7ea269508359fb209321ed3e89739aa4d34be55a35c7936400d1eeb0eaa496d87d2ab5cb9667db4a915f5247", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000) 2.697846003s ago: executing program 1 (id=1352): unshare(0x68040200) mmap(&(0x7f0000114000/0x4000)=nil, 0x4000, 0xc, 0x40010, 0xffffffffffffffff, 0x2000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x1019, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000810) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet(0x10, 0xa, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r3 = socket$inet(0x2, 0x5, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12028801000000200304c1970000000000010902240001000040b10904000102030002000921020004012277525fbdd506000f0cfe00f4cc9d79178080bb997fa3d9cb4de1f8296ba7d3010234b944bc8709ea7e7f01f56a71ff1e9e1ba0222ed51cfe867723d89ad249aaf9d6eea458d840a4bc98108ae3089eb80cec7bf52511071cffab6ac3d5d1085cbce5132d96050ad3922b3ec0bb1adfbefeccf86987fb9c76674b43f4b230782fd1ad2a9baf01bbf54c5d725e92732ed2314a0120bfc2e468477494f971023bc5ec1307b9a7eef8f0"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400510"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 2.648477542s ago: executing program 3 (id=1353): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="a8c2d22ff0f17bf8863a4dbdc2607f4facaeca5ac54280609876dfdd64430e0a69c867ea601ee1e09a39d83923f7c9f1190bcbbae8e69bf81ed00011", 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x6) socket$unix(0x1, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180), 0x2) ftruncate(r0, 0x71b5) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000200)) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0xc8d, 0x30, &(0x7f0000000340)=""/48, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x2, 0x3, 0x2, 0xa}, {0x5, 0x2, 0x3, 0xa}], 0x10, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x8, 0x8001}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) timer_create(0x5, &(0x7f0000000680)={0x0, 0xa, 0x2, @thr={&(0x7f0000000540)="74ee411aa12d201e86922e3491efa9225b3159753d368528fe47b8680696e81789a75646854e1293e963e920507176574afcb4824e13a7815e6f7ff2bc9d62e8ab5bb1db4c277f284328c909b858e037c25bef60919ccdb28974d7ede740abb28f927229aa8b0e0abf60eb0f37da60f23bf93c1edd333c555d238d081a1a0cbcf91c451ff0b903beddbe7089fb3b5cbabbbbb11983c2f932d242a615", &(0x7f0000000600)="818e9484fe498f34494fbf0eebc4bc9127e9404149705784e0fa4a006b5ddf5c049ce1d51d4c2ff7d233c50a5804cf15e0fbd29a390b5eb68379c748e326d1e8991528"}}, &(0x7f00000006c0)) io_setup(0x1, &(0x7f0000000700)=0x0) pipe2$watch_queue(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_cancel(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x7, r8, &(0x7f0000000780)="98847d3a81fcb1f7dbbc0464474814c002c408e8d078cb502f53ce0f206bb37a3ee84f7cc0efe7171cb64c1c1286ecd4750eb73c6fc9039fd4f7a01d496b638a4ead7fa8dd7c0e50e56e3aa8950f17a3c8b7d480ccaacf0309e854f1ed1abf56a864de7c31a71cf72edbaaff741dd4c9baf146", 0x73, 0x3, 0x0, 0x3}, &(0x7f0000000840)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = eventfd2(0x5, 0x1) close_range(r9, r7, 0x0) socket(0x6, 0x4, 0xe3) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000008c0)) 2.42842111s ago: executing program 0 (id=1354): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000a05000000050725a9190a5c469097c1f96bcab458"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) iopl(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000b00)={0x0, 0x0, 0x7f, 0x2}) syz_usb_control_io(r1, 0x0, 0x0) r5 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000000280)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="2000b0000000b00182dc6dcf62be78059c1a9c5ceeb507de7f956d5e25aa5f1aa52124679d9fd4d116d771d2d81bc23d627f90563a3a004f1031f428660eb60d056fa3ea0a42972058bd6d62b0395e920f213b84ed3f4343cc0cd7476d00124586afa6175f53878b779c539d6967b239e3c5e195355c6ecc187ce7f11518f7d8e9afde43e9efc4cd512eea9ce09a2ee6acf163869b709bab3d04e2be657cea1e8efe11f751445b63d68c25e8646fbb61d084dd2bbd62"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000009c0)={0x1c, &(0x7f0000000a00)={0x20, 0x15, 0x18, "41b2f1ded779f619c79f6c2bed6a9649949ae9be1e5037b4"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "e042c2f640c1e4530606003aa4621d2814f6bac6b9a6f12b02e5114e70d186386031d787d1931b4133449667293bedd2c9287bbcf4b4ac8d4b2d38af74d99a04fbd439f448467253a1a17193a790339c7a8f2bcceade598ec116dc5cf02d3b9ccf72ec90fd5a13f8c31c7dbe29ae60385135bb1615fc06e0c939b7229f6180b39d0256a9ca2b3f183c975fedeaeb58107c79c58db0cc7c6aa1db4703b1bfc50de552707ac664482cfec1bff3d52eebfe55f91da8051c4619ef41b66d2b84d8f2e345da5963e1e1046f010c74d927ddc1e0db6801e5ff8bcfb736fa9799f90f2eca49d7648a058bd7fe3926e97363e5996329e0e4ae368e58519878c8f22f57e03151081e81ac6fe4da8b29f5e7898e64c84e9a82a311bcbba02fbfa74cc8c811590ba53c893214509f1d41ce83f7cb74b08354562b570b09f9b95549f1fcf8905acecc70c37bd472c25374517f20f41952cd10dfefd6d29e8505c476c3a3f0a12372c3c2d73a499e06a4637036975f8cd5e60e4af8888c696a495349311ff717e82bb79883e55fc558ced6d2bffb5035ba7c82eb162850ea77563c80115289f8e54d909dff83a4982cde3dc69407f9ff0e3463a26eefcb57e20cc72e97bf382e967652da1668cd80778250d7a8b0711f352712e731ab4fe217b588bc1af08731486c5304548368f381f019c0782f2e6c9d9762534c7b1ba4cfd622d5c8b64cd45d307a0fcf4b1628873744692c78cbc87cdd8e0d004012eccef9192807dfdadbbf2c2526a88b762b760200448577862b855be94bff3be821e139ead2a2cbce9b64bf7b96081c36e383efd21de85d27e6faf018600bad3af2c2f9080689d67cd45c14c351a0d429d8a4853f68d8e0cb0597dd387c69c9664c8318f3d442bccfbfbeac6edfdd14c9bfad00b07c851ff2c03f63e8ac4c3072abf2907e4bac5a004c0af370ca31897cf28be9e9e41145ee048710197a7b591165ae083a2ef3cfa3c872fac460fc82e78e7460cbf1ddf7f88a63528c68d71c4896ba2fa5f03928630e228bd1dd1271c48c7976a273a8730103ab0df904d0d1ed0acec9f3ca7f3e3c13bf0d1128b895a719668ecaf704b3b5a1ce7bd9802c166406693da46fee056bae0e5636f2efe24481eddb6df24fe5a0bbb7272d0b25335a2d627199993d95a550745dc073508b13e75a08225e35876431c445a42acd9675877bfbb8c44c403e5838030e990d7a91147decefef8f183a4523f69767635d8fc908642d8b31a1f224103c1ac2af7d190569c4e776cb0e30804313029937e91dc3790349a2787eaf4d8e0cd4ab2721a234ff67e2fe6ba07452191bd260a1032701f74f5fad8702e612764ad3f1b5c4f7180a127971c5535c79af8145bde988eb51d7c7aafd11d40ee1b61bea104d37e1a065900165eb895e1d8ba477e705625b3be2b6f7b3c5316be7"}, &(0x7f0000000400)=ANY=[@ANYBLOB="21000000000087746919"]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000018c0), 0x1, 0x0) 2.420680842s ago: executing program 3 (id=1355): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000019078ac1e0001ffffffff0e1390787fff01"], 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) 2.320261971s ago: executing program 5 (id=1356): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x80000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) 1.177860385s ago: executing program 5 (id=1357): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x48010) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r1, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000", 0x19) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100fff50000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 1.076238332s ago: executing program 1 (id=1358): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x7, 0x90}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x172a, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0xb) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r5, 0x0, 0x0, 0x8040, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$kcm(0x29, 0x1, 0x0) 1.018687268s ago: executing program 3 (id=1359): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r3, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r5) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="38e177cf3e36631fdd7a68f0fd8390bec27dc4a04607a9"], 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) lseek(r1, 0x4, 0x0) 813.72801ms ago: executing program 2 (id=1360): syz_io_uring_setup(0x4aec, &(0x7f0000000180)={0x0, 0x834b, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910240000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000f3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0xd8) getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000030000000000000000000000850000009b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20}, 0x94) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1800fffffff5000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 438.685087ms ago: executing program 5 (id=1361): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x81, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000b80), 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x26da8e97, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x3, 0x2003) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 3 (id=1362): setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = gettid() r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000032680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed4d04000000000000003100000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB="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"], 0x24}}, 0x4008040) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)="dcd60f1f9f62da1df4d938") r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) kernel console output (not intermixed with test programs): io_wait_time" dev="ramfs" ino=20766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 221.773196][ T30] audit: type=1400 audit(1756648703.931:512): avc: denied { create } for pid=8278 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.886212][ T30] audit: type=1400 audit(1756648703.931:513): avc: denied { ioctl } for pid=8278 comm="syz.3.574" path="socket:[20796]" dev="sockfs" ino=20796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.678575][ T5855] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 222.843520][ T8305] CIFS mount error: No usable UNC path provided in device string! [ 222.843520][ T8305] [ 222.900955][ T8305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 223.043147][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 223.156175][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.200726][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.210680][ T5855] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 223.220044][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.237960][ T5855] usb 3-1: config 0 descriptor?? [ 223.497651][ T30] audit: type=1400 audit(1756648705.558:514): avc: denied { read write } for pid=8318 comm="syz.5.586" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.533427][ T8319] loop6: detected capacity change from 0 to 524288000 [ 223.551802][ T8319] buffer_io_error: 25 callbacks suppressed [ 223.551812][ T8319] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.616947][ T8319] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.640852][ T8319] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.697605][ T5855] hid (null): unknown global tag 0xd [ 223.704907][ T8321] loop6: detected capacity change from 524288000 to 0 [ 223.704937][ T8319] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.724533][ T30] audit: type=1400 audit(1756648705.587:515): avc: denied { open } for pid=8318 comm="syz.5.586" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.793197][ T8319] ldm_validate_partition_table(): Disk read failed. [ 223.800594][ T8319] Dev loop6: unable to read RDB block 0 [ 223.815577][ T8319] loop6: unable to read partition table [ 223.836144][ T8319] loop6: partition table beyond EOD, truncated [ 223.873021][ T8319] loop_reread_partitions: partition scan of loop6 (™^L‹ ¦øíA;åó§Èb»ö@’†Ö”:B‚w¾<ØÈgønf. -Ó‘†³.ài ëí>^.¾dDd—Â) failed (rc=-5) [ 226.332597][ T30] audit: type=1400 audit(1756648708.206:516): avc: denied { map } for pid=8346 comm="syz.1.594" path="socket:[19804]" dev="sockfs" ino=19804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 226.467331][ T5855] usb 3-1: string descriptor 0 read error: -71 [ 226.699344][ T44] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 226.941440][ T30] audit: type=1400 audit(1756648708.655:517): avc: denied { lock } for pid=8354 comm="syz.0.597" path="socket:[20882]" dev="sockfs" ino=20882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 226.991602][ T30] audit: type=1400 audit(1756648708.776:518): avc: denied { write } for pid=8359 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.014320][ T30] audit: type=1400 audit(1756648708.795:519): avc: denied { connect } for pid=8359 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.027181][ T5855] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 227.034182][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 227.049790][ T30] audit: type=1400 audit(1756648708.804:520): avc: denied { ioctl } for pid=8359 comm="syz.2.599" path="socket:[19817]" dev="sockfs" ino=19817 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.050721][ T44] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 227.089439][ T30] audit: type=1400 audit(1756648708.804:521): avc: denied { write } for pid=8359 comm="syz.2.599" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.118579][ T5855] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 227.120969][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.139085][ T30] audit: type=1400 audit(1756648708.804:522): avc: denied { getopt } for pid=8359 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.158807][ T5855] usb 3-1: USB disconnect, device number 19 [ 227.161310][ T44] usb 6-1: config 0 descriptor?? [ 227.324935][ T44] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 228.029816][ T8376] NILFS (loop3): device size too small [ 228.352536][ T44] gspca_sonixj: reg_r err -110 [ 228.369503][ T44] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 228.644653][ T30] audit: type=1400 audit(1756648710.273:523): avc: denied { setopt } for pid=8379 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.687714][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 228.909822][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 229.000425][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.021768][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 229.100212][ T5959] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.114890][ T8395] capability: warning: `syz.0.609' uses deprecated v2 capabilities in a way that may be insecure [ 229.140802][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.196368][ T5959] usb 3-1: config 0 descriptor?? [ 229.209944][ T5959] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 229.393314][ T44] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 229.561801][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.610528][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 229.624454][ T44] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 229.633209][ T44] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 229.642154][ T44] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 229.649573][ T44] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 229.658743][ T44] usb 1-1: config 129 has no interface number 0 [ 229.665069][ T44] usb 1-1: config 129 has no interface number 1 [ 229.671410][ T44] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 229.684894][ T44] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 229.695968][ T44] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 229.709644][ T44] usb 1-1: config 129 interface 135 has no altsetting 0 [ 229.718054][ T44] usb 1-1: config 129 interface 5 has no altsetting 0 [ 229.726953][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 229.736361][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.744349][ T44] usb 1-1: Product: syz [ 229.748536][ T44] usb 1-1: Manufacturer: syz [ 229.753124][ T44] usb 1-1: SerialNumber: syz [ 229.945379][ T976] usb 6-1: USB disconnect, device number 13 [ 229.992434][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.000684][ T44] usb 1-1: MIDIStreaming interface descriptor not found [ 230.174996][ T44] usb 1-1: USB disconnect, device number 15 [ 230.280083][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.553248][ T8410] syz_tun: left allmulticast mode [ 231.187626][ T44] usb 3-1: USB disconnect, device number 20 [ 231.284525][ T8414] binder: 8413:8414 ioctl c0306201 200000000080 returned -14 [ 231.294529][ T8414] binder: BINDER_SET_CONTEXT_MGR already set [ 231.300743][ T8414] binder: 8413:8414 ioctl 4018620d 200000000040 returned -16 [ 233.360231][ T5959] kernel write not supported for file /binder/transactions (pid: 5959 comm: kworker/1:6) [ 233.378973][ T5958] kernel read not supported for file /dsp (pid: 5958 comm: kworker/1:5) [ 233.435411][ T30] audit: type=1400 audit(1756648714.847:524): avc: denied { create } for pid=8427 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.534065][ T30] audit: type=1400 audit(1756648714.847:525): avc: denied { ioctl } for pid=8427 comm="syz.3.621" path="socket:[21089]" dev="sockfs" ino=21089 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.779773][ T8440] fuseblk: Bad value for 'fd' [ 233.792063][ T8439] tmpfs: Bad value for 'mpol' [ 233.799856][ T8439] netlink: 'syz.0.620': attribute type 4 has an invalid length. [ 233.813198][ T8439] netlink: 'syz.0.620': attribute type 4 has an invalid length. [ 233.832031][ T8439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8439 comm=syz.0.620 [ 234.152237][ T30] audit: type=1400 audit(1756648714.856:526): avc: denied { connect } for pid=8427 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 234.191561][ T30] audit: type=1400 audit(1756648715.249:527): avc: denied { accept } for pid=8433 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.447398][ T30] audit: type=1400 audit(1756648715.792:528): avc: denied { write } for pid=8424 comm="syz.5.618" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 235.707546][ T8458] netlink: 14 bytes leftover after parsing attributes in process `syz.1.628'. [ 235.785998][ T30] audit: type=1400 audit(1756648717.045:529): avc: denied { mount } for pid=8461 comm="syz.3.629" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 236.037469][ T5850] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 237.194556][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 237.887516][ T8503] netlink: 'syz.5.641': attribute type 5 has an invalid length. [ 237.957180][ T8504] netlink: 3 bytes leftover after parsing attributes in process `syz.1.640'. [ 238.184875][ T8504] 0ªX¹¦À: renamed from caif0 [ 238.284915][ T8504] 0ªX¹¦À: entered allmulticast mode [ 238.337369][ T8504] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 240.193678][ T8529] CIFS mount error: No usable UNC path provided in device string! [ 240.193678][ T8529] [ 240.207383][ T8529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 240.524434][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 241.154138][ T8538] bridge1: port 1(veth3) entered blocking state [ 241.160913][ T8538] bridge1: port 1(veth3) entered disabled state [ 241.211728][ T8538] veth3: entered allmulticast mode [ 241.228590][ T8538] veth3: entered promiscuous mode [ 241.285825][ T8542] vlan2: entered allmulticast mode [ 241.322736][ T8542] veth0_to_hsr: entered allmulticast mode [ 241.338375][ T8542] bridge1: port 2(vlan2) entered blocking state [ 241.345418][ T8542] bridge1: port 2(vlan2) entered disabled state [ 241.354076][ T8542] vlan2: entered promiscuous mode [ 241.360694][ T8542] veth0_to_hsr: entered promiscuous mode [ 243.161783][ T30] audit: type=1400 audit(1756648723.948:530): avc: denied { append } for pid=8571 comm="syz.5.655" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 243.225155][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.235111][ T8576] batadv_slave_0: entered promiscuous mode [ 243.974341][ T8602] netlink: 'syz.5.661': attribute type 4 has an invalid length. [ 244.794161][ T30] audit: type=1400 audit(1756648725.473:531): avc: denied { read } for pid=8611 comm="syz.0.666" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 244.841917][ T8621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.855868][ T30] audit: type=1400 audit(1756648725.492:532): avc: denied { open } for pid=8611 comm="syz.0.666" path="/127/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 244.888259][ T8621] block device autoloading is deprecated and will be removed. [ 245.147589][ T30] audit: type=1400 audit(1756648725.801:533): avc: denied { ioctl } for pid=8611 comm="syz.0.666" path="/127/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.190910][ T8618] md2: using deprecated bitmap file support [ 245.210794][ T8618] md2: error: failed to get bitmap file [ 245.834897][ T8630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.957194][ T8634] gtp0: entered promiscuous mode [ 246.080936][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.088656][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.096439][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.104283][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.111936][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.119616][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.127500][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.135578][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.143242][ T8632] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 246.195423][ T30] audit: type=1400 audit(1756648726.736:534): avc: denied { listen } for pid=8631 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 246.264390][ T30] audit: type=1400 audit(1756648726.848:535): avc: denied { read write } for pid=8638 comm="syz.2.674" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 246.346933][ T30] audit: type=1400 audit(1756648726.848:536): avc: denied { open } for pid=8638 comm="syz.2.674" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 247.407023][ T5855] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 247.605624][ T5855] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 247.977297][ T5855] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 248.007871][ T5855] usb 4-1: config 1 interface 0 has no altsetting 0 [ 248.018529][ T5855] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 248.030648][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.045381][ T5855] usb 4-1: Product: syz [ 248.051970][ T5855] usb 4-1: Manufacturer: syz [ 248.057418][ T5855] usb 4-1: SerialNumber: syz [ 248.079517][ T8628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.103202][ T8628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.167485][ T8679] binder: 8678:8679 ioctl c0306201 0 returned -14 [ 248.279951][ T10] kernel write not supported for file /binder/transactions (pid: 10 comm: kworker/0:1) [ 248.355462][ T8682] fuseblk: Bad value for 'fd' [ 249.279479][ T5855] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:66:db:8b:a1:ec [ 249.328879][ T5855] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 249.387969][ T5855] usb 4-1: USB disconnect, device number 25 [ 249.536652][ T8694] NILFS (loop0): device size too small [ 249.992384][ T30] audit: type=1400 audit(1756648730.337:537): avc: denied { read } for pid=8695 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.229319][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 250.374732][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.432401][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 250.442968][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 250.457442][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.472833][ T10] usb 3-1: Product: syz [ 250.834011][ T10] usb 3-1: Manufacturer: syz [ 250.841859][ T10] usb 3-1: SerialNumber: syz [ 250.866024][ T10] usb 3-1: config 0 descriptor?? [ 250.874598][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 251.390815][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 251.428657][ T10] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 251.464858][ T10] usb 3-1: USB disconnect, device number 21 [ 251.579140][ T30] audit: type=1400 audit(1756648731.824:538): avc: denied { setattr } for pid=8727 comm="syz.5.698" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.637538][ T8729] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 252.447886][ T8749] loop9: detected capacity change from 0 to 7 [ 252.454672][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.462578][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.470565][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.479122][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.487179][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.495092][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.510632][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.518564][ T8749] ldm_validate_partition_table(): Disk read failed. [ 252.525196][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.533167][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.541099][ T8749] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.549103][ T8749] Dev loop9: unable to read RDB block 0 [ 252.554876][ T8749] loop9: unable to read partition table [ 252.560757][ T8749] loop9: partition table beyond EOD, truncated [ 252.566915][ T8749] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 252.566915][ T8749] ) failed (rc=-5) [ 252.602900][ T8748] afs: Unknown parameter 'dyn÷¹¦' [ 253.164623][ T8764] tls_set_device_offload: netdev not found [ 253.225858][ T30] audit: type=1400 audit(1756648733.353:539): avc: denied { map } for pid=8754 comm="syz.5.709" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.332997][ T8773] validate_nla: 45 callbacks suppressed [ 253.333014][ T8773] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 253.473853][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 253.490404][ T8773] netlink: 152 bytes leftover after parsing attributes in process `syz.2.713'. [ 253.529348][ T8780] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 253.726780][ T8780] netlink: 152 bytes leftover after parsing attributes in process `syz.2.713'. [ 254.047346][ T30] audit: type=1400 audit(1756648734.101:540): avc: denied { map } for pid=8787 comm="syz.0.717" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.393203][ T30] audit: type=1400 audit(1756648734.138:541): avc: denied { execute } for pid=8787 comm="syz.0.717" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.572876][ T8798] netlink: 'syz.1.719': attribute type 21 has an invalid length. [ 254.751740][ T30] audit: type=1400 audit(1756648734.765:542): avc: denied { ioctl } for pid=8801 comm="syz.2.721" path="socket:[24004]" dev="sockfs" ino=24004 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.330846][ T5958] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.546914][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 255.626969][ T5958] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.636855][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.672873][ T5958] pvrusb2: Hardware description: Terratec Grabster AV400 [ 255.703567][ T5958] pvrusb2: ********** [ 255.772146][ T5958] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 255.890018][ T5958] pvrusb2: Important functionality might not be entirely working. [ 255.898262][ T5958] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 255.911170][ T5958] pvrusb2: ********** [ 257.139566][ T2337] pvrusb2: Invalid write control endpoint [ 257.221833][ T2337] pvrusb2: Invalid write control endpoint [ 257.236499][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.255861][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.269297][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.280771][ T2337] pvrusb2: Device being rendered inoperable [ 257.288816][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.297058][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.301125][ T5855] kernel write not supported for file /binder/transactions (pid: 5855 comm: kworker/0:3) [ 257.310896][ T2337] pvrusb2: Attached sub-driver cx25840 [ 257.320564][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 257.330792][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 257.409215][ T976] usb 3-1: USB disconnect, device number 22 [ 257.496264][ T8835] fuseblk: Bad value for 'fd' [ 257.681857][ T8839] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 257.697562][ T8839] FAULT_INJECTION: forcing a failure. [ 257.697562][ T8839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.710815][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.5.730 Not tainted syzkaller #0 PREEMPT(full) [ 257.710840][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.710850][ T8839] Call Trace: [ 257.710856][ T8839] [ 257.710863][ T8839] dump_stack_lvl+0x16c/0x1f0 [ 257.710889][ T8839] should_fail_ex+0x512/0x640 [ 257.710911][ T8839] _copy_from_user+0x2e/0xd0 [ 257.710929][ T8839] move_addr_to_kernel+0x65/0x170 [ 257.710947][ T8839] __sys_sendto+0x1be/0x520 [ 257.710957][ T8839] ? __pfx___sys_sendto+0x10/0x10 [ 257.710983][ T8839] __x64_sys_sendto+0xe0/0x1c0 [ 257.710993][ T8839] ? do_syscall_64+0x91/0x4c0 [ 257.711005][ T8839] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.711018][ T8839] do_syscall_64+0xcd/0x4c0 [ 257.711031][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.711043][ T8839] RIP: 0033:0x7f67c4d8ebe9 [ 257.711052][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.711063][ T8839] RSP: 002b:00007f67c5b96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 257.711074][ T8839] RAX: ffffffffffffffda RBX: 00007f67c4fc6090 RCX: 00007f67c4d8ebe9 [ 257.711081][ T8839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 257.711088][ T8839] RBP: 00007f67c5b96090 R08: 00002000000003c0 R09: 000000000000001c [ 257.711094][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.711101][ T8839] R13: 00007f67c4fc6128 R14: 00007f67c4fc6090 R15: 00007ffdfd442198 [ 257.711114][ T8839] [ 258.245044][ T8846] loop6: detected capacity change from 0 to 524288000 [ 258.298245][ T8846] buffer_io_error: 9 callbacks suppressed [ 258.298257][ T8846] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.351264][ T8846] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.493304][ T8846] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.656626][ T8864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.732'. [ 258.690500][ T8853] loop6: detected capacity change from 524288000 to 0 [ 258.690562][ T8846] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.710030][ T8846] ldm_validate_partition_table(): Disk read failed. [ 258.798836][ T8846] Dev loop6: unable to read RDB block 0 [ 258.847957][ T8846] loop6: unable to read partition table [ 258.876102][ T8846] loop6: partition table beyond EOD, truncated [ 258.897631][ T8846] loop_reread_partitions: partition scan of loop6 (™^L‹ ¦øíA;åó§Èb»ö@’†Ö”:B‚w¾<ØÈgønf. -Ó‘†³.