last executing test programs: 31m34.054152522s ago: executing program 2 (id=717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r7, r6, 0x0, 0x20000023893) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r8, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r9, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}, @noop, @rr={0x7, 0x7, 0x79, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0x2, [{@multicast1, 0x8000}, {@empty}, {@multicast1, 0x9}]}]}}}], 0x40}, 0x2000c0d4) 31m30.17963157s ago: executing program 2 (id=728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x6d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca304004000be52363448412ba8", 0x10}, {&(0x7f0000000900)="ebe3a0e9796cfd1647e299f4e376fdba128280b372d19d217b19dd82ffb496219d205e81f4a7f71c1926ec043caae1efd7e0054a862e3d5cfe6cb55b5bb9fa6935849e60012b00007cb51726b360fbb3", 0x50}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a", 0xa0}], 0x3, &(0x7f0000000380)}], 0x1, 0xc880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 31m30.039317263s ago: executing program 2 (id=731): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) 31m29.155536911s ago: executing program 2 (id=733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_default\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0x5, @empty, 0xfff}}, 0x3ff, 0x6, 0xfffffff8, 0x2, 0x20, 0x10}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) 31m27.405874448s ago: executing program 2 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0xfffffffbfffffff7, 0x202400) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x1, 0xfd, 0x0, 0x1, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x2000, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4cc042, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0xc9cc00, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000"], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r6}, 0x20) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 31m27.190566678s ago: executing program 2 (id=740): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000240)={0x17}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000004c0)={0x18}, 0x18) 31m12.049127605s ago: executing program 32 (id=740): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000240)={0x17}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000004c0)={0x18}, 0x18) 8.85625779s ago: executing program 5 (id=6780): r0 = socket(0x10, 0x2, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000024000000"], 0x0, 0x3e}, 0x28) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000000580)=0x54) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x4, 0x0, 0x83, 0xfffffffa, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x0, 0x0, 0x300}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 8.746980769s ago: executing program 3 (id=6782): write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=[@t={0x81, 0x4, 0x10}], 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x1, 0x5, 0x8, 0x7, 0x3, 0x0, 0x0, 0x20}}, 0x50) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) 8.123810588s ago: executing program 1 (id=6783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb4, 0x80, 0x80a, 0xed}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000100)="369d4b277ac558eedc2b7dda5ec306d7047cc2c3c678bb2b447c066b797232e6401bb838c927b01114e5b408e91a79c7c0a29decd3dcf6f482f0e4abbdd305b5b7b67361db700917e85fb16d054338c8a5d8135f6856b24f2a36a1276bc1c57b244de0bc06ce13f0acd47459607d0042ef655f8a633b1c156af3b4ccea7745873027f877837141b343e28c484a1133c561bb87c3a647c3cc605df9b77b66ed21e47b57cf67021f26f9041f6b9a5140227eaf00119543", 0xb6, 0x1, 0x9, 0x7fc000000000}}, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @random="abcc5e3ccfa0", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e29305c93a072528230718"}]}}}}}}}}, 0x0) 7.974626069s ago: executing program 0 (id=6784): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000140)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) 7.922979416s ago: executing program 1 (id=6785): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000011940)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x60000) getsockname$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@default, @rose, @netrom, @bcast, @rose, @bcast, @default, @null]}, &(0x7f0000000040)=0x48) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8001408, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x48890}, 0x4048091) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 7.869541934s ago: executing program 0 (id=6786): process_vm_writev(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.133239267s ago: executing program 1 (id=6788): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20018300"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x20, 0xe, 0x69, "c8aa0ae7e72901ab6aa12add5e621683beb216fccea6f8b21e94e1b05e17577df7f100bcb2b3cf8e23e3adb3f183acb042859e998e6d804c21626311b2eb2d37232ecb0e9edb7638c58e50ca66bea0999296909f20d6b45e5fd82bd36e31cda380bb5af0d7a9155d08"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x8, 0x1}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xa9}, &(0x7f0000000780)={0x40, 0xb, 0x2, "7f7c"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "1034"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xeb}}) pipe2$watch_queue(&(0x7f0000000100), 0x80) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 6.798027269s ago: executing program 0 (id=6789): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) 5.930083595s ago: executing program 4 (id=6791): r0 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0x9, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x26}, 0x28) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES32=r8, @ANYBLOB="9ca3c46674beeece5367bd9368101285cee70bd6dd74294a0e1c1761dc256f1a449fcf96180700e27022898b72544d6ad2b19ae44e48491170576de7bf82b2f76a9d240010b0291df9ebb9c6a7988c162786b0ed1c605e5c2929a213dd719d2479d1d15f7f07edec3140a4d88a19a29d33", @ANYRESHEX=r7, @ANYRES32=r6, @ANYRESHEX=r5], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000200)={0x1000000d}) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) r12 = socket$inet(0x2, 0x3, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.79530165s ago: executing program 5 (id=6792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x20880, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x8c, 0x0, 0x800}, 0x0) 5.670543086s ago: executing program 4 (id=6793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB='5\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) fsopen(&(0x7f0000000500)='exfat\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x30, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x139}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="804600000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="f61e1a28f21ea87a5740db77f0674fcf827582a0d2960326f809fa1e444376a6ab6d489188e9148fc50bf24e197b6bc0e35d8c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 5.51194505s ago: executing program 5 (id=6794): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x800, 0xfffff801, 0x2}, 0x20) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}}, 0x18) 4.820006041s ago: executing program 4 (id=6795): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4000010, r0, 0x0) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x20, 0x100) timer_create(0x3, 0x0, &(0x7f0000000480)=0x0) fcntl$setpipe(r0, 0x407, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000200)) 4.750741409s ago: executing program 5 (id=6796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.700215397s ago: executing program 3 (id=6797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB='5\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r5, 0x10, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) fsopen(&(0x7f0000000500)='exfat\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x30, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x139}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="804600000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="f61e1a28f21ea87a5740db77f0674fcf827582a0d2960326f809fa1e444376a6ab6d489188e9148fc50bf24e197b6bc0e35d8c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 4.636210953s ago: executing program 4 (id=6798): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB='5\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r5, 0x10, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) fsopen(&(0x7f0000000500)='exfat\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x30, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x139}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="804600000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="f61e1a28f21ea87a5740db77f0674fcf827582a0d2960326f809fa1e444376a6ab6d489188e9148fc50bf24e197b6bc0e35d8c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.868188426s ago: executing program 4 (id=6799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, &(0x7f0000019300)='pagemap\x00') r4 = add_key$keyring(&(0x7f0000019380), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62b6755c218c69f00775d69187b9", 0x68, r4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) 3.867349731s ago: executing program 0 (id=6800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) 2.877131134s ago: executing program 3 (id=6801): modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000040000000800020005"], 0x24}}, 0x0) 2.834664783s ago: executing program 4 (id=6802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x81) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtaction={0xef4, 0x30, 0x1, 0x20, 0x0, {}, [{0xee0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe90, 0x2, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x8, 0x9, 0x20000000, 0x67e, 0x7fff}, 0x3, 0x9}, [{0x4, 0x4, 0x3, 0xa7a7, 0x10000, 0x1}, {0x7, 0x2, 0x1, 0x4, 0x7, 0x1}, {0x1, 0x1, 0x7, 0x8, 0x101, 0x2}, {0xef, 0xfffffffb, 0xce0, 0x2, 0xffff, 0x8}, {0x8, 0x7, 0x2c41, 0x3, 0xffff, 0x400}, {0x7, 0x3, 0x3, 0x9, 0x653d, 0x8}, {0x1000, 0x1, 0x800, 0x3, 0x0, 0x74a}, {0x2, 0xb33, 0xca0, 0xcf5, 0x59, 0x5d1ab42a}, {0xbe0, 0x9, 0x1, 0x3, 0xffff5d3b, 0x7}, {0x3, 0xfffffff9, 0x80000001, 0x2, 0x101, 0x8}, {0x9, 0x6, 0x3, 0x1, 0x2, 0x10001}, {0x200, 0x3, 0xfff0000, 0x7, 0x3, 0x6}, {0x5, 0x8, 0x1, 0x1, 0x4, 0x5}, {0x3, 0x69e2, 0x800, 0x5, 0x0, 0x80000001}, {0x14a529c0, 0x9, 0x2, 0x0, 0x6, 0x3}, {0xfffffff9, 0x0, 0xfffffa13, 0x4, 0xfff, 0x100}, {0x7f, 0x5, 0xfffffffa, 0x8, 0x58, 0x66fd}, {0x8, 0x5, 0x7ff, 0x80000000, 0x5, 0x16}, {0x7, 0x70, 0x1, 0x6, 0x7, 0x7}, {0x3, 0xffffff3e, 0x7, 0x2, 0x6, 0x9}, {0xb, 0x0, 0x1ff, 0x1, 0x2, 0x3}, {0x8, 0xffff9fd7, 0x2, 0x4, 0x6cbcbea4, 0x6}, {0x7, 0x5, 0xfffffff8, 0xb, 0x401, 0x3}, {0xfffffff9, 0x0, 0x4a3, 0x4, 0x6, 0x8}, {0x6, 0xe6f4, 0x2, 0x9, 0x7, 0x8}, {0x10001, 0x7, 0x7f, 0x9, 0x0, 0x58eb}, {0x8, 0x8, 0xc, 0xd29, 0xe, 0x6}, {0x6c6, 0x42f3e8c3, 0x80, 0x1, 0x1, 0x6}, {0x4, 0x7f, 0x0, 0xfd3, 0x779d, 0x10000}, {0xd174, 0x2, 0xfffffff7, 0x9, 0x40, 0xb363}, {0x4, 0xdd95, 0x4, 0x50, 0x533e, 0x2}, {0x8, 0x1, 0xba61bc7, 0x7, 0x7, 0xfffffffd}, {0x100, 0x2, 0x8, 0x2, 0x1, 0xef}, {0xffffff0c, 0x6, 0x81, 0x2, 0xfff, 0x3}, {0xf42, 0xaae, 0x0, 0x0, 0xd3b, 0x5}, {0x6, 0x277c, 0xd, 0x5f72, 0x4, 0x6}, {0x2, 0x5, 0x391, 0x7c, 0x7, 0x6d}, {0x4, 0xc4d, 0xf, 0xac6, 0x4, 0x9}, {0x3, 0x32bbe, 0xd1b, 0x7, 0x7, 0x7}, {0xf, 0x3, 0x7, 0x50000000, 0x0, 0x81e}, {0x8cf, 0x9, 0xba, 0x8000, 0x2, 0x598}, {0x3, 0x5, 0xa472, 0xb, 0x0, 0x8001}, {0x6, 0x3, 0x8, 0x6, 0x64, 0x1}, {0x6, 0xfff, 0x1, 0x7, 0x200, 0x6}, {0x2, 0x7, 0xfffffff7, 0x9, 0x9, 0x1}, {0x526, 0x7f, 0xfffffffa, 0x7, 0xcc, 0xc08}, {0x401, 0x3, 0x5, 0xff, 0xf, 0x101}, {0x0, 0xf33c, 0x2, 0x1, 0x3bc3, 0x4}, {0xb8, 0x5, 0x3, 0x2, 0x6, 0x101}, {0x896, 0x94, 0x7, 0x10, 0x100, 0x7}, {0xfffffffb, 0x401, 0x4, 0x4, 0x2, 0x3ff}, {0x1a0, 0x3e, 0xb, 0x7, 0xffffcf00, 0x6ac5}, {0xfffffffb, 0x84, 0x523dc955, 0x1, 0x2, 0x8001}, {0x4, 0x2, 0x10000, 0x0, 0xff, 0xe0000000}, {0xefe, 0x9, 0xff, 0xfff, 0x401, 0x7}, {0xa97b, 0xfffffffc, 0x1, 0xfff, 0xeb1b, 0xfffffffe}, {0xffffff2e, 0xffff, 0xf, 0x3, 0xfffffffa, 0x40}, {0x4, 0x401, 0x0, 0xfe, 0x3, 0x1}, {0xfffff862, 0x8, 0x1ff, 0xfff, 0x0, 0x9}, {0xff, 0x6, 0x9, 0x7, 0x8, 0x1729}, {0xe6cf, 0x6, 0x0, 0x3, 0x46, 0x5}, {0x9, 0x29, 0x5, 0x7f, 0x4, 0x4}, {0xd4a6, 0xddb, 0x8, 0x7, 0x9, 0x1ffc0000}, {0xffff, 0x2, 0x80000001, 0x9, 0x5, 0x200}, {0x917, 0xe4, 0x3, 0x171b9001, 0x3930, 0x1}, {0x0, 0xa332ea3, 0x5, 0x53d, 0x5, 0x6}, {0x0, 0x8, 0x2, 0x3, 0x1, 0x1c6f}, {0x3ff, 0x50000, 0x4, 0x53, 0xffff, 0x5}, {0xc9, 0x9, 0x2, 0x5d9a, 0x7e, 0xe5}, {0xe, 0x7ee, 0xd2, 0xb, 0x7fffffff, 0x1000000}, {0xe, 0x7, 0x37a2f3df, 0x10000, 0x0, 0x9}, {0x99c, 0x0, 0x5bf6, 0x80000001, 0x47e0}, {0x100, 0x9, 0xf, 0x401, 0xffffffff}, {0x3, 0x6, 0x6, 0x1, 0x7, 0x5}, {0x1, 0x0, 0x4, 0x7fffffff, 0xd, 0x9c}, {0x0, 0x0, 0x4, 0x1, 0x1, 0x81}, {0x7, 0x811, 0xd1, 0xc4ac, 0x28, 0x8001}, {0x80, 0x5, 0xd9, 0x4, 0x7fff, 0x9}, {0x0, 0xd, 0x5, 0xc, 0x8000, 0x7}, {0x9, 0x1, 0x101, 0x801, 0x1, 0x7}, {0xd, 0x92, 0x0, 0x0, 0x5, 0x24611f5b}, {0x1, 0x9, 0x8, 0xa, 0x10001, 0x1}, {0xfff, 0x0, 0x70, 0x80, 0x4, 0x1ff}, {0x7, 0xfffffff8, 0xb073, 0x0, 0xfff, 0x7}, {0x6, 0x10, 0xfc4, 0x99a, 0x10000, 0x8}, {0xfff, 0x1768, 0xe, 0x2000000, 0x6, 0x8}, {0x4, 0x1, 0x14, 0x43d73a98, 0x7, 0x1}, {0x9369, 0x8d9, 0x5, 0x2, 0x2}, {0x2, 0xa, 0x9, 0xfffffffe, 0x7, 0xfffffffe}, {0x6, 0x8000, 0x4, 0x132f, 0x0, 0x6}, {0x189, 0x6, 0xcc, 0xde9, 0x10001, 0xd85b}, {0x1, 0x1, 0x7ff, 0x5, 0x3}, {0x400, 0x9, 0x2, 0x1, 0x5}, {0x6, 0x1, 0x7f, 0x4, 0x3c8f0, 0x4}, {0x1, 0x0, 0x4, 0x0, 0xf, 0x7}, {0x4, 0x9, 0x30000, 0x4, 0x3, 0x5}, {0x7, 0x0, 0xb, 0x4, 0x6d3, 0x10001}, {0x4, 0x7, 0x9, 0x5, 0x7, 0x7fffffff}, {0x4, 0xfffffffe, 0x9, 0xfef, 0x6, 0x5}, {0x6, 0x1, 0x8, 0x30, 0x9, 0x1}, {0xffffc000, 0x10, 0x401, 0x3ff, 0x4, 0xb40}, {0x6, 0x9, 0x101, 0x0, 0x1ff, 0x8}, {0x7, 0x4, 0xf, 0xdb25, 0x8, 0x4}, {0xffffffff, 0x5, 0x1, 0x9, 0x1, 0x9}, {0x4, 0x80000000, 0xfffffac3, 0x280, 0x2, 0x8}, {0x1, 0x10000, 0xffffff01, 0x7, 0x3, 0x80000001}, {0xa0000000, 0xf9, 0x66d5, 0x7, 0x7fffffff, 0x80000000}, {0xdb3, 0x1, 0x5, 0x4, 0x1, 0xff}, {0xfff, 0x9, 0x61, 0x7, 0x10001, 0x7}, {0x9, 0x7, 0x2, 0x1ed, 0x3, 0x80000000}, {0x9, 0x3, 0x7f, 0x1000, 0xfa, 0x7}, {0x10, 0x3, 0xbf, 0x6, 0x0, 0x4}, {0x9f02, 0x5, 0x1000, 0x3, 0x8d3, 0x822}, {0x3, 0xfffffffb, 0x400, 0x6, 0x5, 0x7}, {0x8, 0x7, 0x0, 0x3, 0xd, 0x7}, {0x4, 0x40, 0x1000, 0x40, 0xffffffff, 0x4}, {0x80000000, 0x7, 0x0, 0x8001, 0x3000000, 0x325d}, {0x5, 0xfffffff8, 0x80000001, 0xcf9b, 0x14b, 0xd}, {0xfff, 0x4, 0x7ff, 0x2, 0x8000, 0x81}, {0x5, 0x0, 0x5, 0x5, 0x4, 0x8}, {0x4e9, 0x6, 0x0, 0x0, 0x5, 0x5}, {0x8, 0xded, 0x5, 0x4, 0x7fff, 0x7}, {0x3, 0x2, 0x334715b7, 0x80000001, 0x400, 0x2a3}, {0x8, 0x5, 0xffffffff, 0x5, 0x8000, 0x1000}, {0x7, 0x2, 0xffffffff, 0xd, 0x4, 0xe68e}, {0xfffffffd, 0x11b3, 0x2, 0x3, 0x2, 0xfff}, {0xe7, 0x4, 0x4f, 0x9, 0xfffffff6, 0x1}, {0x9, 0xf078, 0x4, 0x7, 0x4}], [{0x2}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0xa, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x7}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1, 0xdc6c303d40586a1d}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x67a52f685591514b}, {0x1, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x7144fd07b56162f7}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x2}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xef4}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x15, 0x0, &(0x7f0000001600)) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r7], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r8}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="3a0004000000a7212277"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) sendmsg$IEEE802154_START_REQ(r10, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.628735021s ago: executing program 0 (id=6803): mq_notify(0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@empty, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x104}}, 0x40814) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001bc0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0xfffc, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x6e, 0x0, 0x2, 0x4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40001000, 0x0, 0xb8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffa, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a4, 0x80000007, 0x5, 0x1, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x9, 0x1, 0x402, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fb, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4004, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0xe9, 0x1, 0x0, 0x3, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x7fff, 0x3, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0xffffffff, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0xfffffffe, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x6, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x81, 0x3, 0x7eb7, 0x3, 0xfffffffe, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x3, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x9, 0x4, 0xb, 0x80, 0x0, 0x0, 0x1, 0x10005, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x5, 0x9, 0x8, 0x28, 0x3, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x40000723, 0x0, 0xe, 0xe, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x6, 0xffffffff, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x20000009, 0x0, 0xfffffffe, 0x928, 0x5, 0x2, 0x5, 