last executing test programs: 14m53.631450609s ago: executing program 0 (id=39): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r8, r7, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 14m53.057749616s ago: executing program 0 (id=40): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x10000}, 0x28) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) ioctl$TIOCSRS485(r4, 0x542f, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x4, 0x0, &(0x7f00000002c0)="b8000005", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0x0, 0x2}}}, 0x8) syz_open_dev$MSR(&(0x7f0000000280), 0xffffffff00000001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 14m49.764091255s ago: executing program 0 (id=48): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket(0x18, 0x2, 0x6) r3 = syz_clone(0x2000000, &(0x7f00000024c0)="77f2689bb2ee0207ef26a7f93cfd4138588d0449c5a7a52adb032d517c18b114482c2c80d1c1b182a876f00d1853051d2cea89b70cdd15ee176d3a127b5ad2e42dd677d260af5abf49f44cf8369f72d5349dd4e9051b3488f752c26c80d8aaee78c3ac933037be688ee4d284b3e37f9b1cb8749f52eabb756514fc47e65691d1147f95659a0ab077df4587153f6a3ded5fffe496155e4a9e00d1424199dc26eee7d7cf134c8944a86efe108411507993d96865bde011ded1f6a2cc21e6bff7ab5bda235bf73bb138fa6af510ce5ba150f2103b471b886169a7990af9a54b20f7dc30bf0f0fa4f2df862d2f7785a91c479c3981085da57adc808421a1fde37c43b1af8a37ceff6fe282251d23bdd6802523429eb225c3d691c7f50e77cab9616472c4d742d56a4fcb58f4d6ab0cbab4bb6f4d505fa9c34ec6ebc6aaf45fb4a6b79c83b8cbc73abbd0412e3b3031c8b27542dcf7cd5523cd65a0f5b73c61f980efb6b3f1fc96cbd877b89bed3955f9559240bbab6f6d6443733f306a26b23273b18dca9d2e4449d7c7c780a3a0bbf845db469a84a3928604e4d457448cd9ed70b683eeb4c097d714541cea0a4e3a8a8ebdee56829296b7deddf684c3c5494824947a5b275e159bda4336d290ccca6711542b24c26385b305ee624190dabdb6b6610c926ab28dedaae4cec45d7703cf3a6ffa4356cf3c1d1dc2d3276af2e1b6dcd2052cbe5a06c189737099ac1b63c7a0d8762f97daa02b08c8e38d96d605a4523f1cf25a433e61cc19f0dde5666df07ff50963135f0e3d888050be4feb7f20399cc1634a7c8a945309423548f648dfbe1f849b1cdcc8c97a7ae56e0fc6e2c7ff2a67aa78a9bb582abc8b48eef439a231d87cbbfdb7a33cf5b47ae6ec6a51070e9ebf6c3b7c311ee7ece92f3d827ab7509f9b1682aa0b5938ef3502931efb8edc72b1bd6ce553ec454dd921507b2b4bc2a45357d7b9dccb600ca7de568b26e47806809aeab3ca551f6dc1c80976a9c9e4414deefb7a48d1104057331976225b3925d3c1895d6e362be534ea57d044faa41660f0288011d78caab61005f7532abd2146ca57a35880c68bc0e4ac7c435a4ab53b6aea9e6be4937f153dba93db5b73fcb39a8b8e1552630333d89e6431a6f5454f573a76cc9fca73b3fbd68bb28de85b25c8732303011d0fae7f35d4949c67d5d5426ba7210571d48e63d746dac52270cf0fd3ebdb38abfd9f0292cd9d62ed226c055d9e6d92e9f2b299bfb8ad9b07a49d54fed322f2074ea95092f92406c27dec0fcce4407fe4d2b394249d37206eec2253e149e5c72a7a1d7033c4e6ad031e4fa98bc2082051e643905db174ab3a795745546e84b54318a79418ac847c77b8c22c0a57180ec85e9d2befbba91c7a710ceb1d3fc41f98d8c0fbd4d56f68367fc058651be4721b003d797630beb4b1280514b1c057262ba995c05f3f81e1e8ac77c95ded5a375ebc1084a9f6c467efc51062c9ff3a4628ca51a50a85fbecaf9f2075fd11421b40c645c4b25c1be80701d7ba0ac763768498381072da5aecfde29f7c98b04021c4f1371972168a706f6d01949c7269aa78e16d3b7e3b0d7b9e99a066e97416e4018f8a35d99871efa10915c7499cff39acdacf97002da92d901008b1b30d10aa73580cf83b12195da284e1368b577993882608fb8b6c7cf640f3883f2faa135f410fe92c37158ce6d76ac9c753461a33dddd2f31859754a684b73455fcf8ab7a69beff94fe69b3931a3625fda93b75fffab28edbae6972fabb16888f952999fc0fcddb5419cf634bdbe83d2c3db8082abff4218df4a17c80580580dcce8d8bb732d288eb4b8524f9e86847627c27427aa41f8519fb53c0a9a93db40cdc11d04b8680fe6b1c2de034128261a9d36b476d0075b09d95f757c0ff68f2003a1b9ef0213aa93e07", 0x55b, 0x0, 0x0, 0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='yeah', 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) ioperm(0x1, 0xfffffffffffdff07, 0x1) 14m47.749519082s ago: executing program 0 (id=51): r0 = syz_io_uring_setup(0x3546, &(0x7f0000000300)={0x0, 0xa1af, 0x400, 0x3, 0xb21}, &(0x7f0000000380), &(0x7f0000001400), &(0x7f0000001440)) r1 = syz_usbip_server_init(0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r4, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000001480)={r1}, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x5, 0x6d, {0x6d, 0x23, "aab509b9780f141fecfcd8ae06e19d3ca3bc73e2a31b41675b90359f457d28326a3f3e1f4010ec7129a38dce688888a90be4bf3b7b07798245b34684231ab6b4c632013ea6db0bffacc283db4131ce488799ce0e99d88bf9e9584480fb59e3eb49f76449b414f995ea4d77"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@generic={0x3, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x1, 0x2}]}}, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040)=r6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r9 = dup2(r8, r6) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000180)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r10, r12) 14m46.748072162s ago: executing program 0 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x3, &(0x7f0000000080)="dfbb43"}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3c4}}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) 14m45.291789147s ago: executing program 0 (id=56): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x200000000000000) mmap$snddsp(&(0x7f00006b3000/0x1000)=nil, 0x1000, 0xc, 0x4000010, 0xffffffffffffffff, 0x6000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r5 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) timer_create(0x1, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441", 0x39) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) mlock(&(0x7f000039a000/0xc00000)=nil, 0xc00000) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) 14m29.949393771s ago: executing program 32 (id=56): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x200000000000000) mmap$snddsp(&(0x7f00006b3000/0x1000)=nil, 0x1000, 0xc, 0x4000010, 0xffffffffffffffff, 0x6000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r5 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) timer_create(0x1, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441", 0x39) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) mlock(&(0x7f000039a000/0xc00000)=nil, 0xc00000) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) 11m0.269858409s ago: executing program 1 (id=473): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha224-generic\x00'}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m58.690162757s ago: executing program 1 (id=475): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/109, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0xffffffffffffffda, 0xfffffffffffffff9, {0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, {0x0, 0xffffffffffffffff, 0x5, 0x8, 0x3, 0x4, 0x1, 0x5, 0x70b1, 0x1000, 0x101, 0x0, 0xffffffffffffffff, 0x8001, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x2, 0x3, 0x6) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r7, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) recvfrom(r7, &(0x7f0000006200)=""/4122, 0x101a, 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r0, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r1, 0x1008}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) r9 = msgget$private(0x0, 0x82) msgctl$IPC_STAT(r9, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000200), &(0x7f00000000c0)=0x4) 10m57.357603559s ago: executing program 1 (id=479): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha224-generic\x00'}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m56.759888398s ago: executing program 1 (id=481): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) semget$private(0x0, 0x7, 0x85) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) r6 = socket(0x10, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)}, 0x4) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102) syz_usb_connect(0x6, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r8, &(0x7f00000012c0)=[{&(0x7f0000000040)="ac1044568a6a", 0x6}], 0x1, 0x80000001, 0x8) 10m52.830574311s ago: executing program 1 (id=488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20100010"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi4\x00', 0x80100, 0x0) ioctl$COMEDI_DEVINFO(r4, 0x80b06401, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="3289deaf48b37ae85f5515fc89c39eb9dd288f0d86bad98b68631b3b25ba7c579c43b0ac5506a4d3d7d8a3df6f2d1fc2d8d70739dc0b2d6b3aa591a352795cbbfc208cb77262d6b71a3e3d5ddf34adbab6dba3c2852797e1d4bddc2e7386e3d8989d2163c03cb07fe4341ca81c6183073eafcfd688181cfe7b737916", @ANYRES16=r7, @ANYBLOB="000126bd7000fbdbdf2515000000e40001802c0004001400010002004e24ffffffff00000000000000001400020002004e24ac14143e000000000000000008000300000095081200010069623a76657468315f766c616e0000002c00028008000400fa000000080002000d00000008000400ffff000008000300fbffffff0800040001181745080003000400000048ff03000400000044000400200001000a004e240000000cfe880000000000000000000000000101d3020000200002000a004e23000001d7ff020000000000000000000000000001faffffff08000300040000000d00010069623a766c616e31000000007c0001802c0004001400010002004e20ffffffff00000000000000001400020002004e21e000000200000000000000001400028008000200430a000008000200020000001200010069623a73797a6b616c6c657231000000240002800800010009000000080004003e000000080004000100000008000400090000003c00038008000300f6ac000022000100010000000800020005000000080003000e00000008000100090000000800020009000000080003001f6400001c000380080003000000000008000100040000000800010006000000700004800900010073797a31000000001c000780080001001d000000080004000500000008000400b1d600001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001c000780080002000100000008000200ff07000008000400ff030000"], 0x23c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) socket$inet_udp(0x2, 0x2, 0x0) 10m51.266618599s ago: executing program 1 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "00001000"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, 0x0, 0x0) close(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c693c3b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(0x0, 0x0, 0x0, 0x0) mlockall(0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r3, 0x0, 0x0) 10m35.15783993s ago: executing program 33 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "00001000"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, 0x0, 0x0) close(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c693c3b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(0x0, 0x0, 0x0, 0x0) mlockall(0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r3, 0x0, 0x0) 5m2.613608687s ago: executing program 6 (id=1906): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m2.313407711s ago: executing program 6 (id=1911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x806}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084004) 5m2.209413366s ago: executing program 6 (id=1916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000002c0)="2e64362e3e0f01c4360f001f360f9f02660f3817b8bd0e660fc7b20f000fc7190fc7be7f60baf80c66b8ec34228066efbafc0cec66b80000000066b980bd00c00f326635001000000f30dfcdbaf80c66b8b010348966efbafc0c66b8d700000066ef", 0x62}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m1.994018235s ago: executing program 6 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0) 5m1.869917008s ago: executing program 6 (id=1921): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000000006, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x13, r0, 0xc2f32000) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 5m1.312306419s ago: executing program 6 (id=1926): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) 5m0.579701797s ago: executing program 34 (id=1926): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) 16.896299818s ago: executing program 4 (id=2943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff37, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16.762746225s ago: executing program 7 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) socket$alg(0x26, 0x5, 0x0) 13.005980862s ago: executing program 7 (id=2954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x23, 0x200, &(0x7f0000000400)="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"}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x14c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000400000000001800128008000100736974000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) 12.670924107s ago: executing program 4 (id=2955): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000080000000900000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) r1 = getpid() syz_pidfd_open(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01a}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.167209699s ago: executing program 5 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 9.987551585s ago: executing program 5 (id=2957): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.818934117s ago: executing program 7 (id=2958): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xc0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904000001", @ANYRESDEC], 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600), 0x80) pselect6(0x40, &(0x7f0000000340)={0x3, 0x0, 0x200100000000, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1000001006, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xfffffffffffffffb, 0x3, 0x0, 0xb, 0x80000006, 0xfffffffffffffffe}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) 9.148000423s ago: executing program 4 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xb, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x56}}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd11, 0x43}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7c}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x2004c840) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x881) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r5, &(0x7f0000000180), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000980)="b0f160788ce5545e0af8ee86ff3a0e15bbcd54ce0474e91e3f4a11d9834e31b51b52b2d478ac3374df3e06bae2abd08729c76f393eb6e291453424559d61580efdd824ecd130f98d31107a43514a6f6d5799995fe3a46fff7a21ed2f5323a3398aa1c02f7eba054026128fa958cfc19e3fa30c9d3d25d8190dbf304bb927cb53d985aa76c9e5c5419c87bda7fb87361829a54f1bb733", 0x96, r0}, 0x68) 7.995180813s ago: executing program 5 (id=2962): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) fsopen(0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000400)="e2b5c0b95be1d5eac7125181b1c59f40eaabf32222123e61a3a1aa203f583f0d8c3817bd242a9b6e1ece4717ec4cd85c464d8c45f61dbd975fd1f30c1b1473bed968cf71146b55f6398179329050f27ec13e18da1e1a46f8529f9a82274b81a0c7250578709132675a399c6ff6ccd4b721c37cad36acc8999097cd8b515b618dd403302478ba76638da620deec14ded07662c844324b78aaff550cbf0be67219b490e40da12ce524477996174a89af82691780be9da42b79e08a74e1e9b56e12388ac2f9ac2e60dbe8bcbe1963214d04b320494a14e2b60f2eac5e4a242b03", 0xdf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) 7.913318513s ago: executing program 3 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a52f3e63c96acab52ec1976fb", 0x58, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") close(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(r7, &(0x7f0000000280)="73a3", 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 7.911921775s ago: executing program 2 (id=2964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8454) socket$kcm(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003380)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) 6.918590515s ago: executing program 4 (id=2965): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff2, 0x10}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 6.914116357s ago: executing program 2 (id=2966): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x1320, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000008c0)={0x4d178c82, 0x3, 0x8000, 0x9}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="060000002faa2e65e4d5fc70d14c7cee3123d52062cc3d60642e599dbabcbff935bfe3c44ec86d58", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250e0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x2000a010}, 0x20000010) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000206010200000000000000050a00000405000100070000000100020073797a3200000000100003006269746d61703a706f72740024000780050015000d0000000500030002000000060005404e2100000800124000000007050005000a0000000500040001"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.733697946s ago: executing program 5 (id=2967): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0xa05c196dd7fd9036) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) r4 = openat(0xffffffffffffffff, 0x0, 