ài ëí>^.¾dDd—Â) failed (rc=-5) [ 259.404740][ T8876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.742'. [ 259.453015][ T8876] netlink: 14 bytes leftover after parsing attributes in process `syz.1.742'. [ 260.641234][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 262.343180][ T8897] comedi comedi0: pcm3724: I/O port conflict (0x8,16) [ 262.636992][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 262.694079][ T8909] lo: entered promiscuous mode [ 262.699729][ T8908] lo: left promiscuous mode [ 262.885742][ T8917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.754'. [ 262.897179][ T8917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.754'. [ 263.437747][ T30] audit: type=1400 audit(1756648742.894:543): avc: denied { write } for pid=8922 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.482795][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 263.808361][ T976] kernel write not supported for file /binder/transactions (pid: 976 comm: kworker/1:2) [ 263.898479][ T8939] fuseblk: Bad value for 'fd' [ 265.210067][ T8935] 9pnet_fd: p9_fd_create_tcp (8935): problem connecting socket to 127.0.0.1 [ 265.431470][ T30] audit: type=1400 audit(1756648744.671:544): avc: denied { write } for pid=8948 comm="syz.5.764" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 266.094615][ T8966] tipc: Enabling of bearer rejected, failed to enable media [ 266.482767][ T30] audit: type=1400 audit(1756648745.765:545): avc: denied { kexec_image_load } for pid=8970 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 267.216997][ T8984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8984 comm=syz.2.773 [ 267.503429][ T8988] pim6reg: entered allmulticast mode [ 267.521401][ T8986] pim6reg: left allmulticast mode [ 267.543234][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.549628][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.686535][ T8987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.772'. [ 268.877750][ T30] audit: type=1400 audit(1756648748.001:546): avc: denied { ioctl } for pid=8989 comm="syz.2.774" path="socket:[24384]" dev="sockfs" ino=24384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.914827][ T8999] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 269.114327][ T8999] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 269.119955][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 269.150327][ T8987] netlink: 14 bytes leftover after parsing attributes in process `syz.0.772'. [ 269.709123][ T30] audit: type=1400 audit(1756648748.684:547): avc: denied { ioctl } for pid=9004 comm="syz.5.777" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.745669][ T8999] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 269.745669][ T8999] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 269.868054][ T8999] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 269.910752][ T8999] CUSE: DEVNAME unspecified [ 270.005397][ T8987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.027193][ T8987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.039229][ T8987] bond0 (unregistering): Released all slaves [ 270.397634][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 270.768589][ T9038] netlink: 292 bytes leftover after parsing attributes in process `syz.0.783'. [ 270.916670][ T5855] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 271.263734][ T5855] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 271.273271][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.321596][ T5855] usb 6-1: Product: syz [ 271.353312][ T5855] usb 6-1: Manufacturer: syz [ 271.393494][ T5855] usb 6-1: SerialNumber: syz [ 271.400682][ T30] audit: type=1400 audit(1756648750.368:548): avc: denied { write } for pid=9044 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 271.713676][ T5855] usb 6-1: config 0 descriptor?? [ 271.734480][ T5855] imon_raw 6-1:0.0: IR endpoint missing [ 271.851399][ T9049] tipc: Enabling of bearer rejected, failed to enable media [ 272.273889][ T9058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.407531][ T9075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.790'. [ 273.495581][ T9075] netlink: 14 bytes leftover after parsing attributes in process `syz.3.790'. [ 274.755121][ T9075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.767670][ T9075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.779958][ T9075] bond0 (unregistering): Released all slaves [ 274.919185][ T9088] overlayfs: failed to clone upperpath [ 274.944483][ T30] audit: type=1400 audit(1756648753.679:549): avc: denied { map } for pid=9082 comm="syz.2.794" path="socket:[25412]" dev="sockfs" ino=25412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.955604][ T9086] mkiss: ax0: crc mode is auto. [ 274.988703][ T30] audit: type=1400 audit(1756648753.679:550): avc: denied { read } for pid=9082 comm="syz.2.794" path="socket:[25412]" dev="sockfs" ino=25412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.026783][ T9093] binder: 9092:9093 ioctl c0306201 200000000080 returned -14 [ 275.974559][ T9106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.536322][ T9112] FAULT_INJECTION: forcing a failure. [ 276.536322][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 276.560318][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.802 Not tainted syzkaller #0 PREEMPT(full) [ 276.560351][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.560362][ T9112] Call Trace: [ 276.560368][ T9112] [ 276.560375][ T9112] dump_stack_lvl+0x16c/0x1f0 [ 276.560400][ T9112] should_fail_ex+0x512/0x640 [ 276.560425][ T9112] should_failslab+0xc2/0x120 [ 276.560446][ T9112] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 276.560463][ T9112] ? __lock_acquire+0x62e/0x1ce0 [ 276.560489][ T9112] ? dst_alloc+0x99/0x1a0 [ 276.560508][ T9112] dst_alloc+0x99/0x1a0 [ 276.560524][ T9112] rt_dst_alloc+0x35/0x3a0 [ 276.560546][ T9112] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 276.560578][ T9112] ip_route_output_key_hash+0x137/0x2e0 [ 276.560604][ T9112] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 276.560637][ T9112] ? find_held_lock+0x2b/0x80 [ 276.560658][ T9112] ip_route_output_flow+0x27/0x150 [ 276.560685][ T9112] udp_sendmsg+0x1af9/0x2870 [ 276.560711][ T9112] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.560734][ T9112] ? avc_has_perm_noaudit+0x120/0x3b0 [ 276.560758][ T9112] ? __pfx_udp_sendmsg+0x10/0x10 [ 276.560780][ T9112] ? avc_has_perm+0x144/0x1f0 [ 276.560811][ T9112] ? sock_has_perm+0x259/0x2f0 [ 276.560832][ T9112] ? __pfx_sock_has_perm+0x10/0x10 [ 276.560863][ T9112] ? __fget_files+0x20e/0x3c0 [ 276.560881][ T9112] ? __pfx_find_held_lock+0x10/0x10 [ 276.560906][ T9112] ? __pfx_udp_sendmsg+0x10/0x10 [ 276.560928][ T9112] inet_sendmsg+0x105/0x140 [ 276.560955][ T9112] __sys_sendto+0x43c/0x520 [ 276.560973][ T9112] ? __pfx___sys_sendto+0x10/0x10 [ 276.561011][ T9112] ? ksys_write+0x1ac/0x250 [ 276.561027][ T9112] ? __pfx_ksys_write+0x10/0x10 [ 276.561047][ T9112] __x64_sys_sendto+0xe0/0x1c0 [ 276.561062][ T9112] ? do_syscall_64+0x91/0x4c0 [ 276.561079][ T9112] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.561097][ T9112] do_syscall_64+0xcd/0x4c0 [ 276.561118][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.561136][ T9112] RIP: 0033:0x7f874cd8ebe9 [ 276.561151][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.561168][ T9112] RSP: 002b:00007f874db81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.561186][ T9112] RAX: ffffffffffffffda RBX: 00007f874cfc5fa0 RCX: 00007f874cd8ebe9 [ 276.561197][ T9112] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 276.561208][ T9112] RBP: 00007f874db81090 R08: 0000000000000000 R09: 0000000000000000 [ 276.561218][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.561228][ T9112] R13: 00007f874cfc6038 R14: 00007f874cfc5fa0 R15: 00007fffbeac5e08 [ 276.561253][ T9112] [ 277.105001][ T9121] loop6: detected capacity change from 0 to 524287487 [ 277.123113][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.132681][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.140684][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.148880][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.156776][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.165173][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.250253][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.273138][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.296061][ T5847] ldm_validate_partition_table(): Disk read failed. [ 277.313074][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.343614][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.634110][ T5855] usb 6-1: USB disconnect, device number 14 [ 277.643842][ T5847] Dev loop6: unable to read RDB block 0 [ 277.671037][ T5847] loop6: unable to read partition table [ 277.708256][ T9121] ldm_validate_partition_table(): Disk read failed. [ 277.815076][ T9121] Dev loop6: unable to read RDB block 0 [ 277.827264][ T9121] loop6: unable to read partition table [ 277.835082][ T9134] binder: 9131:9134 ioctl c0306201 200000000080 returned -14 [ 277.842765][ T9121] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 279.955945][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.963266][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.013486][ T5959] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 280.118690][ T9158] batadv_slave_0: left promiscuous mode [ 280.143937][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.177706][ T5959] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 280.186849][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.199157][ T5959] usb 1-1: config 0 has no interfaces? [ 280.211830][ T5959] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.231124][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.249243][ T5959] usb 1-1: config 0 descriptor?? [ 280.404021][ T9158] batman_adv: batadv0: Interface deactivated: wlan0 [ 280.458686][ T9158] bond1: left promiscuous mode [ 280.465743][ T9158] vcan1: left promiscuous mode [ 280.508577][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.534604][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.553117][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.562996][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.573554][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.583539][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.820'. [ 280.696801][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.491690][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.505267][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.514321][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.537146][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.634290][ T30] audit: type=1400 audit(1756648759.899:551): avc: denied { append } for pid=9167 comm="syz.0.817" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.662325][ T30] audit: type=1400 audit(1756648759.965:552): avc: denied { bind } for pid=9167 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.672210][ T9183] 9pnet_fd: Insufficient options for proto=fd [ 281.683981][ T5959] usb 1-1: string descriptor 0 read error: -71 [ 281.702769][ T5959] usb 1-1: USB disconnect, device number 16 [ 282.194444][ T5959] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 282.418794][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 282.425623][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.438135][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 282.447843][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.458935][ T5959] usb 4-1: config 0 descriptor?? [ 283.467694][ T5959] logitech-djreceiver 0003:046D:C714.0005: unknown main item tag 0x0 [ 283.483425][ T5959] logitech-djreceiver 0003:046D:C714.0005: unknown main item tag 0x0 [ 283.493406][ T5959] logitech-djreceiver 0003:046D:C714.0005: unknown main item tag 0x0 [ 283.501921][ T5959] logitech-djreceiver 0003:046D:C714.0005: unknown main item tag 0x0 [ 283.516066][ T5959] logitech-djreceiver 0003:046D:C714.0005: unknown main item tag 0x0 [ 283.640762][ T9214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.829'. [ 283.714416][ T9214] netlink: 14 bytes leftover after parsing attributes in process `syz.0.829'. [ 284.903915][ T5958] usb 4-1: USB disconnect, device number 26 [ 285.145503][ T5959] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 285.154271][ T9237] NILFS (loop3): device size too small [ 285.227762][ T9244] netlink: 'syz.0.840': attribute type 2 has an invalid length. [ 285.337729][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.407493][ T9250] netlink: 'syz.0.841': attribute type 5 has an invalid length. [ 285.427503][ T5928] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 285.431756][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.465556][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.480707][ T5959] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.492002][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.538920][ T5959] usb 6-1: config 0 descriptor?? [ 285.685105][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.733667][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.767511][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.504565][ T30] audit: type=1400 audit(1756648764.034:553): avc: denied { write } for pid=9231 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.536709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059163000: rx timeout, send abort [ 286.546186][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059161800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.551512][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.860628][ T5928] usb 3-1: usb_control_msg returned -32 [ 287.079471][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059163000: abort rx timeout. Force session deactivation [ 287.542759][ T5928] usbtmc 3-1:16.0: can't read capabilities [ 288.170817][ T5959] usbhid 6-1:0.0: can't add hid device: -71 [ 288.179209][ T5959] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 288.232422][ T5958] usb 3-1: USB disconnect, device number 23 [ 288.488619][ T30] audit: type=1400 audit(1756648766.344:554): avc: denied { watch_sb watch_reads } for pid=9274 comm="syz.0.845" path="/165" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.547738][ T9286] FAULT_INJECTION: forcing a failure. [ 288.547738][ T9286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.560983][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.5.847 Not tainted syzkaller #0 PREEMPT(full) [ 288.561009][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.561018][ T9286] Call Trace: [ 288.561024][ T9286] [ 288.561031][ T9286] dump_stack_lvl+0x16c/0x1f0 [ 288.561047][ T9286] should_fail_ex+0x512/0x640 [ 288.561063][ T9286] _copy_from_user+0x2e/0xd0 [ 288.561078][ T9286] copy_msghdr_from_user+0x98/0x160 [ 288.561092][ T9286] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.561108][ T9286] ? __lock_acquire+0xb97/0x1ce0 [ 288.561128][ T9286] ___sys_sendmsg+0xfe/0x1d0 [ 288.561140][ T9286] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.561169][ T9286] __sys_sendmsg+0x16d/0x220 [ 288.561182][ T9286] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.561198][ T9286] ? __pfx___schedule+0x10/0x10 [ 288.561229][ T9286] do_syscall_64+0xcd/0x4c0 [ 288.561258][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.561273][ T9286] RIP: 0033:0x7f67c4d8ebe9 [ 288.561282][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.561293][ T9286] RSP: 002b:00007f67c5b96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.561305][ T9286] RAX: ffffffffffffffda RBX: 00007f67c4fc6090 RCX: 00007f67c4d8ebe9 [ 288.561312][ T9286] RDX: 00000000200488c0 RSI: 0000200000000140 RDI: 0000000000000005 [ 288.561319][ T9286] RBP: 00007f67c5b96090 R08: 0000000000000000 R09: 0000000000000000 [ 288.561325][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.561331][ T9286] R13: 00007f67c4fc6128 R14: 00007f67c4fc6090 R15: 00007ffdfd442198 [ 288.561345][ T9286] [ 289.016479][ T5959] usb 6-1: USB disconnect, device number 15 [ 289.102952][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 289.317299][ T9287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.358242][ T9287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.467668][ T9287] bridge0: port 3(batadv0) entered disabled state [ 289.532984][ T30] audit: type=1400 audit(1756648767.326:555): avc: denied { read } for pid=9283 comm="syz.3.846" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.696508][ T30] audit: type=1400 audit(1756648767.354:556): avc: denied { open } for pid=9283 comm="syz.3.846" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.756070][ T30] audit: type=1400 audit(1756648767.373:557): avc: denied { ioctl } for pid=9283 comm="syz.3.846" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 290.949900][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 291.088870][ T5928] usb 4-1: device descriptor read/64, error -71 [ 291.441631][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 291.617945][ T5928] usb 4-1: device descriptor read/64, error -71 [ 291.688201][ T9335] binder: BINDER_SET_CONTEXT_MGR already set [ 291.719940][ T9335] binder: 9332:9335 ioctl 4018620d 200000000040 returned -16 [ 291.826789][ T5928] usb usb4-port1: attempt power cycle [ 292.416986][ T5958] kernel write not supported for file /binder/transactions (pid: 5958 comm: kworker/1:5) [ 292.418095][ T9359] can0: slcan on ttyS3. [ 292.468023][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 292.487349][ T9362] fuseblk: Bad value for 'fd' [ 292.490278][ T5928] usb 4-1: device descriptor read/8, error -71 [ 292.492361][ T9359] can0 (unregistered): slcan off ttyS3. [ 292.570270][ T9359] can0: slcan on ttyS3. [ 292.583512][ T9366] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 292.633509][ T9366] bond0: entered promiscuous mode [ 292.640504][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.666530][ T9370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.685231][ T9370] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 292.699991][ T9370] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 292.720695][ T9370] bond0: (slave vcan1): making interface the new active one [ 292.730019][ T9370] vcan1: entered promiscuous mode [ 292.760134][ T9370] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 292.769886][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 292.813031][ T5928] usb 4-1: device descriptor read/8, error -71 [ 292.938548][ T5958] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 292.949220][ T5928] usb usb4-port1: unable to enumerate USB device [ 293.413804][ T9397] pim6reg: entered allmulticast mode [ 293.477163][ T30] audit: type=1326 audit(1756648770.937:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 293.508965][ T5958] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 293.532705][ T5958] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.556750][ T5958] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.570073][ T30] audit: type=1326 audit(1756648770.937:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 293.604128][ T30] audit: type=1326 audit(1756648770.937:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 293.721056][ T30] audit: type=1326 audit(1756648770.937:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 293.731279][ T5958] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.828220][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.890221][ T30] audit: type=1326 audit(1756648770.946:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 293.904653][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.956606][ T30] audit: type=1326 audit(1756648770.946:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.035541][ T30] audit: type=1326 audit(1756648770.946:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.044763][ T5958] usb 3-1: invalid MIDI out EP 0 [ 294.061640][ T30] audit: type=1326 audit(1756648770.946:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.157510][ T5928] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 294.193720][ T9359] delete_channel: no stack [ 294.266214][ T9359] can0 (unregistered): slcan off ttyS3. [ 294.309969][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.5.869'. [ 294.319299][ T30] audit: type=1326 audit(1756648770.946:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.354915][ T5928] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 294.385417][ T5928] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 294.411513][ T5928] usb 4-1: string descriptor 0 read error: -22 [ 294.419990][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.432515][ T30] audit: type=1326 audit(1756648770.946:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.524222][ T9410] netlink: 14 bytes leftover after parsing attributes in process `syz.5.869'. [ 294.533349][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.547455][ T5958] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 294.547635][ T30] audit: type=1326 audit(1756648770.946:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.595621][ T30] audit: type=1326 audit(1756648770.946:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.623133][ T30] audit: type=1326 audit(1756648770.965:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.657396][ T30] audit: type=1326 audit(1756648770.965:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f874cd8ebe9 code=0x7ffc0000 [ 294.687890][ T5958] usb 3-1: USB disconnect, device number 24 [ 295.460625][ T5928] cdc_ncm 4-1:1.0: bind() failure [ 295.471484][ T5928] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 295.677059][ T5928] cdc_ncm 4-1:1.1: bind() failure [ 295.742845][ T5928] usb 4-1: USB disconnect, device number 31 [ 296.338004][ T5928] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 296.440155][ T9457] team0: Device ip6gre1 is of different type [ 296.515721][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.883'. [ 296.552907][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 296.561199][ T5928] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 296.569607][ T5928] usb 4-1: config 0 has no interface number 0 [ 296.586812][ T5928] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 296.605382][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.613486][ T5928] usb 4-1: Product: syz [ 296.696950][ T5928] usb 4-1: Manufacturer: syz [ 296.712295][ T5928] usb 4-1: SerialNumber: syz [ 296.736952][ T5928] usb 4-1: config 0 descriptor?? [ 296.752241][ T5928] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 296.769314][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 296.803853][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.829357][ T5928] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 296.852628][ T5928] usb 4-1: media controller created [ 296.936295][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.963620][ T5928] cxusb: set interface failed [ 296.963970][ T9449] dvb-usb: bulk message failed: -22 (3/0) [ 296.993911][ T9471] binder: 9470:9471 ioctl c0306201 200000000080 returned -14 [ 297.001665][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 297.039335][ T5928] DVB: Unable to find symbol lgdt330x_attach() [ 297.045851][ T5928] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 297.093790][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 297.105687][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 297.117180][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 297.268363][ T5928] rc_core: IR keymap rc-dvico-portable not found [ 297.287322][ T5928] Registered IR keymap rc-empty [ 297.294042][ T5928] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 297.706023][ T5928] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 297.718307][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 297.725284][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 297.836450][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 298.241342][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 298.369173][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 298.381135][ T9484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.892'. [ 298.421999][ T9484] netlink: 14 bytes leftover after parsing attributes in process `syz.0.892'. [ 298.497516][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 298.735572][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 299.232862][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 299.340610][ T5928] usb 4-1: USB disconnect, device number 32 [ 299.757319][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 299.844225][ T9513] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 299.959918][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 299.959960][ T30] audit: type=1400 audit(1756648777.073:582): avc: denied { ioctl } for pid=9510 comm="syz.5.903" path="socket:[27158]" dev="sockfs" ino=27158 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.054082][ T9516] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 300.319364][ T9525] NILFS (loop0): device size too small [ 300.458963][ T9521] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 300.475356][ T5928] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 300.658568][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.676976][ T30] audit: type=1400 audit(1756648777.747:583): avc: denied { setopt } for pid=9536 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 300.703249][ T5928] usb 4-1: config 0 has no interfaces? [ 300.712768][ T5928] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 300.723045][ T30] audit: type=1400 audit(1756648777.747:584): avc: denied { read } for pid=9536 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 300.767248][ T5928] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 300.927574][ T5928] usb 4-1: Product: syz [ 300.933333][ T5928] usb 4-1: Manufacturer: syz [ 300.938638][ T30] audit: type=1400 audit(1756648777.803:585): avc: denied { setopt } for pid=9536 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.964157][ T5928] usb 4-1: SerialNumber: syz [ 300.981103][ T5928] usb 4-1: config 0 descriptor?? [ 300.988639][ T30] audit: type=1400 audit(1756648777.803:586): avc: denied { setopt } for pid=9536 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.653546][ T51] Bluetooth: hci4: Invalid handle: 0xfd00 > 0x0eff [ 301.764743][ T5855] usb 4-1: USB disconnect, device number 33 [ 301.866872][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.913'. [ 302.063109][ T9554] netlink: 14 bytes leftover after parsing attributes in process `syz.0.913'. [ 302.791568][ T30] audit: type=1400 audit(1756648779.720:587): avc: denied { map } for pid=9563 comm="syz.2.917" path="socket:[27294]" dev="sockfs" ino=27294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.456302][ T9578] netlink: 'syz.0.919': attribute type 4 has an invalid length. [ 303.940517][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'. [ 304.295145][ T9588] syz_tun: entered allmulticast mode [ 304.452419][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'. [ 305.482602][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.929'. [ 305.503279][ T9618] netlink: 14 bytes leftover after parsing attributes in process `syz.0.929'. [ 305.531895][ T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 305.692174][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 305.709610][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.730659][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.819067][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.872354][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.948804][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.979344][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.235845][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 306.241847][ T44] usbtmc 4-1:16.0: can't read capabilities [ 306.423169][ T9624] netlink: 'syz.0.933': attribute type 11 has an invalid length. [ 306.456587][ T9615] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 306.485562][ T9615] netlink: 'syz.3.930': attribute type 21 has an invalid length. [ 306.672374][ T44] usb 4-1: USB disconnect, device number 34 [ 306.738943][ T9632] 9pnet_fd: Insufficient options for proto=fd [ 306.800574][ T9633] fuseblk: Bad value for 'fd' [ 306.814748][ T5958] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 306.976677][ T5958] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 306.986449][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.008349][ T5958] usb 1-1: config 0 descriptor?? [ 307.261111][ T5958] ath6kl: Failed to submit usb control message: -71 [ 307.273848][ T5958] ath6kl: unable to send the bmi data to the device: -71 [ 307.283653][ T5958] ath6kl: Unable to send get target info: -71 [ 307.306188][ T5958] ath6kl: Failed to init ath6kl core: -71 [ 307.328154][ T5958] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 307.351271][ T5958] usb 1-1: USB disconnect, device number 17 [ 307.788424][ T9645] loop9: detected capacity change from 0 to 7 [ 307.799878][ T9645] buffer_io_error: 23 callbacks suppressed [ 307.799908][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.814541][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.824296][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.833980][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.842622][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.851307][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.861199][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.869267][ T9645] ldm_validate_partition_table(): Disk read failed. [ 307.876931][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.886677][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.895523][ T9645] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.904918][ T9645] Dev loop9: unable to read RDB block 0 [ 307.911201][ T9645] loop9: unable to read partition table [ 307.918406][ T9645] loop9: partition table beyond EOD, truncated [ 307.924634][ T9645] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑøkÚ¬§½dG¤´à–ƒÝ¡¯ â·û) failed (rc=-5) [ 308.253827][ T30] audit: type=1400 audit(1756648784.837:588): avc: denied { write } for pid=9647 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.321297][ T30] audit: type=1400 audit(1756648784.837:589): avc: denied { nlmsg_write } for pid=9647 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.343098][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 309.207460][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 310.048850][ T5855] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 310.240401][ T9675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.944'. [ 310.250944][ T5855] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 310.267522][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.291074][ T5855] usb 6-1: Product: syz [ 310.304178][ T5855] usb 6-1: Manufacturer: syz [ 310.331992][ T5855] usb 6-1: SerialNumber: syz [ 310.384474][ T9683] 9pnet_fd: Insufficient options for proto=fd [ 310.470663][ T9675] netlink: 14 bytes leftover after parsing attributes in process `syz.2.944'. [ 310.490315][ T9684] fuseblk: Bad value for 'fd' [ 311.157848][ T9686] NILFS (loop3): device size too small [ 311.267655][ T9696] NILFS (loop2): device size too small [ 312.136564][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 312.273278][ T5855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 312.597600][ T5855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 312.712808][ T5855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 312.741610][ T5855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 313.097041][ T5855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 313.193731][ T5855] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 313.236444][ T5855] usb 6-1: USB disconnect, device number 16 [ 314.867272][ T30] audit: type=1400 audit(1756648791.001:590): avc: denied { write } for pid=9737 comm="syz.5.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 315.161891][ T30] audit: type=1400 audit(1756648791.291:591): avc: denied { setopt } for pid=9742 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.632598][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 315.663789][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 315.718418][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 315.731354][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 315.838904][ T9749] netlink: 'syz.1.964': attribute type 25 has an invalid length. [ 315.852473][ T9749] netlink: 'syz.1.964': attribute type 8 has an invalid length. [ 316.257991][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 316.264777][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 316.648401][ T9745] ceph: No mds server is up or the cluster is laggy [ 316.821535][ T9764] netlink: 'syz.0.969': attribute type 4 has an invalid length. [ 317.862865][ T9782] 9pnet_fd: Insufficient options for proto=fd [ 317.925920][ T9784] fuseblk: Bad value for 'fd' [ 319.144180][ T9811] : renamed from bridge_slave_0 (while UP) [ 319.334287][ T9819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.986'. [ 319.345288][ T9819] netlink: 14 bytes leftover after parsing attributes in process `syz.1.986'. [ 319.381581][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 319.589375][ T9821] bridge3: port 1(veth5) entered blocking state [ 319.615558][ T9821] bridge3: port 1(veth5) entered disabled state [ 319.652016][ T9821] veth5: entered allmulticast mode [ 319.715960][ T9821] veth5: entered promiscuous mode [ 320.017761][ T5928] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 320.060420][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 320.108237][ T9839] 9pnet_fd: Insufficient options for proto=fd [ 320.185383][ T9845] fuseblk: Bad value for 'fd' [ 320.202560][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.215118][ T5928] usb 6-1: config 0 has no interfaces? [ 320.229887][ T5928] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 320.237982][ T9846] CIFS mount error: No usable UNC path provided in device string! [ 320.237982][ T9846] [ 320.240985][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 320.250804][ T9846] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 320.392376][ T5928] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 320.437228][ T5928] usb 6-1: Product: syz [ 320.441478][ T5928] usb 6-1: Manufacturer: syz [ 320.448195][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 320.457407][ T5928] usb 6-1: SerialNumber: syz [ 320.797497][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.958529][ T5928] usb 6-1: config 0 descriptor?? [ 321.017444][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 321.046252][ T10] pvrusb2: ********** [ 321.070791][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 321.188248][ T51] Bluetooth: hci1: Invalid handle: 0xfd00 > 0x0eff [ 321.192616][ T44] usb 6-1: USB disconnect, device number 17 [ 321.204217][ T10] pvrusb2: Important functionality might not be entirely working. [ 321.212347][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 321.226717][ T10] pvrusb2: ********** [ 321.248471][ T2337] pvrusb2: Invalid write control endpoint [ 321.290363][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 321.514077][ T2337] pvrusb2: Invalid write control endpoint [ 321.527671][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 321.538134][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 321.548509][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 321.561265][ T2337] pvrusb2: Device being rendered inoperable [ 321.592277][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 321.611720][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 321.625836][ T2337] pvrusb2: Attached sub-driver cx25840 [ 321.633322][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 321.645225][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 322.084393][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.094801][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.040805][ T9881] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1005'. [ 323.052883][ T9881] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1005'. [ 323.594290][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 323.816125][ T44] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 323.831900][ T5928] usb 1-1: USB disconnect, device number 18 [ 323.860002][ T10] kernel write not supported for file /binder/transactions (pid: 10 comm: kworker/0:1) [ 323.949730][ T9896] fuseblk: Bad value for 'fd' [ 323.987126][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.010718][ T44] usb 4-1: config 0 has no interfaces? [ 324.025409][ T44] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 324.034654][ T44] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 324.043028][ T44] usb 4-1: Product: syz [ 324.047221][ T44] usb 4-1: Manufacturer: syz [ 324.052211][ T44] usb 4-1: SerialNumber: syz [ 324.058847][ T44] usb 4-1: config 0 descriptor?? [ 324.461415][ T5850] Bluetooth: hci4: Invalid handle: 0xfd00 > 0x0eff [ 324.471028][ T44] usb 4-1: USB disconnect, device number 35 [ 324.952882][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 325.915025][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 326.177863][ T5928] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 326.319381][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.763918][ T5928] usb 6-1: Product: syz [ 326.768803][ T5928] usb 6-1: Manufacturer: syz [ 326.773438][ T5928] usb 6-1: SerialNumber: syz [ 327.029612][ T9932] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.225024][ T9933] CIFS mount error: No usable UNC path provided in device string! [ 327.225024][ T9933] [ 327.283066][ T9933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.342258][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'. [ 327.356129][ T9936] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1019'. [ 327.692495][ T44] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 327.954515][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.973249][ T44] usb 3-1: config 0 has no interfaces? [ 328.015043][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 328.047254][ T44] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 328.084227][ T44] usb 3-1: Product: syz [ 328.122954][ T44] usb 3-1: Manufacturer: syz [ 328.156928][ T44] usb 3-1: SerialNumber: syz [ 328.185382][ T44] usb 3-1: config 0 descriptor?? [ 328.421400][ T30] audit: type=1400 audit(1756648803.705:592): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 328.487717][ T5850] Bluetooth: hci0: Invalid handle: 0xfd00 > 0x0eff [ 328.488897][ T44] usb 3-1: USB disconnect, device number 25 [ 328.678949][ T30] audit: type=1400 audit(1756648803.939:593): avc: denied { accept } for pid=9954 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.505124][ T9976] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 329.643708][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 329.754191][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 329.784695][ T9981] binder: 9980:9981 ioctl 4018620d 0 returned -22 [ 329.816007][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 329.840403][ T9981] binder: 9980:9981 ioctl c0306201 200000000080 returned -14 [ 329.850075][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.912777][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 329.929078][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 330.195448][ T5928] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 330.215844][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.224878][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.301314][ T5928] usb 6-1: USB disconnect, device number 18 [ 330.328333][ T10] usb 1-1: config 0 descriptor?? [ 330.358012][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 330.493232][ T44] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 330.661165][ T9999] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 330.696204][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 330.705967][ T44] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 330.717661][ T44] usb 3-1: config 0 has no interface number 0 [ 330.723745][ T44] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.847230][ T44] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 330.909433][ T44] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.949454][ T44] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 331.003713][ T44] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.045922][ T44] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 331.089180][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.131286][ T44] usb 3-1: config 0 descriptor?? [ 331.157276][ T44] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 331.273666][ T5928] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 331.368298][ T10] usb 3-1: USB disconnect, device number 26 [ 331.375996][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 331.861257][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 331.868219][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.905890][ T5928] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 331.916197][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.925889][ T5928] usb 4-1: config 0 descriptor?? [ 332.404024][T10013] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 332.418712][T10015] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 332.879268][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.886529][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.899991][T10015] overlayfs: missing 'lowerdir' [ 332.905372][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.914798][T10013] overlayfs: missing 'lowerdir' [ 332.914805][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.932130][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.940109][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.948641][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 332.964264][ T9] usb 1-1: USB disconnect, device number 19 [ 332.994869][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 333.012550][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 333.073665][ T5928] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 333.091050][T10021] binder: 10020:10021 ioctl 4018620d 0 returned -22 [ 333.091409][ T5928] megaworld 0003:07B5:0312.0006: collection stack underflow [ 333.100073][T10021] binder: 10020:10021 ioctl c0306201 200000000080 returned -14 [ 333.110558][ T5928] megaworld 0003:07B5:0312.0006: item 0 0 0 12 parsing failed [ 333.121564][ T5928] megaworld 0003:07B5:0312.0006: parse failed [ 333.129293][ T5928] megaworld 0003:07B5:0312.0006: probe with driver megaworld failed with error -22 [ 333.210563][ T5928] usb 4-1: USB disconnect, device number 36 [ 333.224012][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.230759][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.347090][ T44] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 333.558816][T10036] CIFS mount error: No usable UNC path provided in device string! [ 333.558816][T10036] [ 333.625249][T10039] netlink: 'syz.1.1053': attribute type 21 has an invalid length. [ 333.703786][T10039] netlink: 'syz.1.1053': attribute type 30 has an invalid length. [ 333.781439][T10036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 333.945720][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 333.957462][ T44] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 333.999418][ T44] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 334.428854][ T44] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 334.438022][ T44] usb 6-1: config 127 has no interface number 0 [ 334.444425][ T44] usb 6-1: config 127 