last executing test programs: 2m37.400719131s ago: executing program 1 (id=197): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0xd, "208424644008f4ebdc1e04f9c8bb8417a5fc219606431f05bd227d0a4643680f", 0x2, 0x6, 0x8, 0x400000, 0x8}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xfffffffa, 0x1000}) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) syz_usb_connect(0x4, 0xdaf, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x36, 0xfc, 0x9d, 0x40, 0x7c9, 0x12, 0x425b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9d, 0x4, 0x2, 0x7, 0x60, 0x1, [{{0x9, 0x4, 0xd2, 0x1, 0x9, 0x5d, 0xfc, 0x1b, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9556cb"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xb300, 0xc5}, {0x6, 0x24, 0x1a, 0x7, 0x38}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0xf, 0x33, 0xe, 0x4, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x0, 0x2, [@generic={0x4f, 0xb, "c6508a6d699f74efb67224a06051feb23a5fccbfdeeb63c69d33b0a44f275c43781c5a39661ef939e7c5b4a3cda7cea43c13944ca8f0cc68e21f4daefceb6ec0955cc67ee89fa3a9da0ee48fdb"}, @generic={0xf0, 0x3, "778eb5e56b584b7c0fd2a6cf463b82c9029680b447c6be6633e402bd2fff6c6682dd04343977dc690174eedbc2f088691726b372e7dc8c3bd9c3deff084e4a05dd2a43e083dff372685fce744742c4b83725028cf666cebe150c2f51616247c537aa65eb1860920ee499fa94804c4867502a3295086e75d9d88edd8ae8de59366853e7c0de30647f5acaa8fb55200f1e1362e031408c9d666426183a2ff9a4765307011dfd0f63c3a96d355c35bbc4e02e2cad977f60d6650ddad56d2cd933ea6568dbcff0d47a95acf7d9fa1cebf4ea756c48919491b53f71853135e452bb45d40d193a2fc1adab297bb3b5a154"}]}}, {{0x9, 0x5, 0x8, 0x13, 0x8, 0xf, 0x14, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @generic={0x36, 0x7, "b531fb2cb4fabc2e73e84b95ce015e49ada2e94f23a7a80bff8592da545729256a933b2eba571a1b3d41de8e63130d9ceddaf0a1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x9, 0xbe}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0xfb, 0xfa, 0x2b, [@generic={0x8c, 0x2, "a98ed2eaca8254a1429c16a31a8bfd0af3feb7e91c2425387ad2c15b43f35b11730320bbb50490146323db268ab7f498f5db30a4df524a10a22d07fdbdf1f125ea2231e780e379bce9e7be102ed0b84c2f091c6874ac14f5d7497f56f56df8da3932bc7729786a615d2ff70b2f437310e3fc90fe9ead7daa6c0c50f1c28ce7fe5bb542a4f75b31162433"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xfe, 0xe, 0x40}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfd8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x8, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x1}, @generic={0x98, 0x0, "be9312617490c2aa01af20582bf8c496db1bf0a3679f1680ac8b698332f93aec9726d982799608066a84409cd17e51c4f30e23f985f490ee18d5f2a4ab9f3f5a7e50cb90df82754e828221b07d6abc5d48c7ca0dad52232152657d4823e1809c8b05a575b1cf7024deb38fbfc795c6cfa5222e1c62eecd730fe6b7793c850779b8a6e5406cd08b2c66205d7a18a3a6be27e46a0e079f"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0xe6, 0x8, 0xff, [@generic={0xe5, 0x0, "38519cb29e09c0c600a3ce3623c8ad46a7e8888ee851046806f48a8f4480b18c774e8e3cf39f63efc5f345b879dfb0ac751fdb6c29ebefe6ed06a60a7c31b4609c78cbcfefc763d6d37643a50e947b2c18ec26835595d4321b208d79fff65b4a4c6e1a85f9839843114954471ff332870238b706068023f089fbc42a755b770e7a0f8062bb539d9df6e44f76e5905b720848c62b3d65714e8379fca69b87fc54e20cc05e186fbbcaebc96256b436b688596fad98753481e1d5199122ba3581e096bc8486b7f58f445f03e3d14730f9ce768a6a55bfc5e7b002a9e07d9f213d69ddd10d"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb2, 0x0, 0x5, [@generic={0x77, 0xa, "04ed3688372771750ea2f680935afac255a0ad986e5570f14483e8653648338caffee24361955aa3a26dc5fed7914d15975a4184b2b9265ef9798c081b749533b74d97a9273ba46eea03a4a3696ff53469e4da57298669f877618e3d28cdc65d61b86a403c4b02307d6233560df4355fa459a0bc9c"}]}}]}}, {{0x9, 0x4, 0x5f, 0x9, 0xe, 0xe5, 0x59, 0x9f, 0x6, [@generic={0xeb, 0x1, "11fba6bed7b3b3f3ceb2ea57853c0ae9d077d3c2133ba7a84ba7557fdad1573934605e328bdfe2023f9f39bb52aa9a309c0e035a6c22988d3f751eb1140e497ac61989c95394d2ea1d229d7a15c9c5d40f91788f841f2fff2142ede7478d6a5965636ec479aa536b300ffc692ccfb8c5514840bc300f25043cd27751351cab753b9dbeb5c2d260466fefa0adfa161cae27799a6693e0cd13b8cbd08894ea410f4aa1573b2c112e3859b5d8489a7bffad0ba732af8da3f38d02031e40a22bead3a6add48a0e0e6e9ae69173f50a9ca1ae63306f9902a007a3056f2e52810549e04190d4bbe8f1fdeaf2"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd, 0x4, 0x9, 0xf, "4ca2", "ab49"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x4, 0x1, 0x2, "03"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x30, 0x4, 0x2, 0x4a, "f02d3276"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x82}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1001}]}], [{{0x9, 0x5, 0x5, 0x1, 0x200, 0x76, 0x7f, 0x3, [@generic={0xa8, 0x31, "50d6e196d77b44471180ee5122a9a195a588da7061c8dd6d44dcc0eb9f012664d4c7a1791608d2b0b22c37468ca3741c73455a75f982d9784496a5c158078298011d34085ef2c53ab03876f9756172d5696b8028751d83b9ca345e804d6d65be84b82d6407125083e6e1853994a71c94b1c86ac09b79af69c8ab2e88460399624fec1311051c3802ddd4ebced8f342370c46b96e8460f5acbbce77e905c57126cdb7d8cf07d7"}, @generic={0x13, 0x4, "f596d3700f256a178e883a85cc06eb2d6a"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x4, 0xd, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffe}, @generic={0x30, 0xb, "369aba8e4950566a7e37b3ddb87bf3dd24e5720e6600637711a1303f09f12e00ffee3ddf264188c0b00dd0e7082d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0xe, 0x7, [@generic={0x59, 0x30, "79b52180b14995e7028e14589508e0be31c4d496b6a0f37773e38857d549487e846f17942687bdd76392bffc3c0e3603fd5043819e1fd80981da5bfc2a754881ec884a423f48e6a9a6c041ab57842b7ca170d589307c73"}, @generic={0xbd, 0x21, "e51f77551d8648908e872761b54ad8b392ae32c467db2664e3142d42df0764bab3ece7d8350d71b568d0d69b52158f5f96dab251ad1ceaac15df0765cbcde614c7cc496e9348ab2213dae458c0d100f40dbb4dfecafb631bcfccc4c7dec3f8bcfa086a448600f22b1d2e0d175439b297d4db141e8c174d11e649d1c639531ff23b0ae04a0813208cac313c8672f2b2956469ee01f5f546d9c56aca43fa8c1e516e95461b28e70d9726f51513eb6b939ce6f1ea17e95e1e8e72a8ed"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0xf3, 0x4}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2e}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xffff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xad, 0x5, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xfff7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x3, 0x8e, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4e}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x81}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xa, 0x45, 0x0, [@generic={0xa3, 0x23, "5cbaa60fd02d16de197757591287f1c8178abf98e5a974bdecdf9302c2444eb2cc1658692395afb15be015a91c7ea2b6f2d43aa87e9c2e88cd2bd539e13866d50c5d6bed677539568bc774ce7c0baa7285af26f1e941d5ff78e784122ade30ab69c05d89b79dab811063d244216634e5efb9fe874433eaa537f3b938940a82ab754adafc2c1039ceb35f6ccf41951a5ede4cbc49aebae747150043065ac0fb1348"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xc, 0x2, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x34}, @generic={0xe8, 0x5, "55755467b3b6df7a8ecf746e6eaff3bbe08b3ccd291046b1295635b122570b5177cda2f76e47102a69009ac1239411c5235db8dfe1219c0c14101a862006b40e90815413d5a915adafe14eb20742810cf3cd3fcd8802d731fd9c939a34e5825b0595dceed98fa90d0457929a35655501e3d722df459ab9438a7f82d9e72ca01f88aecf8967ff63e64d308a1dc173861e63a3942b6bf951cf774aedd46204ff2d0d9d078d4c9ac91fce6191f399ba0efbdd29dfef1b7c3ca5e5c6867ff27c808f5ac54b4ecf260b90e23a8449068b39e2094b04e775b0b11ea3b1facb0b37e32888c37e4df39b"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x40, 0x6, [@generic={0x7d, 0xc, "184bae64fe3d839a538a4015edce9480eb1d853775220fe320529c3d81a594281dce2982e3e407d30ead7028651a9fd166c048115c0c6f0e10dcffc99881950c90db285c3637da06fddbfbfe328a4975e987360bbe38daad7e4d00d80e7473b4095a7e492f7150d3e6789106f612611138aa06926be0fc4f793957"}, @generic={0xd, 0x10, "d515dc758d638b2943b199"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfcdb}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x25, 0x0, 0x35}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0xbb, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfed2}]}}]}}, {{0x9, 0x4, 0x59, 0x68, 0x5, 0x16, 0x95, 0x3c, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8c2ca1fb"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x7, 0x1, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x81, 0xf5, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x5a0, 0x4, 0x2}, @acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0xf61891f1ca1ef89a, 0x8}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "03530dff3ca6"}, {0x5, 0x24, 0x0, 0x55f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x5, 0xa}, [@ncm={0x6}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x10, 0x20, 0x1}]}], [{{0x9, 0x5, 0x2, 0x1, 0x200, 0xf, 0x5e, 0x6c}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x1, 0x6, 0x4}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x80, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xdb, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x86, 0x2, 0x91}}]}}, {{0x9, 0x4, 0xb9, 0x2, 0x7, 0xfb, 0x74, 0x43, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0xf25f, 0x2e}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x101, 0x4a, "ab4a0c"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x2, 0x1, [0x3], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x2, 0x9, 0x5, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x33db3458953dc821, 0x4, 0x3, 0x7f}]}, @generic={0x24, 0x5, "ba43ed003c40ecdcb5468db70ce84c0c4a9b586e2eb1504ecb49954dd80615185531"}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0xfb, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x6, 0xec, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x5, 0x5, 0x7f, [@generic={0xad, 0xe, "a6cbf0e25bfc5acf8bddc7aa6a7beba08957f048df0edc9a26dc0616be0a46f5ce89160508603800cef9935a93bad7184dc55bbd0206fba226e3eb4344c51bd71e826e7d0623c6b9fc7e46b2fff82e71049532ebb71dead701d082a01f58259453293f9ff422b9fe414989a88c33f60b81308be6ef5dbd7679f4082731e9de5a6b5876d0db46b584a65e36769d0f4d98f68c5a06bcbd3aacd80657d287f9911d54356a0f91a6755e22d027"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x96, 0x1, 0x0, [@generic={0xe3, 0x5, "469ff9ff020678c7d102683c7f8c890eed6f50136fb11ec063389bfeeafd8d4f7c514fadc718ba574bca553cc08b183f3377fae983171dac9e011a680d56e0fbe1328bfbb9c6f223103d4d6af69fcf4224a3d1eec5d515a8c5dfebcc3918575b39aa53da5c784110328d85fec0bd304448b126d28088a5472a5a747d11983adb3d5d0b91e8bdb69fe2e7b4f12029c26ee6afff16b91aa027fba002b1f85a5db11a0dd2669eb80ba7ccaaa09fd934f299d510aec8a178de3f76a12517753b79669cf18c12d61320a1e0fec8463eb95cd8256aefd0dcdcad35e4f8333121519a077d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1f1d}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8b, 0x6}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x300, 0x7, 0x8, 0x3, 0x20, 0x2}, 0x8e, &(0x7f0000000f80)={0x5, 0xf, 0x8e, 0x3, [@generic={0x67, 0x10, 0x1, "6defcab222d60985a47fdae19d84105bb900953dba74fa8fdd36e65bdd7c0ff83eb18a492aff21bc93fa970ce6c8b5d241a9bf9bd11fbc40b2e817d2d5af95e761978d0955028b599045f0b0abab23abf137f3fe382cda2980c32962146764193d1a7d84"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x3, 0x0, 0x200, [0xff3f00, 0xc0c0, 0xffff00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x6, 0x5}]}}) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, &(0x7f00000010c0)=""/118, 0x76, 0x0, &(0x7f0000001140)=@xdp={0x2c, 0x0, 0x0, 0x29}, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000001240)={0xa20000, 0x9, 0x7, r4, 0x0, &(0x7f0000001200)={0x990a74, 0x6, '\x00', @p_u8=&(0x7f00000011c0)=0x7}}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x3, &(0x7f00000012c0)) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000001300)) bind$inet(r4, &(0x7f0000001340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000001380)=@v2={0x2, @adiantum, 0x2, '\x00', @auto="caeccbc244e5f750ba1466d32b81b7b3"}) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000013c0)) write(r4, &(0x7f0000001c00)="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", 0x1000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x1, 0x5ec}, &(0x7f0000002c40)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000002c80)={r6, @in6={{0xa, 0x4e24, 0x15eb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, [0x3, 0x77, 0xe, 0xd1, 0x1c08adc3, 0xfffffffffffffff0, 0x7, 0x5, 0x7, 0x9cd, 0x6, 0x401, 0x9, 0x5, 0x7fff]}, &(0x7f0000002d80)=0x100) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002dc0), 0x400, 0x0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f0000002e00)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002f40)={r7, 0x58, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000003040)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)=@delchain={0x44, 0x65, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffff}, {0xc, 0xd}, {0x6, 0x2f452483dd7e715e}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xaf, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2402c980) write$binfmt_misc(r3, &(0x7f0000003080)="9657e946bf765fb6f2820ecc33ab583eacb0510fba38b2ceeb0ee584f8d0cf2f6b966e2e39055cb555b27eaa4d7f7349c502f5452af5258fd0c003fa3a8f086a5086e701685114eeedd22f230878018d02c7ad53a16aa052e60ddd4ec159b275d19733d48b30989137cf892cfb01152ca358f3e56f7e2a5f54b6b5e3ad1e71a6a04ac3c7f7698504f0ac08df52b753acaa54a204ab02f4a2", 0x98) r9 = openat$incfs(r7, &(0x7f0000003140)='.log\x00', 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000003180)={{0x1, 0x1, 0x18, r3, {0x9c3c, 0x1}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000003300)={&(0x7f00000031c0)={0x1d, r8}, 0x10, &(0x7f00000032c0)={&(0x7f0000003240)={0x3, 0x80, 0x6, {r11, r12/1000+60000}, {0x77359400}, {0x2}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "8f22059745984702"}}, 0x48}}, 0x20000805) ioctl$RTC_PLL_SET(r10, 0x40207012, &(0x7f0000003340)={0x4, 0x3, 0xc036, 0x3, 0x3, 0x100, 0x9}) 2m36.481680306s ago: executing program 1 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x4000000, @local}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="8efd07ac", @ANYRES16=r4, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x24040050}, 0x4) syz_open_dev$usbfs(0x0, 0x206, 0x3601) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) r5 = dup(r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000007c0)={&(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x6, 0x8}) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r9, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000280)={@private2, 0x76, r9}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) io_setup(0x80, &(0x7f0000000480)) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x400}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000004c0)=0x6) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0xe0, r7, 0x707, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8094}, 0x24004004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) 2m36.138562416s ago: executing program 0 (id=203): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x98f, 0x2, 0x1, 0x7f}, &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x1b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x4b, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000002c0)="6a754ff09d24710d7af5843e0127d16c2613447622adf56725710ecb240ce0d51b53f17548a2afbae4fda4d8518010fab691ebe758dd957618b325d3a71ed21c8ee821b77b472408404951385a45672c9dbe01513244bb71f44e33a1f07056d0ecccaaf7c392f1dd5f9c8a7f2863d16fa22f8a059ffaa9fd63429d6f1af4a02d59f81228a4dad43e83a1982300db2ac4ce8c3cd058adf10056ebd728e6e56d6b9641c546caf766746e2eb3625b084116e0b44baa4f79f173c35fc0daf822052b0fb220db35d090e860133bf273bef52a", 0xd0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x840) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x0, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000005796000000020000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, r6, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000000000000000aa000000000000000000000000000000004e1d4e20001890780400000004000000ff7f000000000000"], 0x0) 2m34.076777422s ago: executing program 0 (id=209): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000002010100000000000000000a0000000139ada103ee1140b6bede0aa9b919ee34fd2bc8d5f7dfe39202b4bc0a7c8c9389bc6f65ddb3fc16d9481dbb6081aafb52e909df485942fdc46b5944be124e2c112b02d0d8e00e08d496d96c1beb20af9fcff7937ab92526941e88344ca3d600429648bf5be9ebbed15bd3b281b9f25acff9e6a8c9ffde5444d6d3303cc1f380b7f181eca49fc358fd890a621652c8348899e6910a5784d7b7ca701a1e11aa74ceb7bc4bf8ab415338777a74d260801803b61e8fe018991c1cbec4be6f56d516fbbfbc8b3605543686d089a2ed"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket(0x1, 0x800, 0xc7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r8, 0x9) 2m32.621636914s ago: executing program 0 (id=213): pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2040400) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0/bus\x00', 0x40000208) inotify_add_watch(r3, &(0x7f0000000000)='./file0/bus\x00', 0x5000402) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f90100004"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x4, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}], 0x1}) io_uring_enter(r7, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 2m32.242490266s ago: executing program 1 (id=215): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a300000000005000100070000000800094000000001140008"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2m30.977759936s ago: executing program 1 (id=219): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x891) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x6) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000580)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x12, 0x87, {0x87, 0x5, "f2aaae0e4bbfddf8ddee95b152bb4e4d850272fe6604bf7f29f88f5ae8b5102cd4238a5eb0204eef09714d3ac30ad8a0ca81b528a587adbca5ea4d04cd211b25e7859a0f7e6812297783aca9817dc330d29db702b374c8fbd530da64d2f9c486c32039fc8182aebc940b893f4f7d3d9586b26ff497f8016cf08a41704db6fc7c1c2005756e"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0xf, 0x14, "98a1ef4c622c870648db3b5910fded95d3b3ea7f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "c2484d"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "04"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "ece894"}, &(0x7f0000000480)={0x20, 0x84, 0x2, "9c8e"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "1b47da"}}) 2m29.050394592s ago: executing program 0 (id=225): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x251800, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0xc, 0x1008, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x4) r2 = io_uring_setup(0x2c93, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0x0, 0x9f8}) io_uring_enter(r2, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) 2m28.076716495s ago: executing program 0 (id=227): openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0xfff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x63, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r2) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000e0001006e65746465767369750000000ffb01006e65740f657673696d3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m27.023409619s ago: executing program 0 (id=231): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x796efb4252045490, 0x0) setgroups(0x24, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f02"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) fchmodat(r3, &(0x7f0000000000)='./file0\x00', 0xa0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x26202) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x200) ioctl$NBD_DO_IT(r6, 0xab03) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42000) 2m23.990451163s ago: executing program 1 (id=235): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) stat(0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x150, 0x12, 0x301, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x800, 0x0, 0x1], [0x0, 0x0, 0xfffffffc, 0x3]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x104, 0x3, "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"}]}, 0x150}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) (async) shutdown(r2, 