0xd1b, 0xb87, 0x3, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82c, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r8, 0xffffffffffffffff, 0x0) 2.59946005s ago: executing program 1 (id=6804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000003c0)=0x12, 0x4) dup2(r0, r0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) 1.859623658s ago: executing program 3 (id=6805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) 1.806534547s ago: executing program 5 (id=6806): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) io_setup(0x8, &(0x7f0000004200)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_kvm_add_vcpu$x86(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r6, 0x351e, 0x483, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f0000000300)={0x0, 0x989680}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)={0x18, 0x0, 0x300, 0x70bd2e, 0x25dedbf9, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x4a}, 0x1, 0x0, 0x0, 0x2001}, 0x4000040) 1.784941237s ago: executing program 1 (id=6807): write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=[@t={0x81, 0x4, 0x10}], 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x1, 0x5, 0x8, 0x7, 0x3, 0x0, 0x0, 0x20}}, 0x50) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) 1.693830401s ago: executing program 0 (id=6808): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402013c68e01000000010902120001000000000904"], 0x0) uname(&(0x7f0000000080)=""/209) 1.18912013s ago: executing program 5 (id=6809): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000140)={0x40, 0x0, 0x1, "d0"}, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0xb, 0x3, &(0x7f0000000040)={0x16, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce64509d"}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x40, 0xd, 0xd3, {0xd3, 0x5, "f769e85a42c3b300ef86ef6804bb6ced66e832f7e4db4892608f9a2019aa32134ab1cb832e4833fe1edf13f5c20c4aeabd98178b48f9b86d3e1bcfefc3fdf00cde11f731942403f05986ed3b15308e0df4f49299a3a75651341b7dff4cbdca1812bf7533a03759efe4608188d17df7feb2b30d15f2b3d7b9053fb7b4819ee9d7e1ecf8f990787b5f5e987e9185793c16c740d882fb5430167196b724a44c6d147bfb8679a87b0b014b3aca07b74f5d243ab6e37a684c8c72b34184d6d80696a4c319a37e7cd1d90a73c7922454fb2d8c7b"}}, &(0x7f0000000340)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "2d2fce7d29b3b90d5a5b6908a8d601209e775592870ecf3981f54d41c0bd3179c04535d218d100937ef7550f5de0c598dfaf4894d7d87622bbe29a"}}, &(0x7f0000000080)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0xc, "a9f23359"}, @local=@item_012={0x2, 0x2, 0x2, "9865"}, @global=@item_012={0x1, 0x1, 0x7, "88"}, @local=@item_012={0x1, 0x2, 0x2, "ec"}, @local=@item_012={0x2, 0x2, 0x5, '_b'}, @main=@item_4={0x3, 0x0, 0x8, "443323ce"}, @global=@item_4={0x3, 0x1, 0x3, "acbf2c7c"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x1, 0x2, 0x0, 'A'}, @global=@item_4={0x3, 0x1, 0x5, "bde1b77d"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x2a6}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x14, 0xb4, "3a7755facde745d9a2a2ef3d95a821dcfb8bf771ef7f9d80499637525ec2f605cce00412653d171f54b6f1ca4393c8ffd3d95cb1f7d6a5dfc229c96e34208a464e8cca03c8bc46130b8b04f9b654671bc065d61121d439161b9ad8cf0f15cbbdd63f6647feab6ff1e7d73bd8f11c2870e49bc841eebd142ddf4b1c167204fdf590c137569075c0ddbcd704101107b6c0e6bad1d2ed5173939884b97788ba2daa37ec0c5305d960f956b9bafc8f0df5408c7da6e9"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x83}, &(0x7f0000000500)={0x20, 0x1, 0xf2, "8df3a1e8b6a7be0d4fc69d0c36103dd1da388044e0eb0baffad74804bea9ea358bf5f173d8764ef6987788bf11513505de2e9c6e06ee64fcf1ecd245226390e4c0d8a3d90948a8db2dd9e086351f13dfa6bb0d43d9482d7909a365cc09ef70a132ab963c4a0f0c6401aeb94d7feeea472a0f18e52f6c29a12b4690585298c7bf167e61be7df985a5b6416af3d9371844b8cd8db4060ffa018e312377b533365c8a1d9184e66441c3574f93ae45fdecc1c5137063a915e264e4ba943897f6ce69ca8b0407583a667a7ef802bef005d3ba2979eb16326d19badeb8e185322665745f42cd1a7a06b849785e24f73242251dab60"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) 1.047312515s ago: executing program 3 (id=6810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000023000020"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r7, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x6, 0x4}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() keyctl$search(0xa, r7, &(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x3}, r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r8 = syz_io_uring_complete(0x0) cachestat(r8, &(0x7f0000000040)={0x9, 0x1}, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./file0\x00', 0x181201, 0x143) 914.383681ms ago: executing program 3 (id=6811): r0 = socket(0x10, 0x2, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000400000000000"], 0x0, 0x3e}, 0x28) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000000580)=0x54) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x4, 0x0, 0x83, 0xfffffffa, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x0, 0x0, 0x300}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 0s ago: executing program 1 (id=6812): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402013c68e01000000010902120001000000000904"], 0x0) uname(&(0x7f0000000080)=""/209) kernel console output (not intermixed with test programs): p_socket permissive=1 [ 1926.500958][T28132] veth0_vlan: entered promiscuous mode [ 1926.520331][T28132] veth1_vlan: entered promiscuous mode [ 1927.188338][T28132] veth0_macvtap: entered promiscuous mode [ 1927.248222][T28132] veth1_macvtap: entered promiscuous mode [ 1927.427798][T28522] Can't find a SQUASHFS superblock on nullb0 [ 1927.976613][T28132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1928.284026][T28535] exFAT-fs (loop1): unable to read boot sector [ 1928.303282][T28132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.352777][T28535] exFAT-fs (loop1): failed to read boot sector [ 1928.378543][T28535] exFAT-fs (loop1): failed to recognize exfat type [ 1928.428016][T28176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.455927][T28496] syz.5.5947 (28496): drop_caches: 2 [ 1928.465258][T28176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.497052][T28176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.630746][T28176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.645353][T15508] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1928.867232][T19880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1928.898624][T15508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.920205][T19880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1928.934030][T15508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.984714][T15508] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1929.024938][T15508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.107010][T15508] usb 4-1: config 0 descriptor?? [ 1929.197122][T28554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5959'. [ 1929.627865][T19883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.649725][T19883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.253282][T15508] usbhid 4-1:0.0: can't add hid device: -32 [ 1930.379319][T15508] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1931.317651][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5965'. [ 1931.909042][ T5940] usb 4-1: USB disconnect, device number 20 [ 1932.173615][T28601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5971'. [ 1932.355095][T28609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 1932.387471][T28609] vlan2: entered allmulticast mode [ 1933.147863][T28618] misc userio: Invalid payload size [ 1934.371628][T15508] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1934.973442][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.017654][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.028083][T15508] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1935.037585][T15508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.184234][T15508] usb 2-1: config 0 descriptor?? [ 1935.423028][ T5940] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1935.584713][ T5940] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 1935.608840][ T5940] usb 4-1: config 16 has no interface number 0 [ 1935.620915][T15508] usbhid 2-1:0.0: can't add hid device: -32 [ 1935.628432][T15508] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1935.743028][ T5940] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1935.753613][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.763235][ T5940] usb 4-1: Product: syz [ 1935.767385][ T5940] usb 4-1: Manufacturer: syz [ 1935.772780][ T5940] usb 4-1: SerialNumber: syz [ 1936.363817][ T5940] usb 4-1: USB disconnect, device number 21 [ 1936.789176][T28334] udevd[28334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1937.457705][T15508] usb 2-1: USB disconnect, device number 65 [ 1939.553231][T23066] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1940.458824][T23066] usb 6-1: config 0 has no interfaces? [ 1940.469906][T23066] usb 6-1: New USB device found, idVendor=05ac, idProduct=1290, bcdDevice=dc.1b [ 1940.474498][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1940.483124][T23066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.873931][T23066] apple-mfi-fastcharge 6-1: config 0 descriptor?? [ 1941.153015][T28709] autofs: Unknown parameter '6' [ 1942.709847][T23066] apple-mfi-fastcharge 6-1: can't set config #0, error -71 [ 1942.728388][T23066] apple-mfi-fastcharge 6-1: USB disconnect, device number 43 [ 1943.552500][T28731] Can't find a SQUASHFS superblock on nullb0 [ 1945.658555][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6015'. [ 1946.630444][T28765] autofs: Unknown parameter '~' [ 1947.071228][T15508] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1947.162464][T28769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1947.270407][T15508] usb 2-1: Using ep0 maxpacket: 16 [ 1947.289530][T15508] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.311908][T28770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1947.367519][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1947.379488][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1947.521149][T15508] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1947.883236][T15508] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1947.899068][T15508] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1947.908614][T15508] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1947.917065][T15508] usb 2-1: Manufacturer: syz [ 1947.929234][T15508] usb 2-1: config 0 descriptor?? [ 1948.571705][T15508] rc_core: IR keymap rc-hauppauge not found [ 1948.577788][T15508] Registered IR keymap rc-empty [ 1948.595359][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.672114][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.692027][T15508] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1948.705008][T15508] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 1948.752921][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.782694][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.805695][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.881795][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.901216][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.921806][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.946878][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1948.983691][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1949.031154][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1949.091235][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1949.139609][T15508] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1949.203441][T15508] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 1949.346727][T15508] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1949.449483][T15508] usb 2-1: USB disconnect, device number 66 [ 1950.799383][ T30] audit: type=1400 audit(2000000103.950:2295): avc: denied { read } for pid=28806 comm="syz.0.6029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1950.983943][ T30] audit: type=1400 audit(2000000104.140:2296): avc: denied { listen } for pid=28815 comm="syz.4.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1951.042582][T28818] fuse: Unknown parameter '0x0000000000000009' [ 1951.055839][ T30] audit: type=1400 audit(2000000104.140:2297): avc: denied { accept } for pid=28815 comm="syz.4.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1952.411791][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1953.271803][T28841] Can't find a SQUASHFS superblock on nullb0 [ 1955.057743][T28856] ntfs3(loop3): try to read out of volume at offset 0x0 [ 1955.119596][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6040'. [ 1955.199521][ T30] audit: type=1400 audit(2000000108.350:2298): avc: denied { getopt } for pid=28857 comm="syz.0.6041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1955.411238][T23066] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1956.400972][T28871] Mount JFS Failure: -5 [ 1956.407831][T28871] jfs_mount failed w/return code = -5 [ 1956.489473][T23066] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.502412][T23066] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 8643, setting to 1024 [ 1956.515948][T23066] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1956.530292][T23066] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1956.540657][T23066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.549727][T23066] usb 4-1: Product: 甴ᜓ톌䲄硠቉ଡ଼쇵瑐ᙟ毖랩㱁ᘠ異圉⸈谥 [ 1956.559727][T23066] usb 4-1: Manufacturer: 仟㎺뇹酅抰镳㕷䝃㲄풲≶土贃軮糭๯骖볐Ⅎ绾奆陂홙臅斩鏔㎭䔷挺冀꽉ሜ䮆穨ﻃ욻蘁훬윹᷶掕굯ꀭ嶧劰먃ᎀ썗姸ꄉ泼涒疯ִ鵟嗤咓Ს¯轕俸鲸궒웥洟戨싓槎𤋮읜诜຋暒쨐ዑ攰 [ 1956.972071][T23066] usb 4-1: SerialNumber: 倊 [ 1957.126836][T28887] lo speed is unknown, defaulting to 1000 [ 1958.047817][T23066] usbhid 4-1:1.0: can't add hid device: -71 [ 1958.063786][T23066] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1958.100658][T23066] usb 4-1: USB disconnect, device number 22 [ 1958.133872][T28892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1958.766335][T28908] FAULT_INJECTION: forcing a failure. [ 1958.766335][T28908] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.780162][T28908] CPU: 1 UID: 0 PID: 28908 Comm: syz.1.6056 Not tainted syzkaller #0 PREEMPT(full) [ 1958.780190][T28908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1958.780201][T28908] Call Trace: [ 1958.780209][T28908] [ 1958.780217][T28908] dump_stack_lvl+0x16c/0x1f0 [ 1958.780242][T28908] should_fail_ex+0x512/0x640 [ 1958.780264][T28908] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1958.780296][T28908] should_failslab+0xc2/0x120 [ 1958.780320][T28908] __kmalloc_cache_noprof+0x72/0x780 [ 1958.780348][T28908] ? sctp_transport_new+0xa8/0x7b0 [ 1958.780379][T28908] ? sctp_transport_new+0xa8/0x7b0 [ 1958.780403][T28908] sctp_transport_new+0xa8/0x7b0 [ 1958.780432][T28908] sctp_assoc_add_peer+0x2e3/0x1550 [ 1958.780464][T28908] sctp_connect_new_asoc+0x1f8/0x770 [ 1958.780492][T28908] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1958.780518][T28908] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 1958.780560][T28908] sctp_sendmsg+0x1557/0x1e00 [ 1958.780600][T28908] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1958.780630][T28908] ? __pfx_sock_has_perm+0x10/0x10 [ 1958.780674][T28908] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1958.780699][T28908] inet_sendmsg+0x119/0x140 [ 1958.780721][T28908] __sys_sendto+0x43c/0x520 [ 1958.780743][T28908] ? __pfx___sys_sendto+0x10/0x10 [ 1958.780791][T28908] ? ksys_write+0x1ac/0x250 [ 1958.780811][T28908] ? __pfx_ksys_write+0x10/0x10 [ 1958.780835][T28908] __x64_sys_sendto+0xe0/0x1c0 [ 1958.780854][T28908] ? do_syscall_64+0x91/0x4e0 [ 1958.780873][T28908] ? lockdep_hardirqs_on+0x7c/0x110 [ 1958.780901][T28908] do_syscall_64+0xcd/0x4e0 [ 1958.780921][T28908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.780940][T28908] RIP: 0033:0x7efdfe18eec9 [ 1958.780957][T28908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.780976][T28908] RSP: 002b:00007efdfef57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1958.780996][T28908] RAX: ffffffffffffffda RBX: 00007efdfe3e5fa0 RCX: 00007efdfe18eec9 [ 1958.781008][T28908] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1958.781020][T28908] RBP: 00007efdfef57090 R08: 0000200000000140 R09: 000000000000001c [ 1958.781032][T28908] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 1958.781045][T28908] R13: 00007efdfe3e6038 R14: 00007efdfe3e5fa0 R15: 00007fff2d900db8 [ 1958.781073][T28908] [ 1959.191839][T28911] trusted_key: encrypted_key: key user:syz not found [ 1959.532979][T15508] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1959.581942][T28915] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6058'. [ 1959.663399][T28916] netlink: 'syz.1.6058': attribute type 32 has an invalid length. [ 1959.971598][T15508] usb 4-1: Using ep0 maxpacket: 32 [ 1960.116324][T15508] usb 4-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 1960.579803][T15508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.732091][T15508] usb 4-1: config 0 descriptor?? [ 1961.203509][ T30] audit: type=1400 audit(2000000114.320:2299): avc: denied { cmd } for pid=28922 comm="syz.5.6061" path="socket:[128462]" dev="sockfs" ino=128462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1961.384195][T15508] usb 4-1: string descriptor 0 read error: -71 [ 1961.392630][T15508] usb 4-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 1961.403016][T15508] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1961.413507][T15508] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 1961.836700][T15508] usb 4-1: media controller created [ 1961.854633][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1961.922832][T15508] usb 4-1: selecting invalid altsetting 1 [ 1962.271562][T15508] set interface failed [ 1962.271602][T15508] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1962.301019][T15508] error writing reg: 0xff, val: 0x00 [ 1962.359564][T15508] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1962.380201][T15508] usb 4-1: USB disconnect, device number 23 [ 1965.868256][ T30] audit: type=1400 audit(2000000118.910:2300): avc: denied { getopt } for pid=28953 comm="syz.1.