interface 171 has no altsetting 0 [ 334.632991][ T44] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 334.670024][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.702161][ T44] usb 6-1: Product: syz [ 334.717535][ T44] usb 6-1: Manufacturer: syz [ 334.728809][ T44] usb 6-1: SerialNumber: syz [ 335.129645][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 335.171613][ T44] usb 6-1: USB disconnect, device number 19 [ 335.303348][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 335.314764][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 335.323911][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.335349][ T10] usb 3-1: Product: syz [ 335.339692][ T10] usb 3-1: Manufacturer: syz [ 335.344287][ T10] usb 3-1: SerialNumber: syz [ 335.371732][ T10] usb 3-1: config 0 descriptor?? [ 335.380022][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 335.860932][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 335.868307][ T10] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 335.924066][ T10] usb 3-1: USB disconnect, device number 27 [ 336.563121][T10079] binder: 10078:10079 ioctl 4018620d 0 returned -22 [ 336.582085][T10079] binder: 10078:10079 ioctl c0306201 200000000080 returned -14 [ 338.562691][ T10] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 338.723883][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 338.805072][T10107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1069'. [ 338.822664][T10107] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1069'. [ 338.938214][ T10] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 339.190443][T10111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.701034][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 339.716576][ T10] usb usb4-port1: attempt power cycle [ 340.102668][ T10] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 340.241630][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 340.797663][ T9] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 340.805255][ T10] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 340.924740][ T10] usb 4-1: device descriptor read/8, error -71 [ 340.947149][ T9] usb 1-1: device descriptor read/64, error -71 [ 340.986808][T10135] wireguard0: entered promiscuous mode [ 341.024343][T10135] wireguard0: entered allmulticast mode [ 341.056435][ T10] usb usb4-port1: unable to enumerate USB device [ 341.203710][ T9] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 341.377344][ T30] audit: type=1400 audit(1756648815.830:594): avc: denied { nlmsg_read } for pid=10138 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.678713][ T30] audit: type=1400 audit(1756648816.091:595): avc: denied { map } for pid=10147 comm="syz.5.1083" path="socket:[30109]" dev="sockfs" ino=30109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 341.711863][ T9] usb 1-1: device descriptor read/64, error -71 [ 341.729167][ T30] audit: type=1400 audit(1756648816.091:596): avc: denied { accept } for pid=10147 comm="syz.5.1083" path="socket:[30109]" dev="sockfs" ino=30109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 341.834558][ T9] usb usb1-port1: attempt power cycle [ 342.267595][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 342.351257][ T9] usb 1-1: device descriptor read/8, error -71 [ 342.536805][T10163] : renamed from bridge_slave_0 (while UP) [ 342.628610][ T9] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 342.670156][T10167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 342.767277][ T9] usb 1-1: device descriptor read/8, error -71 [ 342.895752][ T9] usb usb1-port1: unable to enumerate USB device [ 343.077714][ T5959] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 343.245298][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 343.254556][ T5959] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 343.271130][ T5959] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 343.285206][ T5959] usb 4-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 343.295256][ T5959] usb 4-1: config 127 has no interface number 0 [ 343.305836][ T5959] usb 4-1: config 127 interface 171 has no altsetting 0 [ 343.350923][ T5959] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 343.378786][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.387097][ T5959] usb 4-1: Product: syz [ 343.392819][ T5959] usb 4-1: Manufacturer: syz [ 343.398188][ T5959] usb 4-1: SerialNumber: syz [ 344.058205][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 344.184208][ T5959] usb 4-1: USB disconnect, device number 41 [ 346.700162][T10214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10214 comm=syz.3.1105 [ 348.374710][T10228] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 348.422169][T10229] NILFS (loop2): device size too small [ 348.783225][T10224] wireguard0: entered promiscuous mode [ 349.263764][T10224] wireguard0: entered allmulticast mode [ 349.759215][T10243] netlink: 'syz.3.1113': attribute type 11 has an invalid length. [ 349.828768][T10245] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 350.222158][ T30] audit: type=1400 audit(1756648824.100:597): avc: denied { audit_read } for pid=10246 comm="syz.5.1116" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.236048][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 350.375310][T10247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10247 comm=syz.5.1116 [ 350.725868][ T9] usb 4-1: device descriptor read/64, error -71 [ 350.988665][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 351.192437][ T9] usb 4-1: device descriptor read/64, error -71 [ 351.338006][ T9] usb usb4-port1: attempt power cycle [ 353.387888][T10277] NILFS (loop5): device size too small [ 353.432241][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 353.592434][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 353.599849][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 353.619000][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 145, changing to 11 [ 353.651880][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10077, setting to 1024 [ 353.666342][T10290] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 353.686187][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 353.695947][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.710043][ T10] usb 1-1: Product: syz [ 353.719269][ T10] usb 1-1: Manufacturer: syz [ 353.727243][ T10] usb 1-1: SerialNumber: syz [ 353.750105][ T10] usb 1-1: config 0 descriptor?? [ 353.902496][ T5959] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 354.033699][ T10] appledisplay 1-1:0.0: Error while getting initial brightness: -71 [ 354.044431][T10300] 9pnet_fd: Insufficient options for proto=fd [ 354.085497][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 354.093454][ T10] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71 [ 354.093482][ T5959] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 354.115647][ T5959] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 354.191078][ T5959] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 354.198387][ T30] audit: type=1400 audit(1756648827.814:598): avc: denied { read } for pid=10302 comm="syz.5.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.200355][ T5959] usb 3-1: config 127 has no interface number 0 [ 354.226353][ T5959] usb 3-1: config 127 interface 171 has no altsetting 0 [ 354.250067][ T5959] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 354.260004][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.266203][ T10] usb 1-1: USB disconnect, device number 24 [ 354.278329][ T5959] usb 3-1: Product: syz [ 354.283390][ T5959] usb 3-1: Manufacturer: syz [ 354.291064][ T5959] usb 3-1: SerialNumber: syz [ 354.570275][ T5959] usb 3-1: USB disconnect, device number 28 [ 354.637272][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 356.555525][T10330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33765 sclass=netlink_route_socket pid=10330 comm=syz.0.1138 [ 357.106946][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.737175][T10353] netlink: 'syz.0.1147': attribute type 39 has an invalid length. [ 357.778984][T10353] syz_tun (unregistering): left allmulticast mode [ 357.789989][T10358] binder: 10354:10358 ioctl c0306201 200000000080 returned -14 [ 357.899705][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 358.346592][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 358.375335][ T10] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 358.384883][ T10] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 358.494931][ T10] usb 6-1: config 0 has no interface number 0 [ 358.509846][ T10] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.965652][T10366] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 359.017660][ T10] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 359.073598][ T30] audit: type=1400 audit(1756648832.379:599): avc: denied { mounton } for pid=10363 comm="syz.0.1151" path="/223/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 359.073834][ T10] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.136592][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 359.268330][ T10] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 359.375655][T10376] overlayfs: failed to resolve './file1': -2 [ 359.729765][ T10] usb 6-1: Product: syz [ 359.742149][ T10] usb 6-1: config 0 descriptor?? [ 359.747689][T10350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.794951][T10366] orangefs_mount: mount request failed with -4 [ 359.818136][ T30] audit: type=1400 audit(1756648833.071:600): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 359.904293][ T51] Bluetooth: hci2: Invalid handle: 0xfd00 > 0x0eff [ 359.993975][T10385] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1157'. [ 360.174781][ T30] audit: type=1400 audit(1756648833.408:601): avc: denied { write } for pid=10387 comm="syz.2.1158" path="socket:[31110]" dev="sockfs" ino=31110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.235312][T10388] No control pipe specified [ 360.247468][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.287061][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.378408][T10395] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.418428][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 360.524969][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 360.556863][ T10] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input11 [ 360.732616][T10402] binder: 10401:10402 ioctl c0306201 200000000080 returned -14 [ 360.802014][T10403] binder: BINDER_SET_CONTEXT_MGR already set [ 360.808512][T10403] binder: 10401:10403 ioctl 4018620d 200000000040 returned -16 [ 360.809848][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.827253][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.845003][ T44] usb 6-1: USB disconnect, device number 20 [ 360.845021][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 360.936087][ T5959] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 361.074993][ T5959] usb 3-1: device descriptor read/64, error -71 [ 361.331676][ T5959] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 361.481178][ T5959] usb 3-1: device descriptor read/64, error -71 [ 361.609776][ T5959] usb usb3-port1: attempt power cycle [ 361.900419][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1168'. [ 361.909787][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'. [ 361.919851][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1168'. [ 362.088701][ T5959] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 362.134763][ T5959] usb 3-1: device descriptor read/8, error -71 [ 362.421838][ T5959] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 363.052022][ T5959] usb 3-1: device descriptor read/8, error -71 [ 363.170528][ T5959] usb usb3-port1: unable to enumerate USB device [ 363.438264][T10437] CIFS: iocharset name too long [ 363.648010][T10448] overlayfs: failed to clone upperpath [ 363.657282][ T51] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 363.660529][T10448] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1177'. [ 363.707109][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.997977][T10450] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 364.162501][T10457] netlink: 'syz.2.1180': attribute type 4 has an invalid length. [ 364.716624][ T30] audit: type=1400 audit(1756648837.655:602): avc: denied { ioctl } for pid=10441 comm="syz.3.1174" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 364.778999][ T30] audit: type=1400 audit(1756648837.711:603): avc: denied { bind } for pid=10441 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 365.217032][ T30] audit: type=1400 audit(1756648838.123:604): avc: denied { write } for pid=10472 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 365.373245][T10478] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 365.403820][T10479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.577512][T10478] bond1: entered promiscuous mode [ 365.583005][T10478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.780724][T10481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.830640][T10481] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 365.841766][T10481] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 366.999687][T10481] bond1: (slave vcan1): making interface the new active one [ 367.008536][T10481] vcan1: entered promiscuous mode [ 367.026223][T10481] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 367.652227][ T30] audit: type=1400 audit(1756648840.368:605): avc: denied { block_suspend } for pid=10495 comm="syz.5.1189" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.973696][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 367.983108][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 367.991385][ T5850] Bluetooth: hci3: hardware error 0x00 [ 368.341928][T10515] binder: 10513:10515 ioctl c0306201 200000000080 returned -14 [ 368.351555][T10515] binder: BINDER_SET_CONTEXT_MGR already set [ 368.357632][T10515] binder: 10513:10515 ioctl 4018620d 200000000040 returned -16 [ 368.779856][T10529] binder: 10528:10529 ioctl c0306201 200000000080 returned -14 [ 368.948531][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 369.309885][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.331982][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.381367][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.407913][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.421597][T10549] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 369.437655][ T10] usb 1-1: SerialNumber: syz [ 369.920520][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.940952][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.954718][ T10] usb 1-1: 0:2 : does not exist [ 369.959682][ T10] usb 1-1: unit 5 not found! [ 370.109029][ T5959] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 370.145302][ T10] usb 1-1: USB disconnect, device