0x1) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) (async) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x61616f309f697a14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r6 = dup(0xffffffffffffffff) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r6, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00", @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES64=r4], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={0x0, 0xa, 0x4, [0xffc0, 0x2fc, 0x4, 0x8000]}, 0x10) 2m11.731816004s ago: executing program 32 (id=231): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x796efb4252045490, 0x0) setgroups(0x24, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f02"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) fchmodat(r3, &(0x7f0000000000)='./file0\x00', 0xa0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x26202) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x200) ioctl$NBD_DO_IT(r6, 0xab03) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42000) 2m8.216571693s ago: executing program 33 (id=237): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x61616f309f697a14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r6 = dup(0xffffffffffffffff) connect$802154_dgram(r6, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r6, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00", @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES64=r4], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={0x0, 0xa, 0x4, [0xffc0, 0x2fc, 0x4, 0x8000]}, 0x10) 15.569789635s ago: executing program 3 (id=634): userfaultfd(0x80801) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0xfffffffc, 0x7ffffffe, 0xa6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x3ff, 0x7}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x201) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002021, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x414c01, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x30) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet(0xa, 0x801, 0x84) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 13.497921193s ago: executing program 3 (id=642): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000002440)=0xffffffff, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000580)={0x40, 0x14, 0x1, "eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.916164075s ago: executing program 3 (id=654): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000616000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x0, 0x24040000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0x0) r3 = dup(r1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x200) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e27, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x10}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x3a3240580, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) syz_usb_connect(0x2, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001e974d081aeb010500000000000000021d0001050000000904bb0801103f8d040905800c0205"], 0x0) 7.460294018s ago: executing program 6 (id=661): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="009515fb", 0x4}], 0x1}}], 0x1, 0x20008050) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000009000000800000000000000000000400", @ANYRES8, @ANYBLOB="7f0000000000000000000000000000000000000094df3f653aa9", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="030000000500000080ec33dc45e78751f1b6d4000000000000000803"], 0x50) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x1, 0x3}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r5, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="9aaaaaaaaaaa01800000000008004500001c000007000033907800000000ffffffff0400000000089078"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x9}, {0xa, 0x4e22, 0xfffffffc, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000740), 0xffffffffffffffff, 0x430}}, 0x18) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x1f, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xfffffffc, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x81100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xfef62b4, '\x00', 0x0, r1, 0x4, 0x4, 0x3}, 0x50) 7.218769842s ago: executing program 6 (id=664): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x18, 0x1, 0x100, &(0x7f0000000040)="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"}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x4000010, 0xffffffffffffffff, 0x4000) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000440)={0x1d, r6, 0x3, {0x3, 0x2, 0x4}}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='.\x00', 0x0, 0x8}, 0x18) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') shutdown(r9, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0xffffffffffffffc2}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 6.317889395s ago: executing program 3 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) pipe2$9p(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 6.241557004s ago: executing program 6 (id=667): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\xf2\xb8\xb5q\x11j\xb8#\xb2\xecA\xd6\x10\xf0\x1a\xfd0.=\xc8t\xdao\xa5\xe5[\xc2\x94\x03\x80\xf1T\xefDM%\x96\x96A\xea\fj\xb1\xeeh.\xe7\xc2\xfe\xa4\xe43\xed,\xc2V\xf9\xf3J\xb0|\xccC\b}?x\xb4\x8aH\x84+J\xed\xdb7(da_<\xdb_SS:uY\xc2\xb1\xacOl;\x9d\xe1i\xb28w\x1e\x1a-\xe3X\xaf_\xdd3Es\xd1\v\x85y(\x03)\xd8\xcfB\xa4\x01\x02\xd7\xd2m\x96}\x16{\xfa3\t\bd\xcd\x99\x98\xfcl\xe9Mu\xf0\xbc\x8b\xc9\xee\x930~\xac\x19\xf7G\xd4)o\xcc\x91\x95\x0f\xff\"P\xb9\x15\xd2\x97jf\xbe\f\x1c', &(0x7f0000000040)=':\x00\x00\x00\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0xa, 0x0}, 0xd) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r5, r3, 0x4, r3}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x20040010) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x6, 0x7}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf250100000006001b004e2400000800110000000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x880) socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x20008014) 4.873895408s ago: executing program 5 (id=669): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002ee00000000000000000004000000000000b4224bfcdf13e68d321659b4580ed922421e85f686ec1b29f59ca44fb5923c84f80b033cfa9926a33eb4e044189b56d2178c01e9e38ff5a80170491129af9376177c7128504ef45b0a407b908de27561c50ddc29fdc0ee30322e81b8d69e520169afeae6a3ab5034b001a4a25227d7db02de41c32c982bed01cb3bd968a8d810c2e1b81a96b10532213fe5e0ace7743f71d14343edb4f4540fdbc3678376e854ce26b97c6abe864d03dfd0e98708435fd7f74924f69225a4abb448ec24a69165241b8c5c36c33081"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500e2ff00000000bb7ccc2db638ecdcb975607aaad7c13b0bb7fbbb6c999f0c1bb32e5d8dcac681616269f821aa5dc0d11472093bb4b01d06e10b6518a98774a0d09061f06e4d74207f837997c36ab39ecd0c36b7a61721a36eae01eb224c045a38e701a4d196a4c9e14977c4d8d6396d84198d0a7fc83e02c9cc8882112e8ed59e1c0e1f3a00b0c8478dadbd2cc98fbc7153efbacc41497c78726b161ce3c2610bb71a2b0774abd84b26932d1bfac295d893f94ae878f90d909dccd4fe770435a013d09f88"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2}, 0x80) r1 = getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_pidfd_open(r1, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d09000000cd403a4480bd1afa34432bcdfaccd957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d4e0a5748900"}, 0xd8) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="d5519ca606acab5a8b7a738dcb478248cc46885c2dd3a94374f21fa55c3b1e291d695f553d7bb32d6214c2a56b86c0e247759497ac3aba5247ea8a66e5afcefffd790241ddd6d492d8d85c5f96e02519f69ca1dfde083e3210a55fc5067d577d36cdf63052d1cf9a68be29c074c576143ce805f61c7cc5a3e95f1c5ac11a22ae2cf25d8cbeeaa061ddaab613b90cfee0e9b18925279cc9b59a2f850cf0d9ee6219511f6ef41eaf2d8a461c214e30dfc4eec88bd9755a253d74ffc28d9d8dbc5dbe99443b56b3e858cf9ebf939e9b2760b8fa28006d19b207cc080303c1427bdc533fc23a834d59cb76b6bf75b81628c9f1790a381697", 0xff2d}], 0x1}}], 0x1, 0x20080058) 4.655798088s ago: executing program 6 (id=670): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000100)={0x14}, 0x14) 4.409000255s ago: executing program 4 (id=672): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async) socket(0x25, 0x803, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$qrtrtun(r1, &(0x7f0000000340)="7f12454181586818", 0x8) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xc) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) (rerun: 64) close(r0) 4.313079781s ago: executing program 2 (id=673): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) gettid() inotify_add_watch(0xffffffffffffffff, 0x0, 0x510004b4) r0 = creat(0x0, 0xd931d3864d39dcc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) mmap$snddsp_control(&(0x7f0000b1a000/0x4000)=nil, 0x1000, 0x300000e, 0x10, r0, 0x83000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x84, 0x3ed, 0x4, 0x70bd29, 0x25dfdbff, "29933814cf2159c8492d4a604a2cc26a3dab8a9deb64de6ecb67afee8c3f3d246111cfe4abc25092bf4df2e7af5a10b19eb9ea95cd6256b74bde82e76c4f783f4bf334af19352b7f15b541ba18ebc336ecfa04b5614040e73d50dbce5b95d4dc608fd2578ccc7f9f15891bf79aa58c790b6f", ["", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f00000000c0), &(0x7f0000000300)}) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0, 0x600) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) 3.617787936s ago: executing program 3 (id=674): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000440)=[0x0], 0x0, r1, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000940)={0x18, 0x0, r1}) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000f40)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xc, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x10, 0x37}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x6, 0x1, 0x10, 0x8}, 0x15, &(0x7f0000000100)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x800, 0xff00, 0x6, [0x0]}]}, 0x4, [{0xee, &(0x7f0000000140)=@string={0xee, 0x3, "5d97655eb528da09dfe00b77aa42c366500f90c5ea61aef8b50984cc303410284fc315cc4ef56324d90f8b030459b853889ff55f5ba1fe3878e2f8f87999b107682b56435cad938dd8f19cdb515bb9a66765411c8a8efe11537dd123b61bff62d9b3c98bf21d5eb5189aaf67645b7c5f6fa665ad4b23b89a6493e058489c3cea01ef9669d44f491ea24fc1942cdbb8b24feae82dde0512e2b0af4c8b72ebb64ca498d53737fbd429f095afce3f5483783c47537aadc51b7c6d664eb239b9e4e17524f1bc6a0d4c7b2fa74f1d016b9418c682e65ab7593cc2740ff963a86dee34f3d46dbff32cfd1abdc582af"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x455}}, {0xbe, &(0x7f00000002c0)=@string={0xbe, 0x3, "dad1c77941ee2801a85fcbcfd5a4ca04b624d720110977931ff75142a5ca4ac6c596647ea9f62d7cac477ff0e180e54eb9f9a61c2757ba34bf753ef5a88502bbd978b07faaf5b5ad21254118f205573533ba1fa5c2a7048e60591ee532e10d13ebe44ccf06878f7f34df87baae8d03dc28473008fe8842a3499d926f9db0f7d40db6eed1c6950f45605954d4215828ed4795daeb3caacdf6298524e90166b92cf1564ed63523029f9ed81f646cb4e3041f8625069823fbc6e6b094b6"}}]}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.537888094s ago: executing program 4 (id=675): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r0, &(0x7f0000001d00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13baa493645fa9f98701918a1f87f1d439ec93772d6ecaaf8891f7678f2037cccbd78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db6700bb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5af97ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef0779cafd02bcf075a212e79e07c3ff38810368745fb77fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91cc", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) 3.48216118s ago: executing program 4 (id=676): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x265}, {&(0x7f0000000580)="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", 0x141}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f000"], 0xac}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) 3.266303852s ago: executing program 2 (id=677): syz_open_dev$video4linux(&(0x7f0000003d00), 0x7fffffffffffffff, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000003dc0)={0x6, 0x0, '\x00', {0x0, @reserved}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) (async, rerun: 32) r3 = io_uring_setup(0x4403, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0x731, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x24000050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', r6, 0x2f, 0x3, 0x3, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x20, 0x7, 0x3, 0xa9}}) 3.117876777s ago: executing program 2 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0xa0502) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0xc00, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 2.615352887s ago: executing program 5 (id=679): socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc}) 2.230490354s ago: executing program 6 (id=680): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.107339813s ago: executing program 5 (id=681): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r2, 0x5eae78d9c54e9d3f, 0x70bd2a, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x343ec0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) close(r9) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) 2.086921202s ago: executing program 4 (id=682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008800) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000240)="bb", 0x1}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, 0x0, 0x5) close(r1) 2.019155426s ago: executing program 2 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2002, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x56, 0x0, 0x0) ptrace$setregs(0x2, 0x0, 0x1, &(0x7f00000010c0)="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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x40024) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001806) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3c, 0x400, 0x70bd2f, 0x25dfdbfa, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x40840) gettid() timer_create(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 1.713917173s ago: executing program 4 (id=684): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) setuid(0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r9, r9, 0x0, 0x40008) r10 = socket$inet6(0xa, 0x2, 0x3a) recvfrom$inet6(r10, 0x0, 0xfffffffffffffcaa, 0x123, 0x0, 0xffb6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="28178a26f49ed0073b999e241e3de7de9d1176d43af86a4d793fe5b749a7099f1297b28338e2be542a5534975e9ad009a32cec7abf1c67ae938d86ae35803103a21626ceb071b4a0164d18ca7be7258b569b9d588e29d563d6c8401e87822bf7a380f1de88341b1f62e9b4f0960f6d30ca110e6eb25a34d8371ff9a123aaac31efde8567f78359cfc128b8f698b851bbae8cf72c413b51021f0fbdfe03232a5be73ac1e69ebe367cc6fcf4f246d40955d8b492ae040b4388bd822df5f917d44909d6918ee0e12e4a0936a83b9b91679e08a976e554b809d926dd46e0a6afd3afdfb229c8d969a848445e59f9a7af5a9502c88aa3bbdab3d64c49a77c04130ded176c00eb6c1c1a360d6393674313fcce9af153c75db2ebac48b7f92cbcd25e5f8bd2723dd8b600628a28349787a5e1500000000000000000", @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRES64=r5, @ANYRESHEX=r7, @ANYRESDEC=r8], 0x14}, 0x1, 0x0, 0x0, 0x20084084}, 0x0) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000280)={0x12, 0xfffffc01, 0x3}) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) 1.325026951s ago: executing program 6 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x804809d) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = timerfd_create(0x7, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000040001a800400070004001c0018000280140001800800050012c9de36080007000f080000040007031800028014000180080007000d000000080001000300000008002e00010000006f6949b7748acb8e1650a6ef2dfaae7682b212c8d2fe418b27c94f18ee85c9101de6fe67219f101dc54463c5ea8c618cdfb097ec8b04c04ed5272a419f23117b4c35f07b1847e66dc12126b1bc1a90502c98075a0c1cf283db37b906f60ff6a985caf5c8872a3612da2b14b8"], 0x68}}, 0x20000011) read$char_usb(r3, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x80) setresuid(0xee01, 0xee00, 0x0) timer_gettime(r5, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000001380), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nvram(0xffffff9c, 0x0, 0x80000, 0x0) close(r3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f00000003c0)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c7fa70c1da8e4f01dbd7000fedb9ef80a08000200400000000800030008000000080005000200000008000200000000000800020001000000080002000300000008000600ffffffff000b00943c426cb7d628c4847bf2a8a103b52b27f377ef063c76515cd6f86e2347375cc5f1d84caf4119b832e318c0beef167a66cb148abe25eb8b63a3b35223890eae5ad916f6a3e559d16dbae1fd933e17582d8f265996bbcde1a72d1815de6db37ecc36de435bd21514240ec27e60d5bc3204a5ea5534"], 0x4c}}, 0x20000000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x882}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, [0x8, 0x0, 0x11c, 0x10000, 0x7, 0x7ff, 0x9, 0x2]}) 1.184595268s ago: executing program 5 (id=686): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r0, 0x0) keyctl$setperm(0x5, r0, 0x4000000) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) 1.07781689s ago: executing program 2 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c3abc3c863ce186c0641949b1dd6021aeae24900e774e12524faa4f03dc25f113f72c7860e5f019ca62ec0ce", @ANYRESHEX=r1, @ANYBLOB="804dea64463ae96a85f68d1a5009443b3395ab02360995a19a711430e397ab38cd0077fecfb0bae54e673c2ca06faeca40a021efdd706b44dfb30a699e361b00c698a4506e8e9ad27ab8416b4b38f2625f4a0f9d8ed6ed97033a55ec1fc6b62c9f44fef5d13ff19595f2f55eb503cf99a29e1f8b9e4e873d1f50a157c3aab5de6cc606e2b9da125d397d6069ab2091f09da68b8911ee", @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b702000003000000850000e384000000b700000000000000950000000000000022fa4b3c451a75274782107a3108fb7a2e65f489d9845d3d46f9f34fcf94a70fd1bb5fa71a8bff4ce37cbb280ffc507f93ef599767ac78a0e27051294296970ee3beba08f35f2d18960896c22cdcc020eca6375443beaa74669950732b92a65e43a12a0c3bb8ceb502865c9de85b01f923446604cd8f8d1990cd4897d5f3aa42c110177033a3054c244936562b544597036d2a6f67557a7387438b2f9fe9ed559a11d1f29300be9f52dd8123eaea3088b879ba091aac6946fa7e99a60c0d3c1241faf7c41c2d4d24c2a3bfc16389731117b491c8364a9bb7c6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x324}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$kcm(0x29, 0x2, 0x0) (async) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @private=0xa010100}, 0x10, 0x0}, 0x20000811) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYRESHEX, @ANYRESOCT=r8], 0x58}, 0x1, 0x0, 0x0, 0x24040401}, 0x44084) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x240040d0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1fb) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 961.26424ms ago: executing program 5 (id=688): prctl$PR_SVE_GET_VL(0x33, 0x105b9) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) syz_open_procfs$userns(0x0, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18a9}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080801400000021c0c0001800800014000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x2f, 0x0, @empty, @empty}}}}) 492.640003ms ago: executing program 3 (id=689): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002ee00000000000000000004000000000000b4224bfcdf13e68d321659b4580ed922421e85f686ec1b29f59ca44fb5923c84f80b033cfa9926a33eb4e044189b56d2178c01e9e38ff5a80170491129af9376177c7128504ef45b0a407b908de27561c50ddc29fdc0ee30322e81b8d69e520169afeae6a3ab5034b001a4a25227d7db02de41c32c982bed01cb3bd968a8d810c2e1b81a96b10532213fe5e0ace7743f71d14343edb4f4540fdbc3678376e854ce26b97c6abe864d03dfd0e98708435fd7f74924f69225a4abb448ec24a69165241b8c5c36c33081"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500e2ff00000000bb7ccc2db638ecdcb975607aaad7c13b0bb7fbbb6c999f0c1bb32e5d8dcac681616269f821aa5dc0d11472093bb4b01d06e10b6518a98774a0d09061f06e4d74207f837997c36ab39ecd0c36b7a61721a36eae01eb224c045a38e701a4d196a4c9e14977c4d8d6396d84198d0a7fc83e02c9cc8882112e8ed59e1c0e1f3a00b0c8478dadbd2cc98fbc7153efbacc41497c78726b161ce3c2610bb71a2b0774abd84b26932d1bfac295d893f94ae878f90d909dccd4fe770435a013d09f88"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2}, 0x80) r1 = getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_pidfd_open(r1, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d09000000cd403a4480bd1afa34432bcdfaccd957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d4e0a5748900"}, 0xd8) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="d5519ca606acab5a8b7a738dcb478248cc46885c2dd3a94374f21fa55c3b1e291d695f553d7bb32d6214c2a56b86c0e247759497ac3aba5247ea8a66e5afcefffd790241ddd6d492d8d85c5f96e02519f69ca1dfde083e3210a55fc5067d577d36cdf63052d1cf9a68be29c074c576143ce805f61c7cc5a3e95f1c5ac11a22ae2cf25d8cbeeaa061ddaab613b90cfee0e9b18925279cc9b59a2f850cf0d9ee6219511f6ef41eaf2d8a461c214e30dfc4eec88bd9755a253d74ffc28d9d8dbc5dbe99443b56b3e858cf9ebf939e9b2760b8fa28006d19b207cc080303c1427bdc533fc23a834d59cb76b6bf75b81628c9f1790a381697", 0xff2d}], 0x1}}], 0x1, 0x20080058) 289.58902ms ago: executing program 2 (id=690): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="080000000f00000000bf3b2bef88b48ea6b9ce0b7ef4c9a630b878d3ef711254f8b71aa4910702005d825fbe43e05168eb22bdd5fc1346d95bd722ec2dec92b33e7b4d0db15a0da7666d987047a160c6ae3eb5e12dada2f2cf943f71064349d00965a81b722551946d1e06e6ba15d022974d064af9be8e481732faba107e8a00024f938e8ed15c4a572023332d12aab347f230c002d1b7ca1c1dcd8f19cb511552d13c0b2d0b28562320671dfd8e76b6543edb91746021001af275ab32d730490a79787f980a0a5ac8615ea5fe9e39fdac915898dce9bb3c74edba4db8354fb5aba58ddfacf27a70b57106", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x4}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) 182.329412ms ago: executing program 4 (id=691): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000180), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r6}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x55d0d04c, 0x3, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x800007ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=692): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x265}, {&(0x7f0000000580)="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", 0x141}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f000"], 0xac}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): s mode [ 158.562833][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.570056][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.578598][ T7165] bridge_slave_1: entered allmulticast mode [ 158.586439][ T7165] bridge_slave_1: entered promiscuous mode [ 158.659526][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.675855][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.737371][ T7165] team0: Port device team_slave_0 added [ 158.754840][ T7165] team0: Port device team_slave_1 added [ 158.784964][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.791954][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.835023][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.858222][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.867406][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.896720][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.982197][ T7165] hsr_slave_0: entered promiscuous mode [ 158.988594][ T7165] hsr_slave_1: entered promiscuous mode [ 158.996150][ T7165] debugfs: 'hsr0' already exists in 'hsr' [ 159.001942][ T7165] Cannot create hsr debugfs directory [ 159.284674][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.293865][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.302852][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.313533][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.322422][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.331287][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.340241][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.349142][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.358020][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.366924][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 159.601403][ T30] audit: type=1400 audit(2000000018.040:457): avc: denied { bind } for pid=7190 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.626454][ T30] audit: type=1400 audit(2000000018.040:458): avc: denied { name_bind } for pid=7190 comm="syz.2.272" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.690957][ T30] audit: type=1400 audit(2000000018.040:459): avc: denied { node_bind } for pid=7190 comm="syz.2.272" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 159.782928][ T7165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.798208][ T7165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.809978][ T7165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.831263][ T7165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.846821][ T5171] Bluetooth: hci5: command tx timeout [ 160.104558][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.616075][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.644860][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.740928][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.748062][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.814787][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.821926][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.842229][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 160.852893][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.893062][ T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 160.930626][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.963760][ T24] usb 3-1: Product: syz [ 160.971129][ T24] usb 3-1: Manufacturer: syz [ 160.982599][ T24] usb 3-1: SerialNumber: syz [ 161.014378][ T24] usb 3-1: config 0 descriptor?? [ 161.042614][ T30] audit: type=1400 audit(2000000019.480:460): avc: denied { bind } for pid=7211 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 161.067287][ T24] cdc_ether 3-1:0.0: skipping garbage [ 161.083886][ T30] audit: type=1400 audit(2000000019.480:461): avc: denied { module_request } for pid=7211 comm="syz.3.275" kmod="netdev-pimreg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 161.132169][ T24] usb 3-1: bad CDC descriptors [ 161.164616][ T24] usb 3-1: unsupported MDLM descriptors [ 161.198310][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.209614][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.219240][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.236526][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.245379][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.477955][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.501165][ T7216] chnl_net:caif_netlink_parms(): no params data found [ 161.582361][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 161.623234][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.630963][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.639417][ T7216] bridge_slave_0: entered allmulticast mode [ 161.647575][ T7216] bridge_slave_0: entered promiscuous mode [ 161.658356][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.667409][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.680847][ T7216] bridge_slave_1: entered allmulticast mode [ 161.696203][ T7216] bridge_slave_1: entered promiscuous mode [ 161.736549][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.742192][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 161.754569][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.761207][ T24] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 161.780231][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.788345][ T24] usb 5-1: Product: syz [ 161.793823][ T24] usb 5-1: Manufacturer: syz [ 161.798672][ T24] usb 5-1: SerialNumber: syz [ 161.815277][ T24] usb 5-1: config 0 descriptor?? [ 161.826979][ T7216] team0: Port device team_slave_0 added [ 161.849331][ T7216] team0: Port device team_slave_1 added [ 161.910001][ T30] audit: type=1400 audit(2000000020.350:462): avc: denied { read } for pid=7237 comm="syz.3.277" dev="sockfs" ino=14019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.922562][ T5861] Bluetooth: hci5: command tx timeout [ 161.941946][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.949243][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.976029][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.988209][ T7165] veth0_vlan: entered promiscuous mode [ 161.995837][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.005059][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.036076][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.049458][ T24] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 162.057550][ T7165] veth1_vlan: entered promiscuous mode [ 162.071375][ T24] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 162.092746][ T24] usb 5-1: USB disconnect, device number 17 [ 162.131199][ T7216] hsr_slave_0: entered promiscuous mode [ 162.137590][ T7216] hsr_slave_1: entered promiscuous mode [ 162.146612][ T7216] debugfs: 'hsr0' already exists in 'hsr' [ 162.153613][ T7216] Cannot create hsr debugfs directory [ 162.258588][ T7165] veth0_macvtap: entered promiscuous mode [ 162.273843][ T7165] veth1_macvtap: entered promiscuous mode [ 162.309694][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.341219][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.350377][ T7216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.366060][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.376133][ T7216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.386851][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.398165][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.409994][ T7216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.421407][ T7216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.430360][ T4619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.537822][ T325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.551297][ T325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.610565][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.647377][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.658668][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.669307][ T5978] usb 3-1: USB disconnect, device number 14 [ 162.696391][ T30] audit: type=1400 audit(2000000021.130:463): avc: denied { mounton } for pid=7165 comm="syz-executor" path="/root/syzkaller.fK4Ih5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 162.748120][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.803689][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.810818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.856945][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.864088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.284117][ T5861] Bluetooth: hci1: command tx timeout [ 163.334243][ T30] audit: type=1400 audit(2000000021.680:464): avc: denied { bind } for pid=7259 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.904017][ T7254] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 163.911407][ T7254] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 164.086504][ T30] audit: type=1400 audit(2000000021.680:465): avc: denied { listen } for pid=7259 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.307706][ T7254] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 164.388326][ T7254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.438068][ T7277] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 164.454610][ T7254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.695379][ T7254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.209622][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.362464][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 165.761921][ T5861] Bluetooth: hci5: Unable to find connection for big 0x00 [ 165.784805][ T7295] netlink: 'syz.5.286': attribute type 10 has an invalid length. [ 165.829250][ T30] audit: type=1400 audit(2000000024.270:466): avc: denied { ioctl } for pid=7307 comm="syz.2.289" path="socket:[15427]" dev="sockfs" ino=15427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.977062][ T7295] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 165.988752][ T7295] team0: Failed to send options change via netlink (err -105) [ 166.026383][ T7295] team0: Port device netdevsim0 added [ 166.205228][ T5850] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.405215][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 166.493689][ T5861] Bluetooth: hci0: command tx timeout [ 166.493740][ T30] audit: type=1400 audit(2000000024.930:467): avc: denied { ioctl } for pid=7307 comm="syz.2.289" path="socket:[15442]" dev="sockfs" ino=15442 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 166.817055][ T30] audit: type=1400 audit(2000000025.050:468): avc: denied { ioctl } for pid=7314 comm="syz.3.290" path="socket:[15447]" dev="sockfs" ino=15447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.849503][ T7216] veth0_vlan: entered promiscuous mode [ 166.947579][ T30] audit: type=1400 audit(2000000025.070:469): avc: denied { accept } for pid=7314 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.966812][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.992551][ T30] audit: type=1400 audit(2000000025.080:470): avc: denied { ioctl } for pid=7314 comm="syz.3.290" path="socket:[15443]" dev="sockfs" ino=15443 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.997077][ T7216] veth1_vlan: entered promiscuous mode [ 167.017012][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.437890][ T7330] IPv6: sit1: Disabled Multicast RS [ 167.447122][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 167.463712][ T7330] sit1: entered allmulticast mode [ 167.561987][ T7216] veth0_macvtap: entered promiscuous mode [ 167.705646][ T7216] veth1_macvtap: entered promiscuous mode [ 167.723103][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.756201][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.265714][ T7325] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 168.272393][ T30] audit: type=1400 audit(2000000026.270:471): avc: denied { ioctl } for pid=7332 comm="syz.5.296" path="socket:[14285]" dev="sockfs" ino=14285 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.316154][ T7325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.335585][ T4619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.347695][ T4619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.359271][ T3508] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.537577][ T3508] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.636662][ T30] audit: type=1400 audit(2000000027.080:472): avc: denied { write } for pid=7340 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.839849][ T5850] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.870066][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 168.884842][ T5939] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 168.895033][ T5850] usb 3-1: can't read configurations, error -71 [ 168.946568][ T7257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.999292][ T7257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.037113][ T7257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.052824][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 169.054608][ T7257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.074587][ T5939] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 169.100865][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.131904][ T5939] usb 4-1: Product: syz [ 169.150346][ T5939] usb 4-1: Manufacturer: syz [ 169.171728][ T5939] usb 4-1: SerialNumber: syz [ 169.191597][ T5939] usb 4-1: config 0 descriptor?? [ 169.465432][ T5939] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 169.474175][ T5939] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 169.522730][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 169.714537][ T7348] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.863777][ T5939] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 169.892523][ T5939] usb 4-1: USB disconnect, device number 16 [ 170.675916][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 171.636859][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 172.323272][ T978] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 172.688769][ T30] audit: type=1400 audit(2000000031.130:473): avc: denied { sqpoll } for pid=7377 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 172.751130][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 172.762850][ T978] usb 7-1: Using ep0 maxpacket: 16 [ 172.802653][ T7378] __nla_validate_parse: 44 callbacks suppressed [ 172.802688][ T7378] netlink: 5 bytes leftover after parsing attributes in process `syz.4.309'. [ 172.818336][ T30] audit: type=1400 audit(2000000031.240:474): avc: denied { connect } for pid=7377 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.836181][ T978] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 172.862712][ T7378] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 172.870170][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.922152][ T5850] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.939610][ T978] usb 7-1: Product: syz [ 172.944148][ T978] usb 7-1: Manufacturer: syz [ 172.958681][ T7378] 0ªX¹¦D: entered allmulticast mode [ 172.964458][ T7378] veth0_macvtap: entered allmulticast mode [ 172.972156][ T978] usb 7-1: SerialNumber: syz [ 172.994860][ T7378] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 173.043587][ T978] usb 7-1: config 0 descriptor?? [ 173.071677][ T7394] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.309' sets config #0 [ 173.179427][ T5850] usb 4-1: config 0 has no interfaces? [ 173.227543][ T5850] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 173.259516][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.326471][ T5850] usb 4-1: config 0 descriptor?? [ 173.345919][ T978] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 173.399162][ T978] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 173.504523][ T978] usb 7-1: USB disconnect, device number 2 [ 174.456967][ T30] audit: type=1400 audit(2000000032.900:475): avc: denied { setopt } for pid=7400 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.706757][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.313'. [ 174.716479][ T30] audit: type=1400 audit(2000000033.150:476): avc: denied { nlmsg_read } for pid=7404 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.818620][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 174.900816][ T30] audit: type=1400 audit(2000000033.340:477): avc: denied { append } for pid=7416 comm="syz.6.315" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.307945][ T30] audit: type=1400 audit(2000000033.340:478): avc: denied { map } for pid=7416 comm="syz.6.315" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.417659][ T5962] usb 4-1: USB disconnect, device number 17 [ 175.440860][ T30] audit: type=1400 audit(2000000033.340:479): avc: denied { execute } for pid=7416 comm="syz.6.315" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.653876][ T30] audit: type=1400 audit(2000000033.880:480): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 176.895086][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 176.906674][ T7431] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 176.932443][ T7431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.398985][ T7448] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 177.405791][ T7448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.413897][ T7448] vhci_hcd vhci_hcd.0: Device attached [ 177.439130][ T30] audit: type=1400 audit(2000000035.830:481): avc: denied { watch watch_reads } for pid=7444 comm=77DEA305FF07 path="/proc/18" dev="proc" ino=15733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 177.510147][ T30] audit: type=1326 audit(2000000035.900:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341b18eba9 code=0x7ffc0000 [ 177.581014][ T30] audit: type=1326 audit(2000000035.900:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f341b18d510 code=0x7ffc0000 [ 177.605009][ T5939] vhci_hcd: vhci_device speed not set [ 177.662860][ T92] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 177.677487][ T30] audit: type=1326 audit(2000000035.900:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f341b18e7ab code=0x7ffc0000 [ 