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1966.928220][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1966.978191][T28996] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1967.100271][T28995] lo speed is unknown, defaulting to 1000 [ 1968.485977][T29015] Can't find a SQUASHFS superblock on nullb0 [ 1971.631759][ T932] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1972.184359][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.299382][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.332424][ T932] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1972.356278][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.745673][ T932] usb 6-1: config 0 descriptor?? [ 1973.173317][T16351] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1973.553115][T16351] usb 4-1: Using ep0 maxpacket: 8 [ 1973.584579][T16351] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1973.606053][T16351] usb 4-1: config 0 has no interface number 0 [ 1973.643289][T16351] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1973.663017][ T932] cp2112 0003:10C4:EA90.002D: item fetching failed at offset 5/7 [ 1973.733129][T16351] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1973.748500][T16351] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1973.760814][T16351] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1973.774527][T16351] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1973.784264][T16351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.825153][T16351] usb 4-1: config 0 descriptor?? [ 1973.837037][T16351] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1973.841652][ T932] cp2112 0003:10C4:EA90.002D: parse failed [ 1973.880762][ T932] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -22 [ 1975.071541][T15508] usb 6-1: USB disconnect, device number 44 [ 1975.497865][T29105] misc userio: Begin command sent, but we're already running [ 1975.745200][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.751914][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.212753][T29121] SQUASHFS error: Failed to read block 0x0: -5 [ 1976.220195][T29121] unable to read squashfs_super_block [ 1976.762317][T16351] usb 4-1: USB disconnect, device number 24 [ 1977.298724][T16351] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1979.404484][T29154] exFAT-fs (loop3): unable to read boot sector [ 1979.410669][T29154] exFAT-fs (loop3): failed to read boot sector [ 1979.415477][T29158] syzkaller1: entered promiscuous mode [ 1979.418886][T29154] exFAT-fs (loop3): failed to recognize exfat type [ 1979.499741][T29158] syzkaller1: entered allmulticast mode [ 1979.675612][T29162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.683035][T29162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.148884][T29162] team_slave_0: left promiscuous mode [ 1980.176086][T29162] team_slave_1: left promiscuous mode [ 1980.453227][T23066] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1980.517386][T29174] Can't find a SQUASHFS superblock on nullb0 [ 1981.393401][T23066] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1981.429884][T23066] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1981.463131][T23066] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1981.480897][T29162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.653992][T23066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1981.708391][T23066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1981.765730][T29189] Can't find a SQUASHFS superblock on nullb0 [ 1982.077563][T29187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1982.123191][T23066] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1982.145017][T23066] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1982.172709][T23066] usb 6-1: Product: syz [ 1982.179611][T23066] usb 6-1: Manufacturer: syz [ 1982.644032][T23066] cdc_wdm 6-1:1.0: skipping garbage [ 1982.649711][T23066] cdc_wdm 6-1:1.0: skipping garbage [ 1982.674442][T23066] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1982.684152][T23066] cdc_wdm 6-1:1.0: Unknown control protocol [ 1982.867532][T19877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.971693][T19877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.071163][T19875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.140667][T19875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.355830][ T30] audit: type=1400 audit(2000000013.650:2301): avc: denied { write } for pid=29226 comm="syz.0.6133" path="socket:[129728]" dev="sockfs" ino=129728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1984.356488][T29228] netlink: 'syz.0.6133': attribute type 10 has an invalid length. [ 1984.400775][T29203] fuse: Bad value for 'user_id' [ 1984.407769][T29203] fuse: Bad value for 'user_id' [ 1984.415277][T29228] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1984.572395][ T5940] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1984.681801][T29233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6134'. [ 1985.208914][T23066] usb 6-1: USB disconnect, device number 45 [ 1985.232142][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 1985.254239][ T5940] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1985.569158][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.823405][ T5940] usb 4-1: config 0 descriptor?? [ 1986.662501][T29249] Can't find a SQUASHFS superblock on nullb0 [ 1987.559005][ T5940] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1987.633213][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1987.675108][ T5940] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1987.687956][ T5940] usb 4-1: media controller created [ 1987.750291][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1988.584135][ T5940] az6027: usb out operation failed. (-71) [ 1988.600332][ T5940] stb0899_attach: Driver disabled by Kconfig [ 1988.610578][ T5940] az6027: no front-end attached [ 1988.610578][ T5940] [ 1988.635117][ T5940] az6027: usb out operation failed. (-71) [ 1988.646686][ T5940] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1988.850256][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 1989.036881][ T5940] dvb-usb: schedule remote query interval to 400 msecs. [ 1989.044976][ T5940] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1989.057359][ T5940] usb 4-1: USB disconnect, device number 25 [ 1989.653826][ T5940] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1990.020688][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6147'. [ 1990.723732][T29305] binder: 29304:29305 ioctl c0306201 200000000080 returned -14 [ 1990.763483][T29305] binder: BINDER_SET_CONTEXT_MGR already set [ 1990.769937][T29305] binder: 29304:29305 ioctl 4018620d 200000004a80 returned -16 [ 1993.043952][T29341] blktrace: Concurrent blktraces are not allowed on loop6 [ 1993.103277][T29339] 9pnet_fd: Insufficient options for proto=fd [ 1993.130054][ T30] audit: type=1400 audit(2000000001.670:2302): avc: denied { write } for pid=29332 comm="syz.5.6158" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1995.478599][T29365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1996.409744][T29371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1996.452905][T29374] binder: 29372:29374 ioctl c0306201 200000000080 returned -14 [ 1996.462702][T29374] binder: BINDER_SET_CONTEXT_MGR already set [ 1996.468698][T29374] binder: 29372:29374 ioctl 4018620d 200000004a80 returned -16 [ 1996.672042][T29381] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1997.216269][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1997.232129][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1998.676687][T29401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1998.962882][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 2000.209070][T29418] binder: 29417:29418 ioctl c0306201 200000000080 returned -14 [ 2000.570604][T29430] kvm: pic: level sensitive irq not supported [ 2000.570677][T29430] kvm: pic: level sensitive irq not supported [ 2000.599660][T29429] exFAT-fs (loop4): unable to read boot sector [ 2000.616107][T29429] exFAT-fs (loop4): failed to read boot sector [ 2000.624420][T29429] exFAT-fs (loop4): failed to recognize exfat type [ 2001.489534][T29447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2002.669042][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 2002.698650][T29472] binder: 29469:29472 ioctl c0306201 200000000080 returned -14 [ 2003.017036][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6194'. [ 2004.711972][T15508] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2004.761897][T29502] overlayfs: failed to resolve './file0': -2 [ 2004.941023][T15508] usb 4-1: Using ep0 maxpacket: 16 [ 2004.972879][T15508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.090383][T15508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.136713][T15508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2005.180876][T15508] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2005.214202][T15508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.593205][T15508] usb 4-1: config 0 descriptor?? [ 2006.773235][T29513] binder: 29512:29513 ioctl c0306201 200000000080 returned -14 [ 2007.864049][T15508] usbhid 4-1:0.0: can't add hid device: -71 [ 2007.872655][T15508] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2007.909421][T15508] usb 4-1: USB disconnect, device number 26 [ 2007.995493][ T30] audit: type=1400 audit(2000000016.600:2303): avc: denied { accept } for pid=29525 comm="syz.4.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2008.177929][T29534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6210'. [ 2008.341094][ T932] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2008.512673][ T932] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 2009.010777][ T932] usb 6-1: config 0 has no interface number 0 [ 2009.020692][ T932] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2009.032825][ T932] usb 6-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2009.232258][ T932] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 2009.251572][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.283307][ T932] usb 6-1: config 0 descriptor?? [ 2009.302878][ T932] xbox_remote_probe: Unexpected endpoint_in [ 2009.496857][ T932] usb 6-1: USB disconnect, device number 46 [ 2009.858058][T29557] exFAT-fs (loop3): unable to read boot sector [ 2009.865688][T29557] exFAT-fs (loop3): failed to read boot sector [ 2009.873140][T29557] exFAT-fs (loop3): failed to recognize exfat type [ 2010.796500][ T5940] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2010.974347][ T5940] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 2010.983683][ T5940] usb 6-1: config 0 has no interface number 0 [ 2010.990066][ T5940] usb 6-1: config 0 interface 29 has no altsetting 0 [ 2011.040185][ T5940] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2011.050690][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.080953][ T5940] usb 6-1: Product: syz [ 2011.100783][ T5940] usb 6-1: Manufacturer: syz [ 2011.126430][ T5940] usb 6-1: SerialNumber: syz [ 2011.126731][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6220'. [ 2011.222531][ T5940] usb 6-1: config 0 descriptor?? [ 2011.244686][ T30] audit: type=1400 audit(2000000019.850:2304): avc: denied { connect } for pid=29573 comm="syz.1.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2011.264670][ C1] vkms_vblank_simulate: vblank timer overrun [ 2011.651583][ T5940] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2011.873567][T29569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.887603][T29569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.170506][T29586] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2013.557384][ T5940] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 2013.605628][ T5940] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 2013.685803][T29605] macsec2: entered allmulticast mode [ 2013.721097][T21410] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2013.734967][ T5940] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 2013.772949][ T5940] usb 6-1: USB disconnect, device number 47 [ 2013.901061][T21410] usb 2-1: Using ep0 maxpacket: 16 [ 2013.912573][T21410] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2013.920575][T21410] usb 2-1: config 0 has no interface number 0 [ 2013.972771][T21410] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2013.992648][T21410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.000660][T21410] usb 2-1: Product: syz [ 2014.021068][T21410] usb 2-1: Manufacturer: syz [ 2014.025694][T21410] usb 2-1: SerialNumber: syz [ 2014.056479][T21410] usb 2-1: config 0 descriptor?? [ 2014.070268][T21410] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2014.534693][T29597] loop6: detected capacity change from 0 to 2560 [ 2014.542581][T29597] buffer_io_error: 315 callbacks suppressed [ 2014.542600][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2014.573028][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2014.602189][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2014.610210][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2014.656445][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.015502][T21410] gspca_spca1528: reg_w err -110 [ 2015.035710][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.043900][T21410] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 2015.112273][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.159541][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.216340][T29597] ldm_validate_partition_table(): Disk read failed. [ 2015.263851][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.367388][T29597] Buffer I/O error on dev loop6, logical block 0, async page read [ 2015.893229][T29597] Dev loop6: unable to read RDB block 0 [ 2015.900148][T29597] loop6: unable to read partition table [ 2015.949485][T29597] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2016.855746][T21410] usb 2-1: USB disconnect, device number 67 [ 2023.046350][T29736] Can't find a SQUASHFS superblock on nullb0 [ 2023.902052][T29715] Bluetooth: hci3: command 0x0406 tx timeout [ 2023.936339][T29730] binfmt_misc: register: failed to install interpreter file ./file0 [ 2024.412479][T29243] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2024.562070][T29243] usb 1-1: device descriptor read/64, error -71 [ 2024.938397][T29768] block nbd0: Unsupported socket: should be TCP or UNIX. [ 2025.031781][T29243] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2025.045189][T29770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6268'. [ 2025.442362][T29243] usb 1-1: device descriptor read/64, error -71 [ 2025.619828][T29243] usb usb1-port1: attempt power cycle [ 2026.375701][T29784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2027.233306][T29787] Mount JFS Failure: -5 [ 2027.237468][T29787] jfs_mount failed w/return code = -5 [ 2027.441046][ T932] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2027.681578][ T932] usb 6-1: Using ep0 maxpacket: 16 [ 2027.697596][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.739216][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.813742][ T932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2027.863832][T29816] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2027.891428][ T932] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2027.903602][T29816] VFS: Can't find a romfs filesystem on dev nullb0. [ 2027.903602][T29816] [ 2027.938867][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.994025][ T932] usb 6-1: config 0 descriptor?? [ 2028.447252][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.479855][ T932] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 2028.544999][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.567646][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.605995][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.678294][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.695199][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.707012][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.738895][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.760790][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.782171][ T932] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2028.808897][ T932] microsoft 0003:045E:07DA.002E: unsupported Resolution Multiplier 0 [ 2028.855038][ T932] microsoft 0003:045E:07DA.002E: unsupported Resolution Multiplier 0 [ 2028.871341][ T932] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2028.937100][ T932] microsoft 0003:045E:07DA.002E: no inputs found [ 2029.151691][ T932] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 2029.932964][T29243] usb 