number 25 [ 370.191395][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.310465][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 370.317147][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.328520][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.331953][ T5850] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 370.338969][ T5959] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 370.354575][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.365697][ T5959] usb 3-1: config 0 descriptor?? [ 370.412238][T10566] fuse: Bad value for 'fd' [ 370.479645][ T44] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 370.514661][T10568] binder: 10567:10568 ioctl c0306201 200000000080 returned -14 [ 370.531425][T10570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.691793][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 370.698598][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.716843][ T44] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 370.735886][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.745869][ T44] usb 6-1: Product: syz [ 370.750881][ T44] usb 6-1: Manufacturer: syz [ 370.755853][ T44] usb 6-1: SerialNumber: syz [ 370.817520][ T44] usb 6-1: config 0 descriptor?? [ 370.834667][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.848475][ T44] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 370.858646][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.939931][ T5959] holtek_mouse 0003:04D9:A04A.0007: item fetching failed at offset 1/5 [ 370.949208][ T5959] holtek_mouse 0003:04D9:A04A.0007: hid parse failed: -22 [ 370.956821][ T5959] holtek_mouse 0003:04D9:A04A.0007: probe with driver holtek_mouse failed with error -22 [ 370.976638][T10578] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.987122][T10578] qnx4: unable to read the superblock [ 371.135185][ T5959] usb 3-1: USB disconnect, device number 33 [ 372.305579][T10594] tipc: Started in network mode [ 372.310479][T10594] tipc: Node identity 5a98809c59bf, cluster identity 4711 [ 372.317768][T10594] tipc: Enabled bearer , priority 0 [ 372.325475][T10594] syzkaller0: entered promiscuous mode [ 372.330964][T10594] syzkaller0: entered allmulticast mode [ 372.339950][T10594] tipc: Resetting bearer [ 372.446402][T10592] tipc: Resetting bearer [ 372.459748][T10592] tipc: Disabling bearer [ 372.945526][ T5850] Bluetooth: hci4: Invalid handle: 0xfd00 > 0x0eff [ 373.606653][ T5959] usb 6-1: USB disconnect, device number 21 [ 374.788950][T10634] pim6reg: entered allmulticast mode [ 375.389557][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 375.403927][ T5959] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 376.232493][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 376.302082][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 376.315043][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 376.329848][ T10] usb 1-1: config 0 has no interface number 0 [ 376.335975][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 376.352772][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 376.431551][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.441602][ T10] usb 1-1: Product: syz [ 376.446181][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 376.448847][ T10] usb 1-1: Manufacturer: syz [ 376.456809][ T10] usb 1-1: SerialNumber: syz [ 376.461871][ T5959] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 376.465552][ T10] usb 1-1: config 0 descriptor?? [ 376.472933][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.854060][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 376.866359][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.870758][ T10] em28xx 1-1:0.89: Video interface 89 found: bulk [ 376.882767][ T5959] pvrusb2: Hardware description: Terratec Grabster AV400 [ 376.890293][ T5959] pvrusb2: ********** [ 376.894705][ T44] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.904441][ T5959] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 376.915302][ T44] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 376.924533][ T5959] pvrusb2: Important functionality might not be entirely working. [ 376.933116][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.943118][ T5959] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 376.966284][ T44] usb 6-1: config 0 descriptor?? [ 376.973696][ T5959] pvrusb2: ********** [ 376.983439][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 377.252566][ T2337] pvrusb2: Invalid write control endpoint [ 377.326749][T10642] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1236'. [ 377.381542][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.515597][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.561490][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.591687][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 377.625827][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.629152][ T2337] pvrusb2: Invalid write control endpoint [ 377.640576][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.656210][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 377.666822][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.686495][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 377.697246][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 377.712701][ T2337] pvrusb2: Device being rendered inoperable [ 377.727558][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 378.093402][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 378.106868][ T2337] pvrusb2: Attached sub-driver cx25840 [ 378.118614][ T5959] usb 6-1: USB disconnect, device number 22 [ 378.119329][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 378.139667][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 378.371190][ T10] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 378.385790][ T10] em28xx 1-1:0.89: board has no eeprom [ 378.489275][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 378.496514][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 378.508768][ T5928] em28xx 1-1:0.89: Registering V4L2 extension [ 378.639997][ T10] usb 1-1: USB disconnect, device number 26 [ 378.671759][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 378.719592][ T5928] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 378.728445][ T5928] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 378.735900][ T5928] em28xx 1-1:0.89: No AC97 audio processor [ 378.755656][ T5928] usb 1-1: Decoder not found [ 378.763337][ T5928] em28xx 1-1:0.89: failed to create media graph [ 378.772444][ T5928] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 379.086009][ T5928] em28xx 1-1:0.89: Registering snapshot button... [ 379.146655][ T5928] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input13 [ 379.194130][ T5928] em28xx 1-1:0.89: Remote control support is not available for this card. [ 379.216138][ T9] usb 3-1: USB disconnect, device number 34 [ 379.332246][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 379.530497][ T10] em28xx 1-1:0.89: Closing input extension [ 379.550882][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 379.680268][ T30] audit: type=1400 audit(1756648851.651:606): avc: denied { connect } for pid=10703 comm="syz.2.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.744939][ T10] em28xx 1-1:0.89: Freeing device [ 380.130508][ T5959] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 380.539974][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 380.572147][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 380.581161][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.654626][ T5959] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.703720][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.725127][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 380.808368][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 380.818389][ T5959] usb 4-1: config 0 descriptor?? [ 380.850866][ T9] usb 6-1: config 8 has an invalid interface number: 132 but max is 0 [ 380.893898][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 380.975881][ T9] usb 6-1: config 8 has no interface number 0 [ 381.000611][ T9] usb 6-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.075434][ T9] usb 6-1: config 8 interface 132 has no altsetting 0 [ 381.095637][ T9] usb 6-1: string descriptor 0 read error: -22 [ 381.102654][ T9] usb 6-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 381.127771][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.272619][ T9] usb-storage 6-1:8.132: USB Mass Storage device detected [ 381.275242][ T5959] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 381.318939][ T9] usb-storage 6-1:8.132: Quirks match for vid 07cf pid 1001: a [ 382.403916][T10769] fuse: Bad value for 'fd' [ 382.887845][ T9] usb 6-1: USB disconnect, device number 23 [ 383.029261][ T10] usb 4-1: USB disconnect, device number 45 [ 384.148037][T10798] binder: 10796:10798 ioctl c0306201 200000000080 returned -14 [ 384.239850][T10801] tipc: Enabled bearer , priority 0 [ 384.267459][T10801] syzkaller0: entered promiscuous mode [ 384.284191][T10801] syzkaller0: entered allmulticast mode [ 384.324185][ T30] audit: type=1400 audit(1756648855.945:607): avc: denied { setopt } for pid=10800 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 384.443675][T10801] tipc: Resetting bearer [ 384.534742][T10800] tipc: Resetting bearer [ 385.096020][T10800] tipc: Disabling bearer [ 385.109794][T10815] tipc: Started in network mode [ 385.114743][T10815] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 385.126841][T10815] tipc: Enabled bearer , priority 10 [ 385.543714][T10828] random: crng reseeded on system resumption [ 385.583651][T10828] Restarting kernel threads ... [ 385.590072][T10828] Done restarting kernel threads. [ 385.666022][ T30] audit: type=1400 audit(1756648857.133:608): avc: denied { append } for pid=10817 comm="syz.3.1275" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 385.689139][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.899009][ T30] audit: type=1400 audit(1756648857.133:609): avc: denied { open } for pid=10817 comm="syz.3.1275" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 386.223283][ T5959] tipc: Node number set to 4269801488 [ 386.368328][ T30] audit: type=1400 audit(1756648857.180:610): avc: denied { ioctl } for pid=10817 comm="syz.3.1275" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 387.746716][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 387.808807][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 388.172286][ T30] audit: type=1400 audit(1756648859.584:611): avc: denied { mount } for pid=10845 comm="syz.1.1282" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 388.183382][T10851] overlayfs: failed to clone upperpath [ 388.369020][T10854] binder: 10853:10854 ioctl c0306201 0 returned -14 [ 388.439364][T10862] NILFS (loop5): device size too small [ 389.216466][ T5959] kernel write not supported for file /binder/transactions (pid: 5959 comm: kworker/1:6) [ 389.283401][T10879] fuseblk: Bad value for 'fd' [ 389.855356][ T5850] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 391.521406][T10899] netlink: 'syz.3.1293': attribute type 27 has an invalid length. [ 391.646481][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.667179][T10898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10898 comm=syz.0.1296 [ 391.719377][T10899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.947318][T10910] overlayfs: failed to clone upperpath [ 392.020459][ T5959] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 392.043282][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 392.092077][T10919] debugfs: '!' already exists in 'ieee80211' [ 392.114267][ T976] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 392.128114][ T30] audit: type=1326 audit(1756648863.260:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.178933][ T30] audit: type=1326 audit(1756648863.260:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.201959][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 392.221160][ T5959] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.234653][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 392.241689][ T30] audit: type=1326 audit(1756648863.260:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.277837][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.289924][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.300199][ T5959] usb 4-1: config 0 has no interface number 0 [ 392.307641][ T976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.317772][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 392.339782][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 392.339794][ T30] audit: type=1326 audit(1756648863.260:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.339834][ T30] audit: type=1326 audit(1756648863.260:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.405930][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.409996][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.438545][ T976] usb 1-1: config 0 descriptor?? [ 392.439562][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.456766][ T30] audit: type=1326 audit(1756648863.260:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.485517][ T5959] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 392.485706][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 392.494660][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.528574][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 392.552862][ T10] usb 6-1: Manufacturer: syz [ 392.577118][ T10] usb 6-1: config 0 descriptor?? [ 392.586619][ T5959] usb 4-1: Product: syz [ 392.614901][ T30] audit: type=1326 audit(1756648863.260:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.655853][ T5959] usb 4-1: Manufacturer: syz [ 392.657908][ T30] audit: type=1326 audit(1756648863.260:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.715157][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1302'. [ 392.736740][ T30] audit: type=1326 audit(1756648863.298:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.757821][ T5959] usb 4-1: SerialNumber: syz [ 392.773922][ T5959] usb 4-1: config 0 descriptor?? [ 392.784838][ T30] audit: type=1326 audit(1756648863.401:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.1.