0x68000, 0x21) poll(&(0x7f00000001c0)=[{r3, 0x4}, {r4, 0x4}, {0xffffffffffffffff, 0x162}, {r0, 0x10}], 0x4, 0x7) 6.628675716s ago: executing program 3 (id=2968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a52f3e63c96acab52ec1976fb", 0x58, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") close(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(r7, &(0x7f0000000280)="73a3", 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 5.99011537s ago: executing program 2 (id=2969): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha224-generic\x00'}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000008ff39aabb7182ae9ca7e25ec428c5e77c0b8d5990acaf2462e1e1f8b393a9cfa75792efb7b7bcd21ffa4cf636fae40367e3e4c8f0d826785a855e9f58693b8f85473a8a1c4d804837c60308294b10342eee15c1c19d718f82b2f938ae055513ef9359adc83a931538e90659390b87b9d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.961323938s ago: executing program 5 (id=2970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871991f0dfe7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x1f00000000000000) 4.302615s ago: executing program 7 (id=2971): bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) listen(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x800001, 0x804) 4.224308154s ago: executing program 3 (id=2972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x20000400) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80004) syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.943908703s ago: executing program 4 (id=2973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a52f3e63c96acab52ec1976fb", 0x58, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") close(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(r7, &(0x7f0000000280)="73a3", 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.875918048s ago: executing program 5 (id=2974): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) socket$alg(0x26, 0x5, 0x0) 3.804081221s ago: executing program 2 (id=2975): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2.798544281s ago: executing program 7 (id=2976): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) 2.703897954s ago: executing program 2 (id=2977): socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 2.651693621s ago: executing program 4 (id=2978): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) 1.93682261s ago: executing program 7 (id=2979): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) semget$private(0x0, 0x7, 0x85) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) r6 = socket(0x10, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)}, 0x4) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102) syz_usb_connect(0x6, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r8, &(0x7f00000012c0)=[{&(0x7f0000000040)="ac1044568a6a", 0x6}], 0x1, 0x80000001, 0x8) 1.93524761s ago: executing program 3 (id=2980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.001671235s ago: executing program 3 (id=2981): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@private=0xa010101, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 88.793967ms ago: executing program 3 (id=2982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x48) fsmount(r3, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 0s ago: executing program 2 (id=2983): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) kernel console output (not intermixed with test programs): 2 [ 712.541715][T14644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.551281][T14644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.047309][T14657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 713.089526][T14654] could not allocate digest TFM handle sha224-generic [ 713.178269][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 713.456252][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 713.468644][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 713.522479][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 713.825912][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.869384][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 713.902676][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 713.941561][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.995831][ T24] usb 6-1: Product: syz [ 714.023021][ T24] usb 6-1: Manufacturer: syz [ 714.034468][ T24] usb 6-1: SerialNumber: syz [ 714.062009][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 714.084911][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input23 [ 714.303717][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 714.322042][ T24] (id 0x00) [ 714.407159][ T24] rc_core: IR keymap rc-imon-pad not found [ 714.413032][ T24] Registered IR keymap rc-empty [ 714.419403][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 714.444669][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 714.586106][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 714.599221][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input24 [ 714.624766][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:57> initialized [ 714.707150][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.738931][ T5893] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 714.789595][ T5893] usb 5-1: can't read configurations, error -71 [ 714.819989][ T5893] usb usb5-port1: attempt power cycle [ 715.010454][T14650] imon:display_open: display port is already open [ 715.043623][ T24] usb 6-1: USB disconnect, device number 57 [ 715.890264][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2123'. [ 716.140812][ T30] audit: type=1400 audit(1777040897.738:727): avc: denied { setopt } for pid=14699 comm="syz.5.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 716.990739][T14731] fuse: fd is not a fuse device [ 717.004924][T12378] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 718.265625][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.275244][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.937331][T14681] net_ratelimit: 6 callbacks suppressed [ 718.937347][T14681] Set syz1 is full, maxelem 65536 reached [ 720.305898][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 720.972774][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.981456][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.885283][T14793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2265033534 (4530067068 ns) > initial count (3672669880 ns). Using initial count to start timer. [ 722.086127][T12378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 722.099990][T12378] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 722.113834][T12378] usb 6-1: can't read configurations, error -71 [ 722.272131][ T30] audit: type=1400 audit(1777040903.465:728): avc: denied { watch watch_reads } for pid=14803 comm="syz.4.2144" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 722.787121][T12378] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 723.191460][ T5960] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 723.856347][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 723.875689][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 723.883319][ T9] usb 8-1: can't read configurations, error -71 [ 723.893229][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.902230][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.458483][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.469162][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.936416][T14850] fuse: fd is not a fuse device [ 725.537407][T12378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 725.550751][T12378] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 725.562801][T12378] usb 6-1: can't read configurations, error -71 [ 725.570254][T12378] usb usb6-port1: attempt power cycle [ 725.734414][ T5893] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 725.838473][T14863] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2164'. [ 725.918437][ T5893] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 725.967510][ T5960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 725.974282][ T5893] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 725.978593][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 726.001396][ T5960] usb 5-1: can't read configurations, error -71 [ 726.054919][ T5893] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.070555][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.096281][T14859] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 726.124958][ T5893] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.330809][ T9] usb 8-1: USB disconnect, device number 7 [ 726.410547][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 726.472878][T12378] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 727.139576][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.150114][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.786028][T12311] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 728.655414][T14902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.665461][T14902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.844075][ T1582] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 729.027020][ T1582] usb 5-1: Using ep0 maxpacket: 16 [ 729.040714][ T1582] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 729.049328][ T1582] usb 5-1: config 0 has no interface number 0 [ 729.055499][ T1582] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 729.082813][ T1582] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 729.107349][ T1582] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 729.118087][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.207388][ T30] audit: type=1400 audit(1777040909.960:729): avc: denied { ioctl } for pid=14914 comm="syz.7.2179" path="/41/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 729.574105][ T1582] usb 5-1: Product: syz [ 729.578389][ T1582] usb 5-1: Manufacturer: syz [ 729.583088][ T1582] usb 5-1: SerialNumber: syz [ 729.716319][ T1582] usb 5-1: config 0 descriptor?? [ 729.767598][T12378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 729.801436][T14900] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 729.816861][T12378] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 729.853631][T14900] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 729.865924][T12378] usb 6-1: can't read configurations, error -71 [ 730.336219][T14900] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 730.343674][T14900] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 730.582678][ T1582] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 730.767469][T12311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 730.784448][T12311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 730.803247][T12311] usb 3-1: can't read configurations, error -71 [ 731.160763][T14936] could not allocate digest TFM handle sha224-generic [ 732.007412][ T5893] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 732.171800][ T1582] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 732.239190][ T1582] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 732.775957][ T1582] asix 5-1:0.34: probe with driver asix failed with error -71 [ 732.778283][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.792267][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.003413][ T1582] usb 5-1: USB disconnect, device number 58 [ 733.098221][T14982] netlink: zone id is out of range [ 733.127062][T14982] netlink: zone id is out of range [ 733.139177][T14982] netlink: zone id is out of range [ 733.144857][T14982] netlink: zone id is out of range [ 733.277254][T14982] netlink: zone id is out of range [ 733.282584][T14982] netlink: zone id is out of range [ 733.288861][T14982] netlink: zone id is out of range [ 733.300083][T14982] netlink: zone id is out of range [ 733.311736][T14971] could not allocate digest TFM handle sha224-generic [ 733.319088][T14982] netlink: zone id is out of range [ 733.332405][T14982] netlink: zone id is out of range [ 733.788764][ T30] audit: type=1400 audit(1777040914.246:730): avc: denied { map } for pid=14998 comm="syz.2.2200" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 734.041519][ T30] audit: type=1400 audit(1777040914.358:731): avc: denied { call } for pid=14998 comm="syz.2.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 734.118910][ T30] audit: type=1400 audit(1777040914.358:732): avc: denied { transfer } for pid=14998 comm="syz.2.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 734.218553][T15007] fuse: fd is not a fuse device [ 734.406313][ T24] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 734.688645][T15013] kvm: pic: non byte read [ 735.146013][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.154769][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.213086][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 735.290027][ T5893] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 735.313141][ T5893] usb 6-1: can't read configurations, error -71 [ 735.470028][T15023] fuse: fd is not a fuse device [ 735.477657][T15019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 735.615370][ T30] audit: type=1400 audit(1777040915.958:733): avc: denied { getopt } for pid=15026 comm="syz.3.2209" lport=56408 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 735.728103][ T30] audit: type=1400 audit(1777040915.958:734): avc: denied { connect } for pid=15026 comm="syz.3.2209" lport=56408 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 735.830248][ T30] audit: type=1400 audit(1777040915.986:735): avc: denied { name_connect } for pid=15026 comm="syz.3.2209" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 735.983660][T15029] could not allocate digest TFM handle sha224-generic [ 735.992896][ T5893] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 736.175007][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 736.212310][ T5893] usb 6-1: config 0 has no interfaces? [ 736.247486][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 736.258838][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.268328][ T5893] usb 6-1: Product: syz [ 736.275389][ T5893] usb 6-1: Manufacturer: syz [ 736.280081][ T5893] usb 6-1: SerialNumber: syz [ 736.300430][ T5893] usb 6-1: config 0 descriptor?? [ 736.440999][T15041] fuse: fd is not a fuse device [ 736.566852][ T1582] usb 6-1: USB disconnect, device number 63 [ 737.421573][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 737.446841][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 737.455131][ T24] usb 3-1: can't read configurations, error -71 [ 737.510645][T15057] kvm: emulating exchange as write [ 738.579740][T15070] could not allocate digest TFM handle sha224-generic [ 738.955024][T15080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 739.557768][T15089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 739.766596][T15067] bridge0: port 2(geneve1) entered disabled state [ 739.773100][T15067] bridge0: port 1(dummy0) entered disabled state [ 739.859574][T15067] batadv0: left allmulticast mode [ 740.088292][T15094] tipc: Started in network mode [ 740.097354][T15094] tipc: Node identity 820ee9733931, cluster identity 4711 [ 740.105045][T15094] tipc: Enabled bearer , priority 0 [ 740.160419][T12269] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 740.212213][T15095] syzkaller0: entered promiscuous mode [ 740.218026][T15095] syzkaller0: entered allmulticast mode [ 740.225567][T15095] tipc: Resetting bearer [ 740.233889][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.255152][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.264155][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.294690][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.324973][T15090] tipc: Resetting bearer [ 740.877394][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.887847][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.673535][T15090] tipc: Disabling bearer [ 742.778715][T12378] tipc: Node number set to 3141527923 [ 743.030195][T15119] netlink: 'syz.7.2232': attribute type 10 has an invalid length. [ 743.065734][T15119] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 743.110351][T15118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.526298][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 744.208288][T12269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.238991][T15138] could not allocate digest TFM handle sha224-generic [ 744.240978][T12269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 744.291076][T12269] usb 3-1: can't read configurations, error -71 [ 745.114046][T15169] binder: 15167:15169 ioctl c0306201 200000000080 returned -14 [ 745.188248][T15169] binder: 15167:15169 ioctl c0306201 2000000003c0 returned -14 [ 745.498773][T15180] binder: 15179:15180 ioctl c0306201 200000000080 returned -14 [ 745.532885][T15180] binder: 15179:15180 ioctl c0306201 2000000003c0 returned -14 [ 745.704548][ T24] kernel read not supported for file /ppp (pid: 24 comm: kworker/1:0) [ 745.723316][ T30] audit: type=1400 audit(1777040925.419:736): avc: denied { read } for pid=15189 comm="syz.5.