177.702327][ T5962] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.712142][ T5939] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 177.832277][ T92] usb 7-1: device descriptor read/64, error -71 [ 177.862637][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 177.902298][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.914005][ T978] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 177.952292][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.965105][ T5962] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 177.979776][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.997203][ T5962] usb 6-1: config 0 descriptor?? [ 178.072220][ T92] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 178.082619][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 178.090587][ T978] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 178.100280][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.120859][ T978] usb 3-1: Product: syz [ 178.125309][ T978] usb 3-1: Manufacturer: syz [ 178.129984][ T978] usb 3-1: SerialNumber: syz [ 178.142285][ T978] usb 3-1: config 0 descriptor?? [ 178.172183][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 178.202310][ T92] usb 7-1: device descriptor read/64, error -71 [ 178.256712][ T5962] usbhid 6-1:0.0: can't add hid device: -71 [ 178.275779][ T5962] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 178.277890][ T7463] ubi31: attaching mtd0 [ 178.310399][ T7463] ubi31: scanning is finished [ 178.316017][ T92] usb usb7-port1: attempt power cycle [ 178.316812][ T5962] usb 6-1: USB disconnect, device number 2 [ 178.341729][ T7463] ubi31: empty MTD device detected [ 178.365733][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 178.386340][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 178.394602][ T978] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 178.405243][ T978] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 178.451611][ T978] usb 3-1: USB disconnect, device number 17 [ 178.514927][ T7463] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 178.562556][ T7463] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 178.727034][ T7463] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 178.734390][ T7463] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 178.827443][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 178.942218][ T7463] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 178.950169][ T7463] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 178.967397][ T7463] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1197327238 [ 178.982294][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 178.993024][ T92] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 179.013516][ T7463] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 179.024273][ T92] usb 7-1: device descriptor read/8, error -71 [ 179.040622][ T7470] ubi31: background thread "ubi_bgt31d" started, PID 7470 [ 179.262188][ T92] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 179.293175][ T92] usb 7-1: device descriptor read/8, error -71 [ 179.422246][ T92] usb usb7-port1: unable to enumerate USB device [ 179.492213][ T5962] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 179.575394][ T7484] netlink: 360 bytes leftover after parsing attributes in process `syz.3.332'. [ 179.644024][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.654291][ T5962] usb 5-1: not running at top speed; connect to a high speed hub [ 179.663661][ T5962] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 179.692281][ T5962] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 179.710810][ T5962] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 179.718579][ T5962] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 179.729884][ T5962] usb 5-1: config 129 has no interface number 0 [ 179.737348][ T5962] usb 5-1: config 129 has no interface number 1 [ 179.745260][ T5962] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 179.769065][ T25] block nbd0: Possible stuck request ffff888026ee01c0: control (read@0,1024B). Runtime 60 seconds [ 179.779836][ T25] block nbd0: Possible stuck request ffff888026ee0380: control (read@1024,1024B). Runtime 60 seconds [ 179.804690][ T25] block nbd0: Possible stuck request ffff888026ee0540: control (read@2048,1024B). Runtime 60 seconds [ 179.816154][ T25] block nbd0: Possible stuck request ffff888026ee0700: control (read@3072,1024B). Runtime 60 seconds [ 179.831030][ T5962] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 179.845884][ T5962] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 179.859876][ T5962] usb 5-1: config 129 interface 135 has no altsetting 0 [ 179.867016][ T5962] usb 5-1: config 129 interface 5 has no altsetting 0 [ 179.895854][ T5962] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 179.904967][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.913637][ T5962] usb 5-1: Product: syz [ 179.917809][ T5962] usb 5-1: Manufacturer: syz [ 179.954143][ T5962] usb 5-1: SerialNumber: syz [ 180.309860][ T7449] vhci_hcd: connection reset by peer [ 180.323100][ T7257] vhci_hcd: stop threads [ 180.337529][ T7257] vhci_hcd: release socket [ 180.357904][ T7257] vhci_hcd: disconnect device [ 180.860654][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 180.860685][ T30] audit: type=1400 audit(2000000039.270:514): avc: denied { setopt } for pid=7499 comm="syz.6.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.231795][ T5962] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.254556][ T5962] usb 5-1: MIDIStreaming interface descriptor not found [ 181.686784][ T5962] usb 5-1: USB disconnect, device number 18 [ 182.436080][ T5962] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 182.597832][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.341'. [ 182.618491][ T5962] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 182.627485][ T5962] usb 5-1: config 0 has no interface number 1 [ 182.633858][ T978] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 182.645218][ T5962] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 182.656736][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.677641][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.341'. [ 182.685741][ T5962] usb 5-1: config 0 descriptor?? [ 182.704454][ T5962] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.712907][ T5962] usb 5-1: MIDIStreaming interface descriptor not found [ 182.772228][ T978] usb 3-1: device descriptor read/64, error -71 [ 182.782175][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.857071][ T5962] gspca_main: spca561-2.14.0 probing abcd:cdee [ 182.876273][ T5939] vhci_hcd: vhci_device speed not set [ 182.913381][ T5962] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 182.956347][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 182.961911][ T5962] usb 5-1: USB disconnect, device number 19 [ 182.981317][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.042943][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.048576][ T30] audit: type=1400 audit(2000000041.490:515): avc: denied { getopt } for pid=7531 comm="syz.5.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.052886][ T978] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 183.090628][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.111007][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.153435][ T24] usb 4-1: config 0 descriptor?? [ 183.164324][ T24] hub 4-1:0.0: USB hub found [ 183.254852][ T978] usb 3-1: device descriptor read/64, error -71 [ 183.365779][ T24] hub 4-1:0.0: 1 port detected [ 183.373671][ T978] usb usb3-port1: attempt power cycle [ 183.612298][ T30] audit: type=1400 audit(2000000042.050:516): avc: denied { accept } for pid=7541 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.762468][ T978] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 183.802879][ T978] usb 3-1: device descriptor read/8, error -71 [ 183.909344][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 183.976044][ T24] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 183.982242][ T92] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 184.052201][ T978] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 184.102945][ T978] usb 3-1: device descriptor read/8, error -71 [ 184.142222][ T92] usb 7-1: Using ep0 maxpacket: 8 [ 184.155148][ T92] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.183023][ T92] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 184.195495][ T92] usb 7-1: config 1 interface 0 has no altsetting 0 [ 184.205284][ T92] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.214468][ T978] usb usb3-port1: unable to enumerate USB device [ 184.223531][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.242201][ T92] usb 7-1: Product: င [ 184.262213][ T92] usb 7-1: Manufacturer: О [ 184.272249][ T92] usb 7-1: SerialNumber: syz [ 184.282441][ T5962] usb 4-1: USB disconnect, device number 18 [ 184.300845][ T7549] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 184.517180][ T92] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 184.557923][ T92] usb 7-1: USB disconnect, device number 7 [ 184.830537][ T7565] loop7: detected capacity change from 0 to 7 [ 184.863657][ T7565] Invalid logical block size (6) [ 184.877061][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.891381][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.900779][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.913465][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.922658][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.936428][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.945637][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.954622][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.963787][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.977842][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.987043][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 185.050740][ T30] audit: type=1400 audit(2000000043.490:517): avc: denied { accept } for pid=7562 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.070725][ T30] audit: type=1400 audit(2000000043.490:518): avc: denied { shutdown } for pid=7562 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.110198][ T30] audit: type=1400 audit(2000000043.490:519): avc: denied { getopt } for pid=7562 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.039396][ T30] audit: type=1400 audit(2000000046.480:520): avc: denied { ioctl } for pid=7596 comm="syz.2.359" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.692989][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.6.363'. [ 188.845745][ T7616] input: syz1 as /devices/virtual/input/input7 [ 188.865864][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 189.050859][ T7607] 9pnet_fd: Insufficient options for proto=fd [ 189.388264][ T5978] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 189.407813][ T7632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.422650][ T30] audit: type=1400 audit(2000000047.850:521): avc: denied { create } for pid=7625 comm="syz.6.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 189.582167][ T5978] usb 4-1: Using ep0 maxpacket: 32 [ 189.593449][ T5978] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.601670][ T5978] usb 4-1: config 0 has no interface number 0 [ 189.658895][ T7635] Bluetooth: hci6: Frame reassembly failed (-84) [ 189.670162][ T7635] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 189.737403][ T5978] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.746726][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.754756][ T5978] usb 4-1: Product: syz [ 189.758916][ T5978] usb 4-1: Manufacturer: syz [ 189.763855][ T5978] usb 4-1: SerialNumber: syz [ 189.770715][ T5978] usb 4-1: config 0 descriptor?? [ 189.789905][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 189.815546][ T5978] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.950218][ T7625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.154116][ T5978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.168386][ T5978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.663008][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.672044][ T978] usb 4-1: USB disconnect, device number 19 [ 190.689480][ T978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.702355][ T30] audit: type=1400 audit(2000000049.140:522): avc: denied { create } for pid=7641 comm="syz.6.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.726865][ T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.745141][ T978] quatech2 4-1:0.51: device disconnected [ 190.868723][ T30] audit: type=1400 audit(2000000049.310:523): avc: denied { write } for pid=7645 comm="syz.6.372" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.112368][ T5939] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 191.482143][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 191.632199][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 191.639043][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.649448][ T5913] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 191.658515][ T5913] usb 4-1: config 1 has no interface number 1 [ 191.664751][ T5913] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.677513][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.686943][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.695140][ T5913] usb 4-1: Product: syz [ 191.699543][ T5913] usb 4-1: Manufacturer: syz [ 191.704201][ T5913] usb 4-1: SerialNumber: syz [ 191.762375][ T5171] Bluetooth: hci6: command 0x1003 tx timeout [ 191.763066][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 191.885180][ T7654] Illegal XDP return value 2874550190 on prog (id 83) dev syz_tun, expect packet loss! [ 191.919780][ T5913] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 191.995383][ T5913] usb 4-1: 2:1 : unsupported format bits 0x80 [ 192.058084][ T5913] usb 4-1: USB disconnect, device number 20 [ 192.131520][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.577805][ T30] audit: type=1400 audit(2000000051.020:524): avc: denied { view } for pid=7664 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.294724][ T7661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 193.319517][ T7661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.327638][ T30] audit: type=1400 audit(2000000051.740:525): avc: denied { read write } for pid=7672 comm="syz.3.380" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.353454][ T30] audit: type=1400 audit(2000000051.740:526): avc: denied { open } for pid=7672 comm="syz.3.380" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.378697][ T30] audit: type=1400 audit(2000000051.740:527): avc: denied { map } for pid=7672 comm="syz.3.380" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.601391][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.382'. [ 193.846987][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.866188][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.258630][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 194.927605][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.5.386'. [ 195.376794][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 195.984869][ T30] audit: type=1400 audit(2000000054.380:528): avc: denied { read } for pid=7711 comm="syz.2.389" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.007684][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.065967][ T30] audit: type=1400 audit(2000000054.380:529): avc: denied { open } for pid=7711 comm="syz.2.389" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.089189][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.212254][ T30] audit: type=1400 audit(2000000054.380:530): avc: denied { ioctl } for pid=7711 comm="syz.2.389" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.237058][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.672376][ T30] audit: type=1400 audit(2000000054.870:531): avc: denied { ioctl } for pid=7714 comm="syz.2.390" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.693526][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 198.770078][ T7733] geneve2: entered promiscuous mode [ 199.552313][ T5939] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 199.723357][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 199.752850][ T5939] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.760876][ T5939] usb 3-1: config 0 has no interface number 0 [ 199.797476][ T5939] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 199.811641][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.827854][ T5939] usb 3-1: Product: syz [ 200.087544][ T30] audit: type=1400 audit(2000000058.530:532): avc: denied { ioctl } for pid=7746 comm="syz.4.397" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 200.114529][ T7751] binder: 7746:7751 unknown command 1915712101 [ 200.125743][ T5939] usb 3-1: Manufacturer: syz [ 200.150641][ T5939] usb 3-1: SerialNumber: syz [ 200.203129][ T5939] usb 3-1: config 0 descriptor?? [ 200.254049][ T7751] binder: 7746:7751 ioctl c0306201 200000000080 returned -22 [ 200.264550][ T5939] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 200.292974][ T5939] usb 3-1: selecting invalid altsetting 1 [ 200.307383][ T5939] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 200.324381][ T5939] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.451617][ T7745] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 200.538948][ T5939] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 200.625399][ T7771] mkiss: ax0: crc mode is auto. [ 200.653452][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.400'. [ 200.782460][ T5939] usb 3-1: media controller created [ 200.796312][ T30] audit: type=1400 audit(2000000059.080:533): avc: denied { bind } for pid=7760 comm="syz.5.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.822211][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.489910][ T30] audit: type=1400 audit(2000000059.110:534): avc: denied { accept } for pid=7760 comm="syz.5.