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f09a498ebe9 code=0x7ffc0000 [ 392.815647][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.837406][ T5959] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 392.847054][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.847425][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.874082][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.352166][ T5959] gspca_spca1528: reg_w err -110 [ 394.651907][ T5959] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 394.665887][ T9] usb 1-1: USB disconnect, device number 27 [ 394.735622][T10934] 9pnet_fd: Insufficient options for proto=fd [ 395.639678][ T10] rc_core: IR keymap rc-hauppauge not found [ 395.663289][ T10] Registered IR keymap rc-empty [ 395.681198][ T5959] usb 4-1: USB disconnect, device number 46 [ 396.044988][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.083023][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.113732][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 396.159158][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 396.304792][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.339065][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.691664][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 396.756653][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.867323][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 396.906394][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 396.983415][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 397.016427][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 397.206737][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 397.250451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.322661][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.213810][ T9] usb 1-1: config 0 descriptor?? [ 398.219858][T10952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.252747][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.288160][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.360674][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.838799][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 398.852765][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 398.878702][ T10] usb 6-1: USB disconnect, device number 24 [ 398.897449][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.903905][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.909548][ T9] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 399.228014][T10991] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 399.502582][T10998] netlink: 'syz.5.1324': attribute type 10 has an invalid length. [ 399.510669][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1324'. [ 399.523441][T10998] dummy0: entered promiscuous mode [ 399.572696][T10998] bridge0: port 3(dummy0) entered blocking state [ 399.581419][T10998] bridge0: port 3(dummy0) entered disabled state [ 399.590025][T10998] dummy0: entered allmulticast mode [ 400.217452][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 400.217468][ T30] audit: type=1400 audit(1756648870.632:625): avc: denied { map } for pid=10999 comm="syz.1.1325" path="socket:[34193]" dev="sockfs" ino=34193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 400.331013][ T5850] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 401.917416][ T5959] usb 1-1: USB disconnect, device number 28 [ 402.529355][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 402.536572][T11026] NILFS (loop5): device size too small [ 402.783902][T11037] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 402.795625][ T5959] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 402.870762][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 402.967525][ T5959] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 402.975727][ T5959] usb 1-1: config 1 has no interface number 0 [ 402.983242][ T5959] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 402.996153][ T5959] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 403.011933][ T5959] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.101318][ T5959] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 403.113482][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.129297][ T5959] usb 1-1: Product: syz [ 403.133495][ T5959] usb 1-1: Manufacturer: syz [ 403.141619][ T5959] usb 1-1: SerialNumber: syz [ 403.151828][T11018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 403.397365][T11018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 403.630493][ T5959] usb 1-1: Incompatible driver and firmware versions [ 403.909084][ T5959] usb 1-1: USB disconnect, device number 29 [ 405.144238][T11074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11074 comm=syz.5.1347 [ 405.170108][ T30] audit: type=1400 audit(1756648875.478:626): avc: denied { accept } for pid=11073 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 405.430864][ T30] audit: type=1400 audit(1756648875.619:627): avc: denied { create } for pid=11079 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 405.591756][ T30] audit: type=1400 audit(1756648875.628:628): avc: denied { sys_admin } for pid=11079 comm="syz.1.1348" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 405.838313][ T9] kernel write not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 405.935504][ T44] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 405.991967][T11091] fuseblk: Bad value for 'fd' [ 406.061389][T11096] NILFS (loop5): device size too small [ 406.183633][ T44] usb 3-1: device descriptor read/64, error -71 [ 406.451075][ T44] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 406.478374][ T30] audit: type=1400 audit(1756648876.723:629): avc: denied { create } for pid=11099 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 406.656436][ T44] usb 3-1: device descriptor read/64, error -71 [ 406.788336][ T44] usb usb3-port1: attempt power cycle [ 407.006611][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 407.167392][ T44] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 407.349443][ T44] usb 3-1: device descriptor read/8, error -71 [ 407.626659][ T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 407.692546][ T44] usb 3-1: device descriptor read/8, error -71 [ 407.958105][ T44] usb usb3-port1: unable to enumerate USB device [ 408.001230][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 408.007765][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.043669][ T9] usb 1-1: config 0 has no interface number 0 [ 408.049822][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.061031][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.071543][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 408.080634][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.105691][ T9] usb 1-1: config 0 descriptor?? [ 409.570710][T11142] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 409.830189][T11108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.839142][ C1] ------------[ cut here ]------------ [ 409.844932][ C1] ODEBUG: free active (active state 0) object: ffff88801ff36090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 409.858034][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 409.867251][ C1] Modules linked in: [ 409.871345][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 409.880271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.890332][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 409.896137][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3a 16 8c 4c 89 e6 48 c7 c7 e0 2e 16 8c e8 8f 6c 8f fc 90 <0f> 0b 90 90 58 83 05 26 bf c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 409.915733][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 409.921774][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 409.929728][ C1] RDX: ffff88801e2e2440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 409.937731][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 409.945701][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8c163580 [ 409.953667][ C1] R13: ffffffff8bafed40 R14: ffffffff8a817c30 R15: ffffc90000a08b28 [ 409.961631][ C1] FS: 0000000000000000(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 409.970550][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.977114][ C1] CR2: 0000200000030000 CR3: 00000000585bd000 CR4: 00000000003526f0 [ 409.985082][ C1] Call Trace: [ 409.988333][ C1] [ 409.991160][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 409.996771][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.002573][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 410.008106][ C1] ? look_up_lock_class+0x59/0x150 [ 410.013205][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 410.019254][ C1] kfree+0x28f/0x4d0 [ 410.023136][ C1] ? lock_acquire+0x179/0x350 [ 410.027790][ C1] ? rose_timer_expiry+0x53f/0x630 [ 410.032891][ C1] rose_timer_expiry+0x53f/0x630 [ 410.037818][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.043266][ C1] call_timer_fn+0x197/0x620 [ 410.047832][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 410.052950][ C1] ? rcu_is_watching+0x12/0xc0 [ 410.057710][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.063153][ C1] __run_timers+0x6ef/0x960 [ 410.067658][ C1] ? __pfx___run_timers+0x10/0x10 [ 410.072673][ C1] run_timer_base+0x114/0x190 [ 410.077336][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 410.082515][ C1] ? rcu_is_watching+0x12/0xc0 [ 410.087293][ C1] run_timer_softirq+0x1a/0x40 [ 410.092064][ C1] handle_softirqs+0x216/0x8e0 [ 410.096859][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 410.102151][ C1] __irq_exit_rcu+0x109/0x170 [ 410.106920][ C1] irq_exit_rcu+0x9/0x30 [ 410.111154][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 410.116779][ C1] [ 410.119701][ C1] [ 410.122606][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.128574][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.134196][ C1] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 12 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.153791][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 410.159850][ C1] RAX: 0000000001a4162f RBX: 0000000000000001 RCX: ffffffff8b93fc29 [ 410.167795][ C1] RDX: 0000000000000000 RSI: ffffffff8de50a38 RDI: ffffffff8c162980 [ 410.175752][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6655 [ 410.183724][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 410.191688][ C1] R13: ffff88801e2e2440 R14: ffffffff90ab5290 R15: 0000000000000000 [ 410.199693][ C1] ? ct_kernel_exit+0x139/0x190 [ 410.204544][ C1] default_idle+0x13/0x20 [ 410.208852][ C1] default_idle_call+0x6d/0xb0 [ 410.213609][ C1] do_idle+0x391/0x510 [ 410.217758][ C1] ? __pfx_do_idle+0x10/0x10 [ 410.222337][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 410.227527][ C1] cpu_startup_entry+0x4f/0x60 [ 410.232274][ C1] start_secondary+0x21d/0x2b0 [ 410.237029][ C1] ? __pfx_start_secondary+0x10/0x10 [ 410.242292][ C1] common_startup_64+0x13e/0x148 [ 410.247222][ C1] [ 410.250216][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 410.257464][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 410.266363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.276385][ C1] Call Trace: [ 410.279722][ C1] [ 410.282548][ C1] dump_stack_lvl+0x3d/0x1f0 [ 410.287111][ C1] vpanic+0x6e8/0x7a0 [ 410.291078][ C1] ? __pfx_vpanic+0x10/0x10 [ 410.295558][ C1] ? debug_print_object+0x1a2/0x2b0 [ 410.300729][ C1] panic+0xca/0xd0 [ 410.304424][ C1] ? __pfx_panic+0x10/0x10 [ 410.308827][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 410.313909][ C1] check_panic_on_warn+0xab/0xb0 [ 410.318822][ C1] __warn+0xf6/0x3c0 [ 410.322693][ C1] ? debug_print_object+0x1a2/0x2b0 [ 410.327870][ C1] report_bug+0x3c3/0x580 [ 410.332180][ C1] ? debug_print_object+0x1a2/0x2b0 [ 410.337358][ C1] handle_bug+0x184/0x210 [ 410.341659][ C1] exc_invalid_op+0x17/0x50 [ 410.346133][ C1] asm_exc_invalid_op+0x1a/0x20 [ 410.350973][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 410.356751][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3a 16 8c 4c 89 e6 48 c7 c7 e0 2e 16 8c e8 8f 6c 8f fc 90 <0f> 0b 90 90 58 83 05 26 bf c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 410.376327][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 410.382363][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 410.390313][ C1] RDX: ffff88801e2e2440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 410.398253][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 410.406192][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8c163580 [ 410.414497][ C1] R13: ffffffff8bafed40 R14: ffffffff8a817c30 R15: ffffc90000a08b28 [ 410.422455][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 410.428064][ C1] ? __warn_printk+0x198/0x350 [ 410.432807][ C1] ? __warn_printk+0x1a5/0x350 [ 410.437571][ C1] ? debug_print_object+0x1a1/0x2b0 [ 410.442749][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 410.448357][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.454147][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 410.459675][ C1] ? look_up_lock_class+0x59/0x150 [ 410.464758][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 410.470804][ C1] kfree+0x28f/0x4d0 [ 410.474673][ C1] ? lock_acquire+0x179/0x350 [ 410.479322][ C1] ? rose_timer_expiry+0x53f/0x630 [ 410.484408][ C1] rose_timer_expiry+0x53f/0x630 [ 410.489326][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.494757][ C1] call_timer_fn+0x197/0x620 [ 410.499328][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 410.504427][ C1] ? rcu_is_watching+0x12/0xc0 [ 410.509166][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.514598][ C1] __run_timers+0x6ef/0x960 [ 410.519089][ C1] ? __pfx___run_timers+0x10/0x10 [ 410.524107][ C1] run_timer_base+0x114/0x190 [ 410.528759][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 410.533934][ C1] ? rcu_is_watching+0x12/0xc0 [ 410.538684][ C1] run_timer_softirq+0x1a/0x40 [ 410.543419][ C1] handle_softirqs+0x216/0x8e0 [ 410.548157][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 410.553415][ C1] __irq_exit_rcu+0x109/0x170 [ 410.558072][ C1] irq_exit_rcu+0x9/0x30 [ 410.562286][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 410.567896][ C1] [ 410.570796][ C1] [ 410.573711][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.579678][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.585296][ C1] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 12 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.604887][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 410.610935][ C1] RAX: 0000000001a4162f RBX: 0000000000000001 RCX: ffffffff8b93fc29 [ 410.618893][ C1] RDX: 0000000000000000 RSI: ffffffff8de50a38 RDI: ffffffff8c162980 [ 410.626869][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6655 [ 410.634826][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 410.642776][ C1] R13: ffff88801e2e2440 R14: ffffffff90ab5290 R15: 0000000000000000 [ 410.650743][ C1] ? ct_kernel_exit+0x139/0x190 [ 410.655590][ C1] default_idle+0x13/0x20 [ 410.659895][ C1] default_idle_call+0x6d/0xb0 [ 410.664629][ C1] do_idle+0x391/0x510 [ 410.668672][ C1] ? __pfx_do_idle+0x10/0x10 [ 410.673247][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 410.678420][ C1] cpu_startup_entry+0x4f/0x60 [ 410.683155][ C1] start_secondary+0x21d/0x2b0 [ 410.687895][ C1] ? __pfx_start_secondary+0x10/0x10 [ 410.693169][ C1] common_startup_64+0x13e/0x148 [ 410.698083][ C1] [ 410.701263][ C1] Kernel Offset: disabled [ 410.705563][ C1] Rebooting in 86400 seconds..