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 745.776964][ T29] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 746.010926][T15200] fuse: fd is not a fuse device [ 746.588439][T15205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.598936][T15205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.100300][T15214] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2258'. [ 747.187577][T15216] binder: 15215:15216 ioctl c0306201 200000000080 returned -14 [ 747.198525][T15216] binder: 15215:15216 ioctl c0306201 2000000003c0 returned -14 [ 747.348204][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 748.786659][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 748.814672][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 748.831661][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 748.848181][ T29] usb 5-1: can't read configurations, error -71 [ 749.212496][ T29] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 749.724643][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.734198][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.162577][T12269] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 750.326393][T12269] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 750.346309][T12269] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 750.359896][T12269] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.369277][T12269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.390159][T15252] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 750.411878][T12269] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.772402][T12269] usb 8-1: USB disconnect, device number 8 [ 750.786276][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 750.939095][ T30] audit: type=1400 audit(1777040930.304:737): avc: denied { mounton } for pid=15270 comm="syz.5.2278" path="/417/file0" dev="tmpfs" ino=2272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 751.557040][T15275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.565884][T15275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.134348][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 752.158545][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 752.171844][ T29] usb 5-1: can't read configurations, error -71 [ 752.179732][ T29] usb usb5-port1: attempt power cycle [ 752.319038][T15279] could not allocate digest TFM handle sha224-generic [ 752.641844][ T1582] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 753.490811][T15296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.500488][T15296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.746739][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 753.756200][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 753.764104][ T24] usb 3-1: can't read configurations, error -71 [ 753.849268][T15302] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 753.960679][ T30] audit: type=1400 audit(1777040933.130:738): avc: denied { write } for pid=15308 comm="syz.3.2287" lport=55584 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 753.995626][T15302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.997247][T15311] fuse: fd is not a fuse device [ 754.065563][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 754.271860][T15318] binder: 15317:15318 unknown command 0 [ 754.278382][T15318] binder: 15317:15318 ioctl c0306201 200000000080 returned -22 [ 754.719091][T15320] binder: BINDER_SET_CONTEXT_MGR already set [ 754.731421][T15320] binder: 15317:15320 ioctl 4018620d 200000000040 returned -16 [ 754.900536][ T30] audit: type=1400 audit(1777040933.982:739): avc: denied { allowed } for pid=15322 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 755.377614][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 755.541346][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 755.560061][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.577769][ T24] usb 3-1: Product: syz [ 755.603202][ T1582] usb 8-1: unable to get BOS descriptor or descriptor too short [ 755.620562][ T1582] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 755.642803][ T1582] usb 8-1: can't read configurations, error -71 [ 755.665844][ T24] usb 3-1: Manufacturer: syz [ 755.670729][ T24] usb 3-1: SerialNumber: syz [ 756.043238][ T1582] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 756.167030][ T24] net_ratelimit: 11 callbacks suppressed [ 756.167049][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 756.185631][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 756.236295][ T1582] usb 8-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 756.246472][ T1582] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.280442][ T1582] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 756.712202][ T1582] gspca_sn9c20x: Write register 1001 failed -71 [ 756.722452][ T1582] gspca_sn9c20x: Device initialization failed [ 756.729323][ T1582] gspca_sn9c20x 8-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 756.740391][ T1582] usb 8-1: USB disconnect, device number 10 [ 757.507913][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 757.612098][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 757.720912][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 757.734476][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 757.756180][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 757.769309][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 757.784535][ T24] usb 3-1: USB disconnect, device number 61 [ 757.828556][T15345] could not allocate digest TFM handle sha224-generic [ 757.895662][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 758.174138][ T30] audit: type=1400 audit(1777040937.070:740): avc: denied { read } for pid=15355 comm="syz.2.2303" dev="nsfs" ino=4026532813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.196513][T15356] Bluetooth: MGMT ver 1.23 [ 758.216425][ T30] audit: type=1400 audit(1777040937.088:741): avc: denied { open } for pid=15355 comm="syz.2.2303" path="net:[4026532813]" dev="nsfs" ino=4026532813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.409359][T12378] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 758.412887][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 759.612154][T15379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.621755][T15379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.994008][ T1582] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 760.156578][ T1582] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 760.175443][ T1582] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.194989][ T1582] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 760.208421][ T24] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 760.214554][ T1582] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.249969][ T1582] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 760.265198][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 760.283427][ T1582] usb 5-1: Product: syz [ 760.292066][ T1582] usb 5-1: Manufacturer: syz [ 760.316098][ T1582] cdc_wdm 5-1:1.0: skipping garbage [ 760.335812][ T1582] cdc_wdm 5-1:1.0: skipping garbage [ 760.343427][ T1582] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 760.351378][ T1582] cdc_wdm 5-1:1.0: Unknown control protocol [ 760.567040][ T1582] usb 5-1: USB disconnect, device number 62 [ 760.906249][T15405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.917548][T15405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.308084][ T1582] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 761.399148][T12378] usb 8-1: unable to get BOS descriptor or descriptor too short [ 761.410649][T12378] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 761.418316][T12378] usb 8-1: can't read configurations, error -71 [ 761.595244][ T1582] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 761.616177][ T1582] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.628774][ T1582] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 761.896014][ T1582] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.933222][ T1582] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 761.961436][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 761.974584][ T1582] usb 5-1: Product: syz [ 761.978823][ T1582] usb 5-1: Manufacturer: syz [ 762.003662][ T1582] cdc_wdm 5-1:1.0: skipping garbage [ 762.010977][ T1582] cdc_wdm 5-1:1.0: skipping garbage [ 762.025663][ T1582] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 762.031697][ T1582] cdc_wdm 5-1:1.0: Unknown control protocol [ 762.626623][T12378] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 763.181970][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 763.183329][ T29] usb 5-1: USB disconnect, device number 63 [ 763.188731][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 763.200562][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 763.241012][ T30] audit: type=1400 audit(1777040941.758:742): avc: denied { ioctl } for pid=15374 comm="syz.4.2309" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3380 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 763.306195][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.316020][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.080639][T15423] fuse: fd is not a fuse device [ 764.495314][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 764.605713][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 764.715773][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 764.852339][ T24] usb 3-1: can't read configurations, error -71 [ 765.126222][ T29] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 765.476712][T12378] usb 8-1: unable to get BOS descriptor or descriptor too short [ 765.485851][T12378] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 765.501511][T12378] usb 8-1: can't read configurations, error -71 [ 765.510102][T12378] usb usb8-port1: attempt power cycle [ 765.927471][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.936973][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.414171][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 766.683535][ T5913] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 766.875641][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 766.884922][ T5913] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 766.895200][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.909096][ T5913] usb 5-1: config 0 descriptor?? [ 766.923016][ T5913] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 766.941015][ T5913] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 767.078598][T12378] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 767.149332][ T1582] usb 5-1: USB disconnect, device number 64 [ 767.176916][ T1582] ftdi_sio 5-1:0.0: device disconnected [ 767.244136][ T5913] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 767.768758][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.777526][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.901946][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 767.924404][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 767.926021][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 767.941120][ T29] usb 6-1: can't read configurations, error -71 [ 767.953721][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 767.991694][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 768.006549][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 768.017042][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.025347][ T5913] usb 3-1: Product: syz [ 768.032059][ T5913] usb 3-1: Manufacturer: syz [ 768.036746][ T5913] usb 3-1: SerialNumber: syz [ 768.046338][ T5913] usb 3-1: config 0 descriptor?? [ 768.080036][ T5913] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 768.089880][ T5913] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 768.384633][ T29] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 768.457606][ T30] audit: type=1400 audit(1777040946.690:743): avc: denied { bind } for pid=15494 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 768.571832][T15500] 9p: Bad value for 'rfdno' [ 768.731321][ T5913] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 768.732150][ T5913] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 769.176391][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.177494][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.893067][T12378] usb 8-1: unable to get BOS descriptor or descriptor too short [ 770.029784][T12378] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 770.054841][T15519] could not allocate digest TFM handle sha224-generic [ 770.065378][T12378] usb 8-1: can't read configurations, error -71 [ 770.110546][ T30] audit: type=1400 audit(1777040948.243:744): avc: denied { remount } for pid=15524 comm="syz.7.2345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 770.227189][ T5913] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 770.240158][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 770.254322][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 770.270995][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 770.285553][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 770.298940][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 770.552032][ T5913] usb 3-1: USB disconnect, device number 64 [ 771.075849][T15538] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 771.083556][T15538] ALSA: mixer_oss: invalid OSS volume 'S' [ 771.284146][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 771.304893][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 771.322361][ T29] usb 6-1: can't read configurations, error -71 [ 771.347758][ T29] usb usb6-port1: attempt power cycle [ 771.427653][T15549] syzkaller0: entered promiscuous mode [ 771.449223][T15549] syzkaller0: entered allmulticast mode [ 771.898040][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 772.123497][T15568] kvm: pic: non byte write [ 772.199703][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.211624][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.692889][T15577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.701600][T15577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.049801][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 774.507140][T15605] fuse: fd is not a fuse device [ 774.822791][T15552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.927304][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.958309][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 774.966182][ T24] usb 5-1: can't read configurations, error -71 [ 775.192339][ T5839] Bluetooth: hci1: command 0x1003 tx timeout [ 775.198210][ T50] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 776.357979][T15607] syzkaller0: entered promiscuous mode [ 776.397392][T15607] syzkaller0: entered allmulticast mode [ 776.422465][T15617] could not allocate digest TFM handle sha224-generic [ 776.844049][ T30] audit: type=1800 audit(1777040954.541:745): pid=15631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2377" name="file0" dev="overlay" ino=2357 res=0 errno=0 [ 777.532457][T15635] fuse: fd is not a fuse device [ 777.969323][T15644] binder_alloc: 15642: binder_alloc_buf, no vma [ 777.986925][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 778.599826][T15657] overlayfs: failed to get inode (-116) [ 778.621698][T15657] overlayfs: failed to get inode (-116) [ 779.066250][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2389'. [ 780.654135][T15693] netlink: 'syz.3.2390': attribute type 3 has an invalid length. [ 780.680432][T15693] netlink: 'syz.3.2390': attribute type 3 has an invalid length. [ 780.966280][T15696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 783.662817][T15733] syzkaller0: entered promiscuous mode [ 783.670035][T15733] syzkaller0: entered allmulticast mode [ 783.788125][ T30] audit: type=1804 audit(1777040960.989:746): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2401" name="/newroot/437/file1" dev="fuse" ino=1 res=1 errno=0 [ 783.792493][T15735] input: syz1 as /devices/virtual/input/input25 [ 784.293766][ T30] audit: type=1800 