6-1: USB disconnect, device number 48 [ 2031.046272][T29851] kvm: kvm [29850]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 2031.092118][T29851] kvm: kvm [29850]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 2032.122052][T29243] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2032.317857][T29243] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2032.498641][T29243] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2032.659422][T29243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2033.074525][T29243] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2033.132061][T29243] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2033.165852][T29243] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2033.176189][T29243] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2033.194518][T29243] usb 6-1: Product: syz [ 2033.205814][T29243] usb 6-1: Manufacturer: syz [ 2033.245063][T29243] cdc_wdm 6-1:1.0: skipping garbage [ 2033.252552][T29243] cdc_wdm 6-1:1.0: skipping garbage [ 2033.300924][T29243] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2033.328436][T29243] cdc_wdm 6-1:1.0: Unknown control protocol [ 2034.436747][ T30] audit: type=1400 audit(2000000043.042:2305): avc: denied { getopt } for pid=29901 comm="syz.3.6302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2035.163548][ T932] usb 6-1: USB disconnect, device number 49 [ 2037.186381][T29243] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2037.195503][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.203388][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.262736][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'. [ 2037.283426][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'. [ 2037.396941][T29955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6317'. [ 2037.411101][ T30] audit: type=1400 audit(2000000046.002:2306): avc: denied { ioctl } for pid=29954 comm="syz.5.6317" path="socket:[133813]" dev="sockfs" ino=133813 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2037.462059][T29243] usb 4-1: Using ep0 maxpacket: 32 [ 2037.493638][T29243] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2037.589606][T29243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.644890][T29243] usb 4-1: config 0 descriptor?? [ 2038.094846][T29243] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2038.129697][T29243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2038.157502][T29243] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2038.182158][T29243] usb 4-1: media controller created [ 2038.255435][T29243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2038.259261][T19882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.325742][T29715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2038.341455][T29715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2038.349864][T29715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2038.357968][T29715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2038.367029][T29715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2038.545975][T29962] lo speed is unknown, defaulting to 1000 [ 2038.556479][T29243] az6027: usb out operation failed. (-71) [ 2038.592081][T29243] stb0899_attach: Driver disabled by Kconfig [ 2038.598090][T29243] az6027: no front-end attached [ 2038.598090][T29243] [ 2038.743943][T29243] az6027: usb out operation failed. (-71) [ 2038.844324][T29243] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2038.971185][T29243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 2039.005944][T19882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.020416][T29243] dvb-usb: schedule remote query interval to 400 msecs. [ 2039.064416][T29243] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2039.282451][T29243] usb 4-1: USB disconnect, device number 27 [ 2039.475978][T29978] exFAT-fs (loop0): unable to read boot sector [ 2039.482307][T29978] exFAT-fs (loop0): failed to read boot sector [ 2039.488513][T29978] exFAT-fs (loop0): failed to recognize exfat type [ 2039.785033][T29243] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2039.832086][T19882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.063443][T19882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.362722][T29962] chnl_net:caif_netlink_parms(): no params data found [ 2040.371147][ T932] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 2040.438037][T29996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2040.461089][T25790] Bluetooth: hci1: command tx timeout [ 2041.025168][ T932] usb 4-1: config 4 has an invalid interface number: 88 but max is 1 [ 2041.214126][ T932] usb 4-1: config 4 has an invalid interface number: 29 but max is 1 [ 2041.232825][ T932] usb 4-1: config 4 has no interface number 0 [ 2041.242640][ T932] usb 4-1: config 4 has no interface number 1 [ 2041.248767][ T932] usb 4-1: config 4 interface 88 altsetting 119 endpoint 0xB has invalid maxpacket 61440, setting to 64 [ 2041.271267][ T932] usb 4-1: config 4 interface 88 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 2041.283325][ T932] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 2041.376764][ T932] usb 4-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 2041.390351][ T932] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2041.418431][ T932] usb 4-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2041.445088][ T932] usb 4-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 255, setting to 64 [ 2041.486117][ T932] usb 4-1: config 4 interface 88 has no altsetting 0 [ 2041.488324][T29962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.500060][ T932] usb 4-1: config 4 interface 29 has no altsetting 0 [ 2041.519103][T29962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.527294][T29962] bridge_slave_0: entered allmulticast mode [ 2041.541210][ T932] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 2041.550711][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.578028][T29962] bridge_slave_0: entered promiscuous mode [ 2041.587029][ T932] usb 4-1: Product: syz [ 2041.594067][ T932] usb 4-1: Manufacturer: syz [ 2041.603280][T29962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.612281][ T932] usb 4-1: SerialNumber: syz [ 2041.628252][T29962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.628449][T29983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2041.639298][T29962] bridge_slave_1: entered allmulticast mode [ 2041.694919][T29962] bridge_slave_1: entered promiscuous mode [ 2041.888089][T29962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.908957][ T932] chaoskey 4-1:4.29: Unable to register with hwrng [ 2041.937077][ T932] usb 4-1: USB disconnect, device number 28 [ 2042.542031][T25790] Bluetooth: hci1: command tx timeout [ 2042.698197][T29243] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2042.982119][T29243] usb 1-1: Using ep0 maxpacket: 32 [ 2043.177313][T30024] exFAT-fs (loop5): unable to read boot sector [ 2043.184727][T30024] exFAT-fs (loop5): failed to read boot sector [ 2043.190934][T30024] exFAT-fs (loop5): failed to recognize exfat type [ 2043.410618][T29243] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2043.465090][T29243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.494580][T29243] usb 1-1: config 0 descriptor?? [ 2043.783498][T29243] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2043.871761][T29243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2043.895940][T29243] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2043.911256][T29243] usb 1-1: media controller created [ 2043.975626][T29243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2044.206763][T30035] trusted_key: encrypted_key: key user:syz not found [ 2044.434990][T29243] az6027: usb out operation failed. (-71) [ 2044.495566][T29243] stb0899_attach: Driver disabled by Kconfig [ 2044.518046][T29243] az6027: no front-end attached [ 2044.518046][T29243] [ 2044.543960][T29243] az6027: usb out operation failed. (-71) [ 2044.549698][T29243] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2044.589284][T29243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input80 [ 2044.601048][T15508] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2044.621134][T25790] Bluetooth: hci1: command tx timeout [ 2044.677248][T29243] dvb-usb: schedule remote query interval to 400 msecs. [ 2044.705637][T29243] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2044.751259][T29243] usb 1-1: USB disconnect, device number 33 [ 2044.751274][T15508] usb 6-1: Using ep0 maxpacket: 32 [ 2044.759794][T15508] usb 6-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2044.794220][T30038] Mount JFS Failure: -5 [ 2044.798652][T30038] jfs_mount failed w/return code = -5 [ 2044.824444][T15508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.870697][T15508] usb 6-1: config 0 descriptor?? [ 2044.949147][T29243] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2045.261470][T15508] usb 6-1: string descriptor 0 read error: -71 [ 2045.284813][T19882] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2045.295904][T15508] usb 6-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2045.508968][T30042] exFAT-fs (loop0): unable to read boot sector [ 2045.516330][T30042] exFAT-fs (loop0): failed to read boot sector [ 2045.523653][T30042] exFAT-fs (loop0): failed to recognize exfat type [ 2045.783495][T19882] bond0 (unregistering): Released all slaves [ 2045.831163][T15508] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2045.843811][T15508] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2045.852264][T15508] usb 6-1: media controller created [ 2045.882150][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2046.018543][T15508] usb 6-1: selecting invalid altsetting 1 [ 2046.043569][T15508] set interface failed [ 2046.043598][T15508] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2046.107807][T15508] error writing reg: 0xff, val: 0x00 [ 2046.242176][T15508] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2046.330611][T15508] usb 6-1: USB disconnect, device number 50 [ 2046.547282][T30051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6345'. [ 2046.731584][T25790] Bluetooth: hci1: command tx timeout [ 2046.862703][T19882] bond1 (unregistering): Released all slaves [ 2047.396829][T30066] fuse: Unknown parameter '0x00000000000000000x000000000000000c' [ 2047.608687][T19882] bond2 (unregistering): Released all slaves [ 2047.928585][T29962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2048.119932][T19882] IPVS: stopping master sync thread 21279 ... [ 2049.219030][T29962] team0: Port device team_slave_0 added [ 2049.241241][T29962] team0: Port device team_slave_1 added [ 2049.363681][T29962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2049.391051][T29962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2049.416991][ C0] vkms_vblank_simulate: vblank timer overrun [ 2049.464341][T29962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2049.476030][ T30] audit: type=1400 audit(2000000058.072:2307): avc: denied { setopt } for pid=30079 comm="syz.0.6352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2049.601675][T30088] trusted_key: encrypted_key: key user:syz not found [ 2049.681818][T29962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2049.881038][T29962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2049.906951][ C0] vkms_vblank_simulate: vblank timer overrun [ 2049.976339][T29962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2050.001460][T21409] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2050.151029][T21409] usb 4-1: Using ep0 maxpacket: 32 [ 2050.163229][T29962] hsr_slave_0: entered promiscuous mode [ 2050.177519][T21409] usb 4-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2050.193689][T29962] hsr_slave_1: entered promiscuous mode [ 2050.201048][T21409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.237383][T21409] usb 4-1: config 0 descriptor?? [ 2050.477607][T21409] usb 4-1: string descriptor 0 read error: -71 [ 2050.512230][T21409] usb 4-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2050.578106][T21409] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2050.622968][T21409] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2050.661119][T21409] usb 4-1: media controller created [ 2050.726681][T21409] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2050.831183][T21409] usb 4-1: selecting invalid altsetting 1 [ 2050.875854][T19882] hsr_slave_0: left promiscuous mode [ 2050.888043][T21409] set interface failed [ 2050.888068][T21409] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2050.900236][T19882] hsr_slave_1: left promiscuous mode [ 2050.933644][T21409] error writing reg: 0xff, val: 0x00 [ 2050.955056][T19882] batadv_slave_1: left promiscuous mode [ 2050.989304][T19882] veth1_macvtap: left promiscuous mode [ 2050.992183][T21409] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2051.028339][T19882] veth0_macvtap: left promiscuous mode [ 2051.036228][T19882] veth1_vlan: left promiscuous mode [ 2051.042900][T19882] veth0_vlan: left promiscuous mode [ 2051.061003][T21409] usb 4-1: USB disconnect, device number 29 [ 2052.922636][ T30] audit: type=1400 audit(2000000061.512:2308): avc: denied { map } for pid=30121 comm="syz.5.6361" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2054.611266][T30142] trusted_key: encrypted_key: key user:syz not found [ 2055.061917][T15508] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2055.231353][T15508] usb 1-1: Using ep0 maxpacket: 32 [ 2055.253848][T15508] usb 1-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2055.260084][T29962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2055.425452][T30155] exFAT-fs (loop5): unable to read boot sector [ 2055.432037][T30155] exFAT-fs (loop5): failed to read boot sector [ 2055.438223][T30155] exFAT-fs (loop5): failed to recognize exfat type [ 2055.707900][T15508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.720006][T15508] usb 1-1: config 0 descriptor?? [ 2055.777345][T29962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2055.796366][T29962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2055.814765][T29962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2055.879330][T30166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6369'. [ 2055.989835][T15508] usb 1-1: string descriptor 0 read error: -71 [ 2056.004025][T30166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6369'. [ 2056.057212][T15508] usb 1-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2056.078634][T15508] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2056.148071][T15508] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2056.489475][T15508] usb 1-1: media controller created [ 2056.600238][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2056.631213][T15508] usb 1-1: selecting invalid altsetting 1 [ 2056.640916][T15508] set interface failed [ 2056.640941][T15508] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2056.657240][T15508] error writing reg: 0xff, val: 0x00 [ 2056.762641][T15508] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2056.974714][T29962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.373302][T30186] netlink: 'syz.0.6371': attribute type 1 has an invalid length. [ 2057.448053][T15508] usb 1-1: USB disconnect, device number 34 [ 2057.457559][T30186] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 2057.568874][T29962] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.649989][T28176] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.657151][T28176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.723713][T28176] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.730847][T28176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.006894][T15508] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2059.132333][T15508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2059.187144][T15508] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2059.241093][T15508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2059.250885][T15508] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2059.305978][T15508] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2059.326182][T15508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.334487][T29962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2059.347236][T15508] usb 1-1: config 0 descriptor?? [ 2059.567183][T15508] hdpvr 1-1:0.0: firmware version 0x0 dated [ 2059.577591][T15508] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 2059.615410][T29962] veth0_vlan: entered promiscuous mode [ 2059.642439][T29962] veth1_vlan: entered promiscuous mode [ 2059.686070][T29962] veth0_macvtap: entered promiscuous mode [ 2059.924552][T29962] veth1_macvtap: entered promiscuous mode [ 2060.029675][T29962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2060.066384][T29962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2060.102889][T26625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.137904][T26625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.159370][T26625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.226261][T26625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.329289][T26625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.380184][T26625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.418989][T29256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.505516][T29256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.078022][T15508] hdpvr 