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.519019][ T7783] input: syz1 as /devices/virtual/input/input8 [ 201.878349][ T30] audit: type=1400 audit(2000000060.300:535): avc: denied { block_suspend } for pid=7786 comm="syz.5.406" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.341176][ T5939] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 202.348909][ T5939] zl10353_read_register: readreg error (reg=127, ret==-71) [ 202.430672][ T5939] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 202.434405][ T7799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.048824][ T7800] trusted_key: encrypted_key: insufficient parameters specified [ 203.056647][ T7800] trusted_key: encrypted_key: keylen parameter is missing [ 203.065219][ T7800] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.076844][ T7800] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.242962][ T7803] block nbd5: NBD_DISCONNECT [ 203.257471][ T7803] block nbd5: Send disconnect failed -107 [ 203.643139][ T30] audit: type=1400 audit(2000000062.080:536): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.643215][ T5939] usb 3-1: USB disconnect, device number 22 [ 203.792673][ T7798] block nbd5: Disconnected due to user request. [ 203.799264][ T7798] block nbd5: shutting down sockets [ 204.144931][ T30] audit: type=1400 audit(2000000062.260:537): avc: denied { read } for pid=7804 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.519338][ T7820] netlink: 52 bytes leftover after parsing attributes in process `syz.6.413'. [ 204.752322][ T30] audit: type=1400 audit(2000000063.190:538): avc: denied { create } for pid=7813 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.977413][ T7826] netlink: 96 bytes leftover after parsing attributes in process `syz.6.416'. [ 204.996316][ T30] audit: type=1400 audit(2000000063.420:539): avc: denied { connect } for pid=7822 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.050732][ T30] audit: type=1326 audit(2000000063.470:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c05d8eba9 code=0x0 [ 205.324283][ T30] audit: type=1400 audit(2000000063.590:541): avc: denied { append } for pid=7813 comm="syz.2.410" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.569459][ T30] audit: type=1400 audit(2000000063.960:542): avc: denied { execute } for pid=7833 comm="syz.5.418" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.649705][ T92] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 206.279816][ T92] usb 7-1: device descriptor read/64, error -71 [ 206.672296][ T92] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 206.834086][ T92] usb 7-1: device descriptor read/64, error -71 [ 206.951642][ T7850] IPv6: syztnl1: Disabled Multicast RS [ 206.952436][ T92] usb usb7-port1: attempt power cycle [ 207.147504][ T30] audit: type=1400 audit(2000000065.590:543): avc: denied { map } for pid=7858 comm="syz.5.425" path="socket:[18601]" dev="sockfs" ino=18601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 207.302237][ T5913] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 207.332790][ T92] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 208.254923][ T7872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7872 comm=syz.5.428 [ 208.269985][ T92] usb 7-1: device descriptor read/8, error -71 [ 208.383492][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.457453][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.469874][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.503139][ T5913] usb 3-1: config 0 descriptor?? [ 208.969054][ T30] audit: type=1400 audit(2000000067.380:544): avc: denied { mounton } for pid=7874 comm="syz.6.430" path="/proc/100/task" dev="proc" ino=17793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 208.977616][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 208.991575][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.047527][ T7883] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 209.445016][ T7907] can0: slcan on ptm0. [ 209.516341][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.566044][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 209.607950][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.738481][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 209.757681][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 209.765215][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 209.772728][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 209.780246][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 209.786501][ T7907] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.805503][ T30] audit: type=1400 audit(2000000068.240:545): avc: denied { getopt } for pid=7905 comm="syz.5.436" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.832586][ T978] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 209.850145][ T25] block nbd0: Possible stuck request ffff888026ee01c0: control (read@0,1024B). Runtime 90 seconds [ 209.861987][ T25] block nbd0: Possible stuck request ffff888026ee0380: control (read@1024,1024B). Runtime 90 seconds [ 209.873045][ T25] block nbd0: Possible stuck request ffff888026ee0540: control (read@2048,1024B). Runtime 90 seconds [ 209.884006][ T25] block nbd0: Possible stuck request ffff888026ee0700: control (read@3072,1024B). Runtime 90 seconds [ 210.042283][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 210.051257][ T7918] 9pnet_fd: Insufficient options for proto=fd [ 210.378314][ T978] usb 7-1: unable to get BOS descriptor or descriptor too short [ 210.390430][ T978] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 210.398183][ T978] usb 7-1: can't read configurations, error -71 [ 210.502591][ T7905] can0 (unregistered): slcan off ptm0. [ 211.089441][ T7931] netlink: 'syz.6.440': attribute type 2 has an invalid length. [ 211.129318][ T7931] netlink: 'syz.6.440': attribute type 1 has an invalid length. [ 211.204417][ T30] audit: type=1400 audit(2000000069.590:546): avc: denied { override_creds } for pid=7932 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 211.208449][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 211.313638][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.440'. [ 211.366188][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 211.581222][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 211.603059][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.442'. [ 211.651535][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 211.667658][ T978] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 211.675358][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 211.684699][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 211.709103][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.781706][ T5913] pwc: Registered as video103. [ 211.950768][ T7896] syz.3.433 (7896): drop_caches: 2 [ 211.997634][ T978] usb 7-1: unable to get BOS descriptor or descriptor too short [ 212.021933][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 212.052621][ T978] usb 7-1: not running at top speed; connect to a high speed hub [ 212.106298][ T978] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 212.175855][ T978] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 212.177381][ T5913] usb 3-1: USB disconnect, device number 23 [ 212.190732][ T7954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.232266][ T978] usb 7-1: config 129 descriptor has 1 excess byte, ignoring [ 212.259184][ T978] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 212.269054][ T978] usb 7-1: config 129 has no interface number 0 [ 212.295277][ T978] usb 7-1: config 129 has no interface number 1 [ 212.376698][ T978] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 212.417696][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 212.442856][ T978] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 212.492206][ T978] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 212.548064][ T978] usb 7-1: config 129 interface 135 has no altsetting 0 [ 212.578329][ T978] usb 7-1: config 129 interface 5 has no altsetting 0 [ 212.613248][ T978] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 212.636031][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.687010][ T978] usb 7-1: Product: syz [ 212.701714][ T978] usb 7-1: Manufacturer: syz [ 212.722414][ T978] usb 7-1: SerialNumber: syz [ 213.016740][ T978] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.062674][ T978] usb 7-1: MIDIStreaming interface descriptor not found [ 213.247218][ T978] usb 7-1: USB disconnect, device number 15 [ 213.588495][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.766169][ T5913] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 213.784854][ T7998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7998 comm=syz.6.452 [ 213.962409][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 215.305987][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.346088][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.356067][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.366588][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.377141][ T5913] usb 3-1: config 0 descriptor?? [ 215.384356][ T5913] hub 3-1:0.0: USB hub found [ 215.599984][ T5913] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 216.217443][ T30] audit: type=1400 audit(2000000074.640:547): avc: denied { ioctl } for pid=8046 comm="syz.4.455" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 216.242359][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.833121][ T8062] FAULT_INJECTION: forcing a failure. [ 216.833121][ T8062] name fail_futex, interval 1, probability 0, space 0, times 1 [ 216.845979][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.5.454 Not tainted syzkaller #0 PREEMPT(full) [ 216.845995][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.846001][ T8062] Call Trace: [ 216.846005][ T8062] [ 216.846009][ T8062] dump_stack_lvl+0x16c/0x1f0 [ 216.846027][ T8062] should_fail_ex+0x512/0x640 [ 216.846043][ T8062] get_futex_key+0x293/0x1560 [ 216.846061][ T8062] ? __pfx_get_futex_key+0x10/0x10 [ 216.846076][ T8062] ? get_pid_task+0xfc/0x250 [ 216.846094][ T8062] futex_wake+0xea/0x530 [ 216.846104][ T8062] ? proc_fail_nth_write+0x9f/0x220 [ 216.846118][ T8062] ? __pfx_futex_wake+0x10/0x10 [ 216.846132][ T8062] ? ksys_write+0x190/0x250 [ 216.846145][ T8062] do_futex+0x1e3/0x350 [ 216.846161][ T8062] ? __pfx_do_futex+0x10/0x10 [ 216.846180][ T8062] __x64_sys_futex+0x1e0/0x4c0 [ 216.846196][ T8062] ? fput+0x9b/0xd0 [ 216.846209][ T8062] ? __pfx___x64_sys_futex+0x10/0x10 [ 216.846224][ T8062] ? ksys_write+0x1ac/0x250 [ 216.846234][ T8062] ? __pfx_ksys_write+0x10/0x10 [ 216.846248][ T8062] do_syscall_64+0xcd/0x4c0 [ 216.846262][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.846273][ T8062] RIP: 0033:0x7f341b18eba9 [ 216.846282][ T8062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.846293][ T8062] RSP: 002b:00007f341c01e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.846303][ T8062] RAX: ffffffffffffffda RBX: 00007f341b3d6180 RCX: 00007f341b18eba9 [ 216.846309][ T8062] RDX: 0000000000800001 RSI: 0000000000000001 RDI: 000020000000cffc [ 216.846315][ T8062] RBP: 00007f341c01e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.846321][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.846327][ T8062] R13: 00007f341b3d6218 R14: 00007f341b3d6180 R15: 00007fff27e944f8 [ 216.846339][ T8062] [ 217.333359][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 217.339331][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 217.416658][ T5913] usb 3-1: USB disconnect, device number 24 [ 217.469588][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.458'. [ 217.561817][ T8069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.610940][ T8069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.618400][ T8069] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 217.630159][ T8069] bond1: (slave vcan1): Error -95 calling set_mac_address [ 217.683063][ T8075] netlink: 'syz.5.462': attribute type 4 has an invalid length. [ 217.835822][ T8086] erofs (device nbd2): cannot find valid erofs superblock [ 218.392632][ T8075] netlink: 'syz.5.462': attribute type 4 has an invalid length. [ 218.772381][ T5978] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 218.903284][ T5913] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 219.175243][ T5913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.199697][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.219992][ T5913] usb 7-1: Product: syz [ 219.225882][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.259315][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.282949][ T5913] usb 7-1: Manufacturer: syz [ 219.302152][ T5913] usb 7-1: SerialNumber: syz [ 219.302921][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.345967][ T5978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.377064][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.413125][ T5978] usb 5-1: config 0 descriptor?? [ 219.534374][ T30] audit: type=1400 audit(2000000077.970:548): avc: denied { write } for pid=8093 comm="syz.6.465" path="socket:[18205]" dev="sockfs" ino=18205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.587336][ T5906] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 219.732172][ T5906] usb 4-1: device descriptor read/64, error -71 [ 219.734678][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.749053][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.830075][ T5978] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe [ 219.846702][ T5978] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 219.884712][ T5978] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 220.253774][ T5906] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 220.267512][ T5913] cdc_ncm 7-1:1.0: bind() failure [ 220.476896][ T5850] usb 5-1: USB disconnect, device number 20 [ 220.513124][ T5906] usb 4-1: device descriptor read/64, error -71 [ 220.542927][ T5913] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 220.558105][ T5913] cdc_ncm 7-1:1.1: bind() failure [ 220.566006][ T8120] fido_id[8120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 220.594167][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.468'. [ 220.603304][ T5913] usb 7-1: USB disconnect, device number 16 [ 220.627083][ T30] audit: type=1400 audit(2000000079.070:549): avc: denied { write } for pid=8127 comm="syz.6.473" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 220.637198][ T5906] usb usb4-port1: attempt power cycle [ 220.875059][ T8131] 9pnet_fd: Insufficient options for proto=fd [ 220.898589][ T30] audit: type=1400 audit(2000000079.320:550): avc: denied { create } for pid=8127 comm="syz.6.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.440023][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 221.645897][ T5906] usb 4-1: device descriptor read/8, error -71 [ 221.909429][ T30] audit: type=1400 audit(2000000080.350:551): avc: denied { lock } for pid=8141 comm="syz.6.476" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 221.946839][ T5906] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 222.167635][ T5906] usb 4-1: device descriptor read/8, error -71 [ 222.282293][ T5906] usb usb4-port1: unable to enumerate USB device [ 222.438921][ T30] audit: type=1400 audit(2000000080.880:552): avc: denied { setopt } for pid=8148 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.471244][ T8149] binder: Bad value for 'max' [ 222.480515][ T30] audit: type=1400 audit(2000000080.910:553): avc: denied { ioctl } for pid=8148 comm="syz.3.479" path="socket:[18262]" dev="sockfs" ino=18262 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.551434][ T30] audit: type=1400 audit(2000000080.910:554): avc: denied { getopt } for pid=8148 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.581706][ T30] audit: type=1400 audit(2000000080.910:555): avc: denied { remount } for pid=8148 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.971505][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.478'. [ 222.982975][ T8161] chnl_net:caif_netlink_parms(): no params data found [ 223.780438][ T8172] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 223.847439][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 223.947943][ T8157] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 223.964016][ T8157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.125306][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.224147][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.522299][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 224.692188][ T24] usb 3-1: device descriptor read/64, error -71 [ 224.710715][ T8190] netlink: 'syz.6.486': attribute type 10 has an invalid length. [ 225.052238][ T30] audit: type=1400 audit(2000000083.270:556): avc: denied { create } for pid=8182 comm="syz.6.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 225.072353][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.096339][ T30] audit: type=1400 audit(2000000083.290:557): avc: denied { sys_admin } for pid=8182 comm="syz.6.486" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 225.182281][ T8190] macvlan0: entered promiscuous mode [ 225.193296][ T8190] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 225.282420][ T24] usb 3-1: device descriptor read/64, error -71 [ 225.392358][ T24] usb usb3-port1: attempt power cycle [ 225.777060][ T8197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8197 comm=syz.4.488 [ 225.792251][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 225.866547][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 225.889710][ T5850] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.889838][ T24] usb 3-1: device descriptor read/8, error -71 [ 226.003472][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 226.151990][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.303085][ T24] usb 3-1: device descriptor read/8, error -71 [ 226.403927][ T8203] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.422599][ T24] usb usb3-port1: unable to enumerate USB device [ 226.442232][ T5850] usb 4-1: device descriptor read/64, error -71 [ 226.782167][ T5850] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 226.932243][ T5850] usb 4-1: device descriptor read/64, error -71 [ 226.944154][ T30] audit: type=1400 audit(2000000085.390:558): avc: denied { shutdown } for pid=8204 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.964061][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.088248][ T5850] usb usb4-port1: attempt power cycle [ 227.553126][ T30] audit: type=1400 audit(2000000085.980:559): avc: denied { write } for pid=8211 comm="syz.6.493" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 227.582170][ T5850] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 228.021025][ T30] audit: type=1400 audit(2000000085.980:560): avc: denied { open } for pid=8211 comm="syz.6.493" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 228.352682][ T5850] usb 4-1: device descriptor read/8, error -71 [ 228.506523][ T30] audit: type=1400 audit(2000000086.860:561): avc: denied { execmem } for pid=8220 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 228.612363][ T5850] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 228.656361][ T5850] usb 4-1: device descriptor read/8, error -71 [ 228.782390][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'. [ 229.182365][ T5850] usb usb4-port1: unable to enumerate USB device [ 229.297383][ T30] audit: type=1400 audit(2000000087.710:562): avc: denied { getopt } for pid=8240 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.808393][ T30] audit: type=1400 audit(2000000088.250:563): avc: denied { create } for pid=8250 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 230.222185][ T5850] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 230.382251][ T5913] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 230.404555][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 230.414793][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.429316][ T5850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.470288][ T5850] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.489879][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.510844][ T5850] usb 3-1: Product: syz [ 230.519637][ T5850] usb 3-1: Manufacturer: syz [ 230.539455][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.562832][ T5850] usb 3-1: SerialNumber: syz [ 230.570227][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.610836][ T30] audit: type=1400 audit(2000000089.040:564): avc: denied { read } for pid=8263 comm="syz.6.503" path="socket:[18414]" dev="sockfs" ino=18414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.612196][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.634029][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.782161][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.797561][ T5913] usb 5-1: Product: syz [ 230.802482][ T5913] usb 5-1: Manufacturer: syz [ 230.807371][ T5913] usb 5-1: SerialNumber: syz [ 230.812345][ T5850] usb 3-1: 0:2 : does not exist [ 231.201655][ T5850] usb 3-1: unit 6 not found! [ 231.215482][ T5913] cdc_mbim 5-1:1.0: skipping garbage [ 231.227751][ T5913] usb 5-1: selecting invalid altsetting 1 [ 231.254560][ T5850] usb 3-1: USB disconnect, device number 29 [ 231.392775][ T6307] udevd[6307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.621059][ T5913] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 231.640901][ T5913] cdc_mbim 5-1:1.0: bind() failure [ 231.665020][ T30] audit: type=1400 audit(2000000090.100:565): avc: denied { ioctl } for pid=8278 comm="syz.5.508" path="socket:[19477]" dev="sockfs" ino=19477 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.724055][ T30] audit: type=1400 audit(2000000090.160:566): avc: denied { read write } for pid=8254 comm="syz.4.501" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 231.746449][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.765333][ T24] usb 5-1: USB disconnect, device number 21 [ 231.802167][ T30] audit: type=1400 audit(2000000090.160:567): avc: denied { open } for pid=8254 comm="syz.4.501" path="/113/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 232.057743][ T30] audit: type=1400 audit(2000000090.500:568): avc: denied { read } for pid=8278 