audit(1777040961.017:747): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2401" name="/" dev="fuse" ino=1 res=0 errno=0 [ 784.366990][T15704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.519689][ T30] audit: type=1804 audit(1777040962.664:748): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2411" name="/newroot/439/file1" dev="fuse" ino=1 res=1 errno=0 [ 785.541550][ T30] audit: type=1800 audit(1777040962.683:749): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2411" name="/" dev="fuse" ino=1 res=0 errno=0 [ 785.584453][ T30] audit: type=1800 audit(1777040962.683:750): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2411" name="/" dev="fuse" ino=1 res=0 errno=0 [ 785.638350][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 786.214545][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 786.897923][ T30] audit: type=1400 audit(1777040963.946:751): avc: denied { read write } for pid=15782 comm="syz.4.2418" name="radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 786.964347][ T30] audit: type=1400 audit(1777040963.974:752): avc: denied { open } for pid=15782 comm="syz.4.2418" path="/dev/radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 789.465837][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'. [ 793.012996][ T50] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 793.344939][ T5960] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 794.018135][T12269] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 794.383248][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.392350][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.883668][T12269] usb 3-1: Using ep0 maxpacket: 8 [ 794.890786][T12269] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 794.902629][T12269] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 794.912905][T12269] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 794.921478][T12269] usb 3-1: Product: syz [ 794.925857][T12269] usb 3-1: Manufacturer: syz [ 794.931341][T12269] usb 3-1: SerialNumber: syz [ 795.181039][T12269] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 795.190164][T12269] usb 3-1: Handspring Visor / Palm OS: port 176, is for unknown use [ 795.199578][T12269] usb 3-1: Handspring Visor / Palm OS: port 218, is for unknown use [ 795.209350][T12269] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 795.487842][T12269] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 795.502745][T12269] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 795.520988][T12269] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 796.352034][ T5960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.375297][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 796.398408][ T5960] usb 5-1: can't read configurations, error -71 [ 796.921068][T12311] usb 3-1: USB disconnect, device number 65 [ 796.965095][T12311] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 797.004993][T12311] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 797.023704][T12311] visor 3-1:1.0: device disconnected [ 797.652243][T15911] syzkaller0: entered promiscuous mode [ 797.660349][T15911] syzkaller0: entered allmulticast mode [ 797.787379][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2461'. [ 799.541082][T15938] input: syz0 as /devices/virtual/input/input26 [ 799.667924][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2465'. [ 799.881059][T15949] syzkaller0: entered promiscuous mode [ 799.937215][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'. [ 800.109130][T12311] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 800.290803][T12311] usb 3-1: Using ep0 maxpacket: 32 [ 800.301450][ T5960] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 800.304176][T12311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.345256][T12311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.373773][T12311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 800.408381][T12311] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 800.432072][T12311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.451717][T12311] usb 3-1: config 0 descriptor?? [ 800.476347][ T5960] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 800.485681][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.493717][ T5960] usb 5-1: Product: syz [ 800.499018][ T5960] usb 5-1: Manufacturer: syz [ 800.503740][ T5960] usb 5-1: SerialNumber: syz [ 800.518221][ T5960] usb 5-1: config 0 descriptor?? [ 800.748161][ T5960] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 800.955620][T12311] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0013/input/input27 [ 801.451414][T12311] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0013/input/input28 [ 801.995602][T12311] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 802.317138][ T5960] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 802.334661][ T5960] usb 5-1: USB disconnect, device number 69 [ 802.669131][ C1] kye 0003:0458:5011.0013: usb_submit_urb(ctrl) failed: -1 [ 802.868474][T12311] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 803.461213][T15996] syzkaller0: entered promiscuous mode [ 803.472215][T15996] syzkaller0: entered allmulticast mode [ 803.755819][ T29] usb 3-1: USB disconnect, device number 66 [ 804.157252][T15963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.170021][T16010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2483'. [ 804.448298][T16008] could not allocate digest TFM handle sha224-generic [ 804.967626][ T29] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 804.993226][T16020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 805.142376][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 805.192121][ T29] usb 3-1: config 247 has an invalid interface number: 111 but max is 0 [ 805.264096][ T29] usb 3-1: config 247 has no interface number 0 [ 805.312676][ T29] usb 3-1: config 247 interface 111 has no altsetting 0 [ 805.425826][ T29] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=ec.77 [ 805.598036][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.693156][ T29] usb 3-1: Product: syz [ 805.706198][ T29] usb 3-1: Manufacturer: syz [ 805.718010][ T29] usb 3-1: SerialNumber: syz [ 806.832168][ T30] audit: type=1400 audit(1777040982.596:753): avc: denied { listen } for pid=16015 comm="syz.2.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 806.867618][ T5960] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 807.067437][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 807.078819][ T5960] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.088214][ T5960] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 807.099556][ T5960] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 807.136047][ T5960] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.159012][ T5960] usb 6-1: config 1 interface 0 has no altsetting 0 [ 807.169479][ T5960] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 807.178779][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.190745][ T5960] usb 6-1: Product: syz [ 807.196627][ T5960] usb 6-1: Manufacturer: syz [ 807.209514][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.210856][ T5960] usb 6-1: SerialNumber: syz [ 807.225851][T16042] netlink: 'syz.4.2494': attribute type 1 has an invalid length. [ 807.236346][T16033] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 807.251383][T16042] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2494'. [ 807.273866][T16042] ./file0: Can't lookup blockdev [ 807.281574][ T29] snd-usb-audio 3-1:247.111: probe with driver snd-usb-audio failed with error -2 [ 807.295402][ T29] usb 3-1: USB disconnect, device number 67 [ 807.321959][ T7041] udevd[7041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:247.111/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.556526][ T5960] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input29 [ 807.989338][ T5960] bcm5974 6-1:1.0: could not write to device [ 808.008715][ T5178] bcm5974 6-1:1.0: could not read from device [ 808.029927][ T5960] input: failed to attach handler mousedev to device input29, error: -5 [ 808.050202][ T5960] usb 6-1: USB disconnect, device number 67 [ 808.062086][ T5178] bcm5974 6-1:1.0: could not read from device [ 808.068212][T16072] netlink: 'syz.2.2503': attribute type 1 has an invalid length. [ 808.092356][ T5913] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 808.103214][T12600] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 808.285870][ T5913] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 808.294088][ T5913] usb 8-1: config 0 has no interface number 0 [ 808.300407][ T5913] usb 8-1: config 0 interface 50 has no altsetting 0 [ 808.307364][T12600] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.316945][T12600] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 808.327297][T12600] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.336390][T12600] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 808.348188][T12600] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 808.359524][ T5913] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=c4.0e [ 808.368593][T12600] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 808.379989][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.380129][ T29] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 808.388138][ T5913] usb 8-1: Product: syz [ 808.399856][ T5913] usb 8-1: Manufacturer: syz [ 808.404752][ T5913] usb 8-1: SerialNumber: syz [ 808.409987][T12600] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.419513][T12600] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 808.428197][ T5913] usb 8-1: config 0 descriptor?? [ 808.439825][T12600] usb 5-1: Product: syz [ 808.444001][T12600] usb 5-1: Manufacturer: syz [ 808.453224][T16065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 808.465494][T12600] cdc_wdm 5-1:1.0: skipping garbage [ 808.470855][T12600] cdc_wdm 5-1:1.0: skipping garbage [ 808.478799][T12600] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 808.484792][T12600] cdc_wdm 5-1:1.0: Unknown control protocol [ 808.563058][ T29] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 808.575528][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 808.586671][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 808.595531][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 808.604644][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 808.612794][ T29] usb 3-1: Product: syz [ 808.618430][ T29] usb 3-1: Manufacturer: syz [ 808.623042][ T29] usb 3-1: SerialNumber: syz [ 808.629867][ T29] usb 3-1: config 0 descriptor?? [ 808.635758][T16075] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 808.661153][ T29] usb 3-1: selecting invalid altsetting 0 [ 808.750043][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.756646][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.762954][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.769544][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.776187][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.782775][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.789092][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.795680][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.802505][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.809091][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.815333][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.821922][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.828212][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.834802][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.841115][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.847696][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.853974][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.860565][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 808.868712][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 808.875301][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 809.244971][ T5913] usbserial_generic 8-1:0.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 809.252837][T16081] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 809.260953][ T5913] usbserial_generic 8-1:0.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 809.298559][ T29] usb 3-1: USB disconnect, device number 68 [ 809.325661][ T5913] usbserial_generic 8-1:0.50: device has no bulk endpoints [ 809.335188][ T5913] safe_serial 8-1:0.50: safe_serial converter detected [ 809.344314][ T5913] safe_serial 8-1:0.50: probe with driver safe_serial failed with error -22 [ 809.374595][ T5913] usb 8-1: USB disconnect, device number 15 [ 809.437227][T12269] usb 5-1: USB disconnect, device number 70 [ 809.443195][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 809.779318][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2507'. [ 809.993983][ T5913] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 810.326075][ T30] audit: type=1400 audit(1777040985.881:754): avc: denied { connect } for pid=16093 comm="syz.2.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 810.509923][T16087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.518693][T16087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.634673][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 810.751780][ T5913] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 810.778725][ T5913] usb 6-1: can't read configurations, error -71 [ 811.805825][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 812.729402][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 813.017098][T16141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2517'. [ 813.113612][T16123] could not allocate digest TFM handle sha224-generic [ 813.290013][T16146] Bluetooth: MGMT ver 1.23 [ 813.312357][T16138] could not allocate digest TFM handle sha224-generic [ 813.563663][T16149] syzkaller0: entered promiscuous mode [ 813.579405][T16149] syzkaller0: entered allmulticast mode [ 813.736217][ T5913] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 814.111533][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2522'. [ 814.214533][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.228119][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.478900][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 814.586930][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 814.595700][ T5913] usb 5-1: can't read configurations, error -71 [ 814.687211][T12600] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 815.296129][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.304964][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.355688][T12600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 815.365937][T12600] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 815.373570][T12600] usb 3-1: can't read configurations, error -71 [ 815.420269][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2526'. [ 815.475690][T12269] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 815.491198][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 816.020697][T12378] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 816.246035][T12269] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 816.260719][T12269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.275745][T12269] usb 8-1: Product: syz [ 816.291874][T12269] usb 8-1: Manufacturer: syz [ 816.309648][T12269] usb 8-1: SerialNumber: syz [ 816.332364][T12378] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 816.350022][T12378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.379134][T12378] usb 6-1: config 0 descriptor?? [ 816.769196][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 816.807498][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 816.854166][T12600] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 817.736989][T16190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.745859][T16190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.028959][T12378] usb 6-1: Cannot set autoneg [ 818.049784][T12378] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 818.678286][T12311] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 818.686340][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 818.852451][T12311] usb 5-1: Using ep0 maxpacket: 32 [ 818.858882][T12311] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 818.868003][T12311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.879547][T12311] usb 5-1: config 0 descriptor?? [ 819.105183][T12311] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 819.115316][T12311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.125356][T12311] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 