1-1:0.0: Could not setup controls [ 2061.105804][T15508] hdpvr 1-1:0.0: registering videodev failed [ 2061.238940][T15508] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 2061.352565][T15508] usb 1-1: USB disconnect, device number 35 [ 2061.642675][T30251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'. [ 2062.178265][T30258] binder: 30254:30258 ioctl c0306201 0 returned -14 [ 2062.429707][T29715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2062.443600][T29715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2062.453200][T29715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2062.499328][T29715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2062.508011][T29715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2062.641658][T30266] Can't find a SQUASHFS superblock on nullb0 [ 2063.330643][T30263] lo speed is unknown, defaulting to 1000 [ 2063.541076][ T932] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2063.731440][ T932] usb 4-1: Using ep0 maxpacket: 16 [ 2063.744052][ T932] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2063.761057][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.779270][ T932] usb 4-1: Product: syz [ 2063.789640][ T932] usb 4-1: Manufacturer: syz [ 2063.799504][ T932] usb 4-1: SerialNumber: syz [ 2063.813547][ T932] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2063.821624][ T932] r8152-cfgselector 4-1: config 0 descriptor?? [ 2064.006772][T30263] chnl_net:caif_netlink_parms(): no params data found [ 2064.478621][T30307] netlink: 'syz.4.6386': attribute type 5 has an invalid length. [ 2064.549505][T30307] ip6erspan0: entered promiscuous mode [ 2064.555088][T29715] Bluetooth: hci5: command tx timeout [ 2064.592469][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6388'. [ 2064.659927][ T932] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 2064.721996][T30309] wireguard0: entered promiscuous mode [ 2064.727603][T30309] wireguard0: entered allmulticast mode [ 2064.807221][T30305] vlan2: entered allmulticast mode [ 2065.141680][T30263] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.148810][T30263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.221487][T30263] bridge_slave_0: entered allmulticast mode [ 2065.231866][T30263] bridge_slave_0: entered promiscuous mode [ 2065.296559][T30263] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.338911][T30263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.366934][T30263] bridge_slave_1: entered allmulticast mode [ 2065.386534][T30263] bridge_slave_1: entered promiscuous mode [ 2066.130400][T30263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.140596][T28176] bridge_slave_1: left allmulticast mode [ 2066.147318][T28176] bridge_slave_1: left promiscuous mode [ 2066.161197][T15508] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2066.172697][T28176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.183994][T28176] bridge_slave_0: left promiscuous mode [ 2066.198809][T28176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.513703][T15508] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 2066.523896][T15508] usb 2-1: config 0 has no interface number 0 [ 2066.601054][T15508] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2066.610153][T15508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.626636][T29715] Bluetooth: hci5: command tx timeout [ 2066.651997][T15508] usb 2-1: Product: syz [ 2066.684755][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6396'. [ 2066.731113][T15508] usb 2-1: Manufacturer: syz [ 2066.780120][T15508] usb 2-1: SerialNumber: syz [ 2066.796840][T15508] usb 2-1: config 0 descriptor?? [ 2067.315795][T15508] usb 2-1: Firmware version (0.0) predates our first public release. [ 2067.324016][T15508] usb 2-1: Please update to version 0.2 or newer [ 2067.519007][T30317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30317 comm=syz.1.6392 [ 2067.670818][T30358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=30358 comm=syz.1.6392 [ 2067.737235][T28176] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 2067.918680][T30362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6398'. [ 2067.984195][T30363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30363 comm=syz.4.6398 [ 2068.025955][ T30] audit: type=1400 audit(2000000076.632:2309): avc: denied { write } for pid=30361 comm="syz.4.6398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2068.186875][T28176] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2068.432441][T28176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.443492][T28176] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2068.458718][T28176] bond0 (unregistering): Released all slaves [ 2068.473471][T28176] bond1 (unregistering): Released all slaves [ 2068.609874][T28176] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2068.619095][T28176] bond2 (unregistering): Released all slaves [ 2068.701314][T29715] Bluetooth: hci5: command tx timeout [ 2068.757632][T28176] bond3 (unregistering): Released all slaves [ 2068.769676][T28176] bond4 (unregistering): Released all slaves [ 2068.903340][T28176] bond5 (unregistering): Released all slaves [ 2069.032721][T28176] bond6 (unregistering): Released all slaves [ 2069.046178][T30263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.207068][T30263] team0: Port device team_slave_0 added [ 2069.236723][T30263] team0: Port device team_slave_1 added [ 2069.571393][T15508] usb 2-1: USB disconnect, device number 68 [ 2069.618406][T30378] Can't find a SQUASHFS superblock on nullb0 [ 2070.464192][T30263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.842640][T21409] IPVS: starting estimator thread 0... [ 2070.891246][T29715] Bluetooth: hci5: command tx timeout [ 2070.963226][T30263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.973563][T30399] IPVS: using max 36 ests per chain, 86400 per kthread [ 2070.990813][T30263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.261441][T30408] Mount JFS Failure: -5 [ 2071.266664][T30408] jfs_mount failed w/return code = -5 [ 2071.377091][T30263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.442564][T30263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.538436][T30263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2071.817542][T30263] hsr_slave_0: entered promiscuous mode [ 2071.846183][T30263] hsr_slave_1: entered promiscuous mode [ 2071.875240][T30263] debugfs: 'hsr0' already exists in 'hsr' [ 2071.892338][T30263] Cannot create hsr debugfs directory [ 2072.001317][T28176] hsr_slave_0: left promiscuous mode [ 2072.012130][T28176] hsr_slave_1: left promiscuous mode [ 2072.033115][T28176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2072.072084][T28176] pim6reg (unregistering): left allmulticast mode [ 2072.100697][T28176] pimreg (unregistering): left allmulticast mode [ 2072.192755][T30421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6410'. [ 2072.343952][ T30] audit: type=1400 audit(2000000080.952:2310): avc: denied { bind } for pid=30417 comm="syz.5.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2073.124692][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6412'. [ 2073.135613][T28176] team0 (unregistering): Port device team_slave_1 removed [ 2073.202870][T28176] team0 (unregistering): Port device team_slave_0 removed [ 2073.771245][T30438] Can't find a SQUASHFS superblock on nullb0 [ 2074.404070][T30427] lo speed is unknown, defaulting to 1000 [ 2074.828180][T30452] binder: 30449:30452 ioctl c0306201 200000000280 returned -14 [ 2075.087516][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6419'. [ 2075.438282][T29243] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 2075.666555][T29243] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2075.683993][T29243] usb 6-1: config 0 has no interface number 0 [ 2075.849298][T29243] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2075.880405][T29243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.904321][T28176] IPVS: stop unused estimator thread 0... [ 2075.926959][T29243] usb 6-1: Product: syz [ 2075.940273][T29243] usb 6-1: Manufacturer: syz [ 2075.959681][T29243] usb 6-1: SerialNumber: syz [ 2075.983345][T29243] usb 6-1: config 0 descriptor?? [ 2076.045721][T30477] veth1_vlan: default FDB implementation only supports local addresses [ 2076.414706][T29243] usb 6-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 2076.427825][T30263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2076.450827][T30263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2076.483751][T30263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2076.538870][T30263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2076.627532][T30461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30461 comm=syz.5.6418 [ 2076.697977][T30507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=30507 comm=syz.5.6418 [ 2076.837346][T30512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2076.852149][T29243] usb 6-1: failed to fetch extended address, random address set [ 2076.902339][T30512] block device autoloading is deprecated and will be removed. [ 2076.982698][ T30] audit: type=1400 audit(2000000085.582:2311): avc: denied { bind } for pid=30516 comm="syz.1.6427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2077.027480][T30263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.069650][T29243] usb 6-1: USB disconnect, device number 51 [ 2077.090855][T30263] 8021q: adding VLAN 0 to HW filter on device team0 [ 2077.139803][T19877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.147030][T19877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2077.180130][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6426'. [ 2077.238114][T19877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.245288][T19877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2077.292045][T15508] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2077.443368][T15508] usb 2-1: device descriptor read/64, error -71 [ 2077.597379][T30535] Mount JFS Failure: -5 [ 2077.602031][T30535] jfs_mount failed w/return code = -5 [ 2077.968375][T15508] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2078.142079][T15508] usb 2-1: device descriptor read/64, error -71 [ 2078.278665][T30263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.293089][T15508] usb usb2-port1: attempt power cycle [ 2078.440482][T30263] veth0_vlan: entered promiscuous mode [ 2078.476294][T30263] veth1_vlan: entered promiscuous mode [ 2078.632249][T15508] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2078.655022][T30263] veth0_macvtap: entered promiscuous mode [ 2078.672055][T15508] usb 2-1: device descriptor read/8, error -71 [ 2078.685252][T30263] veth1_macvtap: entered promiscuous mode [ 2078.709540][T30263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2078.724993][T30263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2078.743899][T19880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.757576][T19880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.789771][T19880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.824407][T19880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.922728][T15508] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2078.964395][T15508] usb 2-1: device descriptor read/8, error -71 [ 2078.978356][T19880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2078.988566][T19880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2079.075038][T15508] usb usb2-port1: unable to enumerate USB device [ 2079.423633][T19880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2079.441890][T19880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.231950][T30617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2082.611280][T30622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6444'. [ 2082.957664][T30626] Mount JFS Failure: -5 [ 2082.961962][T30626] jfs_mount failed w/return code = -5 [ 2083.520650][T30634] Mount JFS Failure: -5 [ 2083.525081][T30634] jfs_mount failed w/return code = -5 [ 2083.887836][T30636] fuse: Bad value for 'rootmode' [ 2087.159282][T16351] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2087.942012][T16351] usb 1-1: Using ep0 maxpacket: 32 [ 2087.976314][T16351] usb 1-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2088.016161][T16351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.077260][T30689] FAULT_INJECTION: forcing a failure. [ 2088.077260][T30689] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.092950][T16351] usb 1-1: config 0 descriptor?? [ 2088.161001][T30689] CPU: 1 UID: 0 PID: 30689 Comm: syz.3.6459 Not tainted syzkaller #0 PREEMPT(full) [ 2088.161027][T30689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2088.161040][T30689] Call Trace: [ 2088.161046][T30689] [ 2088.161054][T30689] dump_stack_lvl+0x16c/0x1f0 [ 2088.161078][T30689] should_fail_ex+0x512/0x640 [ 2088.161101][T30689] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 2088.161132][T30689] should_failslab+0xc2/0x120 [ 2088.161153][T30689] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2088.161181][T30689] ? __alloc_skb+0x2b2/0x380 [ 2088.161207][T30689] ? __alloc_skb+0x2b2/0x380 [ 2088.161224][T30689] ? __pfx_netlink_insert+0x10/0x10 [ 2088.161247][T30689] __alloc_skb+0x2b2/0x380 [ 2088.161269][T30689] ? __pfx___alloc_skb+0x10/0x10 [ 2088.161290][T30689] ? netlink_autobind.isra.0+0x158/0x370 [ 2088.161323][T30689] netlink_alloc_large_skb+0x69/0x140 [ 2088.161350][T30689] netlink_sendmsg+0x698/0xdd0 [ 2088.161380][T30689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2088.161422][T30689] ____sys_sendmsg+0xa98/0xc70 [ 2088.161451][T30689] ? copy_msghdr_from_user+0x10a/0x160 [ 2088.161474][T30689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2088.161515][T30689] ___sys_sendmsg+0x134/0x1d0 [ 2088.161540][T30689] ? __pfx____sys_sendmsg+0x10/0x10 [ 2088.161603][T30689] __sys_sendmsg+0x16d/0x220 [ 2088.161626][T30689] ? __pfx___sys_sendmsg+0x10/0x10 [ 2088.161667][T30689] do_syscall_64+0xcd/0x4e0 [ 2088.161690][T30689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.161710][T30689] RIP: 0033:0x7f812518eec9 [ 2088.161727][T30689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2088.161746][T30689] RSP: 002b:00007f8125fd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2088.161765][T30689] RAX: ffffffffffffffda RBX: 00007f81253e5fa0 RCX: 00007f812518eec9 [ 2088.161779][T30689] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2088.161790][T30689] RBP: 00007f8125fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.161802][T30689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.161814][T30689] R13: 00007f81253e6038 R14: 00007f81253e5fa0 R15: 00007ffe555824c8 [ 2088.161841][T30689] [ 2088.427240][T16351] usb 1-1: string descriptor 0 read error: -71 [ 2088.434891][T16351] usb 1-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2088.446224][T16351] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2088.462284][T16351] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2088.470042][T16351] usb 1-1: media controller created [ 2088.484049][T16351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2088.511502][T16351] usb 1-1: selecting invalid altsetting 1 [ 2088.517312][T16351] set interface failed [ 2088.517334][T16351] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2088.534438][T16351] error writing reg: 0xff, val: 0x00 [ 2088.552383][T16351] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2088.570730][T16351] usb 1-1: USB disconnect, device number 36 [ 2088.774835][ T30] audit: type=1400 audit(2000000002.480:2312): avc: denied { ioctl } for pid=30690 comm="syz.3.6461" path="socket:[137963]" dev="sockfs" ino=137963 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2089.912937][T30705] netlink: 'syz.1.6462': attribute type 10 has an invalid length. [ 2090.033071][T30705] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2090.631432][T30721] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2091.407078][T30723] netlink: 'syz.3.6468': attribute type 1 has an invalid length. [ 2091.747689][T30723] bond1: entered promiscuous mode [ 2091.754143][T30723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2091.976695][T30729] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6467'. [ 2092.921329][T30745] Can't find a SQUASHFS superblock on nullb0 [ 2094.311182][T21410] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2094.443438][T30766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6479'. [ 2094.537959][T30762] vivid-001: ================= START STATUS ================= [ 2094.587951][T30762] vivid-001: Radio HW Seek Mode: Bounded [ 2094.740278][T30762] vivid-001: Radio Programmable HW Seek: false [ 2094.784861][T30762] vivid-001: RDS Rx I/O Mode: Block I/O [ 2094.795912][T30762] vivid-001: Generate RBDS Instead of RDS: false [ 2094.796518][T21410] usb 2-1: Using ep0 maxpacket: 32 [ 2094.815289][T21410] usb 2-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2094.826424][T21410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.837731][T30762] vivid-001: RDS Reception: true [ 2094.843984][T30762] vivid-001: RDS Program Type: 0 inactive [ 2094.849803][T30762] vivid-001: RDS PS Name: inactive [ 2094.858992][T30762] vivid-001: RDS Radio Text: [ 2094.869217][T21410] usb 2-1: config 0 descriptor?? [ 2094.878962][T30762] inactive [ 2094.884756][T30762] vivid-001: RDS Traffic Announcement: false inactive [ 