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.421500][ T30] audit: type=1400 audit(2000000090.790:569): avc: denied { associate } for pid=8301 comm="syz.5.510" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 233.191711][ T8310] erofs (device nbd5): cannot find valid erofs superblock [ 234.921400][ T8328] usb usb8: usbfs: process 8328 (syz.3.517) did not claim interface 0 before use [ 235.020759][ T8331] cgroup: release_agent respecified [ 235.081359][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.513'. [ 235.092117][ T30] audit: type=1400 audit(2000000093.520:570): avc: denied { ioctl } for pid=8309 comm="syz.6.513" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.642522][ T5963] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.721733][ T8355] erofs (device nbd4): cannot find valid erofs superblock [ 236.422211][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 236.533050][ T5963] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 236.552157][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.562533][ T5963] usb 3-1: Product: syz [ 236.566863][ T5963] usb 3-1: Manufacturer: syz [ 236.600516][ T5963] usb 3-1: SerialNumber: syz [ 237.048828][ T8361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.059891][ T8361] overlayfs: maximum fs stacking depth exceeded [ 237.126479][ T30] audit: type=1400 audit(2000000095.490:571): avc: denied { mount } for pid=8357 comm="syz.6.527" name="/" dev="hugetlbfs" ino=19387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 237.159747][ T5963] usb 3-1: config 0 descriptor?? [ 237.182153][ T5978] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 237.585643][ T5963] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 237.597104][ T5963] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 237.603065][ T30] audit: type=1400 audit(2000000096.040:572): avc: denied { unmount } for pid=7216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 237.608230][ T5963] usb 3-1: USB disconnect, device number 30 [ 237.759436][ T5978] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.980934][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.006059][ T5978] usb 5-1: Product: syz [ 238.010261][ T5978] usb 5-1: Manufacturer: syz [ 238.024069][ T8370] @: renamed from vlan0 (while UP) [ 238.059483][ T5978] usb 5-1: SerialNumber: syz [ 238.122606][ T30] audit: type=1400 audit(2000000096.570:573): avc: denied { create } for pid=8372 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.218233][ T30] audit: type=1400 audit(2000000096.650:574): avc: denied { write } for pid=8372 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.338927][ T30] audit: type=1400 audit(2000000096.650:575): avc: denied { nlmsg_write } for pid=8372 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.553176][ T5850] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 238.622223][ T5939] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 238.712335][ T5850] usb 7-1: Using ep0 maxpacket: 16 [ 238.715111][ T5978] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 238.751474][ T5850] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 238.764867][ T5978] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 238.782227][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 238.788231][ T5978] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.815170][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 238.826260][ T5850] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 238.835554][ T5978] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 238.842117][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.878187][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.890195][ T5978] usb 5-1: USB disconnect, device number 22 [ 239.009353][ T5939] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 239.038385][ T5850] usb 7-1: config 0 descriptor?? [ 239.046435][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.076517][ T5939] usb 4-1: config 0 descriptor?? [ 239.087530][ T8375] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 239.162490][ T5963] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.322220][ T5963] usb 6-1: Using ep0 maxpacket: 16 [ 239.328949][ T5963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.350177][ T5963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.379519][ T5963] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.419138][ T5963] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.441251][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.465761][ T5850] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 239.470991][ T30] audit: type=1400 audit(2000000097.900:576): avc: denied { setopt } for pid=8371 comm="syz.6.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.473214][ T5850] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 239.473237][ T5850] hid-picolcd 0003:04D8:C002.0009: item fetching failed at offset 2/5 [ 239.473773][ T5850] hid-picolcd 0003:04D8:C002.0009: device report parse failed [ 239.494300][ T5963] usb 6-1: config 0 descriptor?? [ 239.528474][ T5850] hid-picolcd 0003:04D8:C002.0009: probe with driver hid-picolcd failed with error -22 [ 239.566614][ T5939] playstation 0003:054C:0BA0.000A: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 239.696999][ T5850] usb 7-1: USB disconnect, device number 17 [ 239.789984][ T5939] playstation 0003:054C:0BA0.000A: Failed to retrieve feature with reportID 18: -71 [ 239.841294][ T5939] playstation 0003:054C:0BA0.000A: Failed to retrieve DualShock4 pairing info: -71 [ 239.922956][ T25] block nbd0: Possible stuck request ffff888026ee01c0: control (read@0,1024B). Runtime 120 seconds [ 239.937060][ T25] block nbd0: Possible stuck request ffff888026ee0380: control (read@1024,1024B). Runtime 120 seconds [ 239.948179][ T25] block nbd0: Possible stuck request ffff888026ee0540: control (read@2048,1024B). Runtime 120 seconds [ 239.962026][ T25] block nbd0: Possible stuck request ffff888026ee0700: control (read@3072,1024B). Runtime 120 seconds [ 240.015729][ T5939] playstation 0003:054C:0BA0.000A: Failed to get MAC address from DualShock4 [ 240.077871][ T5939] playstation 0003:054C:0BA0.000A: Failed to create dualshock4. [ 240.228453][ T30] audit: type=1326 audit(2000000098.660:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.4.538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c05d8eba9 code=0xffff0000 [ 240.251763][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.296010][ T5939] playstation 0003:054C:0BA0.000A: probe with driver playstation failed with error -71 [ 240.357773][ T5939] usb 4-1: USB disconnect, device number 29 [ 241.128511][ T5963] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 241.144267][ T5963] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 241.160936][ T5963] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 241.179512][ T5963] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 241.209616][ T5963] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 241.356102][ T5963] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input11 [ 241.412209][ T5850] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 241.440197][ T5963] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 241.511388][ T5963] usb 6-1: USB disconnect, device number 3 [ 241.608563][ T8415] fido_id[8415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 241.632731][ T5850] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 241.640933][ T5850] usb 7-1: config 0 has no interface number 0 [ 241.692163][ T5850] usb 7-1: config 0 interface 180 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 241.725402][ T5850] usb 7-1: config 0 interface 180 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 241.792421][ T5850] usb 7-1: config 0 interface 180 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.826708][ T30] audit: type=1400 audit(2000000100.250:578): avc: denied { read } for pid=8410 comm="syz.2.542" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 241.873418][ T5850] usb 7-1: config 0 interface 180 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.884382][ T30] audit: type=1400 audit(2000000100.250:579): avc: denied { open } for pid=8410 comm="syz.2.542" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 241.910203][ T5850] usb 7-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=8c.80 [ 241.919655][ T30] audit: type=1400 audit(2000000100.360:580): avc: denied { setattr } for pid=8410 comm="syz.2.542" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 241.943367][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.951703][ T5850] usb 7-1: Product: syz [ 241.976473][ T5850] usb 7-1: Manufacturer: syz [ 241.981107][ T5850] usb 7-1: SerialNumber: syz [ 242.008206][ T5850] usb 7-1: config 0 descriptor?? [ 242.648050][ T8427] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 242.802400][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 242.802434][ T30] audit: type=1400 audit(2000000101.130:582): avc: denied { mounton } for pid=8422 comm="syz.3.545" path="/107/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 242.830538][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.332295][ T5963] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 244.045071][ T5963] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 244.060218][ T5963] usb 3-1: config 0 has no interface number 0 [ 244.143622][ T5963] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 244.185737][ T5963] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.200027][ T5963] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 244.404528][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.460871][ T5963] usb 3-1: Product: syz [ 244.484446][ T5963] usb 3-1: Manufacturer: syz [ 244.498516][ T5963] usb 3-1: SerialNumber: syz [ 244.516212][ T5963] usb 3-1: config 0 descriptor?? [ 244.535416][ T8429] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 244.550341][ T5963] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 244.603189][ T5963] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 244.831914][ T5850] io_ti 7-1:0.180: required endpoints missing [ 244.848084][ T5850] usb 7-1: USB disconnect, device number 18 [ 244.972814][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.990734][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.171082][ T5939] usb 3-1: USB disconnect, device number 31 [ 245.211942][ T5939] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 245.228972][ T5939] cyberjack 3-1:0.69: device disconnected [ 245.282651][ T5850] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 245.726134][ T30] audit: type=1400 audit(2000000104.170:583): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 245.929844][ T5850] usb 7-1: Using ep0 maxpacket: 32 [ 245.994592][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.036212][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.081671][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.732789][ T5850] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 246.765465][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.794207][ T5850] usb 7-1: config 0 descriptor?? [ 247.007730][ T8448] IPVS: persistence engine module ip_vs_pe_ not found [ 247.122973][ T5850] usbhid 7-1:0.0: can't add hid device: -71 [ 247.149885][ T5850] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 247.689992][ T5850] usb 7-1: USB disconnect, device number 19 [ 247.706912][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 247.715957][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 247.976688][ T8489] FAULT_INJECTION: forcing a failure. [ 247.976688][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 247.993106][ T30] audit: type=1400 audit(2000000106.440:584): avc: denied { execute } for pid=8477 comm="syz.3.557" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 248.090624][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(full) [ 248.090650][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.090660][ T8489] Call Trace: [ 248.090666][ T8489] [ 248.090673][ T8489] dump_stack_lvl+0x16c/0x1f0 [ 248.090700][ T8489] should_fail_ex+0x512/0x640 [ 248.090726][ T8489] _copy_from_iter+0x29f/0x1720 [ 248.090754][ T8489] ? __alloc_skb+0x200/0x380 [ 248.090776][ T8489] ? __pfx__copy_from_iter+0x10/0x10 [ 248.090799][ T8489] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 248.090824][ T8489] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 248.090857][ T8489] netlink_sendmsg+0x829/0xdd0 [ 248.090885][ T8489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.090917][ T8489] ____sys_sendmsg+0xa98/0xc70 [ 248.090944][ T8489] ? copy_msghdr_from_user+0x10a/0x160 [ 248.090966][ T8489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.091003][ T8489] ___sys_sendmsg+0x134/0x1d0 [ 248.091026][ T8489] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.091078][ T8489] __sys_sendmsg+0x16d/0x220 [ 248.091100][ T8489] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.091138][ T8489] do_syscall_64+0xcd/0x4c0 [ 248.091162][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.091180][ T8489] RIP: 0033:0x7f4c05d8eba9 [ 248.091194][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.091210][ T8489] RSP: 002b:00007f4c06b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.091227][ T8489] RAX: ffffffffffffffda RBX: 00007f4c05fd5fa0 RCX: 00007f4c05d8eba9 [ 248.091237][ T8489] RDX: 0000000000000000 RSI: 0000200000002140 RDI: 0000000000000003 [ 248.091247][ T8489] RBP: 00007f4c06b57090 R08: 0000000000000000 R09: 0000000000000000 [ 248.091256][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.091265][ T8489] R13: 00007f4c05fd6038 R14: 00007f4c05fd5fa0 R15: 00007ffe37332e98 [ 248.091289][ T8489] [ 248.552190][ T5963] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 248.804600][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 248.813081][ T5963] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 248.822527][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.833924][ T5963] usb 4-1: Product: syz [ 248.838075][ T5963] usb 4-1: Manufacturer: syz [ 248.843304][ T5963] usb 4-1: SerialNumber: syz [ 249.339933][ T5963] usb 4-1: config 0 descriptor?? [ 249.357631][ T5963] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 249.910072][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059bab400: rx timeout, send abort [ 249.931103][ T30] audit: type=1400 audit(2000000108.370:585): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 250.016955][ T5963] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 250.112186][ T30] audit: type=1400 audit(2000000108.370:586): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.212150][ T30] audit: type=1400 audit(2000000108.370:587): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.341336][ T30] audit: type=1400 audit(2000000108.370:588): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.396359][ T30] audit: type=1400 audit(2000000108.370:589): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.419781][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059bab400: abort rx timeout. Force session deactivation [ 250.452231][ T5963] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 250.542556][ T30] audit: type=1400 audit(2000000108.370:590): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.565793][ T30] audit: type=1400 audit(2000000108.370:591): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.084782][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 251.095639][ T5963] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 251.104042][ T5963] usb 5-1: config 0 has no interface number 0 [ 251.110365][ T5963] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 251.122223][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.145784][ T5963] usb 5-1: config 0 descriptor?? [ 251.160384][ T5963] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 251.225640][ T5963] usb 4-1: USB disconnect, device number 30 [ 251.360212][ T978] usb 5-1: USB disconnect, device number 23 [ 251.491566][ T8528] @: renamed from vlan0 (while UP) [ 252.214503][ T30] audit: type=1400 audit(2000000110.650:592): avc: denied { remount } for pid=8539 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 252.354534][ T30] audit: type=1400 audit(2000000110.800:593): avc: denied { create } for pid=8546 comm="syz.6.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 252.472288][ T978] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 252.624175][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.648458][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.679562][ T978] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 252.705591][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.736509][ T978] usb 4-1: config 0 descriptor?? [ 253.511971][ T978] hid-u2fzero 0003:10C4:8ACF.000C: collection stack underflow [ 253.533009][ T978] hid-u2fzero 0003:10C4:8ACF.000C: item 0 4 0 12 parsing failed [ 253.551929][ T978] hid-u2fzero 0003:10C4:8ACF.000C: probe with driver hid-u2fzero failed with error -22 [ 253.817980][ T8564] netlink: 256 bytes leftover after parsing attributes in process `syz.6.579'. [ 253.843684][ T92] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 253.893622][ T978] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 254.002236][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 254.008672][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.019725][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.030022][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.039860][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.050190][ T92] usb 3-1: config 0 descriptor?? [ 254.058757][ T92] hub 3-1:0.0: USB hub found [ 254.062299][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 254.075679][ T978] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 254.087537][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.096610][ T978] usb 5-1: Product: syz [ 254.100787][ T978] usb 5-1: Manufacturer: syz [ 254.105498][ T978] usb 5-1: SerialNumber: syz [ 254.111914][ T978] usb 5-1: config 0 descriptor?? [ 254.112856][ T5939] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 254.261809][ T92] hub 3-1:0.0: 1 port detected [ 254.272364][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 254.279574][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.290780][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.300813][ T5939] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.309926][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.321101][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 254.321567][ T5939] usb 7-1: config 0 descriptor?? [ 254.333189][ T978] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 254.333209][ T978] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 254.344531][ T978] usb 5-1: USB disconnect, device number 24 [ 254.378759][ T5939] hub 7-1:0.0: USB hub found [ 254.579661][ T5939] hub 7-1:0.0: 1 port detected [ 254.936370][ T92] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 255.050750][ T30] audit: type=1400 audit(2000000113.490:594): avc: denied { ioctl } for pid=8573 comm="syz.4.582" path="/130/file0/file0" dev="fuse" ino=64 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 255.075135][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.135181][ T8577] Bluetooth: MGMT ver 1.23 [ 255.163279][ T92] usb 4-1: USB disconnect, device number 31 [ 255.189185][ T30] audit: type=1400 audit(2000000113.630:595): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 255.246491][ T978] usb 3-1: USB disconnect, device number 32 [ 255.285083][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.295390][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.387257][ T5850] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 255.434840][ T8584] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 255.605202][ T30] audit: type=1400 audit(2000000114.050:596): avc: denied { setopt } for pid=8579 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.665039][ T30] audit: type=1400 audit(2000000114.070:597): avc: denied { getopt } for pid=8579 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.684853][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.781262][ T978] usb 7-1: USB disconnect, device number 20 [ 255.932342][ T92] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.065965][ T8592] erofs (device nbd2): cannot find valid erofs superblock [ 256.487304][ T92] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 256.496778][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.514639][ T92] usb 5-1: Product: syz [ 256.520598][ T92] usb 5-1: Manufacturer: syz [ 256.526699][ T92] usb 5-1: SerialNumber: syz [ 256.757514][ T8597] netlink: 'syz.6.587': attribute type 10 has an invalid length. [ 256.765465][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz.6.587'. [ 256.996428][ T8597] team0: Port device geneve0 added [ 257.139004][ T8595] sch_tbf: burst 3984 is lower than device lo mtu (65550) ! [ 257.314839][ T30] audit: type=1400 audit(2000000115.750:598): avc: denied { write } for pid=8598 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 257.995420][ T978] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 258.156631][ T30] audit: type=1400 audit(2000000116.550:599): avc: denied { connect } for pid=8606 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.322289][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 258.411971][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.423367][ T978] usb 4-1: config 3 has an invalid interface number: 187 but max is 0 [ 258.431755][ T978] usb 4-1: config 3 has no interface number 0 [ 258.438150][ T978] usb 4-1: config 3 interface 187 has no altsetting 0 [ 258.447041][ T978] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 258.456769][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.465043][ T978] usb 4-1: Product: syz [ 258.469382][ T978] usb 4-1: Manufacturer: syz [ 258.474121][ T978] usb 4-1: SerialNumber: syz [ 258.490771][ T92] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 258.519501][ T8616] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.592'. [ 258.582323][ T92] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 258.718347][ T92] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 259.018872][ T92] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 259.165542][ T92] usb 5-1: USB disconnect, device number 25 [ 259.404513][ T5978] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 259.968634][ T5978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.932971][ T5978] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 260.943005][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.097362][ T5978] usb 7-1: config 0 descriptor?? [ 261.102922][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.150258][ T8626] nvme_fabrics: missing parameter 'transport=%s' [ 261.151586][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.170322][ T8626] nvme_fabrics: missing parameter 'nqn=%s' [ 261.522717][ T5978] elecom 0003:056E:00E6.000D: unknown main item tag 0x0 [ 261.529822][ T5978] elecom 0003:056E:00E6.000D: unknown main item tag 0x0 [ 261.537293][ T5978] elecom 0003:056E:00E6.000D: unknown main item tag 0x1 [ 261.997971][ T5978] elecom 0003:056E:00E6.000D: unexpected long global item [ 262.017076][ T5978] elecom 0003:056E:00E6.000D: probe with driver elecom failed with error -22 [ 262.168029][ T5978] usb 7-1: USB disconnect, device number 21 [ 262.310990][ T8637] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 262.471128][ T8637] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 262.536074][ T978] HFC-S_USB 4-1:3.187: probe with driver HFC-S_USB failed with error -5 [ 262.653724][ T978] usb 4-1: USB disconnect, device number 32 [ 262.842539][ T30] audit: type=1326 audit(2000000121.280:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c05d8eba9 code=0x0 [ 262.870605][ T8637] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 262.987308][ T8637] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 263.682273][ T5913] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 264.553535][ T5913] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 264.595802][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.621587][ T5913] usb 5-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.642722][ T5913] usb 5-1: config 1 interface 1 has no altsetting 0 [ 264.740206][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.818559][ T30] audit: type=1400 audit(2000000123.200:601): avc: denied { create } for pid=8677 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 264.825278][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.857506][ T8682] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 265.085326][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.606'. [ 265.176633][ T5913] usb 5-1: Product: syz [ 265.190383][ T5913] usb 5-1: Manufacturer: syz [ 265.381702][ T5913] usb 5-1: SerialNumber: syz [ 265.390024][ T30] audit: type=1400 audit(2000000123.320:602): avc: denied { ioctl } for pid=8677 comm="syz.3.608" path="socket:[20867]" dev="sockfs" ino=20867 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 265.430764][ T5913] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 265.792307][ T5913] usb 5-1: USB disconnect, device number 26 [ 265.874515][ T8685] tc_dump_action: action bad kind [ 265.911792][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 265.943564][ T8707] trusted_key: encrypted_key: insufficient parameters specified [ 265.994387][ T30] audit: type=1400 audit(2000000124.440:603): avc: denied { lock } for pid=8696 comm="syz.3.612" path="socket:[21929]" dev="sockfs" ino=21929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.129181][ T30] audit: type=1400 audit(2000000124.570:604): avc: denied { append } for pid=8713 comm="syz.5.615" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 266.886455][ T8720] mkiss: ax0: crc mode is auto. [ 268.184365][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.6.619'. [ 268.970350][ T5171] Bluetooth: hci1: command 0x040f tx timeout [ 269.185239][ T30] audit: type=1400 audit(2000000127.600:605): avc: denied { write } for pid=8748 comm="syz.2.623" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.423547][ T30] audit: type=1400 audit(2000000127.600:606): avc: denied { open } for pid=8748 comm="syz.2.623" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.444883][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.197636][ T30] audit: type=1400 audit(2000000127.600:607): avc: denied { read } for pid=8748 comm="syz.2.623" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.218354][ T30] audit: type=1400 audit(2000000127.920:608): avc: denied { append } for pid=8748 comm="syz.2.623" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.246126][ T25] block nbd0: Possible stuck request ffff888026ee01c0: control (read@0,1024B). Runtime 150 seconds [ 270.257043][ T25] block nbd0: Possible stuck request ffff888026ee0380: control (read@1024,1024B). Runtime 150 seconds [ 270.268350][ T25] block nbd0: Possible stuck request ffff888026ee0540: control (read@2048,1024B). Runtime 150 seconds [ 270.279794][ T25] block nbd0: Possible stuck request ffff888026ee0700: control (read@3072,1024B). Runtime 150 seconds [ 270.562515][ T978] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 270.846075][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 270.880590][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.903100][ T5913] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 270.944368][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.079902][ T5913] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.100791][ T978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.129157][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.130096][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.158979][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.168151][ T978] usb 5-1: Product: syz [ 271.168172][ T978] usb 5-1: Manufacturer: syz [ 271.168186][ T978] usb 5-1: SerialNumber: syz [ 271.170887][ T978] usb 5-1: config 0 descriptor?? [ 271.197278][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.223317][ T978] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.232243][ T5913] usb 3-1: Product: syz [ 271.246964][ T5913] usb 3-1: Manufacturer: syz [ 271.251583][ T5913] usb 3-1: SerialNumber: syz [ 271.256536][ T978] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 271.275959][ T5913] usb 3-1: config 0 descriptor?? [ 271.326627][ T5913] usb 3-1: selecting invalid altsetting 0 [ 271.472199][ T5978] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 271.576006][ T5962] usb 3-1: USB disconnect, device number 33 [ 271.634756][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 271.645488][ T5978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.657517][ T5978] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 271.748754][ T5978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.757258][ T5978] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 271.767161][ T5978] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 271.775650][ T5978] usb 6-1: Product: syz [ 271.779852][ T5978] usb 6-1: Manufacturer: syz [ 271.785266][ T5978] usb 6-1: SerialNumber: syz [ 271.792821][ T5978] usb 6-1: config 0 descriptor?? [ 271.846495][ T8762] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 272.184540][ T978] em28xx 5-1:0.0: chip ID is em2765 [ 272.191398][ T5978] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 272.198430][ T5978] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 272.209942][ T5978] usb 6-1: USB disconnect, device number 4 [ 272.384846][ T978] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 272.395357][ T978] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 272.416012][ T978] em28xx 5-1:0.0: No AC97 audio processor [ 272.473822][ T978] usb 5-1: USB disconnect, device number 27 [ 272.491106][ T978] em28xx 5-1:0.0: Disconnecting em28xx [ 272.526995][ T978] em28xx 5-1:0.0: Freeing device [ 273.505112][ T978] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.242340][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 274.358853][ T978] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 274.378559][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.399951][ T978] usb 6-1: Product: syz [ 274.413562][ T978] usb 6-1: Manufacturer: syz [ 274.425491][ T978] usb 6-1: SerialNumber: syz [ 274.582783][ T978] usb 6-1: config 0 descriptor?? [ 274.662204][ T5913] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 274.821115][ T978] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 274.840601][ T978] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 274.870249][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 274.933008][ T978] usb 6-1: USB disconnect, device number 5 [ 275.316287][ T5913] usb 7-1: config 2 has an invalid interface number: 80 but max is 3 [ 275.332571][ T5913] usb 7-1: config 2 has an invalid interface number: 191 but max is 3 [ 275.483337][ T30] audit: type=1400 audit(2000000133.920:609): avc: denied { ioctl } for pid=8817 comm="syz.4.640" path="socket:[21078]" dev="sockfs" ino=21078 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.483867][ T8819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.516162][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 275.523601][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 275.530886][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 275.730170][ T5963] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.742029][ T5913] usb 7-1: config 2 has an invalid interface number: 112 but max is 3 [ 275.761938][ T5913] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 275.830634][ T5913] usb 7-1: config 2 has no interface number 1 [ 275.865269][ T5913] usb 7-1: config 2 has no interface number 2 [ 275.877885][ T5913] usb 7-1: config 2 has no interface number 3 [ 275.903006][ T5913] usb 7-1: config 2 interface 80 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 275.923952][ T5913] usb 7-1: config 2 interface 80 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 16 [ 275.939803][ T5963] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 275.942088][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 276.066472][ T8824] fuse: Unknown parameter '&' [ 276.075645][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 276.088111][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 276.098823][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.099174][ T5913] usb 7-1: config 2 interface 80 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 276.582805][ T5913] usb 7-1: config 2 interface 80 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 276.593943][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 276.607338][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 276.719444][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 276.760451][ T5913] usb 7-1: config 2 interface 80 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 276.781480][ T5913] usb 7-1: config 2 interface 112 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 276.817251][ T5963] usb 4-1: Product: syz [ 276.821453][ T5963] usb 4-1: Manufacturer: syz [ 276.839333][ T5963] usb 4-1: SerialNumber: syz [ 276.859670][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 276.907272][ T5913] usb 7-1: config 2 interface 0 altsetting 64 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 276.939005][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 276.975590][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 277.007454][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 277.048728][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 277.070142][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 277.098399][ T5913] usb 7-1: config 2 interface 0 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 277.119325][ T5913] usb 7-1: config 2 interface 80 has no altsetting 0 [ 277.134071][ T5913] usb 7-1: config 2 interface 191 has no altsetting 0 [ 277.141770][ T5913] usb 7-1: config 2 interface 112 has no altsetting 0 [ 277.146645][ T30] audit: type=1400 audit(2000000135.590:610): avc: denied { create } for pid=8823 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 277.149138][ T5913] usb 7-1: config 2 interface 0 has no altsetting 0 [ 277.195884][ T5913] usb 7-1: string descriptor 0 read error: -71 [ 277.207449][ T5913] usb 7-1: New USB device found, idVendor=056e, idProduct=4005, bcdDevice=48.93 [ 277.237113][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.255102][ T30] audit: type=1400 audit(2000000135.700:611): avc: denied { setopt } for pid=8815 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.285902][ T5913] usb 7-1: can't set config #2, error -71 [ 277.298468][ T5913] usb 7-1: USB disconnect, device number 22 [ 277.332573][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 277.498856][ T24] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 277.519979][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.542487][ T24] usb 6-1: Product: syz [ 277.546728][ T24] usb 6-1: Manufacturer: syz [ 277.564858][ T24] usb 6-1: SerialNumber: syz [ 277.580206][ T24] usb 6-1: config 0 descriptor?? [ 277.600028][ T30] audit: type=1400 audit(2000000136.040:613): avc: denied { firmware_load } for pid=8042 comm="kworker/u8:21" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 277.630534][ T30] audit: type=1400 audit(2000000136.040:612): avc: denied { firmware_load } for pid=8026 comm="kworker/u8:13" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 277.659627][ T24] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 277.914510][ T24] pwc: Failed to set LED on/off time (-71) [ 277.942829][ T5963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 277.949911][ T30] audit: type=1400 audit(2000000136.360:614): avc: denied { getattr } for pid=8849 comm="syz.2.652" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 277.956249][ T5963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 277.997722][ T24] pwc: send_video_command error -71 [ 278.079076][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 278.126672][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 278.136925][ T5963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 278.151015][ T24] usb 6-1: USB disconnect, device number 6 [ 278.170873][ T5963] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 278.199298][ T5963] usb 4-1: USB disconnect, device number 33 [ 278.817463][ T8848] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.831192][ T8848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.774009][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 279.946176][ T5963] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 280.214639][ T5963] usb 4-1: no configurations [ 280.219324][ T5963] usb 4-1: can't read configurations, error -22 [ 280.241742][ T8884] erofs (device nbd5): cannot find valid erofs superblock [ 280.595875][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'. [ 280.624112][ T5963] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 280.784642][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 280.885566][ T5963] usb 4-1: no configurations [ 280.890195][ T5963] usb 4-1: can't read configurations, error -22 [ 280.897562][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 280.919433][ T5963] usb usb4-port1: attempt power cycle [ 281.112210][ T92] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 281.252314][ T92] usb 6-1: device descriptor read/64, error -71 [ 281.272216][ T5963] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 281.313415][ T5963] usb 4-1: no configurations [ 281.318069][ T5963] usb 4-1: can't read configurations, error -22 [ 281.383031][ T30] audit: type=1400 audit(2000000139.830:615): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 281.502241][ T92] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 281.557852][ T5963] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 281.640452][ T30] audit: type=1400 audit(2000000139.930:616): avc: denied { ioctl } for pid=8891 comm="syz.6.661" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 281.652259][ T92] usb 6-1: device descriptor read/64, error -71 [ 281.678285][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.664'. [ 281.692502][ T5963] usb 4-1: no configurations [ 281.697935][ T5963] usb 4-1: can't read configurations, error -22 [ 282.069324][ T92] usb usb6-port1: attempt power cycle [ 282.070814][ T5963] usb usb4-port1: unable to enumerate USB device [ 282.450433][ T8920] binder: 8910:8920 ioctl 40044591 0 returned -22 [ 282.507156][ T92] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 282.544640][ T92] usb 6-1: device descriptor read/8, error -71 [ 282.618512][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.667'. [ 282.762147][ T5850] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 282.796729][ T92] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 282.832875][ T92] usb 6-1: device descriptor read/8, error -71 [ 282.982096][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 282.990270][ T92] usb usb6-port1: unable to enumerate USB device [ 283.080866][ T5850] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 283.093994][ T5850] usb 4-1: config 0 has no interface number 0 [ 283.100321][ T5850] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 283.110586][ T5850] usb 4-1: config 0 interface 196 has no altsetting 0 [ 283.119251][ T5850] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 283.145934][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.162709][ T5850] usb 4-1: Product: syz [ 283.169419][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 283.180013][ T5850] usb 4-1: Manufacturer: syz [ 283.193948][ T5850] usb 4-1: SerialNumber: syz [ 283.208754][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 283.237097][ T5850] usb 4-1: config 0 descriptor?? [ 283.243338][ T8921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.464188][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.482653][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.686499][ T8929] fuse: Bad value for 'fd' [ 283.856768][ T5850] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 283.878284][ T5850] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 