819.132932][T12311] usb 5-1: media controller created [ 819.139103][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 819.157503][T12311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.168001][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 819.183973][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 819.209348][T12269] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 819.221602][T12269] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 819.237808][T12269] usb 8-1: USB disconnect, device number 16 [ 819.326066][T12311] az6027: usb out operation failed. (-71) [ 819.336705][T12311] az6027: usb out operation failed. (-71) [ 819.342469][T12311] stb0899_attach: Driver disabled by Kconfig [ 819.348592][T12311] az6027: no front-end attached [ 819.348592][T12311] [ 819.356532][T12311] az6027: usb out operation failed. (-71) [ 819.362279][T12311] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 819.380739][T12311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 819.442836][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 819.461921][T12311] dvb-usb: schedule remote query interval to 400 msecs. [ 819.471294][T12311] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 819.490155][T12311] usb 5-1: USB disconnect, device number 73 [ 819.568877][T12311] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 819.784424][T12600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 819.827306][T12600] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 819.851992][T12600] usb 3-1: can't read configurations, error -71 [ 820.256100][T12311] usb 6-1: USB disconnect, device number 70 [ 821.032724][ T5960] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 821.600100][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.608858][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.643001][ T5960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 821.703104][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 821.760086][ T5960] usb 5-1: can't read configurations, error -71 [ 821.865890][T12600] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 822.079913][T12600] usb 3-1: Using ep0 maxpacket: 32 [ 822.131296][T12600] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 822.163412][T12600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.263563][T12600] usb 3-1: Product: syz [ 822.287488][T12600] usb 3-1: Manufacturer: syz [ 822.300086][T12600] usb 3-1: SerialNumber: syz [ 822.320671][T12600] usb 3-1: config 0 descriptor?? [ 822.538457][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2551'. [ 822.921707][T12600] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 822.957931][T12600] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 824.111993][T12600] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 824.544828][T12600] usb 3-1: USB disconnect, device number 73 [ 827.023495][ T30] audit: type=1400 audit(1777041001.500:755): avc: denied { shutdown } for pid=16305 comm="syz.2.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 827.083537][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.096674][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.105969][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.115484][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.124718][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.134211][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.143420][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.152905][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 827.162143][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 828.284908][ T1582] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 828.523265][T16317] __nla_validate_parse: 11 callbacks suppressed [ 828.523297][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 828.923963][ T1582] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 829.001752][ T1582] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 829.514738][ T1582] usb 8-1: config 0 interface 0 has no altsetting 0 [ 829.801466][ T1582] usb 8-1: string descriptor 0 read error: -71 [ 829.880300][ T1582] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 829.921876][T16329] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 829.969075][ T1582] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 830.037860][ T1582] usb 8-1: config 0 descriptor?? [ 830.049812][T16333] kvm: pic: level sensitive irq not supported [ 830.061564][ T1582] usb 8-1: can't set config #0, error -71 [ 830.073271][T16333] kvm: pic: non byte read [ 830.112391][T16333] kvm: pic: level sensitive irq not supported [ 830.112541][T16333] kvm: pic: non byte read [ 830.141971][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2571'. [ 830.153818][T16333] kvm: pic: level sensitive irq not supported [ 830.153875][T16333] kvm: pic: non byte read [ 830.172349][ T1582] usb 8-1: USB disconnect, device number 17 [ 830.197630][T16333] kvm: pic: level sensitive irq not supported [ 830.200280][T16333] kvm: pic: non byte read [ 830.237475][T16333] kvm: pic: level sensitive irq not supported [ 830.237823][T16333] kvm: pic: non byte read [ 832.081753][T12269] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 832.772270][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.781045][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.899386][T16370] syzkaller0: entered promiscuous mode [ 832.977509][T16370] syzkaller0: entered allmulticast mode [ 833.016604][T12269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 833.037374][T12269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 833.046371][T12269] usb 3-1: can't read configurations, error -71 [ 833.458284][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 833.967042][T16401] netlink: 132732 bytes leftover after parsing attributes in process `syz.5.2588'. [ 834.061371][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2589'. [ 834.144182][T12311] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 834.297981][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 834.327200][T12311] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 834.411591][T12311] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 834.429926][T12311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 834.440226][T12311] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 834.449637][T12311] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 834.471261][T12311] usb 5-1: Product: syz [ 834.482016][T12311] usb 5-1: Manufacturer: syz [ 834.496276][T12311] usb 5-1: SerialNumber: syz [ 834.514966][T12311] usb 5-1: config 0 descriptor?? [ 834.671251][T12269] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 834.696393][T16399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 834.734691][T12311] usb 5-1: selecting invalid altsetting 0 [ 834.967113][T12269] usb 6-1: Using ep0 maxpacket: 16 [ 834.990418][T12269] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 835.026235][T12269] usb 6-1: config 0 has no interface number 0 [ 835.050514][T12269] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 835.083906][T12269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.108868][T12311] usb 5-1: USB disconnect, device number 76 [ 835.123664][T12269] usb 6-1: Product: syz [ 835.136759][T12269] usb 6-1: Manufacturer: syz [ 835.154716][T12269] usb 6-1: SerialNumber: syz [ 835.205139][T12269] usb 6-1: config 0 descriptor?? [ 836.356211][ T30] audit: type=1400 audit(1777041010.231:756): avc: denied { read append } for pid=16432 comm="syz.7.2597" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 836.412042][T12269] usb 6-1: selecting invalid altsetting 1 [ 836.426249][T12269] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 836.444835][ T24] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 836.455451][T12269] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 836.462633][T12269] speedtch 6-1:0.1: probe with driver speedtch failed with error -22 [ 836.479662][T12269] usb 6-1: USB disconnect, device number 71 [ 836.528244][T16433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 836.553586][T16433] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 836.803040][T16433] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 836.820480][T16433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 836.826652][T16433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 836.843037][T16433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.849152][T16433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 836.871533][T16433] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 836.877606][T16433] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 836.916622][T16433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 836.932061][T16433] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 837.059909][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.068722][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.276748][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2599'. [ 837.329016][T12269] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 837.515361][T12269] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 837.530461][T12269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.540296][T12269] usb 3-1: Product: syz [ 837.544798][T12269] usb 3-1: Manufacturer: syz [ 837.547789][ T30] audit: type=1400 audit(1777041011.353:757): avc: denied { ioctl } for pid=16455 comm="syz.5.2601" path="net:[4026533947]" dev="nsfs" ino=4026533947 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 837.549492][T12269] usb 3-1: SerialNumber: syz [ 837.587103][T12269] usb 3-1: config 0 descriptor?? [ 837.821556][T12269] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 837.825958][T16462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2603'. [ 837.854296][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.860718][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.897744][T16462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16462 comm=syz.5.2603 [ 838.707190][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 838.963552][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 839.049127][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 839.049164][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 839.115018][T16482] tipc: Started in network mode [ 839.119996][T16482] tipc: Node identity , cluster identity 4711 [ 839.126504][T16482] tipc: Failed to set node id, please configure manually [ 839.133656][T16482] tipc: Enabling of bearer rejected, failed to enable media [ 839.142094][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 839.726202][T12269] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 839.801108][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 839.852587][T12269] usb 3-1: USB disconnect, device number 76 [ 839.922737][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2612'. [ 839.981828][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 840.159906][ T24] usb 5-1: can't read configurations, error -71 [ 840.820372][T16489] nbd: socks must be embedded in a SOCK_ITEM attr [ 840.929944][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 841.186291][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 841.271796][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 841.283363][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 841.365920][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 841.657117][T12600] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 842.111451][T16497] could not allocate digest TFM handle sha224-generic [ 842.118273][T12600] usb 8-1: Using ep0 maxpacket: 16 [ 842.127611][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 842.185521][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 842.318637][T12600] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.338148][ T29] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 842.338824][T12600] usb 8-1: config 0 interface 0 has no altsetting 0 [ 842.353147][T12140] udevd[12140]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 842.363966][T12600] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 842.373237][T12600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.402880][T12600] usb 8-1: config 0 descriptor?? [ 842.509010][ T29] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 842.529311][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.553832][ T29] usb 3-1: Product: syz [ 842.562386][ T29] usb 3-1: Manufacturer: syz [ 842.567606][ T29] usb 3-1: SerialNumber: syz [ 842.582765][ T29] usb 3-1: config 0 descriptor?? [ 842.867890][T16517] syzkaller0: entered promiscuous mode [ 842.868580][T12600] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 842.879030][T16517] syzkaller0: entered allmulticast mode [ 843.152723][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 843.587732][T12600] usb 8-1: USB disconnect, device number 18 [ 844.164689][ T29] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 844.193244][ T29] usb 3-1: Firmware version (0.0) predates our first public release. [ 844.206589][ T29] usb 3-1: Please update to version 0.2 or newer [ 844.429744][ T29] usb 3-1: USB disconnect, device number 77 [ 844.467188][T12600] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 844.627165][T12600] usb 6-1: Using ep0 maxpacket: 16 [ 844.634711][T12600] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 844.643253][T12600] usb 6-1: config 0 has no interface number 0 [ 844.650447][T12600] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 844.661344][T12600] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 844.676169][T12600] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 844.685593][T12600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.696004][T12600] usb 6-1: Product: syz [ 844.700353][T12600] usb 6-1: Manufacturer: syz [ 844.705294][T12600] usb 6-1: SerialNumber: syz [ 845.114847][T12600] usb 6-1: config 0 descriptor?? [ 845.124948][T16540] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.133950][T16540] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.232934][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 845.399955][T16540] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.417336][T16540] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.543605][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 845.667032][T12600] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 847.084984][ T1582] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 847.207229][T12600] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 847.228957][T12600] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 847.259970][T12600] asix 6-1:0.34: probe with driver asix failed with error -71 [ 847.280116][T12600] usb 6-1: USB disconnect, device number 72 [ 847.564878][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 847.701165][T16590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.710260][T16590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.792746][ T5960] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 847.808549][ T1582] usb 5-1: unable to get BOS descriptor or descriptor too short [ 847.828551][ T1582] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 847.836518][ T1582] usb 5-1: can't read configurations, error -71 [ 847.971873][ T5960] usb 8-1: Using ep0 maxpacket: 16 [ 847.978578][ T5960] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.988877][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.999840][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 848.009673][ T5960] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 848.019348][ T5960] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.033323][ T5960] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 848.042360][ T5960] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 848.050369][ T5960] usb 8-1: Manufacturer: syz [ 848.056392][ T5960] usb 8-1: config 0 descriptor?? [ 848.208341][T12600] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 848.324639][ T5960] rc_core: IR keymap rc-hauppauge not found [ 848.331331][ T5960] Registered IR keymap rc-empty [ 848.338917][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 848.367457][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 848.389740][ T5960] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 848.405975][ T5960] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input31 [ 848.578597][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 848.603393][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 