2094.900154][T30762] vivid-001: RDS Traffic Program: false inactive [ 2094.916349][T30762] vivid-001: RDS Music: false inactive [ 2094.930416][T30762] vivid-001: ================== END STATUS ================== [ 2095.259367][T21410] usb 2-1: string descriptor 0 read error: -71 [ 2095.276334][T21410] usb 2-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2095.441898][T21410] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2095.454057][T21410] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2095.467313][T21410] usb 2-1: media controller created [ 2095.539990][T21410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2095.624051][T21410] usb 2-1: selecting invalid altsetting 1 [ 2095.638859][T21410] set interface failed [ 2095.638880][T21410] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2095.726784][T21410] error writing reg: 0xff, val: 0x00 [ 2095.798078][T21410] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2095.883987][T21410] usb 2-1: USB disconnect, device number 73 [ 2097.466998][T30794] 9pnet_fd: Insufficient options for proto=fd [ 2097.490627][T30794] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2098.133643][T30805] Can't find a SQUASHFS superblock on nullb0 [ 2098.186446][T30806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2098.330513][ T30] audit: type=1400 audit(2000000005.710:2313): avc: denied { unmount } for pid=21065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2098.625391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.636610][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.971225][T21409] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2099.736656][T21409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.892815][T21409] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2100.024461][T21409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.075777][T21409] usb 6-1: config 0 descriptor?? [ 2100.445468][T21409] usbhid 6-1:0.0: can't add hid device: -71 [ 2100.454890][T21409] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2100.590834][T21409] usb 6-1: USB disconnect, device number 52 [ 2100.710372][T30838] Mount JFS Failure: -5 [ 2100.715304][T30838] jfs_mount failed w/return code = -5 [ 2102.057005][T30845] bridge2: entered promiscuous mode [ 2104.362601][T15508] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2104.374769][ T30] audit: type=1400 audit(2000000004.170:2314): avc: denied { accept } for pid=30869 comm="syz.0.6504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2104.712614][T15508] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2104.730987][T15508] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2104.744306][T15508] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2105.098621][T25575] Bluetooth: Error in BCSP hdr checksum [ 2105.211015][T15508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.220580][T15508] usb 6-1: config 0 descriptor?? [ 2105.244701][T30879] overlayfs: failed to resolve './bus/file0': -2 [ 2105.491246][T29256] Bluetooth: Error in BCSP hdr checksum [ 2105.728604][T29256] Bluetooth: Error in BCSP hdr checksum [ 2105.957712][T15508] hid_parser_main: 1 callbacks suppressed [ 2105.957726][T15508] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 2106.118147][T15508] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2106.553441][T29715] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2106.991076][T15508] cp2112 0003:10C4:EA90.002F: Part Number: 0x00 Device Version: 0x00 [ 2107.100432][T15508] cp2112 0003:10C4:EA90.002F: error requesting SMBus config [ 2107.458558][T15508] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -32 [ 2107.777449][ T5940] usb 6-1: USB disconnect, device number 53 [ 2108.155314][T30913] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 2108.438378][T30917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6514'. [ 2109.691181][T15508] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 2110.202898][T15508] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 2110.212319][T15508] usb 1-1: config 0 has no interface number 0 [ 2110.222544][T15508] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2110.243506][T15508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.265265][T15508] usb 1-1: Product: syz [ 2110.269475][T15508] usb 1-1: Manufacturer: syz [ 2110.660148][T15508] usb 1-1: SerialNumber: syz [ 2110.681174][T15508] usb 1-1: config 0 descriptor?? [ 2111.126692][T15508] usb 1-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 2111.328387][T30923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30923 comm=syz.0.6516 [ 2111.396863][T30949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=30949 comm=syz.0.6516 [ 2111.515556][T15508] usb 1-1: failed to fetch extended address, random address set [ 2111.691841][T15508] usb 1-1: USB disconnect, device number 37 [ 2111.814376][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 2111.851453][T30953] netlink: 'syz.3.6522': attribute type 3 has an invalid length. [ 2112.245367][T21410] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2112.652379][T21410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.663708][T21410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.673980][T21410] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2112.706771][T21410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.738722][T21410] usb 6-1: config 0 descriptor?? [ 2113.389358][T21410] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 2113.410128][T21410] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2113.634638][T21410] cp2112 0003:10C4:EA90.0030: Part Number: 0x00 Device Version: 0x00 [ 2113.941742][T21410] cp2112 0003:10C4:EA90.0030: error requesting SMBus config [ 2113.958448][T21410] cp2112 0003:10C4:EA90.0030: probe with driver cp2112 failed with error -32 [ 2115.351039][T21410] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2115.510589][T21410] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2115.523199][T21410] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2115.545555][T21410] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2115.571015][T21410] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2115.589964][T21410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.615548][T30988] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2115.893262][ T5940] usb 6-1: USB disconnect, device number 54 [ 2116.130502][T21410] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 2116.153430][T21410] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input82 [ 2116.189672][T21410] usb 2-1: USB disconnect, device number 74 [ 2116.195685][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2116.328364][T31001] Mount JFS Failure: -5 [ 2116.332729][T31001] jfs_mount failed w/return code = -5 [ 2116.880463][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'. [ 2116.978797][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6534'. [ 2118.712549][T21410] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2118.937177][T21410] usb 2-1: Using ep0 maxpacket: 8 [ 2119.037243][T21410] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2119.046759][T21410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.078302][ T30] audit: type=1400 audit(2000000007.070:2315): avc: denied { remount } for pid=31024 comm="syz.4.6542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2119.351876][T21410] usb 2-1: Product: syz [ 2119.460998][T21410] usb 2-1: Manufacturer: syz [ 2119.484283][T21410] usb 2-1: SerialNumber: syz [ 2119.512401][T21410] usb 2-1: config 0 descriptor?? [ 2119.529253][T21410] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2119.540278][T21410] usb 2-1: setting power ON [ 2119.545584][T21410] dvb-usb: bulk message failed: -22 (2/0) [ 2119.667900][T21410] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2119.679350][T21410] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2119.688262][T21410] usb 2-1: media controller created [ 2119.931133][T21410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2120.242093][ T30] audit: type=1400 audit(2000000008.230:2316): avc: denied { unmount } for pid=28132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2120.287597][T31020] netlink: 'syz.1.6539': attribute type 10 has an invalid length. [ 2120.304054][T21410] usb 2-1: selecting invalid altsetting 6 [ 2120.329103][T31020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6539'. [ 2120.491533][T21410] usb 2-1: digital interface selection failed (-22) [ 2120.727107][T21410] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2120.745541][T31020] dvb-usb: bulk message failed: -22 (3/0) [ 2120.751499][T21410] usb 2-1: setting power OFF [ 2120.785747][T31020] dvb-usb: bulk message failed: -22 (4/0) [ 2120.827632][T31020] cxusb: i2c read failed [ 2120.827679][T21410] dvb-usb: bulk message failed: -22 (2/0) [ 2122.066910][T21410] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2122.076554][T21410] (NULL device *): no alternate interface [ 2122.149610][T21410] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2122.244696][T21410] usb 2-1: USB disconnect, device number 75 [ 2122.741801][T29243] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2122.902102][T29243] usb 1-1: Using ep0 maxpacket: 32 [ 2122.929021][T29243] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2122.940347][T29243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.994263][T29243] usb 1-1: config 0 descriptor?? [ 2123.310870][T29243] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2123.490723][T29243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2123.507073][T29243] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2123.517390][T29243] usb 1-1: media controller created [ 2123.560781][T29243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2123.841033][T31081] Can't find a SQUASHFS superblock on nullb0 [ 2124.552130][T29243] az6027: usb out operation failed. (-71) [ 2124.605678][T29243] stb0899_attach: Driver disabled by Kconfig [ 2124.627815][T29243] az6027: no front-end attached [ 2124.627815][T29243] [ 2125.191632][T29243] az6027: usb out operation failed. (-71) [ 2125.197707][T29243] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2125.369305][T29243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input83 [ 2125.568514][T31097] netlink: 'syz.1.6558': attribute type 1 has an invalid length. [ 2125.619941][T31097] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2125.764412][T29243] dvb-usb: schedule remote query interval to 400 msecs. [ 2127.282216][T29243] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2127.572097][T21410] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 2127.573260][T29243] usb 1-1: USB disconnect, device number 38 [ 2127.925636][T21410] usb 2-1: No LPM exit latency info found, disabling LPM. [ 2127.938523][T21410] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 2127.953251][T21410] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 2128.109407][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6564'. [ 2128.281489][T31120] vlan2: entered allmulticast mode [ 2128.435757][T21410] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2128.488723][T21410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2128.808596][T21410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.817074][T21410] usb 2-1: Product: 䟣∹낐⼮큓끙☳翯௥ [ 2128.823647][T21410] usb 2-1: Manufacturer: 킺쩩䠦絾䜶噞沨䆟闎餘碾⌄蹯쵺秭ⴼ싵歯䳣ﾮ誄㳑嗈풞㧛᣻䧝ꙙ북磁晛驙ጆ㬅㡆鸫쏼驵赕慰༟见㼆秽빃춏▛⺩墬૭鿹⏰鄺ꎆ뻒㈹옇ᐭ顾豋仍摞㺌ੴ⊚䶨蓌졆耶暄瓓鰼錞㖍齄ꖅ ೙벁㫺๙屁겳켆䌔絭肹ꁟơ蒴䚈⎼ [ 2128.864274][T29243] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2128.883099][T21410] usb 2-1: SerialNumber: ⴜ铼ỷ웟眆讖螖紮叵돊娿鵪䗅㐾꧰떪𖏡ᦇ땸碅᱘꼼ꆜ퐱䔲ꠚ뉫숞築㎈׆㷉␦㓅玽魺莥⬆ⶎ駟旽ꂱᙏｊ誣ᩇ多褴픂姶맜覼菊퇊⇦ᆋ㿞䑄ﺮᚧḄ⴪밀乕쭱㥊펹쉧谼㚐촡뇃㺌爩狊㥐≈藫ᱣ绕 [ 2128.941056][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 2128.952312][T31124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6566'. [ 2128.966762][T31105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2128.980535][T31105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2129.365371][T31133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2129.375512][T31133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2129.510436][T19880] Bluetooth: hci4: Frame reassembly failed (-84) [ 2131.492985][T31156] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6573'. [ 2131.541688][T29715] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2132.075161][T21410] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2132.104749][T21410] usb 2-1: USB disconnect, device number 76 [ 2132.434471][T31173] tipc: Started in network mode [ 2132.441023][T31173] tipc: Node identity 6e2838acd11f, cluster identity 4711 [ 2132.450084][T31173] tipc: Enabled bearer , priority 0 [ 2132.494280][T31173] syzkaller0: entered promiscuous mode [ 2132.499852][T31173] syzkaller0: entered allmulticast mode [ 2133.364754][ T30] audit: type=1400 audit(2000000021.360:2317): avc: denied { setattr } for pid=31177 comm="syz.1.6579" name="L2TP/IPv6" dev="sockfs" ino=140598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2133.416354][T31178] binder: 31177:31178 ioctl c0306201 200000000280 returned -14 [ 2133.482111][T31163] tipc: Resetting bearer [ 2133.577853][T31163] tipc: Disabling bearer [ 2133.601318][T31186] sctp: [Deprecated]: syz.1.6582 (pid 31186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2133.601318][T31186] Use struct sctp_sack_info instead [ 2133.651085][T15508] tipc: Node number set to 3208067244 [ 2133.794903][T31190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2133.919681][T31195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6586'. [ 2134.923216][T31211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31211 comm=syz.0.6588 [ 2136.172079][T16351] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2136.857991][T16351] usb 1-1: Using ep0 maxpacket: 32 [ 2136.887002][T16351] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2136.909979][T16351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.924876][T16351] usb 1-1: config 0 descriptor?? [ 2137.131683][T31241] /dev/sg0: Can't lookup blockdev [ 2137.535743][T16351] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2137.631044][T15508] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2138.109629][T16351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2138.123626][T16351] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2138.130761][T16351] usb 1-1: media controller created [ 2138.232508][T16351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2138.371047][T15508] usb 2-1: Using ep0 maxpacket: 8 [ 2138.411824][T15508] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2138.433557][T15508] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2138.451741][T15508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.459838][T15508] usb 2-1: Product: syz [ 2138.490619][T15508] usb 2-1: Manufacturer: syz [ 2138.498260][T15508] usb 2-1: SerialNumber: syz [ 2138.508454][T15508] usb 2-1: config 0 descriptor?? [ 2138.525448][T16351] az6027: usb out operation failed. (-71) [ 2138.544582][T16351] stb0899_attach: Driver disabled by Kconfig [ 2138.560784][T16351] az6027: no front-end attached [ 2138.560784][T16351] [ 2138.573185][T16351] az6027: usb out operation failed. (-71) [ 2138.589953][T16351] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2138.653218][T15508] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2138.663363][T15508] usb 2-1: setting power ON [ 2138.670746][T15508] dvb-usb: bulk message failed: -22 (2/0) [ 2139.345145][T16351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input84 [ 2139.403760][T15508] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2139.428612][T15508] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2139.428666][T15508] usb 2-1: media controller created [ 2139.574100][T16351] dvb-usb: schedule remote query interval to 400 msecs. [ 2139.574123][T16351] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2139.576735][T16351] usb 1-1: USB disconnect, device number 39 [ 2139.587425][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2139.763626][T15508] usb 2-1: selecting invalid altsetting 6 [ 2139.773157][T15508] usb 2-1: digital interface selection failed (-22) [ 2139.875963][T16351] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2139.877325][T15508] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2140.023524][T15508] usb 2-1: setting power OFF [ 2140.461913][T15508] dvb-usb: bulk message failed: -22 (2/0) [ 2140.492578][T15508] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2140.545448][T15508] (NULL device *): no alternate interface [ 2140.900120][T15508] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2141.601586][T15508] usb 2-1: USB disconnect, device number 77 [ 2144.376975][T15508] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2144.992255][T15508] usb 6-1: Using ep0 maxpacket: 32 [ 2145.002764][T15508] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2145.064256][T15508] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.116652][T15508] usb 6-1: config 0 descriptor?? [ 2145.383801][T15508] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2145.414329][T15508] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2145.494906][T15508] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2145.521073][T15508] usb 6-1: media controller created [ 2145.557147][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2145.834815][T15508] az6027: usb out operation failed. (-71) [ 2145.845099][T15508] stb0899_attach: Driver disabled by Kconfig [ 2145.871774][T15508] az6027: no front-end attached [ 2145.871774][T15508] [ 2145.893475][T15508] az6027: usb out operation failed. (-71) [ 2145.910061][T15508] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2145.939665][T15508] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input85 [ 2145.970620][T15508] dvb-usb: schedule remote query interval to 400 msecs. [ 2145.984461][T15508] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2146.008752][T15508] usb 6-1: USB disconnect, device number 55 [ 2146.080774][T15508] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2148.708713][ T30] audit: type=1800 audit(2000000006.980:2318): pid=31383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6629" name="/" dev="fuse" ino=9 res=0 errno=0 [ 2149.732724][T21409] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2150.043777][T31400] lo speed is unknown, defaulting to 1000 [ 2150.091010][T21409] usb 1-1: Using ep0 maxpacket: 32 [ 2150.099915][T21409] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2150.109872][T21409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.149403][T21409] usb 1-1: config 0 descriptor?? [ 2150.301477][T31404] Mount JFS Failure: -5 [ 2150.305759][T31404] jfs_mount failed w/return code = -5 [ 2150.392726][T21409] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2150.612304][T21409] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2150.693408][T21409] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2150.700913][T21409] usb 1-1: media controller created [ 2150.820064][T21409] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2151.314922][T21409] az6027: usb out operation failed. (-71) [ 2151.324185][T21409] stb0899_attach: Driver disabled by Kconfig [ 2151.337161][T21409] az6027: no front-end attached [ 2151.337161][T21409] [ 2151.363558][T21409] az6027: usb out operation failed. (-71) [ 2151.388194][T21409] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2151.402767][T21409] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 2151.428361][T21409] dvb-usb: schedule remote query interval to 400 msecs. [ 2151.461922][T21409] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2151.490619][T21409] usb 1-1: USB disconnect, device number 40 [ 2151.887093][T31422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6640'. [ 2152.994119][T31426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6642'. [ 2153.247495][T21409] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2153.641917][T23066] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2153.911622][T23066] usb 2-1: Using ep0 maxpacket: 32 [ 2154.063681][T23066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2154.082372][T23066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.095889][T23066] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2154.149515][T23066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.292183][T23066] usb 2-1: config 0 descriptor?? [ 2154.466035][T31437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.473715][T31437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.622259][T16351] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2154.849886][T23066] usbhid 2-1:0.0: can't add hid device: -71 [ 2154.886893][T16351] usb 4-1: Using ep0 maxpacket: 32 [ 2154.905599][T23066] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2155.035271][T31458] exFAT-fs (loop4): unable to read boot sector [ 2155.042678][T31458] exFAT-fs (loop4): failed to read boot sector [ 2155.048877][T31458] exFAT-fs (loop4): failed to recognize exfat type [ 2155.326977][T16351] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2155.352486][T23066] usb 2-1: USB disconnect, device number 78 [ 2155.362016][T16351] usb 4-1: config 0 has no interface number 0 [ 2155.375618][T16351] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2155.385660][T16351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.405112][T16351] usb 4-1: Product: syz [ 2155.418362][T16351] usb 4-1: Manufacturer: syz [ 2155.471119][T31462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2155.680616][T31437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2155.714720][T16351] usb 4-1: SerialNumber: syz [ 2155.725129][T31437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2155.752580][T16351] usb 4-1: config 0 descriptor?? [ 2155.769360][T16351] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2155.799313][T16351] usb 4-1: selecting invalid altsetting 1 [ 2155.826820][T16351] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2155.857438][T16351] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2156.045891][T31472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6651'. [ 2156.153845][T16351] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2156.164940][T16351] usb 4-1: media controller created [ 2156.187965][T16351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2156.626787][T31481] netlink: 'syz.3.6647': attribute type 4 has an invalid length. [ 2157.130636][T19876] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.165108][T19876] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.217217][T19876] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.382484][T19876] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.441035][T15508] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2157.503862][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6654'. [ 2157.621052][T15508] usb 2-1: Using ep0 maxpacket: 32 [ 2157.990031][T16351] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2158.000793][T16351] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2158.008946][T15508] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2158.008975][T15508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.031981][T15508] usb 2-1: config 0 descriptor?? [ 2158.185222][T16351] usb 4-1: USB disconnect, device number 31 [ 2158.306648][T15508] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2158.370727][T15508] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2158.504070][T15508] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2158.537689][T15508] usb 2-1: media controller created [ 2158.910122][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6659'. [ 2159.334343][T15508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2159.351245][T31507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6660'. [ 2160.091853][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.098200][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.129513][T15508] az6027: usb out operation failed. (-71) [ 2160.135407][T15508] stb0899_attach: Driver disabled by Kconfig [ 2160.160988][T15508] az6027: no front-end attached [ 2160.160988][T15508] [ 2160.453524][T15508] az6027: usb out operation failed. (-71) [ 2160.467877][T15508] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2160.482059][T15508] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 2160.501523][ T932] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2160.502590][ T5940] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2160.512983][T15508] dvb-usb: schedule remote query interval to 400 msecs. [ 2160.558747][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6665'. [ 2160.590169][T15508] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2160.674036][T15508] usb 2-1: USB disconnect, device number 79 [ 2160.812610][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.862640][ T5940] usb 4-1: config 0 has an invalid interface number: 192 but max is 0 [ 2160.883215][ T5940] usb 4-1: config 0 has no interface number 0 [ 2160.888947][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2160.889480][ T5940] usb 4-1: config 0 interface 192 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2160.984842][ T5940] usb 4-1: config 0 interface 192 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 2160.991194][ T932] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2161.030233][ T5940] usb 4-1: config 0 interface 192 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2161.142113][T15508] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2161.158848][ T5940] usb 4-1: config 0 interface 192 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2161.159319][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.201161][ T5940] usb 4-1: config 0 interface 192 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2161.212674][ T5940] usb 4-1: config 0 interface 192 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 2161.223552][ T5940] usb 4-1: config 0 interface 192 has no altsetting 0 [ 2161.225373][ T30] audit: type=1400 audit(2000000019.530:2319): avc: denied { ioctl } for pid=31527 comm="syz.5.6667" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2161.245719][ T5940] usb 4-1: New USB device found, idVendor=12d1, idProduct=1406, bcdDevice= 0.00 [ 2161.282895][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.296710][ T5940] usb 4-1: Product: syz [ 2161.401275][ T932] usb 1-1: config 0 descriptor?? [ 2161.407929][ T5940] usb 4-1: Manufacturer: syz [ 2161.414914][ T5940] usb 4-1: SerialNumber: syz [ 2161.455054][ T5940] usb 4-1: config 0 descriptor?? [ 2161.916777][T31514] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2161.947516][ T5940] usb-storage 4-1:0.192: USB Mass Storage device detected [ 2162.114147][T31542] Mount JFS Failure: -5 [ 2162.118686][T31542] jfs_mount failed w/return code = -5 [ 2162.161497][T29715] Bluetooth: hci1: command 0x0406 tx timeout [ 2162.335806][ T5940] usb 4-1: USB disconnect, device number 32 [ 2162.411401][ T932] usb 1-1: language id specifier not provided by device, defaulting to English [ 2162.720444][ T932] uclogic 0003:256C:006D.0031: failed retrieving Huion firmware version: -71 [ 2162.732620][ T932] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 2162.743725][ T932] uclogic 0003:256C:006D.0031: probe with driver uclogic failed with error -71 [ 2163.105367][T31548] netlink: 'syz.4.6670': attribute type 1 has an invalid length. [ 2163.159486][T31548] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2163.250152][ T932] usb 1-1: USB disconnect, device number 41 [ 2163.411326][T31558] Mount JFS Failure: -5 [ 2163.417181][T31558] jfs_mount failed w/return code = -5 [ 2164.634513][T31579] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6678'. [ 2165.292069][ T5940] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2165.743369][ T5940] usb 6-1: config 0 has an invalid interface number: 71 but max is 0 [ 2165.950511][ T5940] usb 6-1: config 0 has no interface number 0 [ 2165.971501][ T5940] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=c3.cf [ 2165.993023][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.011998][ T5940] usb 6-1: Product: syz [ 2166.022270][ T5940] usb 6-1: Manufacturer: syz [ 2166.032238][ T5940] usb 6-1: SerialNumber: syz [ 2166.788853][ T5940] usb 6-1: config 0 descriptor?? [ 2167.098480][ T5940] kalmia 6-1:0.71: probe with driver kalmia failed with error -22 [ 2167.127619][ T5940] usb 6-1: USB disconnect, device number 56 [ 2167.347056][T31605] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 2167.376429][T31605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2168.374050][T31621] tmpfs: Unknown parameter 'usrquo' [ 2168.380620][T31621] debugfs: 'ptm0' already exists in 'caif_serial' [ 2169.405313][T31640] netlink: 'syz.0.6691': attribute type 1 has an invalid length. [ 2169.781418][T31645] Can't find a SQUASHFS superblock on nullb0 [ 2170.712254][T31644] gretap1: entered promiscuous mode [ 2171.287164][T31656] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2171.294797][T31656] UDF-fs: Scanning with blocksize 512 failed [ 2171.301632][T31656] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2171.309377][T31656] UDF-fs: Scanning with blocksize 1024 failed [ 2171.316466][T31656] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2171.324246][T31656] UDF-fs: Scanning with blocksize 2048 failed [ 2171.331650][T31656] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2171.339270][T31656] UDF-fs: Scanning with blocksize 4096 failed [ 2172.370455][T31640] macvlan2: entered promiscuous mode [ 2172.377500][T31640] macvlan2: entered allmulticast mode [ 2172.607157][T31640] bond1: entered promiscuous mode [ 2172.779749][T31640] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2172.861263][T31677] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2172.870701][T31677] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 2172.881875][T31677] overlayfs: failed to set uuid (544/file0, err=-13); falling back to uuid=null. [ 2173.033717][T31640] bond1: left promiscuous mode [ 2174.431562][T29243] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 2174.594372][T29243] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2174.627147][T29243] usb 4-1: not running at top speed; connect to a high speed hub [ 2174.706306][T31694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6704'. [ 2174.729480][T29243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.869372][T29243] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2175.135189][T31695] netlink: 'syz.1.6703': attribute type 1 has an invalid length. [ 2175.344677][T29243] usb 4-1: string descriptor 0 read error: -22 [ 2175.383427][T29243] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2175.464893][T31695] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6703'. [ 2175.501699][T29243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.634096][T29243] usb 4-1: 0:2 : does not exist [ 2175.641291][T31695] NCSI netlink: No device for ifindex 0 [ 2175.741372][ T30] audit: type=1400 audit(2000000034.012:2320): avc: denied { connect } for pid=31689 comm="syz.1.6703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2176.182603][T16351] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2176.481866][T16351] usb 1-1: Using ep0 maxpacket: 32 [ 2176.489189][T16351] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2176.499314][T16351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.857421][T16351] usb 1-1: config 0 descriptor?? [ 2177.235094][T31719] netlink: 'syz.5.6711': attribute type 1 has an invalid length. [ 2177.287032][T31719] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2177.690150][T29243] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2177.735870][T29243] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2177.763329][T29243] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2178.029426][T31727] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6713'. [ 2178.481572][T16351] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2178.494555][T29243] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 2178.627419][T16351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2178.794453][T31735] bridge0: port 3(team0) entered blocking state [ 2178.803216][T31735] bridge0: port 3(team0) entered disabled state [ 2178.810704][T31735] team0: entered allmulticast mode [ 2178.816041][T31735] team_slave_0: entered allmulticast mode [ 2178.822278][T31735] team_slave_1: entered allmulticast mode [ 2178.842515][T31735] team0: entered promiscuous mode [ 2178.847629][T31735] team_slave_0: entered promiscuous mode [ 2178.856287][T31735] team_slave_1: entered promiscuous mode [ 2178.867296][T31735] bridge0: port 3(team0) entered blocking state [ 2178.873726][T31735] bridge0: port 3(team0) entered forwarding state [ 2179.145856][T16351] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2179.153871][T16351] usb 1-1: media controller created [ 2179.171621][T16351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2179.206576][T29243] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2179.267031][T29243] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2179.299153][T29243] usb 4-1: USB disconnect, device number 33 [ 2179.468278][T16351] az6027: usb out operation failed. (-71) [ 2179.500504][T16351] stb0899_attach: Driver disabled by Kconfig [ 2179.565513][T16351] az6027: no front-end attached [ 2179.565513][T16351] [ 2179.643657][T16351] az6027: usb out operation failed. (-71) [ 2179.652293][T16351] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2179.691696][T16351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input88 [ 2179.748735][T16351] dvb-usb: schedule remote query interval to 400 msecs. [ 2179.759152][T16351] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2179.789355][T16351] usb 1-1: USB disconnect, device number 42 [ 2179.858417][ T30] audit: type=1400 audit(2000000038.172:2321): avc: denied { write } for pid=31739 comm="syz.1.6716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2179.884354][T31741] pim6reg: entered allmulticast mode [ 2179.923112][T16351] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2179.939593][T31746] pim6reg: left allmulticast mode [ 2180.077199][T31744] lo speed is unknown, defaulting to 1000 [ 2181.067601][T31765] exFAT-fs (loop1): unable to read boot sector [ 2181.075061][T31765] exFAT-fs (loop1): failed to read boot sector [ 2181.082546][T31765] exFAT-fs (loop1): failed to recognize exfat type [ 2181.918725][T31776] netlink: 'syz.5.6725': attribute type 1 has an invalid length. [ 2182.273126][T15508] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2182.369141][T31776] bond3: entered promiscuous mode [ 2182.374515][T31776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2182.386378][T31777] vcan1: entered allmulticast mode [ 