283.936833][ T5850] usb 4-1: USB disconnect, device number 38 [ 284.705772][ T30] audit: type=1400 audit(2000000143.150:617): avc: denied { append } for pid=8943 comm="syz.4.672" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.502178][ T5850] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 285.672122][ T5850] usb 4-1: device descriptor read/64, error -71 [ 285.927516][ T5850] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 286.192159][ T5850] usb 4-1: device descriptor read/64, error -71 [ 286.302560][ T5850] usb usb4-port1: attempt power cycle [ 286.565714][ T8965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 286.579878][ T8965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.623614][ T30] audit: type=1400 audit(2000000145.070:618): avc: denied { read write } for pid=8971 comm="syz.6.680" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.647709][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.662327][ T5850] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 286.692437][ T30] audit: type=1400 audit(2000000145.070:619): avc: denied { open } for pid=8971 comm="syz.6.680" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.716423][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.727609][ T5850] usb 4-1: device descriptor read/8, error -71 [ 287.002294][ T30] audit: type=1400 audit(2000000145.360:620): avc: denied { ioctl } for pid=8973 comm="syz.4.682" path="socket:[23598]" dev="sockfs" ino=23598 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 287.053745][ T30] audit: type=1400 audit(2000000145.360:621): avc: denied { bind } for pid=8973 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 287.132137][ T5850] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 287.152906][ T5850] usb 4-1: device descriptor read/8, error -71 [ 287.293548][ T5850] usb usb4-port1: unable to enumerate USB device [ 287.332463][ T30] audit: type=1400 audit(2000000145.770:622): avc: denied { read } for pid=8980 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.594145][ T8981] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 287.714445][ T30] audit: type=1400 audit(2000000146.160:623): avc: denied { create } for pid=8991 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 287.773029][ T92] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 287.780694][ T5861] Bluetooth: hci5: command 0x0419 tx timeout [ 287.992163][ T92] usb 7-1: Using ep0 maxpacket: 8 [ 288.010211][ T92] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 288.029721][ T92] usb 7-1: config 0 has no interface number 0 [ 288.059336][ T92] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.102192][ T92] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 288.144277][ T92] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.172142][ T92] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.185649][ T92] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 288.211001][ T92] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.252440][ T92] usb 7-1: config 0 descriptor?? [ 288.321795][ T92] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 288.642131][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 288.992157][ T92] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 289.162252][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 289.171871][ T92] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 289.183203][ T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.206333][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.269293][ T92] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.279020][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.292549][ T92] usb 5-1: Product: syz [ 289.296856][ T92] usb 5-1: Manufacturer: syz [ 289.301642][ T92] usb 5-1: SerialNumber: syz [ 289.846385][ T31] INFO: task syz.0.231:6966 blocked for more than 143 seconds. [ 289.855761][ T31] Not tainted syzkaller #0 [ 289.881466][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.929147][ T92] usb 5-1: 0:2 : does not exist [ 289.941390][ T31] task:syz.0.231 state:D stack:26808 pid:6966 tgid:6965 ppid:5848 task_flags:0x400140 flags:0x00004004 [ 290.007895][ T31] Call Trace: [ 290.023204][ T31] [ 290.041032][ T31] __schedule+0x1190/0x5de0 [ 290.054644][ T31] ? __pfx___schedule+0x10/0x10 [ 290.059641][ T31] ? find_held_lock+0x2b/0x80 [ 290.072307][ T31] ? schedule+0x2d7/0x3a0 [ 290.088948][ T31] ? bdev_open+0x41a/0xe40 [ 290.102069][ T31] schedule+0xe7/0x3a0 [ 290.115065][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.132111][ T31] __mutex_lock+0x81b/0x1060 [ 290.242260][ T31] ? bdev_open+0x41a/0xe40 [ 290.247230][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.252799][ T31] ? __pfx_ilookup+0x10/0x10 [ 290.257453][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 290.263050][ T31] ? bdev_open+0x41a/0xe40 [ 290.267900][ T31] bdev_open+0x41a/0xe40 [ 290.272914][ T31] blkdev_open+0x34e/0x4f0 [ 290.277531][ T31] do_dentry_open+0x982/0x1530 [ 290.282395][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 290.287447][ T31] vfs_open+0x82/0x3f0 [ 290.291586][ T31] path_openat+0x1de4/0x2cb0 [ 290.840618][ T31] ? __pfx_path_openat+0x10/0x10 [ 290.850025][ T5906] usb 7-1: USB disconnect, device number 23 [ 290.863381][ T5906] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 290.873416][ T31] do_filp_open+0x20b/0x470 [ 290.921845][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 290.953198][ T31] ? alloc_fd+0x471/0x7d0 [ 290.961564][ T31] do_sys_openat2+0x11b/0x1d0 [ 290.966426][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.971675][ T31] ? __x64_sys_openat+0x12e/0x210 [ 290.976798][ T31] __x64_sys_openat+0x174/0x210 [ 290.982193][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.987617][ T31] ? do_user_addr_fault+0x843/0x1370 [ 290.993332][ T31] do_syscall_64+0xcd/0x4c0 [ 290.997880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.003951][ T31] RIP: 0033:0x7fe8cc98d510 [ 291.008990][ T31] RSP: 002b:00007fe8cd849b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 291.017556][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe8cc98d510 [ 291.025675][ T31] RDX: 0000000000000000 RSI: 00007fe8cd849c10 RDI: 00000000ffffff9c [ 291.059766][ T31] RBP: 00007fe8cd849c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 291.068502][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 291.079096][ T31] R13: 00007fe8ccbd6038 R14: 00007fe8ccbd5fa0 R15: 00007ffe072c5408 [ 291.088159][ T31] [ 291.091381][ T31] INFO: task syz.0.231:6967 blocked for more than 144 seconds. [ 291.104762][ T31] Not tainted syzkaller #0 [ 291.110979][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.136060][ T31] task:syz.0.231 state:D stack:28024 pid:6967 tgid:6965 ppid:5848 task_flags:0x400040 flags:0x00004004 [ 291.148141][ T31] Call Trace: [ 291.151439][ T31] [ 291.154601][ T31] __schedule+0x1190/0x5de0 [ 291.159166][ T31] ? __pfx___schedule+0x10/0x10 [ 291.164120][ T31] ? find_held_lock+0x2b/0x80 [ 291.168832][ T31] ? schedule+0x2d7/0x3a0 [ 291.173303][ T31] ? bdev_open+0x41a/0xe40 [ 291.177766][ T31] schedule+0xe7/0x3a0 [ 291.181900][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.187427][ T31] __mutex_lock+0x81b/0x1060 [ 291.192026][ T31] ? bdev_open+0x41a/0xe40 [ 291.196544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.201650][ T31] ? __pfx_ilookup+0x10/0x10 [ 291.206432][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 291.211748][ T31] ? bdev_open+0x41a/0xe40 [ 291.216267][ T31] bdev_open+0x41a/0xe40 [ 291.220545][ T31] blkdev_open+0x34e/0x4f0 [ 291.225035][ T31] do_dentry_open+0x982/0x1530 [ 291.229833][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 291.234917][ T31] vfs_open+0x82/0x3f0 [ 291.239013][ T31] path_openat+0x1de4/0x2cb0 [ 291.243698][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.248667][ T31] ? irqentry_exit+0x3b/0x90 [ 291.253331][ T31] do_filp_open+0x20b/0x470 [ 291.257853][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.263126][ T31] ? alloc_fd+0x471/0x7d0 [ 291.267512][ T31] do_sys_openat2+0x11b/0x1d0 [ 291.272287][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.277522][ T31] __x64_sys_openat+0x174/0x210 [ 291.282473][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.287880][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 291.293960][ T31] do_syscall_64+0xcd/0x4c0 [ 291.298506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.304463][ T31] RIP: 0033:0x7fe8cc98d510 [ 291.308897][ T31] RSP: 002b:00007fe8cd828b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 291.317409][ T31] RAX: ffffffffffffffda RBX: 0000000000026202 RCX: 00007fe8cc98d510 [ 291.325442][ T31] RDX: 0000000000026202 RSI: 00007fe8cd828c10 RDI: 00000000ffffff9c [ 291.333548][ T31] RBP: 00007fe8cd828c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 291.341581][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 291.349594][ T31] R13: 00007fe8ccbd6128 R14: 00007fe8ccbd6090 R15: 00007ffe072c5408 [ 291.357664][ T31] [ 291.360693][ T31] INFO: task syz.0.231:6970 blocked for more than 144 seconds. [ 291.368406][ T31] Not tainted syzkaller #0 [ 291.373491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.382255][ T31] task:syz.0.231 state:D stack:28024 pid:6970 tgid:6965 ppid:5848 task_flags:0x400040 flags:0x00004004 [ 291.394245][ T31] Call Trace: [ 291.397528][ T31] [ 291.400464][ T31] __schedule+0x1190/0x5de0 [ 291.405008][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 291.410835][ T31] ? __pfx___schedule+0x10/0x10 [ 291.415777][ T31] ? find_held_lock+0x2b/0x80 [ 291.420472][ T31] ? schedule+0x2d7/0x3a0 [ 291.424850][ T31] ? bdev_open+0x41a/0xe40 [ 291.429291][ T31] schedule+0xe7/0x3a0 [ 291.433410][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.438892][ T31] __mutex_lock+0x81b/0x1060 [ 291.444105][ T31] ? bdev_open+0x41a/0xe40 [ 291.448567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.453653][ T31] ? kobject_get_unless_zero+0xf7/0x1e0 [ 291.459213][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 291.464583][ T31] ? bdev_open+0x41a/0xe40 [ 291.469011][ T31] bdev_open+0x41a/0xe40 [ 291.473320][ T31] blkdev_open+0x34e/0x4f0 [ 291.477749][ T31] do_dentry_open+0x982/0x1530 [ 291.482667][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 291.487665][ T31] vfs_open+0x82/0x3f0 [ 291.491733][ T31] path_openat+0x1de4/0x2cb0 [ 291.496403][ T31] ? __pfx___schedule+0x10/0x10 [ 291.501272][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.506271][ T31] do_filp_open+0x20b/0x470 [ 291.510784][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.515883][ T31] ? alloc_fd+0x471/0x7d0 [ 291.520233][ T31] do_sys_openat2+0x11b/0x1d0 [ 291.524948][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.530165][ T31] ? __pfx___schedule+0x10/0x10 [ 291.535076][ T31] __x64_sys_openat+0x174/0x210 [ 291.539940][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.545376][ T31] do_syscall_64+0xcd/0x4c0 [ 291.549902][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.555832][ T31] RIP: 0033:0x7fe8cc98d510 [ 291.560251][ T31] RSP: 002b:00007fe8cd807b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 291.568732][ T31] RAX: ffffffffffffffda RBX: 0000000000042000 RCX: 00007fe8cc98d510 [ 291.576774][ T31] RDX: 0000000000042000 RSI: 00007fe8cd807c10 RDI: 00000000ffffff9c [ 291.584844][ T31] RBP: 00007fe8cd807c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 291.593064][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 291.601109][ T31] R13: 00007fe8ccbd6218 R14: 00007fe8ccbd6180 R15: 00007ffe072c5408 [ 291.609252][ T31] [ 291.612385][ T31] INFO: task syz.1.237:7004 blocked for more than 145 seconds. [ 291.619952][ T31] Not tainted syzkaller #0 [ 291.624953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.633708][ T31] task:syz.1.237 state:D stack:26520 pid:7004 tgid:6996 ppid:5847 task_flags:0x400140 flags:0x00004004 [ 291.645650][ T31] Call Trace: [ 291.648942][ T31] [ 291.651865][ T31] __schedule+0x1190/0x5de0 [ 291.656432][ T31] ? __pfx___schedule+0x10/0x10 [ 291.661303][ T31] ? find_held_lock+0x2b/0x80 [ 291.666034][ T31] ? schedule+0x2d7/0x3a0 [ 291.670393][ T31] ? sync_bdevs+0xfd/0x360 [ 291.674873][ T31] schedule+0xe7/0x3a0 [ 291.678958][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.684592][ T31] __mutex_lock+0x81b/0x1060 [ 291.689201][ T31] ? sync_bdevs+0xfd/0x360 [ 291.693752][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.698818][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 291.704262][ T31] ? iput+0xd3/0x880 [ 291.708173][ T31] ? sync_bdevs+0xfd/0x360 [ 291.712644][ T31] sync_bdevs+0xfd/0x360 [ 291.716905][ T31] ksys_sync+0xb2/0x150 [ 291.721064][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 291.725873][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.730659][ T31] ? do_syscall_64+0x91/0x4c0 [ 291.735404][ T31] __do_sys_sync+0xe/0x20 [ 291.739760][ T31] do_syscall_64+0xcd/0x4c0 [ 291.744594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.750529][ T31] RIP: 0033:0x7fbeac58eba9 [ 291.755300][ T31] RSP: 002b:00007fbead384038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 291.764717][ T31] RAX: ffffffffffffffda RBX: 00007fbeac7d6090 RCX: 00007fbeac58eba9 [ 291.773114][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.781117][ T31] RBP: 00007fbeac7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.789244][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.797715][ T31] R13: 00007fbeac7d6128 R14: 00007fbeac7d6090 R15: 00007fffdd571f88 [ 291.823093][ T31] [ 291.826227][ T31] [ 291.826227][ T31] Showing all locks held in the system: [ 291.865456][ T31] 1 lock held by khungtaskd/31: [ 291.870980][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 291.888321][ T31] 2 locks held by kworker/u8:3/49: [ 291.893697][ T92] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 291.901995][ T31] 6 locks held by kworker/0:2/92: [ 291.908682][ T31] #0: ffff8880222a2948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 291.920014][ T31] #1: ffffc900025afd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 291.931669][ T31] #2: ffff888029d10198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 291.940802][ T31] #3: ffff888058f87198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 291.953697][ T31] #4: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x23/0x2a0 [ 291.963328][ T92] usb 5-1: USB disconnect, device number 28 [ 291.977307][ T31] #5: ffffffff90269a68 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_disconnect+0xe3/0x8e0 [ 291.988889][ T31] 2 locks held by getty/5610: [ 291.993932][ T31] #0: ffff88814d9870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 291.994501][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.003993][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 292.031967][ T31] 1 lock held by udevd/5849: [ 292.037183][ T31] #0: ffff888142f00358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 292.046827][ T31] 1 lock held by syz.0.231/6966: [ 292.051745][ T31] #0: ffff888142f00358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 292.061157][ T31] 1 lock held by syz.0.231/6967: [ 292.066142][ T31] #0: ffff888142f00358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 292.075740][ T31] 1 lock held by syz.0.231/6970: [ 292.081810][ T31] #0: ffff888142f00358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 292.095123][ T31] 1 lock held by syz.1.237/7004: [ 292.100083][ T31] #0: ffff888142f00358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 292.109682][ T31] 2 locks held by dhcpcd/9023: [ 292.114479][ T31] #0: ffff8880334e2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 292.124219][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 292.136069][ T31] [ 292.138452][ T31] ============================================= [ 292.138452][ T31] [ 292.147292][ T31] NMI backtrace for cpu 1 [ 292.147305][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.147325][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.147333][ T31] Call Trace: [ 292.147338][ T31] [ 292.147345][ T31] dump_stack_lvl+0x116/0x1f0 [ 292.147371][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 292.147385][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 292.147403][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.147424][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 292.147436][ T31] watchdog+0xf0e/0x1260 [ 292.147450][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.147460][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.147473][ T31] ? __kthread_parkme+0x19e/0x250 [ 292.147489][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.147500][ T31] kthread+0x3c2/0x780 [ 292.147510][ T31] ? __pfx_kthread+0x10/0x10 [ 292.147520][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.147534][ T31] ? __pfx_kthread+0x10/0x10 [ 292.147544][ T31] ret_from_fork+0x5d4/0x6f0 [ 292.147554][ T31] ? __pfx_kthread+0x10/0x10 [ 292.147563][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.147582][ T31] [ 292.147586][ T31] Sending NMI from CPU 1 to CPUs 0: [ 292.271402][ C0] NMI backtrace for cpu 0 [ 292.271415][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 292.271431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.271438][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 292.271458][ C0] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 292.271471][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 292.271482][ C0] RAX: 0000000000c96481 RBX: 0000000000000000 RCX: ffffffff8b945c29 [ 292.271491][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 292.271499][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 292.271507][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 292.271515][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 292.271523][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 292.271537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.271545][ C0] CR2: 00007ffc7a08de94 CR3: 000000007453f000 CR4: 00000000003526f0 [ 292.271553][ C0] Call Trace: [ 292.271558][ C0] [ 292.271562][ C0] default_idle+0x13/0x20 [ 292.271579][ C0] default_idle_call+0x6d/0xb0 [ 292.271595][ C0] do_idle+0x391/0x510 [ 292.271619][ C0] ? __pfx_do_idle+0x10/0x10 [ 292.271634][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 292.271649][ C0] cpu_startup_entry+0x4f/0x60 [ 292.271663][ C0] rest_init+0x16b/0x2b0 [ 292.271680][ C0] ? acpi_subsystem_init+0x133/0x180 [ 292.271695][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 292.271710][ C0] start_kernel+0x3ee/0x4d0 [ 292.271725][ C0] x86_64_start_reservations+0x18/0x30 [ 292.271739][ C0] x86_64_start_kernel+0x130/0x190 [ 292.271753][ C0] common_startup_64+0x13e/0x148 [ 292.271772][ C0] [ 292.272561][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 292.272572][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.272590][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.272598][ T31] Call Trace: [ 292.272603][ T31] [ 292.272609][ T31] dump_stack_lvl+0x3d/0x1f0 [ 292.272631][ T31] vpanic+0x6e8/0x7a0 [ 292.272653][ T31] ? __pfx_vpanic+0x10/0x10 [ 292.272677][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 292.272697][ T31] panic+0xca/0xd0 [ 292.272717][ T31] ? __pfx_panic+0x10/0x10 [ 292.272739][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 292.272762][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 292.272778][ T31] ? watchdog+0xd78/0x1260 [ 292.272794][ T31] ? watchdog+0xd6b/0x1260 [ 292.272810][ T31] watchdog+0xd89/0x1260 [ 292.272829][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.272844][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.272867][ T31] ? __kthread_parkme+0x19e/0x250 [ 292.272889][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.272905][ T31] kthread+0x3c2/0x780 [ 292.272920][ T31] ? __pfx_kthread+0x10/0x10 [ 292.272936][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.272955][ T31] ? __pfx_kthread+0x10/0x10 [ 292.272970][ T31] ret_from_fork+0x5d4/0x6f0 [ 292.272984][ T31] ? __pfx_kthread+0x10/0x10 [ 292.272999][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.273026][ T31] [ 292.598548][ T31] Kernel Offset: disabled [ 292.602854][ T31] Rebooting in 86400 seconds..