848.624522][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 848.671120][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.034349][T16609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.043183][T16609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.062627][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 849.128020][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.158304][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.372651][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.427415][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.467989][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.510706][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 849.588820][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 849.906644][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 850.369229][ T5960] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 850.505975][ T5960] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 850.602927][ T5960] usb 8-1: USB disconnect, device number 19 [ 850.941089][T16626] could not allocate digest TFM handle sha224-generic [ 851.466661][T16622] could not allocate digest TFM handle sha224-generic [ 851.537338][T12600] usb 6-1: unable to get BOS descriptor or descriptor too short [ 851.623326][T12600] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 851.661695][T12600] usb 6-1: can't read configurations, error -71 [ 852.534333][T12600] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 853.742803][T16650] could not allocate digest TFM handle sha224-generic [ 854.302127][T16671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.311028][T16671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.325321][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 854.469257][ T5913] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 855.147120][T16677] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 855.147120][T16677] program syz.7.2659 not setting count and/or reply_len properly [ 855.410974][T16679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.419738][T16679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.732791][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 855.746590][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 855.823689][T12600] usb 6-1: unable to get BOS descriptor or descriptor too short [ 855.833260][ T5913] usb 5-1: can't read configurations, error -71 [ 855.858255][T12600] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 855.880033][T12600] usb 6-1: can't read configurations, error -71 [ 855.908514][T12600] usb usb6-port1: attempt power cycle [ 855.966051][ T29] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 856.066559][T16697] netlink: 'syz.5.2663': attribute type 1 has an invalid length. [ 856.074455][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2663'. [ 856.611279][T16700] netlink: 'syz.4.2666': attribute type 12 has an invalid length. [ 857.292107][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.300959][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.092814][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 859.132337][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 859.165118][ T29] usb 8-1: can't read configurations, error -71 [ 859.294394][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 860.779234][T16753] ±ÿ: left allmulticast mode [ 861.969026][T16774] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 862.112047][T16778] syzkaller0: entered promiscuous mode [ 862.149144][T16778] syzkaller0: entered allmulticast mode [ 862.186514][T16780] 0: reclassify loop, rule prio 0, protocol 700 [ 862.385279][T16783] syzkaller0: entered promiscuous mode [ 862.404381][T16783] syzkaller0: entered allmulticast mode [ 863.070758][T16797] tipc: Enabled bearer , priority 0 [ 863.143455][T16799] syzkaller0: entered promiscuous mode [ 863.162309][T16799] syzkaller0: entered allmulticast mode [ 863.295417][T16797] tipc: Resetting bearer [ 863.322489][T16803] syzkaller0: entered promiscuous mode [ 863.334453][T16803] syzkaller0: entered allmulticast mode [ 863.509435][ T29] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 863.521881][T16796] tipc: Resetting bearer [ 863.555694][T16796] tipc: Disabling bearer [ 863.569929][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2686'. [ 864.303832][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.312606][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.478247][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 866.518763][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 866.542850][ T29] usb 3-1: can't read configurations, error -71 [ 866.762434][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2694'. [ 866.863177][T16842] could not allocate digest TFM handle sha224-generic [ 867.292316][ T29] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 867.922837][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 867.940540][ T29] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 867.963152][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.047203][ T29] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 868.762069][ T29] gspca_nw80x: reg_r err -71 [ 868.791272][ T29] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 868.842957][ T29] usb 3-1: USB disconnect, device number 79 [ 869.927540][T12600] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 870.170564][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.179445][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.283862][T12600] usb 6-1: unable to get BOS descriptor or descriptor too short [ 870.543294][T12600] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 870.580566][T12600] usb 6-1: can't read configurations, error -71 [ 870.754309][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 870.879640][T16895] could not allocate digest TFM handle sha224-generic [ 871.194306][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2713'. [ 871.959030][T16925] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 871.967123][T16925] dummy0: left allmulticast mode [ 871.972133][T16925] dummy0: left promiscuous mode [ 871.977521][T16925] bridge0: port 4(dummy0) entered disabled state [ 872.006787][T16925] team0: Port device dummy0 added [ 872.348528][T12600] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 872.464463][ T1582] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 872.585365][T12600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.595565][T12600] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 872.604681][T12600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.614480][T12600] usb 6-1: config 0 descriptor?? [ 872.622237][T12600] pwc: Askey VC010 type 2 USB webcam detected. [ 872.628509][ T1582] usb 3-1: Using ep0 maxpacket: 16 [ 872.636302][ T1582] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 872.649329][ T1582] usb 3-1: config 0 interface 0 has no altsetting 0 [ 873.040325][T16935] Device name cannot be null; rc = [-22] [ 873.049183][ T1582] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 873.058367][ T1582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.068328][ T1582] usb 3-1: config 0 descriptor?? [ 873.151798][T12600] pwc: recv_control_msg error -32 req 02 val 2b00 [ 873.159506][T12600] pwc: recv_control_msg error -32 req 02 val 2700 [ 873.166685][T12600] pwc: recv_control_msg error -32 req 02 val 2c00 [ 873.174121][T12600] pwc: recv_control_msg error -32 req 04 val 1000 [ 873.181245][T12600] pwc: recv_control_msg error -32 req 04 val 1300 [ 873.188400][T12600] pwc: recv_control_msg error -32 req 04 val 1400 [ 873.195873][T12600] pwc: recv_control_msg error -32 req 02 val 2000 [ 873.204943][T12600] pwc: recv_control_msg error -32 req 02 val 2100 [ 873.212137][T12600] pwc: recv_control_msg error -32 req 04 val 1500 [ 873.219566][T12600] pwc: recv_control_msg error -32 req 02 val 2500 [ 873.226674][T12600] pwc: recv_control_msg error -32 req 02 val 2400 [ 873.472257][T12600] pwc: recv_control_msg error -71 req 02 val 2900 [ 873.482790][T12600] pwc: recv_control_msg error -71 req 02 val 2800 [ 873.492032][T12600] pwc: recv_control_msg error -71 req 04 val 1100 [ 873.499970][T12600] pwc: recv_control_msg error -71 req 04 val 1200 [ 873.512531][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.529527][T12600] pwc: Registered as video103. [ 873.534368][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.544209][T12600] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 873.555319][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.570584][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.589158][T16938] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 873.592719][T12600] usb 6-1: USB disconnect, device number 78 [ 873.606561][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.625259][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.630767][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2719'. [ 873.639150][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.662468][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.670171][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.678225][ T1582] logitech 0003:046D:C29C.0015: unknown main item tag 0x0 [ 873.715446][ T1582] logitech 0003:046D:C29C.0015: hidraw0: USB HID v0.20 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 873.744997][T16925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.777532][T16925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.804609][ T1582] logitech 0003:046D:C29C.0015: no inputs found [ 873.805737][T16938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.858567][ T1582] usb 3-1: USB disconnect, device number 80 [ 873.977722][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 874.738991][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 874.758638][ T30] audit: type=1400 audit(1777041045.716:758): avc: denied { bind } for pid=16945 comm="syz.5.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 875.566009][ T29] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 875.893057][T16966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.930030][T16966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.057936][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 877.090095][ T29] usb 6-1: no configurations [ 877.105975][T16976] could not allocate digest TFM handle sha224-generic [ 877.120516][ T29] usb 6-1: can't read configurations, error -22 [ 877.128703][ T30] audit: type=1400 audit(1777041048.383:759): avc: denied { watch_sb } for pid=16979 comm="syz.7.2729" path="/139/file1" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 878.892459][ T30] audit: type=1400 audit(1777041050.039:760): avc: denied { append } for pid=16999 comm="syz.2.2735" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 878.923410][ T1582] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 879.068004][T17004] vivid-000: disconnect [ 879.929728][T16999] vivid-000: reconnect [ 879.942230][ T30] audit: type=1400 audit(1777041050.199:761): avc: denied { ioctl } for pid=16999 comm="syz.2.2735" path="/dev/radio0" dev="devtmpfs" ino=957 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 880.685060][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.694598][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.035122][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2737'. [ 881.612076][T12269] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 881.762080][T17026] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 882.062778][ T1582] usb 5-1: unable to get BOS descriptor or descriptor too short [ 882.460342][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.469062][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.484607][ T1582] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 882.519386][ T1582] usb 5-1: can't read configurations, error -71 [ 882.904609][ T5893] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 882.946960][T17038] syzkaller0: entered promiscuous mode [ 882.952576][T17038] syzkaller0: entered allmulticast mode [ 883.640808][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.649752][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.836492][T12269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 884.865363][T12269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 884.880982][T12269] usb 3-1: can't read configurations, error -71 [ 885.060157][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 885.634511][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 887.156554][ T1582] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 888.165252][T17089] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.237977][T17089] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.461710][ T5893] usb 8-1: unable to get BOS descriptor or descriptor too short [ 888.467061][T17089] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.474454][ T5893] usb 8-1: unable to read config index 0 descriptor/start: -32 [ 888.487027][ T5893] usb 8-1: chopping to 0 config(s) [ 888.492233][ T5893] usb 8-1: can't read configurations, error -32 [ 888.556688][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.565494][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.734989][T17089] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.824912][ T1582] usb 6-1: unable to get BOS descriptor or descriptor too short [ 888.847014][ T1582] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 888.854633][ T1582] usb 6-1: can't read configurations, error -71 [ 889.173506][ T6111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.314724][ T6111] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.167382][ T6111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.195640][ T6111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.073279][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2756'. [ 891.935858][ T30] audit: type=1400 audit(1777041062.027:762): avc: denied { ioctl } for pid=17105 comm="syz.4.2758" path="socket:[56966]" dev="sockfs" ino=56966 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 892.699400][T17099] syz.7.2754 (17099): drop_caches: 2 [ 893.719961][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 893.736364][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 895.931132][ T30] audit: type=1400 audit(1777041065.976:763): avc: denied { read write } for pid=17152 comm="syz.2.2766" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 896.316940][ T30] audit: type=1400 audit(1777041065.976:764): avc: denied { open } for pid=17152 comm="syz.2.2766" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 896.774892][ T30] audit: type=1400 audit(1777041066.088:765): avc: denied { ioctl } for pid=17152 comm="syz.2.2766" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 897.074493][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2770'. [ 897.151539][T12269] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 897.530607][T17159] could not allocate digest TFM handle sha224-generic [ 897.992310][T17185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.001996][T17185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.110900][T12378] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 898.976524][T17192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.985412][T17192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.964999][T12378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 899.996706][T12378] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 900.021253][T12378] usb 5-1: can't read configurations, error -71 [ 901.019851][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2777'. [ 901.995711][T12269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 902.273752][T12269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 902.500911][T12269] usb 3-1: can't read configurations, error -71 [ 902.841923][T17234] libceph: resolve '0..' (ret=-3): failed [ 903.104972][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2787'. [ 903.531905][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 903.568131][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 903.626874][T12269] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 904.405093][T17253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.413941][T17253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.634737][T12269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 904.677501][T12269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 904.682402][T17256] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 904.685529][T12269] usb 