2182.397515][T31777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2182.407279][T31777] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 2182.417784][T31777] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2182.428600][T31777] bond3: (slave vcan1): making interface the new active one [ 2182.435919][T31777] vcan1: entered promiscuous mode [ 2182.442139][T31777] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 2182.532287][T15508] usb 4-1: Using ep0 maxpacket: 16 [ 2182.550436][T15508] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2182.578235][T15508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.617678][T15508] usb 4-1: Product: syz [ 2182.748281][T15508] usb 4-1: Manufacturer: syz [ 2182.757647][T15508] usb 4-1: SerialNumber: syz [ 2182.813126][T15508] usb 4-1: config 0 descriptor?? [ 2182.826069][T15508] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 2183.058832][T15508] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 2183.091514][T15508] visor 4-1:0.0: probe with driver visor failed with error -71 [ 2183.123112][T15508] usb 4-1: USB disconnect, device number 34 [ 2184.271763][T15508] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2184.441489][T15508] usb 4-1: Using ep0 maxpacket: 16 [ 2184.460209][T15508] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2184.473292][T15508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.657609][T15508] usb 4-1: Product: syz [ 2184.676041][T15508] usb 4-1: Manufacturer: syz [ 2184.680783][T15508] usb 4-1: SerialNumber: syz [ 2184.691659][T15508] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2184.701849][T15508] r8152-cfgselector 4-1: config 0 descriptor?? [ 2184.932757][T31817] infiniband syz2: set down [ 2184.937283][T31817] infiniband syz2: added bond0 [ 2184.972174][T31817] RDS/IB: syz2: added [ 2185.478774][ T932] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2185.678938][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.696682][ T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.717655][T15508] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 2185.760548][ T932] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2185.786213][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.730722][ T932] usb 1-1: config 0 descriptor?? [ 2186.937315][T31839] comedi comedi0: comedi_config --init_data is deprecated [ 2187.070740][T31842] Can't find a SQUASHFS superblock on nullb0 [ 2187.514581][ T932] hid-led 0003:0FC5:B080.0032: probe with driver hid-led failed with error -71 [ 2187.553250][ T932] usb 1-1: USB disconnect, device number 43 [ 2187.749152][T25790] Bluetooth: hci5: command 0x0406 tx timeout [ 2187.827809][T31856] input: syz0 as /devices/virtual/input/input89 [ 2187.845890][T31856] netlink: 'syz.5.6745': attribute type 10 has an invalid length. [ 2188.174255][T31860] Mount JFS Failure: -5 [ 2188.178486][T31860] jfs_mount failed w/return code = -5 [ 2188.853918][T15508] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2189.151021][T15508] usb 1-1: device descriptor read/64, error -71 [ 2189.371666][T23066] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2189.391034][T15508] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2189.530992][T23066] usb 6-1: Using ep0 maxpacket: 32 [ 2189.615397][T15508] usb 1-1: device descriptor read/64, error -71 [ 2189.635445][T23066] usb 6-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2189.645936][T23066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.666768][T23066] usb 6-1: config 0 descriptor?? [ 2190.088424][T15508] usb usb1-port1: attempt power cycle [ 2190.112070][T23066] usb 6-1: string descriptor 0 read error: -71 [ 2190.121830][T23066] usb 6-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2190.136878][T23066] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2190.149067][T16351] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2190.151194][T29715] Bluetooth: hci2: command 0x0419 tx timeout [ 2190.157489][T16351] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2190.184751][T23066] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2190.218233][T23066] usb 6-1: media controller created [ 2190.521271][T15508] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2190.651796][T15508] usb 1-1: device descriptor read/8, error -71 [ 2190.805570][T31892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6755'. [ 2190.826711][T23066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2190.913078][T31893] Mount JFS Failure: -5 [ 2190.917859][T31893] jfs_mount failed w/return code = -5 [ 2191.217433][T15508] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2191.232534][T23066] usb 6-1: selecting invalid altsetting 1 [ 2191.285609][T15508] usb 1-1: device descriptor read/8, error -71 [ 2191.286735][T23066] set interface failed [ 2191.299454][T23066] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2191.531401][T15508] usb usb1-port1: unable to enumerate USB device [ 2191.549791][T31892] hsr_slave_0: left promiscuous mode [ 2191.557937][T31892] hsr_slave_1: left promiscuous mode [ 2191.857491][T31904] Mount JFS Failure: -5 [ 2191.861825][T31904] jfs_mount failed w/return code = -5 [ 2192.113908][T23066] error writing reg: 0xff, val: 0x00 [ 2192.244166][T23066] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2192.292375][T23066] usb 6-1: USB disconnect, device number 57 [ 2192.472097][ T932] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2192.883379][ T932] usb 2-1: Using ep0 maxpacket: 16 [ 2192.915586][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.990905][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2193.018724][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2193.034438][ T932] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2193.087615][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.124565][ T932] usb 2-1: config 0 descriptor?? [ 2193.345287][T16351] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2193.351587][T29715] Bluetooth: hci3: command 0x0406 tx timeout [ 2193.416850][T16351] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2195.957612][ T932] usbhid 2-1:0.0: can't add hid device: -71 [ 2195.963720][ T932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2195.985581][ T932] usb 2-1: USB disconnect, device number 80 [ 2196.189038][T16351] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2196.190081][T29715] Bluetooth: hci1: command 0x0406 tx timeout [ 2196.210380][T16351] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2196.455829][T31944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6771'. [ 2197.860183][T31964] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2199.621075][T30151] IPVS: starting estimator thread 0... [ 2199.721047][T31988] IPVS: using max 64 ests per chain, 153600 per kthread [ 2199.770098][T31994] SELinux: policydb version 7 does not match my version range 15-35 [ 2199.773743][ T30] audit: type=1400 audit(2000000058.062:2322): avc: denied { setopt } for pid=31990 comm="syz.0.6784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2199.791068][T31994] SELinux: failed to load policy [ 2199.911284][T16351] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2199.917770][T16351] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2199.944476][T29715] Bluetooth: hci5: command 0x0406 tx timeout [ 2200.931832][T30151] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2201.012039][T31995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2201.196841][T30151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.331258][T32012] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6790'. [ 2201.493360][T30151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.525387][T30151] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2201.597050][T30151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.659261][T30151] usb 2-1: config 0 descriptor?? [ 2202.136785][T30151] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 2202.191711][T30151] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2202.221878][T32023] netlink: 'syz.5.6794': attribute type 16 has an invalid length. [ 2202.254323][T32023] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6794'. [ 2202.293386][ T30] audit: type=1400 audit(2000000060.592:2323): avc: denied { ioctl } for pid=32022 comm="syz.5.6794" path="socket:[143848]" dev="sockfs" ino=143848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2202.318357][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.664339][T32026] netlink: 'syz.4.6793': attribute type 1 has an invalid length. [ 2202.716191][T32026] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2202.804244][T30151] cp2112 0003:10C4:EA90.0033: Part Number: 0x00 Device Version: 0x00 [ 2203.359857][T32041] netlink: 'syz.4.6798': attribute type 1 has an invalid length. [ 2203.541277][T32041] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2203.638836][T32039] netlink: 'syz.3.6797': attribute type 1 has an invalid length. [ 2203.711519][T32039] bond3: entered promiscuous mode [ 2203.716893][T32039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2203.732752][T32039] vcan1: entered allmulticast mode [ 2203.779069][T32039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2203.786739][T32039] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 2203.796907][T32039] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2203.808731][T32039] bond3: (slave vcan1): making interface the new active one [ 2203.816115][T32039] vcan1: entered promiscuous mode [ 2203.822589][T32039] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 2203.994814][T21410] usb 2-1: reset high-speed USB device number 81 using dummy_hcd [ 2205.063093][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6801'. [ 2205.162426][T30151] usb 2-1: USB disconnect, device number 81 [ 2206.691322][T30151] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2206.721042][T21410] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2206.841543][T30151] usb 1-1: Using ep0 maxpacket: 32 [ 2206.870872][T30151] usb 1-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice= 1.8e [ 2206.881114][T21410] usb 6-1: Using ep0 maxpacket: 32 [ 2206.911193][T30151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.920307][T21410] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2206.953576][T21410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.962378][T30151] usb 1-1: config 0 descriptor?? [ 2207.021099][T21410] usb 6-1: config 0 descriptor?? [ 2207.223075][T30151] usb 1-1: string descriptor 0 read error: -71 [ 2207.245854][T30151] usb 1-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 2207.479090][T30151] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2207.496497][T21410] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2207.506037][T30151] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 2207.518842][T21410] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2207.624561][T30151] usb 1-1: media controller created [ 2207.640479][T21410] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2207.653372][T21410] usb 6-1: media controller created [ 2207.665995][T30151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2207.724248][T32076] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN NOPTI [ 2207.736324][T32076] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 2207.744715][T32076] CPU: 1 UID: 0 PID: 32076 Comm: syz.5.6809 Not tainted syzkaller #0 PREEMPT(full) [ 2207.754058][T32076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2207.764094][T32076] RIP: 0010:__mutex_lock+0x14d/0x1060 [ 2207.769448][T32076] Code: 08 84 d2 0f 85 2b 0b 00 00 44 8b 15 0d 25 38 0f 45 85 d2 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 11 0b 00 00 48 3b 5b 60 0f 85 e8 01 00 00 bf 01 [ 2207.789140][T32076] RSP: 0018:ffffc90004e8f4d0 EFLAGS: 00010202 [ 2207.795186][T32076] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff3515e18 [ 2207.803135][T32076] RDX: 0000000000000019 RSI: ffffffff8d801b78 RDI: 00000000000000c8 [ 2207.811255][T32076] RBP: ffffc90004e8f620 R08: ffffffff87bdab25 R09: 0000000000000000 [ 2207.819199][T32076] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 2207.827142][T32076] R13: 0000000000000000 R14: 1ffff920009d1ea6 R15: ffffffff87bdab25 [ 2207.835093][T32076] FS: 00007fe03e3df6c0(0000) GS:ffff888124f67000(0000) knlGS:0000000000000000 [ 2207.844038][T32076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2207.850611][T32076] CR2: 0000200000005000 CR3: 000000007e29d000 CR4: 00000000003526f0 [ 2207.858584][T32076] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2207.866534][T32076] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2207.874480][T32076] Call Trace: [ 2207.877740][T32076] [ 2207.880662][T32076] ? __mutex_lock+0x344/0x1060 [ 2207.885412][T32076] ? __pfx___mutex_lock+0x10/0x10 [ 2207.890419][T32076] ? __pfx___mutex_lock+0x10/0x10 [ 2207.895423][T32076] ? dvb_usbv2_generic_write+0x25/0x50 [ 2207.900881][T32076] dvb_usbv2_generic_write+0x25/0x50 [ 2207.906157][T32076] mxl111sf_ctrl_msg+0x215/0x300 [ 2207.911206][T32076] mxl111sf_write_reg+0x95/0x170 [ 2207.916147][T32076] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 2207.921706][T32076] mxl111sf_i2c_start+0x6e/0x280 [ 2207.926650][T32076] mxl111sf_i2c_xfer+0x1e9d/0x3be0 [ 2207.931776][T32076] ? arch_stack_walk+0xa6/0x100 [ 2207.936629][T32076] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 2207.942085][T32076] ? irqentry_exit+0x3b/0x90 [ 2207.946662][T32076] ? lockdep_hardirqs_on+0x7c/0x110 [ 2207.951864][T32076] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 2207.957323][T32076] __i2c_transfer+0x6b3/0x2190 [ 2207.962085][T32076] ? __pfx___i2c_transfer+0x10/0x10 [ 2207.967277][T32076] i2c_smbus_xfer_emulated+0x230/0x11f0 [ 2207.972818][T32076] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 2207.978794][T32076] ? lockdep_count_forward_deps+0x60/0xb0 [ 2207.984508][T32076] __i2c_smbus_xfer+0x836/0x1020 [ 2207.989454][T32076] ? mark_held_locks+0x49/0x80 [ 2207.994203][T32076] ? lockdep_hardirqs_on+0x7c/0x110 [ 2207.999393][T32076] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 2208.004757][T32076] ? rt_mutex_slowtrylock+0xc9/0x100 [ 2208.010036][T32076] i2c_smbus_xfer+0x200/0x3c0 [ 2208.014709][T32076] i2cdev_ioctl_smbus+0x237/0x960 [ 2208.019727][T32076] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 2208.025260][T32076] ? __might_fault+0xe3/0x190 [ 2208.029920][T32076] ? __might_fault+0xe3/0x190 [ 2208.034585][T32076] i2cdev_ioctl+0x338/0x820 [ 2208.039077][T32076] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2208.044088][T32076] ? selinux_file_ioctl+0x180/0x270 [ 2208.049276][T32076] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2208.054287][T32076] __x64_sys_ioctl+0x18e/0x210 [ 2208.059044][T32076] do_syscall_64+0xcd/0x4e0 [ 2208.063533][T32076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.069414][T32076] RIP: 0033:0x7fe03d58eec9 [ 2208.073812][T32076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2208.093426][T32076] RSP: 002b:00007fe03e3df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2208.101829][T32076] RAX: ffffffffffffffda RBX: 00007fe03d7e5fa0 RCX: 00007fe03d58eec9 [ 2208.109787][T32076] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000005 [ 2208.117741][T32076] RBP: 00007fe03d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2208.125696][T32076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.133651][T32076] R13: 00007fe03d7e6038 R14: 00007fe03d7e5fa0 R15: 00007ffeda9c8c68 [ 2208.141614][T32076] [ 2208.144631][T32076] Modules linked in: [ 2208.149624][T32076] ---[ end trace 0000000000000000 ]--- [ 2208.351350][T32076] RIP: 0010:__mutex_lock+0x14d/0x1060 [ 2208.376629][T32076] Code: 08 84 d2 0f 85 2b 0b 00 00 44 8b 15 0d 25 38 0f 45 85 d2 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 11 0b 00 00 48 3b 5b 60 0f 85 e8 01 00 00 bf 01 [ 2208.397180][T32076] RSP: 0018:ffffc90004e8f4d0 EFLAGS: 00010202 [ 2208.404935][T32076] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff3515e18 [ 2208.417604][T21410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2208.419426][T32076] RDX: 0000000000000019 RSI: ffffffff8d801b78 RDI: 00000000000000c8 [ 2208.441073][ T30] audit: type=1400 audit(2000000066.672:2324): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2208.442037][T32076] RBP: ffffc90004e8f620 R08: ffffffff87bdab25 R09: 0000000000000000 [ 2208.471706][T32076] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 2208.479763][T32076] R13: 0000000000000000 R14: 1ffff920009d1ea6 R15: ffffffff87bdab25 [ 2208.488864][T32076] FS: 00007fe03e3df6c0(0000) GS:ffff888124f67000(0000) knlGS:0000000000000000 [ 2208.498054][T32076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2208.512182][T32076] CR2: 00007fbc8301e91c CR3: 000000007e29d000 CR4: 00000000003526f0 [ 2208.516117][T30151] usb 1-1: selecting invalid altsetting 1 [ 2208.520231][T32076] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2208.556744][T30151] set interface failed [ 2208.561940][ T30] audit: type=1400 audit(2000000066.672:2325): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2208.573785][T32076] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2208.588197][ C0] vkms_vblank_simulate: vblank timer overrun [ 2208.595573][ T30] audit: type=1400 audit(2000000066.672:2326): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2208.601625][T32076] Kernel panic - not syncing: Fatal exception [ 2208.602351][T32076] Kernel Offset: disabled