3-1: can't read configurations, error -71 [ 904.703874][T12269] usb usb3-port1: attempt power cycle [ 906.801440][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 907.454700][T17289] tipc: Enabled bearer , priority 0 [ 907.467459][T17289] syzkaller0: entered promiscuous mode [ 907.473262][T17289] syzkaller0: entered allmulticast mode [ 907.501457][T17289] tipc: Resetting bearer [ 907.516571][T17288] tipc: Resetting bearer [ 907.537475][T17288] tipc: Disabling bearer [ 908.012314][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 908.241307][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 908.298163][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 908.376945][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 908.463398][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 908.486990][T12378] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 908.491330][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.515809][ T24] usb 5-1: Product: syz [ 908.526338][ T24] usb 5-1: Manufacturer: syz [ 908.534653][ T24] usb 5-1: SerialNumber: syz [ 908.688625][ T30] audit: type=1400 audit(1777041077.917:766): avc: denied { write } for pid=17302 comm="syz.5.2802" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 908.725596][T12378] usb 3-1: Using ep0 maxpacket: 16 [ 908.745166][T12378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.805498][T12378] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 908.828268][ T30] audit: type=1400 audit(1777041078.048:767): avc: denied { read } for pid=17304 comm="syz.3.2803" path="socket:[58556]" dev="sockfs" ino=58556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 908.864888][T12378] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 908.865707][ T24] usb 5-1: Not enough endpoints found in device, aborting! [ 908.912089][T12378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.032575][T12378] usb 3-1: config 0 descriptor?? [ 909.574547][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.614792][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.709826][T12378] usbhid 3-1:0.0: can't add hid device: -71 [ 909.733510][T12378] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 909.756275][T12378] usb 3-1: USB disconnect, device number 86 [ 911.278035][ T24] usb 5-1: USB disconnect, device number 87 [ 911.336647][T17324] syzkaller0: entered promiscuous mode [ 911.348407][T17324] syzkaller0: entered allmulticast mode [ 912.268751][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 912.285132][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 913.277156][T17353] tipc: Started in network mode [ 913.305398][T17353] tipc: Node identity 02f90a666c25, cluster identity 4711 [ 913.319065][T17353] tipc: Enabled bearer , priority 0 [ 913.341281][T17354] syzkaller0: entered promiscuous mode [ 913.364643][T17354] syzkaller0: entered allmulticast mode [ 914.039444][T17366] tipc: Resetting bearer [ 914.063513][T17352] tipc: Resetting bearer [ 914.188868][T17352] tipc: Disabling bearer [ 914.522630][ T5913] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 914.910071][T17381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.918852][T17381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.103833][ T5913] usb 8-1: unable to get BOS descriptor or descriptor too short [ 915.118504][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 915.133659][ T5913] usb 8-1: can't read configurations, error -71 [ 917.299223][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 917.332050][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2824'. [ 919.655764][ T30] audit: type=1400 audit(1777041088.192:768): avc: denied { watch } for pid=17420 comm="syz.4.2832" path="/529/bus/file1" dev="overlay" ino=2824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 919.974442][T12378] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 920.172780][T12378] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 920.234628][T12378] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 920.287892][T12378] usb 6-1: config 0 interface 0 has no altsetting 0 [ 920.326245][T12378] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 920.362211][T12378] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 920.400436][T12378] usb 6-1: Product: syz [ 920.420415][T12378] usb 6-1: Manufacturer: syz [ 920.455387][T12378] usb 6-1: SerialNumber: syz [ 920.530651][T12378] usb 6-1: config 0 descriptor?? [ 920.547190][T17425] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 920.578013][T12378] usb 6-1: selecting invalid altsetting 0 [ 921.282936][T17425] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 921.291515][T17425] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 921.299364][T17425] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 922.882894][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 923.329896][T17422] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 923.345051][T12269] usb 6-1: USB disconnect, device number 83 [ 923.359661][T12378] kernel read not supported for file /video7 (pid: 12378 comm: kworker/0:3) [ 923.730196][T17471] fuse: fd is not a fuse device [ 923.832342][T12269] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 923.832792][T17476] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 923.867607][ T30] audit: type=1400 audit(1777041092.132:769): avc: denied { bind } for pid=17478 comm="syz.2.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 923.972975][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2850'. [ 924.639951][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2854'. [ 926.349470][T17500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.358234][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.636617][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 928.418986][T12269] usb 6-1: unable to get BOS descriptor or descriptor too short [ 928.455227][T12269] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 928.464461][T12269] usb 6-1: can't read configurations, error -71 [ 929.208086][T17507] could not allocate digest TFM handle sha224-generic [ 930.052637][T17535] random: crng reseeded on system resumption [ 930.543547][ T30] audit: type=1400 audit(1777041098.383:770): avc: denied { ioctl } for pid=17531 comm="syz.4.2863" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 930.604386][T17541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 930.611077][T17541] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 930.623169][T17541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 930.632074][T17541] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 930.679352][T17541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 930.692971][T17541] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 930.725136][T17541] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 930.731838][T17541] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 930.747455][T17541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 930.753806][T17541] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 932.414154][T12378] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 932.561337][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2870'. [ 933.219708][T17561] vlan2: entered promiscuous mode [ 933.226384][T17561] vlan2: entered allmulticast mode [ 933.231585][T17561] hsr_slave_1: entered allmulticast mode [ 933.306412][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 933.582274][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.591038][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.064978][T12378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 936.140729][T12378] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 936.241768][T12378] usb 6-1: can't read configurations, error -71 [ 936.930296][T17604] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 937.795112][ T30] audit: type=1326 audit(1777041105.121:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.2.2886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f257ed9cdd9 code=0x0 [ 937.991125][T12378] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 938.248652][T12378] usb 5-1: Using ep0 maxpacket: 8 [ 938.266628][T12378] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 938.286378][T12378] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 938.323906][T12378] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 938.367048][T12378] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.412075][T12378] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 938.449835][T12378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.672615][ T30] audit: type=1400 audit(1777041105.982:772): avc: denied { search } for pid=17627 comm="syz.7.2887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 938.754108][ T30] audit: type=1400 audit(1777041105.982:773): avc: denied { search } for pid=17627 comm="syz.7.2887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 938.829549][T12378] usb 5-1: GET_CAPABILITIES returned 0 [ 938.848667][T12378] usbtmc 5-1:16.0: can't read capabilities [ 938.963948][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 940.158250][T12269] usb 5-1: USB disconnect, device number 88 [ 940.292669][T17644] syzkaller0: entered promiscuous mode [ 940.309529][T17644] syzkaller0: entered allmulticast mode [ 940.388864][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x16c200000080 [ 940.408185][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x16c200000081 [ 940.451384][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd4c00000000 [ 940.493309][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xd4c00000001 [ 940.517056][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x33900000080 [ 940.538063][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x33900000081 [ 940.569446][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x196000000000 [ 940.589847][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x196000000001 [ 940.616082][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf19e00000080 [ 940.638092][T17645] kvm: kvm [17643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xf19e00000081 [ 941.494980][ T5893] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 941.690469][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 941.700235][ T5893] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 941.713812][ T5893] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 941.743915][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.751916][ T5893] usb 5-1: Product: syz [ 941.756173][ T5893] usb 5-1: Manufacturer: syz [ 941.760764][ T5893] usb 5-1: SerialNumber: syz [ 941.765424][ T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 942.218726][ T5893] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 942.226116][ T5893] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 942.234681][ T5893] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 942.242698][ T5893] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 942.272601][ T5893] usb 5-1: USB disconnect, device number 89 [ 942.299191][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.299296][T12140] udevd[12140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.310389][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.339544][ T29] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 942.348690][ T29] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 942.356989][ T29] usb 8-1: Manufacturer: syz [ 942.363288][ T29] usb 8-1: config 0 descriptor?? [ 942.677728][T17671] fuse: fd is not a fuse device [ 943.268897][ T29] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 944.633773][ T30] audit: type=1400 audit(1777041111.550:774): avc: denied { getopt } for pid=17688 comm="syz.4.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 945.066916][ T5913] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 945.316232][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 945.522793][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 945.833912][T17692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 945.841133][T17692] IPv6: NLM_F_CREATE should be set when creating new route [ 945.858415][T17692] lo: entered allmulticast mode [ 945.865329][T17692] tunl0: entered allmulticast mode [ 945.874687][T17692] gre0: entered allmulticast mode [ 945.892074][T17692] gretap0: entered allmulticast mode [ 945.902197][T17692] erspan0: entered allmulticast mode [ 945.911211][T17692] ip_vti0: entered allmulticast mode [ 945.924969][T17692] ip6_vti0: entered allmulticast mode [ 945.936524][T17692] sit0: entered allmulticast mode [ 945.945580][T17692] ip6tnl0: entered allmulticast mode [ 945.953537][T17692] ip6gre0: entered allmulticast mode [ 945.960922][T17692] syz_tun: entered allmulticast mode [ 945.969883][T17692] ip6gretap0: entered allmulticast mode [ 945.978577][T17692] bridge0: port 4(geneve1) entered disabled state [ 945.985151][T17692] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.993122][T17692] bridge0: entered allmulticast mode [ 946.005350][T17692] vcan0: entered allmulticast mode [ 946.019186][T17692] bond0: entered allmulticast mode [ 946.024554][T17692] bond_slave_0: entered allmulticast mode [ 946.031290][T17692] bond_slave_1: entered allmulticast mode [ 946.044440][T17692] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 946.055923][T17692] team0: entered allmulticast mode [ 946.066357][T17692] team_slave_0: entered allmulticast mode [ 946.075893][T17692] team_slave_1: entered allmulticast mode [ 946.089717][T17692] batman_adv: batadv0: Interface deactivated: dummy0 [ 946.100203][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.111542][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.122880][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.134226][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.145531][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.156841][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.168145][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.179447][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.190748][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.202050][T17692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (20160) [ 946.221846][T17692] dummy0: entered allmulticast mode [ 946.228719][T17692] nlmon0: entered allmulticast mode [ 946.235503][T17692] caif0: entered allmulticast mode [ 946.241186][T17692] vxcan0: entered allmulticast mode [ 946.247257][T17692] vxcan1: entered allmulticast mode [ 946.253209][T17692] veth0: entered allmulticast mode [ 946.259573][T17692] veth1: entered allmulticast mode [ 946.271690][T17692] wg0: entered allmulticast mode [ 946.279567][T17692] wg1: entered allmulticast mode [ 946.289182][T17692] wg2: entered allmulticast mode [ 946.299299][T17692] veth0_to_bridge: entered allmulticast mode [ 946.312527][T17692] veth1_to_bridge: entered allmulticast mode [ 946.324724][T17692] veth0_to_bond: entered allmulticast mode [ 946.340064][T17692] veth1_to_bond: entered allmulticast mode [ 946.351257][T17692] veth0_to_team: entered allmulticast mode [ 946.363790][T17692] veth1_to_team: entered allmulticast mode [ 946.381077][T17692] veth0_to_batadv: entered allmulticast mode [ 946.394186][T17692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.421005][T17692] batadv_slave_0: entered allmulticast mode [ 946.433646][T17692] veth1_to_batadv: entered allmulticast mode [ 946.444391][T17692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.469809][T17692] batadv_slave_1: entered allmulticast mode [ 946.479790][T17692] xfrm0: entered allmulticast mode [ 946.490278][T17692] veth0_to_hsr: entered allmulticast mode [ 946.499180][T17692] hsr_slave_0: entered allmulticast mode [ 946.508503][T17692] veth1_to_hsr: entered allmulticast mode [ 946.518128][T17692] hsr_slave_1: entered allmulticast mode [ 946.527150][T17692] hsr0: entered allmulticast mode [ 946.533795][T17692] veth1_virt_wifi: entered allmulticast mode [ 946.545028][T17692] veth0_virt_wifi: entered allmulticast mode [ 946.554352][T17692] virt_wifi0: entered allmulticast mode [ 946.560830][T17692] veth1_vlan: entered allmulticast mode [ 946.571552][T17692] veth0_vlan: entered allmulticast mode [ 946.591700][T17692] vlan0: entered allmulticast mode [ 946.598118][T17692] vlan1: entered allmulticast mode [ 946.605016][T17692] macvlan0: entered allmulticast mode [ 946.613159][T17692] macvlan1: entered allmulticast mode [ 946.622815][T17692] ipvlan0: entered allmulticast mode [ 946.631292][T17692] ipvlan1: entered allmulticast mode [ 946.640691][T17692] veth1_macvtap: entered allmulticast mode [ 946.683817][T17692] veth0_macvtap: entered allmulticast mode [ 946.725347][T17692] macvtap0: entered allmulticast mode [ 946.744567][T17692] macsec0: entered allmulticast mode [ 946.772286][T17692] geneve0: entered allmulticast mode [ 946.799345][T17692] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 946.858910][T17692] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 946.933685][T17692] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 946.969415][T17704] could not allocate digest TFM handle sha224-generic [ 946.984326][T17692] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 946.998633][T17692] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 947.007331][T17692] vxlan0: entered allmulticast mode [ 947.013481][T17692] ip6tnl1: entered allmulticast mode [ 947.019300][T17692] bond1: entered allmulticast mode [ 947.025124][T17692] ipip0: entered allmulticast mode [ 947.034986][T17692] bond2: entered allmulticast mode [ 947.041161][T17692] syztnl1: entered allmulticast mode [ 947.046980][T17692] vlan2: left promiscuous mode [ 947.051919][T17692] bridge0: left promiscuous mode [ 947.057678][T17692] vlan2: entered allmulticast mode [ 947.078528][T17692] @: entered allmulticast mode [ 947.086544][T17692] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 947.093844][T17692] veth2: entered allmulticast mode [ 947.099370][T17692] veth3: entered allmulticast mode [ 947.149721][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 947.159217][ T5913] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 947.169929][ T5913] usb 6-1: can't read configurations, error -71 [ 947.201859][T16731] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.210839][T16731] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.226602][T16731] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.236950][T16731] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.297608][T17711] tipc: Enabled bearer , priority 0 [ 947.323625][T16731] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.421958][T16731] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.432713][T16731] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.442298][T16731] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.476801][T17709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 947.860629][T17711] tipc: Resetting bearer [ 947.910312][T17712] syzkaller0: entered promiscuous mode [ 947.923732][T17712] syzkaller0: entered allmulticast mode [ 947.959850][T17708] tipc: Resetting bearer [ 948.024786][T17708] tipc: Disabling bearer [ 949.744616][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 950.121892][ T24] usb 8-1: USB disconnect, device number 26 [ 950.774124][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 950.783477][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x2 [ 950.794557][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 950.803529][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x2 [ 950.868933][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 950.939463][T17746] kvm_intel: kvm [17745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x2 [ 952.716641][ T24] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 953.058423][ T5913] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 953.774431][ T1582] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 954.633738][T17800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.780353][T17800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.818655][T17801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.866426][T17801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.933192][ T30] audit: type=1400 audit(1777041121.198:775): avc: denied { read } for pid=17798 comm="syz.4.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 955.904101][T17808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.952950][T17808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.418713][T17813] vlan0: entered promiscuous mode [ 956.451386][T17813] vlan0: entered allmulticast mode [ 956.474143][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'. [ 956.490487][T17813] hsr_slave_1: entered allmulticast mode [ 958.543085][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 958.561427][ T24] usb 8-1: unable to read config index 0 descriptor/start: -32 [ 958.577584][ T24] usb 8-1: chopping to 0 config(s) [ 958.587308][ T24] usb 8-1: can't read configurations, error -32 [ 958.735234][ T24] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 958.906362][ T24] usb 8-1: device descriptor read/64, error -32 [ 959.045213][ T24] usb usb8-port1: attempt power cycle [ 959.082148][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 959.100223][ T5913] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 959.107879][ T5913] usb 3-1: chopping to 0 config(s) [ 959.113032][ T5913] usb 3-1: can't read configurations, error -32 [ 959.259171][ T5913] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 959.555661][ T5913] usb 3-1: device descriptor read/64, error -32 [ 959.588000][ T1582] usb 6-1: unable to get BOS descriptor or descriptor too short [ 959.589684][ T24] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 959.621596][ T1582] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 959.632081][ T24] usb 8-1: device descriptor read/8, error -32 [ 959.632141][ T1582] usb 6-1: chopping to 0 config(s) [ 959.643576][ T1582] usb 6-1: can't read configurations, error -32 [ 959.686681][ T5913] usb usb3-port1: attempt power cycle [ 959.780010][ T1582] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 959.897499][ T24] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 959.962860][ T1582] usb 6-1: device descriptor read/64, error -32 [ 960.134470][ T1582] usb usb6-port1: attempt power cycle [ 960.163025][T17840] input: syz1 as /devices/virtual/input/input33 [ 960.245512][ T24] usb 8-1: device not accepting address 30, error -71 [ 960.452213][ T24] usb usb8-port1: unable to enumerate USB device [ 961.174858][T17849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 961.454323][ T30] audit: type=1400 audit(1777041127.206:776): avc: denied { getattr } for pid=17845 comm="syz.2.2939" name="saved_tgids" dev="tracefs" ino=3977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 962.294895][T17854] could not allocate digest TFM handle sha224-generic [ 964.279843][ T1582] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 964.536714][ T1582] usb 8-1: device descriptor read/64, error -71 [ 964.813197][ T1582] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 965.146389][ T1582] usb 8-1: device descriptor read/64, error -71 [ 965.283666][ T1582] usb usb8-port1: attempt power cycle [ 966.123178][ T30] audit: type=1400 audit(1777041131.669:777): avc: denied { nlmsg_read } for pid=17902 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 966.127073][T17905] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2953'. [ 969.176842][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.183320][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.548946][T17935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17935 comm=syz.4.2960 [ 970.924866][ T1582] hid_parser_main: 27 callbacks suppressed [ 970.924883][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.019863][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.068009][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.129701][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.185872][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.199784][T12600] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 971.529032][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.552836][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.576376][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 971.660509][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 972.004822][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 972.020148][T12600] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 972.035379][ T1582] hid-generic 0006:0004:0009.0017: unknown main item tag 0x0 [ 972.044795][T12600] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.067353][ T1582] hid-generic 0006:0004:0009.0017: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 972.088656][T12600] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 972.122605][T12600] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 972.186612][T12600] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 972.214312][T12600] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 972.244215][T12600] usb 8-1: Product: syz [ 972.265320][T12600] usb 8-1: Manufacturer: syz [ 972.283640][T17951] fido_id[17951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 972.675823][ T30] audit: type=1326 audit(1777041137.799:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17922 comm="syz.7.2958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e9e99cdd9 code=0x0 [ 973.031888][T12600] usb 8-1: USB disconnect, device number 34 [ 975.122249][T17971] could not allocate digest TFM handle sha224-generic [ 975.884519][T17995] netlink: 'syz.2.2975': attribute type 2 has an invalid length. [ 975.892349][T17995] netlink: 'syz.2.2975': attribute type 2 has an invalid length. [ 975.937221][T17994] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 975.945712][T17994] UDF-fs: Scanning with blocksize 512 failed [ 975.959927][T17994] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 975.968269][T17994] UDF-fs: Scanning with blocksize 1024 failed [ 975.982194][T17994] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 975.989767][T17994] UDF-fs: Scanning with blocksize 2048 failed [ 975.998961][T17994] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 976.006698][T17994] UDF-fs: Scanning with blocksize 4096 failed [ 976.321927][T12600] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 977.794354][ T29] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 977.956922][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 977.963519][ T29] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.000296][ T29] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 978.058815][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 978.089977][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 979.054040][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.087203][T12600] usb 6-1: unable to get BOS descriptor or descriptor too short [ 979.100148][T12600] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 979.118874][T12600] usb 6-1: can't read configurations, error -71 [ 979.134796][ T29] usb 5-1: config 0 descriptor?? [ 979.254031][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 979.658960][T18028] nbd: socks must be embedded in a SOCK_ITEM attr [ 980.253253][T18030] [ 980.255605][T18030] ============================================ [ 980.261743][T18030] WARNING: possible recursive locking detected [ 980.267884][T18030] syzkaller #0 Tainted: G L [ 980.273852][T18030] -------------------------------------------- [ 980.279988][T18030] syz.4.2978/18030 is trying to acquire lock: [ 980.286040][T18030] ffffffff8f7c3ab0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 980.296315][T18030] [ 980.296315][T18030] but task is already holding lock: [ 980.303668][T18030] ffffffff8f7c3ab0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 980.313940][T18030] [ 980.313940][T18030] other info that might help us debug this: [ 980.321986][T18030] Possible unsafe locking scenario: [ 980.321986][T18030] [ 980.329420][T18030] CPU0 [ 980.332687][T18030] ---- [ 980.335954][T18030] lock(qp_broker_list.mutex); [ 980.340800][T18030] lock(qp_broker_list.mutex); [ 980.345645][T18030] [ 980.345645][T18030] *** DEADLOCK *** [ 980.345645][T18030] [ 980.353772][T18030] May be due to missing lock nesting notation [ 980.353772][T18030] [ 980.362079][T18030] 1 lock held by syz.4.2978/18030: [ 980.367176][T18030] #0: ffffffff8f7c3ab0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 980.377889][T18030] [ 980.377889][T18030] stack backtrace: [ 980.383768][T18030] CPU: 1 UID: 0 PID: 18030 Comm: syz.4.2978 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.383795][T18030] Tainted: [L]=SOFTLOCKUP [ 980.383802][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.383814][T18030] Call Trace: [ 980.383821][T18030] [ 980.383828][T18030] dump_stack_lvl+0x100/0x190 [ 980.383850][T18030] print_deadlock_bug.cold+0xbd/0xca [ 980.383881][T18030] __lock_acquire+0x12bb/0x2630 [ 980.383911][T18030] lock_acquire+0x1b1/0x370 [ 980.383934][T18030] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 980.383964][T18030] ? __pfx___might_resched+0x10/0x10 [ 980.383992][T18030] ? kasan_save_stack+0x3f/0x50 [ 980.384022][T18030] __mutex_lock+0x1a4/0x1b10 [ 980.384050][T18030] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 980.384079][T18030] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 980.384107][T18030] ? vmci_host_close+0x115/0x1a0 [ 980.384131][T18030] ? __fput+0x3ff/0xb50 [ 980.384154][T18030] ? task_work_run+0x150/0x240 [ 980.384176][T18030] ? exit_to_user_mode_loop+0x100/0x4a0 [ 980.384201][T18030] ? do_syscall_64+0x706/0xf80 [ 980.384228][T18030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.384249][T18030] ? __pfx___mutex_lock+0x10/0x10 [ 980.384284][T18030] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 980.384313][T18030] vmci_qp_broker_detach+0x14c/0x11e0 [ 980.384342][T18030] ? kasan_quarantine_put+0x104/0x240 [ 980.384370][T18030] ? lockdep_hardirqs_on+0x78/0x100 [ 980.384394][T18030] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 980.384422][T18030] ? ctx_free_ctx+0x410/0xda0 [ 980.384440][T18030] ? ctx_free_ctx+0x4bd/0xda0 [ 980.384457][T18030] ? kfree+0x223/0x6c0 [ 980.384482][T18030] ctx_free_ctx+0x517/0xda0 [ 980.384501][T18030] ? __pfx___schedule+0x10/0x10 [ 980.384524][T18030] ? __pfx_ctx_free_ctx+0x10/0x10 [ 980.384544][T18030] ? preempt_schedule_thunk+0x16/0x30 [ 980.384564][T18030] ? preempt_schedule_common+0x42/0xc0 [ 980.384588][T18030] ? preempt_schedule_thunk+0x16/0x30 [ 980.384608][T18030] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 980.384631][T18030] vmci_datagram_dispatch+0x3db/0xc60 [ 980.384658][T18030] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 980.384678][T18030] ? find_held_lock+0x2b/0x80 [ 980.384695][T18030] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 980.384721][T18030] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 980.384753][T18030] qp_notify_peer+0x1a6/0x230 [ 980.384780][T18030] ? __pfx_qp_notify_peer+0x10/0x10 [ 980.384814][T18030] vmci_qp_broker_detach+0xa20/0x11e0 [ 980.384847][T18030] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 980.384877][T18030] ? ctx_free_ctx+0x410/0xda0 [ 980.384895][T18030] ? ctx_free_ctx+0x4bd/0xda0 [ 980.384912][T18030] ? kfree+0x223/0x6c0 [ 980.384937][T18030] ctx_free_ctx+0x517/0xda0 [ 980.384958][T18030] ? __pfx_ctx_free_ctx+0x10/0x10 [ 980.384975][T18030] ? __pfx_autoremove_wake_function+0x10/0x10 [ 980.385000][T18030] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 980.385027][T18030] vmci_ctx_destroy+0x150/0x1c0 [ 980.385047][T18030] vmci_host_close+0x115/0x1a0 [ 980.385072][T18030] ? __pfx_vmci_host_close+0x10/0x10 [ 980.385097][T18030] __fput+0x3ff/0xb50 [ 980.385125][T18030] task_work_run+0x150/0x240 [ 980.385149][T18030] ? __pfx_task_work_run+0x10/0x10 [ 980.385176][T18030] exit_to_user_mode_loop+0x100/0x4a0 [ 980.385200][T18030] ? do_syscall_64+0x52d/0xf80 [ 980.385226][T18030] do_syscall_64+0x706/0xf80 [ 980.385252][T18030] ? clear_bhb_loop+0x40/0x90 [ 980.385274][T18030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.385294][T18030] RIP: 0033:0x7f720719cdd9 [ 980.385310][T18030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.385329][T18030] RSP: 002b:00007f72053d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 980.385347][T18030] RAX: 0000000000000000 RBX: 00007f7207416090 RCX: 00007f720719cdd9 [ 980.385359][T18030] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 980.385371][T18030] RBP: 00007f7207232d69 R08: 0000000000000000 R09: 0000000000000000 [ 980.385382][T18030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.385393][T18030] R13: 00007f7207416128 R14: 00007f7207416090 R15: 00007ffcd49b60f8 [ 980.385412][T18030] [ 981.872760][ T5832] udevd[5832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 981.897894][T12140] udevd[12140]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 984.636585][ T29] usbhid 5-1:0.0: can't add hid device: -32 [ 984.642562][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -32