last executing test programs: 5m14.295223433s ago: executing program 1 (id=1311): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040ffffffffffffffa400000000000000000000013da51fd47aa2e2f700001d0000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 5m14.209523672s ago: executing program 1 (id=1313): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 5m14.119915455s ago: executing program 1 (id=1315): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 5m9.818762424s ago: executing program 1 (id=1328): socket$inet6(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/4014, 0xfae) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5m7.736208789s ago: executing program 1 (id=1334): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000280080001004b3c9c8e515b67061d9d5c93f387bab3900720d1359d4802d46a7ffe508ac602f0fcc3ee8510bb8368d2850d5c7abe066e2fb56600363382835e08db2567b4cf3d6cae561bf0b216b1c5b6cda82d58bee7b14e40f629f650e683beda6002fc69756da58fb585", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000280080001004b3c9c8e515b67061d9d5c93f387bab3900720d1359d4802d46a7ffe508ac602f0fcc3ee8510bb8368d2850d5c7abe066e2fb56600363382835e08db2567b4cf3d6cae561bf0b216b1c5b6cda82d58bee7b14e40f629f650e683beda6002fc69756da58fb585", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x10) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000100001000000000090d60ab529f98c7576521ad10000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000028100000000000000797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x4c801) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x8000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000b40)={0x0, 'dummy0\x00', {0x2}, 0xc7e5}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048844}, 0x20000813) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048844}, 0x20000813) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x6, 0x7, 0x8}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5m6.784687102s ago: executing program 1 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503000000050000018010"], 0x28}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503000000050000018010"], 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="eff51f241b77b74525623cde6843f08b52f58e29b7027f40bf08e45470d57656f8941cff5904559d059256a859cbdb973e6ac467396dacde9ef86dae7b94f3122cc3da888bf6404884c5ab6e3230244f0f474e6ebef0048874608dbf857f844685f271f66bc1a1312b09e3a70557ec14770aaa1ae3fa0cdf4648de5d", 0x7c}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0x40405515, &(0x7f0000000140)) 4m51.246328141s ago: executing program 32 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503000000050000018010"], 0x28}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503000000050000018010"], 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="eff51f241b77b74525623cde6843f08b52f58e29b7027f40bf08e45470d57656f8941cff5904559d059256a859cbdb973e6ac467396dacde9ef86dae7b94f3122cc3da888bf6404884c5ab6e3230244f0f474e6ebef0048874608dbf857f844685f271f66bc1a1312b09e3a70557ec14770aaa1ae3fa0cdf4648de5d", 0x7c}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0x40405515, &(0x7f0000000140)) 1m15.662867243s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 1m3.181637855s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 51.263447812s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 39.550874956s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 28.539432322s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 13.363542779s ago: executing program 0 (id=2263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xe2e1d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000005, r0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000001c0)) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)="cdfaa404"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)='X'}) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ftruncate(0xffffffffffffffff, 0x2008002) 12.914985527s ago: executing program 5 (id=1377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb0"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r3, 0x42a2}, {r5, 0x1200}, {r3, 0x20}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0102005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090583034d00ff99090805848f"], 0x0) 10.415566631s ago: executing program 0 (id=2264): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000002000)=""/212, 0xd4}], 0x1, 0xe0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) close(r1) syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_uring_setup(0x2da6, &(0x7f0000000000)={0x0, 0x11c3, 0x40, 0x3, 0x186, 0x0, r0}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x1, 0x1, 0x1, "96a358c6adf5f471e9fc44f71c717f76c6d4df000874174eeef8b2c1467675e1"}) 9.36758579s ago: executing program 2 (id=2269): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x57) r3 = syz_open_procfs(r0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1, @empty}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x8, 0xb08a, 0xfffffff7, 0x2a064, r3, 0xd3bf, '\x00', r4, r3, 0x5, 0x4, 0x1, 0x0, @value=r3, @void, @void, @value}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r6}}, './file0\x00'}) stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) setuid(r7) sendmsg$unix(r2, &(0x7f0000000740)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x110, 0x4c040}, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000480)={{0x36, 0xe7}, {0x5, 0x8}, 0x4, 0x6, 0x5}) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000180)) 9.055708076s ago: executing program 4 (id=2270): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000040)=r5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r1) fallocate(r6, 0x8, 0x6, 0x5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x200009) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 8.234895961s ago: executing program 2 (id=2272): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(r2, &(0x7f0000000140)='fd/3\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="790f076461633e860315f3328f99377a0aa835675115acd2b7f10f5db17ec3fde9b974183c45cef27e5f95a42d5eee4f9c3ba0ef5c6601d08076576cddefe74f2b3b23c3b16076675cb1bcdede8d819967d59a7b7c2c34e76233d38be07bc9d91e27bfe688115bb226db5e1179a69c22357df381e6a73bd8b4132f610008d32103ebde594b4611450ab4bd7e97a51718c9e186ee8ae006e66ea2c6afbdfc76b2c4ba738000000021bfce27e702bb3159ac514b3b7141d184fc95a53e825dd7a264360483622d808bcc55ecdc58eaba26d65e8fb40c1446c7d56358b40a0632a44acdfd8232d2e421f97e40b190155087b0bab3d0d816eb3671842438c631384ca936a989ecb918492452a72e4c60592557ca046e36b047c4ca8a7a82b79e1bebf1d3668eceaf6899dc759640ba5fc108ada047d13471fc5aed0dcf3ba6ea78297ef956f42c6d5786f099da4e55771ad021baea2b99a7", 0xfe44}], 0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ftruncate(r1, 0xe980000000000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000740)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x3, 0x4360, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x813}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e23, 0xd91, @mcast1, 0x4}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @private=0xa010102}], 0xc4) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x300, 0x0, 0x1, 0x0, r3, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000000080)="945711a85ade959d49a76bd6ffffffff000000002c632f39d18741532f9e4432b5c3b2ed4e6a5f391a3be9267e3436be09a9362ef2", 0x35, 0x8, 0x0, 0x3, r3}]) 8.138001352s ago: executing program 4 (id=2273): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(0x0, 0x75, 0x109301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x6, 0x0, &(0x7f0000048000), 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 7.090183228s ago: executing program 3 (id=2275): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) write$selinux_create(r2, &(0x7f0000000280)=@objname={'system_u:object_r:crack_db_t:s0', 0x20, 'unconfined', 0x20, 0x6, 0x20, './file0\x00'}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000300), &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) close(r13) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000000)={0x0, r13}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) 6.640662966s ago: executing program 2 (id=2276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = eventfd(0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r6, 0x3, 0x3, r5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') readv(r6, &(0x7f0000001300), 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000980)={[0x8080000, 0x4000, 0xdddd0000, 0x2000], 0x7, 0x8f, 0x8}) 6.620621962s ago: executing program 0 (id=2277): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x402, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x101000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, 0x0, 0xb) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r7, 0x0, r10, 0x0, 0x80, 0x2) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x14) 6.61721213s ago: executing program 4 (id=2278): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)=@arm64={0x0, 0xf, 0xc5, '\x00', 0x3}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x47e, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x118) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xf3) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xf3) 6.54969447s ago: executing program 3 (id=2279): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r2, &(0x7f0000000000)={0x4, 0x81, 0x7, 0x3, 0x1000, 0x9, 0x4, 0x9, 0x6c6}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 6.539496243s ago: executing program 3 (id=2280): r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x2ca3, {0x0, 0x85e, 0x100, 0x9, 0x1180000, 0x101}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r4, 0x3, 0x0, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x400) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x3f, {0x8}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002740)='./file0\x00', &(0x7f0000002780), 0x10, &(0x7f00000027c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x30]}}]}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010002", 0x7) 6.405103513s ago: executing program 3 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x800, 0xd, 0x10500, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x6, @void, @value, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x9, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) 6.205827444s ago: executing program 2 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='zonefs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000000000304000000000000002b57f51fac", @ANYRES32=0x0, @ANYBLOB="ffc30000031201001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x1d, 0x1, 0x3) 6.173213952s ago: executing program 4 (id=2283): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_io_uring_setup(0x64bb, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd32]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) accept$nfc_llcp(r10, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5.188353618s ago: executing program 0 (id=2284): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@verity_require}, {@metacopy_on}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x1, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$sndseq(r2, &(0x7f0000000440)=[{0x0, 0xfe, 0x0, 0x0, @tick, {}, {}, @time=@time={0xffffffff, 0x10000}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x1, @tick=0x10001, {}, {}, @control={0x8, 0xfffffffd}}], 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000005c0)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f00000004c0)=""/115, 0x73}], 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001140)) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000540)="0f01c5b800008ed0baf80c66b830d4b38c66efbafc0cb8d287ef66b8a20e0000000023d00fc71d6635000000080f23f866b94f0900000f32baa000ed0f20c06635020000000f22c0660f38098a00803e0f20a117", 0x53}], 0x1, 0x6, 0x0, 0xfffffffffffffca5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8}) socket$kcm(0x29, 0x0, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 5.027224344s ago: executing program 2 (id=2285): syz_open_dev$evdev(&(0x7f00000003c0), 0x9647, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0}, {0xffffffffffffffff, 0x100}, {r1, 0x10}, {r1, 0x4000}], 0x4, &(0x7f00000006c0)={0x77359400}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000002106000028bd7000fbdbdf250a002002020000050e00010014000200fe8800000000000000000000000001010500150000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) shmget(0x2, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1caa8102e83ab9416dd84c0ee5c4d0f189ddb5a9ba65343a9c89f1f114a74db401fc0d892eab566cfa8989b661ebceaf4abab0e7eec5ddd58f06a4c7fa96b159ac0fc490352b372d2acd7dde9ba6b2c948740b57cb7fe53428768929fcd8c3b72496f4a3eda0698de912f39c7a2755440631db219ea61df515eb612281", @ANYRES16=0x0, @ANYBLOB="000127bd7000fffbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000005) ptrace$peek(0x2, r3, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.140639861s ago: executing program 3 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001200)={0x8, 0x6, 0x2, 0x0, 0x5}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x20) mkdir(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000279600"}) r4 = syz_open_pts(r3, 0x0) r5 = dup(r4) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) acct(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b29, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r7, 0x8b1a, &(0x7f0000000040)) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000060000009500400000000000"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.139087299s ago: executing program 4 (id=2287): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000002000)=""/212, 0xd4}], 0x1, 0xe0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) close(r1) syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_uring_setup(0x2da6, &(0x7f0000000000)={0x0, 0x11c3, 0x40, 0x3, 0x186, 0x0, r0}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x1, 0x1, 0x1, "96a358c6adf5f471e9fc44f71c717f76c6d4df000874174eeef8b2c1467675e1"}) 4.074055589s ago: executing program 0 (id=2288): rseq(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x52) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000300)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 2.896298852s ago: executing program 0 (id=2289): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bind(0xffffffffffffffff, &(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000100)={0x0, r5}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) write$eventfd(r5, &(0x7f00000000c0), 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x77, 0xf1, 0xc9, 0x10, 0xc72, 0xc, 0xf659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xd3, 0x1a, 0x3a, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x4}}, {}]}}]}}]}}, 0x0) 2.430838984s ago: executing program 3 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x203, @rand_addr=' \x01\x00', 0x1}, 0x2e) socketpair(0x10, 0x0, 0x7f, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x94, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfff, @remote, 0xc}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x3, @local, 0x8a}, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4e}]}, &(0x7f0000000300)=0x10) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "1bb59684423031d5", "b518ec45e428570213debdfea23df4fe", "bafe5ad9", "ab31d35bed3ad4c4"}, 0x28) r6 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='sOu\xf0\x9fe', &(0x7f0000000200)='7(\xa3,\x058\x05\xe08!\x92\xb9\xcc7oi\xf8\x9f\xfeVs\xb2\xd2\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00SZ\x0e\xe7PK\x82+\xe2\xe1-\x97m=\xc1o\xd0\x88\xf6\x97\x9cm\xea1N\xb3{\xab\x19\x8bUu\xc1SV\x87\xbc\xa8\xc0F\"}\xc2\xfa#V\xfbW\xa2N\x87\xbdyg\x0e\fCJ^\x9f\x8f\x85\x1b\x8f\x167\xe3t\xc1\xb8\xa9\x1b\xaar\xc5Pj0\x19o]', 0x0) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 1.937280006s ago: executing program 2 (id=2291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x48ec422b0af11ece, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') keyctl$set_reqkey_keyring(0xe, 0x5) r3 = request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) sysinfo(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="d48559ae71406871920471defbfdf1dd9920a65e9bff8409929502191315f0be68d3b2fe789b36309b1e42ba462f28a70b546fe903e68c378f22f021d2e96ddaf2d80871c0f24e303297ba681fa384cb685b904f7d75ac1b5179c775543da66aedfbc9fbca6cfd0c2a29d5e1a36b16c012b27db7fa99dc9664073288d6bf46e172b038c7992ce5cace685e8616add069a02f1bdb60957c535c5bb50f6f38d892c6c6da1d11dd5a801855197373e6335a1bc438c03c216c6189eb4c92755e5bf970758c07c46162acf132aea306c3d0a271dfb9e9c4ba019cc3918db17da31e9c58a8109b0b0f6bcaabee1524b43443ff66d7649328358199a14d8c8319df626165353c54c083e1fce953eec7b7cd7fcac3c70cf592e9ae7148fc82b29e4bf5725aed0e35b2124af6117b7fc92aac377972d2421ddaf9fde617b8c21d9666cf939f8d05f2bf4a9ade03f5389ea8225c36e092c3a5ee1da68ed5a2799df002dfba7f8bac25aa3940b8368d583ebf981b4c16f5ffdffe6b12adaf76a37300be4875ce49259e89b1285dd7e78e505aab5dd34f48432e4e8bcc0fd5d4b5abd4921085124529fea0239b7030f642aed17ddd9fac3eea44f14dc3f56e643592960aec1f0bbd1ba42219dfafbd9b6aec33e7d4e3dcf49bd70af5808ab02b140eb95627c6d673365323866e9c1c10301b8cc9ac4233c4f81f22887f1df2f040bb20f7d43d8f4aaccb04dfd7b6ae73eafee4c2b0ac90c9160a3f90a232bf68419cabae401550e1090a424644fdcbe10dd34843768d179dabbc23425eaa2372c27730f2080c78d8c1db4657479d3f9b777d507726e9e143c982f26a42daa238c42846338031bb394134e5568f39934680759be2df79da26ea47242e42d24d38a66c53b0568420c8f4787b359caecbf230eaa2296653c93e32288515e9b880c709613ac8864fab57ba03219dbbffa6903cd54e595d79e1a294a6744d3eedeaf86c97eb78e7ca9b7539b4b0ee59ed1f4345d9feaccbffd18875163dffb043b7f02341ac79c9479415bc3403f0c04ef20eb12bbc89bfc7f6f14e96e89fd9cbf8d11f9f54645b73080de109fc7d0998730c64b4a15452ef01c70be8ec704060a1fa06605d3fbc20221cd0db6ba13d93646d0c485f7b51b1f509cbcdc444e2078f59928a7766dfce362839b6cc8e0d0a98389676ac74f16ee3dc6cea10c8f0e8ebcb1f905cb2d88b1f1e978905d3672c2e90ff7cf5c6fd43f8c82fd41d94c8d83515f81fc191543966e85b9c596f25544ecd01d0188a29c95662e5cf71791cb3678d10c75172bc05e0ce30f2721ff4ecaeb865b18397fe66e26ffca821c82b90a2202e2dd72e13dd058dc83fe0b405757b42362b3007c5fdc09b553820c39c0963c3b6469846219949f727ffc7665c872b46417eec0a4d1990d7440bc0d0ff9523a8ba86bdcd0fd20d1ff0efba84100ac13b7ff01c310408b1f251d357bf7277fca89ffbbe8d745dad1d6b2e02cc20fefc0ce7394831239815bdf4dbd1ec2bedbf797cc59e874227252c5dee5432e1fe17bf751e5423a813922e475b3e4cac00fad9f4b76e81b180b890a870c9e87e9f5cd6ca03530d5f69553529d719a70626956f2dab2a35dc4e2502d2721a629193b942e84163371f6cd712a57edfb81949c6114532c22096a2a1183d2c26b9165b4fde0b603f775c9e49aa51225db5fa972572e0ace403c8b9a023a3e1feb001bed62395c90fb7a8ed03efd5ec6e238753ad21ae8adc878be5c5b513d16dbc7267fc94ae596ffe99ead77c1fac15b01edd4e34a77b467259f9704adb65a87bd0a5255f7d09e01b47f175a1c5653df872fa022dd26b6803fc9f7eeba702c1b0ad92ba42819da7898d45e62233a92db210d7ee204d94b31278b7add2f1f7cb913a1efc71a4394f5e4e381973c2458e2efed9d0375ec983b097b120733843d847e41f0c5f8d950cc170b348c47895e10a49209a623627430f2e818526119579573b6a94a2b88c277ce6d158f1d096b6fd6a20ed4bcd5fa84306569410c8710decc2b2825d87f2a7b48f7a7f0d034ef517a202276e6f681318037bbce13456f6c4e1292725eed673e247c181cff7c175c78836d3cf42565b64f00fd65f8c2e5b9377d621aff1c7140550e247ab84854a8a70daf50c5cffcb2b047ab9086e92cc099dcc96b4e52a1245d93c686cf2fc2ed30c72c5538d5537f3f84c7e3de0a61a436eed3d395902732d01bd3ad423c8c65eba115570881ae3c923d63d0e21fb0f8a3a3b1d2f9e3a9e002b088ff1ddb1c8ca265dc6b6f762075f315b5809637dca9f38bf1450277bfb87b849a472478f034bbfe1c7ac5a4c23801e1dd0b4f27b610109452d819c7f5966a7433e7901e281a544fbe41167571369a30bfdb5e024c998fb81e06269218351569884dc6b07bdb9ecbd8b7615f6735835480a277ecc3673b6fed8f271c275728158b1e6b84efefceb779854d0190b4f306dc453411223075a4179bc10a68e7bd0c8217bde6be775dc3ee766e2b4e8aba8f2fb85d8ab3e61e5bfb8006c9b7628c94d250a2bcc47c7a0c23f7761ca2ddafe795f0c4ef1ad2f91e3955b1d9d0ce0e1fc3c53294fc9a1961b0eecc33589fe12c7734ea5918438c5b6a604c9f7187db4fb525dba37ac2d678870c4abe5adf7f99b526a57862d98704cbd44bfd87d4e50a6fd1e6ea0763c9a3bece7bc907ef72737344c750940b0dd7923494902d6b0c60540045d202e71d9f8657b164f91d21e55163071cc73bcc3406c894bb7b562a2bd7fc0fb6e52c772ccb93e2becd11a02770cbd20444fa2d9f91d190b21b8e30b7d0c83bc5fd77f9451610f1ab5d1a3f4067ec27c31a53a67801951e1f796f221885e94eaf80f8d28488d461cb9e994d165d8e9edeb58aa275e9c6f59896877252700fed4cdc2e1630d2d286880b37aa3862e5961219029f0c8e72e4dd4ac759c804957cdc4b8356665b3d8b27801fcefb85cc88285e24178b8cb00b4d83adae15a72f8d3ef1bf513bac2020395231cf86d04c1ef87404af9fd3d55efbd2a86346208456785593a0a369f4b99f6cb769bcee3dec488e3e42ad77546e92fbd7fb5620b58143b67fac233e9ac632dcbfa87031362006dab68adf62804b5b44fbcdbad47f4e239979a1a8af664eb5216e7befac6e33dc50e8b87871ce0b926748a63a7ea534c238f0e84a1a578652ea1d701dc32fffe1e60e0c5c1d3fe8e741b79e7328080a4fdd6e9364b9181a8f56139fe1f3d3eb8b4910b0f08aaf6689f0a402d554244f1aba54567b2d5b166cce29dbf2f4f7eca0a4179e03cff9feaddf334d2556de7a7601d7ca1891db8475924dde260d48a6af0cb1377df21c47e40f3d2c510333a346afabf80601fadb49c83e2ccdcdf4ba3125001b5cbbb2f9d7abded6a1d782f8e374ee10d38749f201d982900946e563614b5eb1da091bde8a5d7ad72d7220d2d8d2a7aff38c4397b732ed04628b1b0e998742cb16837b3a37caa7ff5da60ce99ac9a13f11dbbd3e963ac49582e189e7a10d107e6d8ceb53c69a1668dbc183583b302a8c6746ed971381e9cc198f35f5d8cd46d87a8ebef7a3cdf67dc41e0901f2c8f3ad82a3ce94d1f463acefd63f24c18ba9a29a2d5dd385e5803f67ee039ad0b7c03d7c847d6e23ab90db73a136288404d7f3f84cbe0d31eb0ed1bccb20bdda28ad5ca414b1a54bc81e73b5117e9194c9b84fcbadbffafde4b456640f4be83797df45b04263d7d67d4c5389dfa20268d14221e1ccf78371d14a80accdab31966f4b30ee3f424b051f461739976da501f613fa9f467c273cd9234a949eb3b1aee4a1b50d0784335e9a2c665cfa0a49310cfa333ca397811b54d102ab920859f058e87e7746b3b48c799a2edf99b5055d9f694102e73ab9013e9e0ab60737f24d44adc3e862367ac08df3d35709bdcbe67982c803cba58092eb8d3ffccf0079ac48796a071544f1c4536666befa3e0fdca943c31012ef29d9ddc21e816f1452ce4b2d4242006c12f4e4517febd611efebb96038bf4a900fd57c41db4a18e5f85184ed220e5fd310f74f5b1c94dcbb12a3e834f979d3fda8e7035681abcd1bce6f035d1cf8e3b83f410174a65a47ead7315848dfd05fb8edc87a8011a7ae2ebcbccd37bd4f3ce364419bad4d8594aa5be5adfd4f00e82de02a385c7b6e0801d3b6d9b02c9c6adae1b98ab74957dd4552ce601c2fb7294f68329bc67d69909d40e8ecf4f035278ed14959819ec0a05c498ef074353a3a309b506b404bf65292987a4ba03cd85cd93c8283cea741ab6a994d9bf687cd0430b0c83b65214577ec86ae9e29765447535cb38fffffcb07ddaa00ef138ffd824f8cbc7c52c40cbbd3c8d98dd865aecd4185549e6344f00b56b55feec98acf2d5432ad1b5d3d316f3e4d100645d78face1a391bf386b6a800ebec5985d67a0bd4776deedcd1f2aadeeadeba785c7ad3868dfad5ab04657dae1ed4a18a5e74a56b74e24d140ec845dd2cb8ef195c5544dcdec996955f3b2edc6b2b194b1200a0d4a154f406d6a08b6528474830aa153c29d79b838bc119ceca9a69d7f297bca4c65c8d67de11b4893c58cfaada5cc722af125e58eef405d1ba2f6223b0ee6bd2caaf0b293da3e5c7be1e2a8ca3162647c7545aaa68279d36407949e8e364f8344841615a5de6336056d197def51038f51379f5af4a1c21b5fc11d93a8c15629ebc86eb19482ab81d351ce02e96d9ac6a136dbf656ab225dc1c1316842deeb4cd98652b3f2a9294c280d93fa0da2a1fcf5a824b0a0eea436ef3b14c692de5993253d749f1eff253a6af9baf73f02647cf5af1bda45447c1968adbb573f7a95da9c6242ad6f6931a57c3da038775af7e7b669bc3286412cc2a63dbe84ff3a451ff45d9358eb44901c98d62837aeb6bf7fdd2e3154aa5d0246b3c8f66ca98c7475516b847d0eba57deb8bb08a9ea9c226f828bb6da4b143b53337af6d5437d862c2b18c99065a096fe7bc85fc359f85e239080fc8c5fd15fc306c7c790a609325a926c9f7e0721f081e537be7e4eaad2ba6e363da0ccef26308b583b799a0f082cdeb97a2b11620b52b890ba0a9898f67db8cd11b84323434bee1ce0ce772e97c5073c97473692a184e06a3b7d188fb748260608d68299ead4b6c14b3ff0857fa62db6706015d2341c2375e9a2e01922a0e681f0f49f0eba3d08150aaa0aceffe6cc826b983d095137fd2187493f9519631c11b6d110b4694cfc219d9ef1f22a254be916d78fb3728bf0f35dc4dac6b9f1f197ef429146af202b479bc08506677cc7540d1f21b987a02561a49df26129bcee3118df3d451232c0a5f5215fd1d67916c0b0881b37a89925ff09f86b08d1c3fa17a232f6695374b52e79f47479f26b6db5d04cf9c9da16158b4c5aab576cf4e80c14c82a18cedd2b8bc53d97ca751f10270cab81d837ca060852d92f5671332df4af091a61bf26f5bec2e5097f562328a97fa592718fbf2dc0c5aaffd983044a5ce73dc9b076059c84f8c9b35812fbdc4c2bbeb4e5cfe031d04f2a80f414c0edbd016501d7fd83dd4109827436430e79553385773a909d9ed617f4079595a12d9878b2336f5713092e99ca182ae1e2e96ec5a97a4a00915a902bab3193ff2fcd70a9b7b633fa61c715b9f0932459ef2f66370e41c6811a29e64edac2e9736d1be32e4263add2e05de0c8d418884bc61f20ee88386efa9e7060de6c8c47c98cd2c30336c9480a4ec6e483f922b018c6118d608d879685fc5add5618bb23f9df899f1a7a9", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYBLOB="281e777983435bfc9ba2a07aac70157cfcd3b6b450ced9656a582ac4bf79504a9b1503aef55721cdd6792f6b41535df86f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r4}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f00000010c0)=0x7, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) sendto$inet(r4, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=2292): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x14, 0x0, 0x0}) kernel console output (not intermixed with test programs): 5-1: new high-speed USB device number 92 using dummy_hcd [ 663.080779][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 663.088993][ T8] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 663.099024][ T8] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.112046][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 663.120353][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 663.129484][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.137560][ T8] usb 5-1: Product: 딈至縈兰鹚뛡Ể驒뇿쵉ⵒ柯굩幰슰킘愎鈕䳻뒾쵩꺝醴狂躞操筨㎁짦恅攎辶臖Ƞ岾 [ 663.151875][ T8] usb 5-1: Manufacturer:  [ 663.156455][ T8] usb 5-1: SerialNumber: 从䜭米휀芎籄仱ﻱඃ망炄௯疅㚅邱῟츝롑綌蘮ﭓ࿾ꐵ牘䏙㤇旝捙♀ุ坰ᭉ㏔哾屎℡ [ 663.181164][T14593] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 663.188432][T14593] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 663.758365][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 663.783588][ T8] usb 5-1: USB disconnect, device number 92 [ 664.541205][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 665.083502][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 665.094313][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 665.104364][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 665.113488][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.123779][T11370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 665.131309][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.154155][T14634] Failed to initialize the IGMP autojoin socket (err -2) [ 665.191812][ T5871] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 665.271528][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 665.378402][ T5871] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 665.396191][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.406174][ T5871] usb 5-1: config 0 descriptor?? [ 665.416473][ T5871] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 665.443027][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 665.449530][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 665.464407][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 665.476501][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.492175][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.523283][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.533137][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.622691][ T5871] gspca_sn9c2028: read1 error -32 [ 665.682345][T14625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.691548][ T5871] gspca_sn9c2028: read1 error -32 [ 665.704063][T14625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.822780][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 665.905477][T14634] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 665.920092][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 665.925701][ T9] usbtmc 3-1:16.0: can't read capabilities [ 665.968495][ T5920] usb 5-1: USB disconnect, device number 93 [ 665.976219][T14634] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 666.573970][ T51] usb 3-1: USB disconnect, device number 87 [ 666.575927][T14634] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 666.653921][T14634] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 667.180781][T11370] Bluetooth: hci2: command tx timeout [ 668.297172][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.310157][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.321974][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.332817][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.343717][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 668.356217][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.377238][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.396084][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.426153][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.523108][T14634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 668.551758][T14634] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 668.578220][T14821] tipc: Started in network mode [ 668.583352][T14821] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 668.595251][T14821] tipc: Enabled bearer , priority 0 [ 668.603344][T14634] wireguard: wg0: Could not create IPv4 socket [ 668.622240][T14634] wireguard: wg1: Could not create IPv4 socket [ 668.640511][T14634] wireguard: wg2: Could not create IPv4 socket [ 668.790848][ T5920] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 668.837296][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.847514][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.960852][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 668.967402][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.978797][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.988748][ T5920] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 668.997942][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.008289][ T5920] usb 4-1: config 0 descriptor?? [ 669.131193][ T51] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 669.190754][ T5829] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 669.328798][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 669.929471][T14779] tipc: Node number set to 10070698 [ 669.938784][ T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 669.950240][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 669.960353][ T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.970413][ T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.181836][ T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 670.200894][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.414701][ T5829] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 671.424030][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.437020][ T6012] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 671.439390][ T5829] usb 5-1: config 0 descriptor?? [ 671.454642][ T5829] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 671.583433][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 671.589995][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 671.611209][ T5920] usb 4-1: USB disconnect, device number 91 [ 671.614671][T14890] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1911'. [ 671.676683][ T51] usb 3-1: GET_CAPABILITIES returned 0 [ 671.682401][ T51] usbtmc 3-1:16.0: can't read capabilities [ 671.725908][ T5829] gspca_sn9c2028: read1 error -32 [ 671.836539][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.845147][ T5829] gspca_sn9c2028: read1 error -32 [ 671.851407][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.042345][ T29] audit: type=1400 audit(1730433100.342:1638): avc: denied { bind } for pid=14889 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 672.610762][ T5829] gspca_sn9c2028: read1 error -110 [ 672.615973][ T5829] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -110 [ 672.645808][ T8] usb 3-1: USB disconnect, device number 88 [ 673.752537][ T8] usb 5-1: USB disconnect, device number 94 [ 674.137703][T14945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.175739][T14945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.830832][ T5871] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 675.982014][ T5871] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 675.991143][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.009097][ T5871] usb 4-1: config 0 descriptor?? [ 676.016120][ T5871] pwc: Samsung MPC-C10 USB webcam detected. [ 677.043344][T14988] hfs: unable to parse mount options [ 677.138430][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.168857][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.179452][ T29] audit: type=1400 audit(1730433105.372:1639): avc: denied { bind } for pid=14978 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 677.342647][ T1146] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 677.600917][ T8] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 677.873726][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.884103][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.894077][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.903070][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.912124][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 677.919626][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.937918][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 677.950018][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.004345][T14998] Failed to initialize the IGMP autojoin socket (err -2) [ 678.020326][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.037171][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 678.053602][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 678.064132][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.098628][ T8] usb 5-1: config 0 descriptor?? [ 678.268082][T15007] kvm: pic: non byte write [ 678.330997][ T5829] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 678.364338][ T6012] Bluetooth: hci5: Frame reassembly failed (-84) [ 678.494092][ T5829] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 678.509410][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.533326][ T5829] usb 3-1: config 0 descriptor?? [ 678.541150][ T5871] pwc: send_video_command error -71 [ 678.546606][ T5871] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 678.559170][ T5871] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 678.734500][ T5871] usb 4-1: USB disconnect, device number 92 [ 678.973301][ T5829] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 679.072968][ T5871] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 679.277317][ T5871] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 679.327483][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.378932][ T5829] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 679.404432][ T5871] usb 4-1: config 0 descriptor?? [ 679.443245][ T5871] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 679.602823][T14998] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 679.655005][ T5871] gspca_sn9c2028: read1 error -32 [ 679.890843][T14998] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 680.070029][T11370] Bluetooth: hci2: command tx timeout [ 680.155852][T14998] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 680.191421][T14998] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 680.193438][ T5829] usb 3-1: USB disconnect, device number 89 [ 680.255960][T15077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.266135][T15077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.277365][ T5871] gspca_sn9c2028: read1 error -32 [ 680.391699][T11370] Bluetooth: hci5: command 0xfc11 tx timeout [ 680.400429][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 680.419444][T15169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.433762][T15169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.460205][T15169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.473740][T15169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.497466][ T5871] usb 4-1: USB disconnect, device number 93 [ 680.696037][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.709865][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.720444][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.732779][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.746233][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.757620][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.770044][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.781445][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.795278][T14998] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 680.969700][T14998] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 680.988417][T14998] wireguard: wg0: Could not create IPv4 socket [ 680.996379][T14998] wireguard: wg1: Could not create IPv4 socket [ 681.004363][T14998] wireguard: wg2: Could not create IPv4 socket [ 681.808931][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 681.816952][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 681.845778][ T8] usb 5-1: USB disconnect, device number 95 [ 681.904776][ T29] audit: type=1400 audit(1730433110.222:1640): avc: denied { module_load } for pid=15212 comm="syz.2.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 681.904816][T15219] Invalid ELF header type: 3 != 1 [ 682.184711][ T54] Bluetooth: hci2: command tx timeout [ 682.807479][ T29] audit: type=1400 audit(1730433111.122:1641): avc: denied { append } for pid=15221 comm="syz.3.1935" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 683.082563][ T5900] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 683.101389][ T6012] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 683.252703][ T5900] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 683.263275][ T5900] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 683.289161][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.317842][ T5900] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 683.391195][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 683.509811][T15266] rtc_cmos 00:00: Alarms can be up to one day in the future [ 683.570816][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 683.577388][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 683.588798][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 683.599042][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.610508][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.624218][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.633857][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.934867][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 683.940387][ T8] usbtmc 3-1:16.0: can't read capabilities [ 684.099951][ T5920] usb 3-1: USB disconnect, device number 90 [ 684.258678][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.270600][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.512638][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.826580][ T5900] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 685.835833][ T5900] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 685.845998][ T5900] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 685.854668][ T5900] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 687.335986][ T5900] usb 4-1: USB disconnect, device number 94 [ 687.531532][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.545736][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.578533][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.663891][T15315] binder: 15314:15315 ioctl c0306201 20000100 returned -22 [ 688.221460][T11442] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 688.241476][T15336] hfs: can't find a HFS filesystem on dev nullb0 [ 688.260811][ T8] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 688.405341][ T8] usb 5-1: device descriptor read/64, error -71 [ 688.814965][ T8] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 688.919804][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1954'. [ 688.960850][ T8] usb 5-1: device descriptor read/64, error -71 [ 689.116844][ T8] usb usb5-port1: attempt power cycle [ 689.448911][T15360] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1956'. [ 689.930780][ T8] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 689.959282][ T8] usb 5-1: device descriptor read/8, error -71 [ 690.210835][ T29] audit: type=1400 audit(1730433118.402:1642): avc: denied { setopt } for pid=15361 comm="syz.3.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 690.270830][ T8] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 690.291448][ T8] usb 5-1: device descriptor read/8, error -71 [ 690.411234][ T8] usb usb5-port1: unable to enumerate USB device [ 691.708356][T15370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.713117][T15376] Failed to get privilege flags for destination (handle=0x2:0x0) [ 691.732119][T15370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.873030][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.031441][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.432410][ T51] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 692.570806][ T5920] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 694.708974][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 694.819722][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.867290][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.893676][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.910225][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.920963][T11370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.929574][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.965217][T15397] Failed to initialize the IGMP autojoin socket (err -2) [ 697.741232][ T51] usb 4-1: device not accepting address 95, error -71 [ 697.797823][T15421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.957558][T15417] hfs: unable to parse mount options [ 697.969413][T11370] Bluetooth: hci2: command tx timeout [ 698.181283][T15421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.576886][ T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 698.832310][ T8] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 698.852094][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.887035][ T8] usb 5-1: config 0 descriptor?? [ 699.099357][T15397] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 699.126147][T15397] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 699.145759][T15397] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 699.174274][T15397] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 699.306378][ T8] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 699.437734][ T29] audit: type=1400 audit(1730433127.752:1643): avc: denied { mount } for pid=15546 comm="syz.3.1969" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 699.484802][ T29] audit: type=1326 audit(1730433127.752:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 699.541172][ T29] audit: type=1326 audit(1730433127.762:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 699.607578][ T29] audit: type=1326 audit(1730433127.762:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 699.664975][ T29] audit: type=1326 audit(1730433127.762:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1dc17d1ff code=0x7ffc0000 [ 699.721431][ T8] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 699.752675][ T29] audit: type=1326 audit(1730433127.762:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 699.985914][ T5920] usb 5-1: USB disconnect, device number 100 [ 699.992801][ T54] Bluetooth: hci2: command tx timeout [ 699.998035][ T29] audit: type=1326 audit(1730433127.762:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 700.128460][ T29] audit: type=1326 audit(1730433127.762:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 700.313974][ T29] audit: type=1326 audit(1730433127.762:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 700.348281][ T29] audit: type=1326 audit(1730433127.762:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x7ffc0000 [ 700.423893][T15585] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1974'. [ 700.463406][T15585] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1974'. [ 700.482624][T15585] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1974'. [ 700.623182][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.650748][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.660912][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.671424][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.692103][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.711250][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.730761][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.749468][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.779338][T15397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 700.820208][T15397] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 700.850773][ T8] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 700.859958][T15397] wireguard: wg0: Could not create IPv4 socket [ 700.872477][T15397] wireguard: wg1: Could not create IPv4 socket [ 700.904303][T15397] wireguard: wg2: Could not create IPv4 socket [ 701.017648][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 701.045419][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.069050][ T8] usb 3-1: config 0 descriptor?? [ 701.077256][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 701.225585][T15645] Failed to initialize the IGMP autojoin socket (err -2) [ 701.280896][ T8] gspca_sn9c2028: read1 error -32 [ 701.518285][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.518395][ T8] gspca_sn9c2028: read1 error -32 [ 701.574887][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.717178][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.734293][ T5900] usb 3-1: USB disconnect, device number 92 [ 703.741427][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.782600][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.813614][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.914467][T15669] nbd: couldn't find a device at index 7143424 [ 704.051390][T15690] Invalid ELF header magic: != ELF [ 704.117624][ T5900] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 704.182176][T15693] syz.4.1987: attempt to access beyond end of device [ 704.182176][T15693] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 704.219312][T15693] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 704.227449][ T7903] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 704.260743][ T5829] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 704.281945][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 704.289415][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.306716][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 704.322161][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.337556][ T5900] usb 3-1: config 0 descriptor?? [ 704.348838][ T5900] hub 3-1:0.0: bad descriptor, ignoring hub [ 704.359643][ T5900] hub 3-1:0.0: probe with driver hub failed with error -5 [ 704.421918][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 704.437110][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.454542][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.470846][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.490882][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.510733][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.600814][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 704.609920][ T5829] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 704.618129][ T5829] usb 4-1: Manufacturer: syz [ 704.641571][ T5829] usb 4-1: config 0 descriptor?? [ 704.686715][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 704.686731][ T29] audit: type=1400 audit(1730433133.002:1656): avc: denied { ioctl } for pid=15707 comm="syz.2.1989" path="socket:[51131]" dev="sockfs" ino=51131 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 704.720394][T15708] bridge0: port 3(wlan0) entered blocking state [ 704.726926][T15708] bridge0: port 3(wlan0) entered disabled state [ 704.733675][T15708] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 704.742127][T15708] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 704.771659][ T5920] usb 3-1: USB disconnect, device number 93 [ 704.983190][ T5829] rc_core: IR keymap rc-hauppauge not found [ 704.989126][ T5829] Registered IR keymap rc-empty [ 705.006521][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.038976][T15721] bpf: Bad value for 'uid' [ 705.057572][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.091670][ T5829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 705.105047][ T5829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 705.137918][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.164769][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.221655][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.253709][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.312997][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.355102][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.391332][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.465247][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.500816][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.520796][ T5829] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.541789][ T5829] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 705.623375][ T5829] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 705.634454][ T5829] usb 4-1: USB disconnect, device number 97 [ 705.682581][T15741] overlayfs: failed to resolve './file0': -2 [ 705.804888][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.830072][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.961011][ T5920] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 706.110870][ T5900] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 706.130839][ T5920] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 706.140140][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.154784][ T5920] usb 3-1: config 0 descriptor?? [ 706.163883][ T5920] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 706.260759][ T8] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 706.268559][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 706.276110][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.287484][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.297344][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.310366][ T5900] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 706.319524][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.329405][ T5900] usb 4-1: config 0 descriptor?? [ 706.368378][ T5920] gspca_sn9c2028: read1 error -32 [ 706.572163][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 706.581277][ T5920] gspca_sn9c2028: read1 error -32 [ 706.587280][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.596280][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.378758][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 707.387841][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 707.398340][ T5920] usb 3-1: USB disconnect, device number 94 [ 707.399799][ T5900] usb 4-1: USB disconnect, device number 98 [ 707.413203][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.424194][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.434286][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 707.443379][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.548125][ T8] usb 5-1: config 0 descriptor?? [ 707.657707][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 708.263523][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.277393][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.595338][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.604495][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.615110][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 708.621238][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 708.630464][ T8] usb 5-1: USB disconnect, device number 101 [ 709.922019][T15829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.976130][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.985190][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 710.046321][T15829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.086801][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.096015][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 710.195778][ T29] audit: type=1400 audit(1730433138.512:1657): avc: denied { read } for pid=15846 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 710.233104][T15828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 710.288154][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.302520][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.342082][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.352704][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.360452][T11370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 710.367915][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.449635][T15855] Failed to initialize the IGMP autojoin socket (err -2) [ 710.583544][T15871] : renamed from vlan0 (while UP) [ 711.451763][T15921] Failed to initialize the IGMP autojoin socket (err -2) [ 711.471981][ T5829] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 711.621069][ T5920] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 711.631840][ T5871] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 711.651113][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 711.736020][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.818348][ T5920] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 711.852434][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 711.862614][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.871154][ T5829] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 711.882691][ T5829] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 711.896669][ T5920] usb 5-1: config 0 descriptor?? [ 711.901954][ T5871] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 711.911176][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.922007][ T5871] usb 3-1: config 0 descriptor?? [ 711.931103][ T5920] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 711.941192][ T5871] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 711.947681][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.957293][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.965477][ T5829] usb 4-1: SerialNumber: syz [ 711.983320][ T5829] cdc_acm 4-1:1.0: skipping garbage [ 711.988730][ T5829] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 712.143704][ T5871] gspca_sn9c2028: read1 error -32 [ 712.157829][ T5920] gp8psk: usb in 128 operation failed. [ 712.171230][ T5920] gp8psk: usb in 137 operation failed. [ 712.180272][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 712.197044][ T5920] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 712.217707][ T5920] usb 5-1: media controller created [ 712.225095][T15911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.236912][ T5871] gspca_sn9c2028: read1 error -32 [ 712.263279][T15911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.305587][T15855] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 712.306161][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.347869][T15855] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 712.358649][ T5920] gp8psk_fe: Frontend attached [ 712.366805][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 712.376612][ T5920] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 712.384400][T15855] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 712.478007][T11370] Bluetooth: hci2: command tx timeout [ 712.678441][T15855] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 712.827136][ T5871] usb 3-1: USB disconnect, device number 95 [ 712.858393][ T5829] usb 4-1: USB disconnect, device number 99 [ 713.076932][ T5920] gp8psk: usb in 137 operation failed. [ 713.082802][ T5920] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 713.096705][ T5920] gp8psk: found Genpix USB device pID = 203 (hex) [ 713.114341][ T5920] usb 5-1: USB disconnect, device number 102 [ 713.168920][ T5920] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 713.439673][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.455902][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.474643][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.487668][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.517718][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.532619][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.543851][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.557647][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.578041][T15855] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 713.599234][T15855] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 713.712692][T15855] wireguard: wg0: Could not create IPv4 socket [ 713.721007][T15855] wireguard: wg1: Could not create IPv4 socket [ 713.740365][T15855] wireguard: wg2: Could not create IPv4 socket [ 713.791811][ T5920] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 714.006924][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 714.025929][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.257192][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 714.478460][ T5920] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 714.488426][ T5920] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 714.526888][ T29] audit: type=1400 audit(1730433142.842:1658): avc: denied { mounton } for pid=16116 comm="syz.0.2025" path="/481/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 714.528577][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.680871][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 714.700031][ T5920] usb 3-1: SerialNumber: syz [ 714.720901][ T29] audit: type=1400 audit(1730433143.022:1659): avc: denied { mounton } for pid=16121 comm="syz.3.2026" path="/440/file0" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 714.809533][ T5920] cdc_acm 3-1:1.0: skipping garbage [ 714.814951][ T5920] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 715.721535][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 715.728696][T16143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.745024][T16143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.488201][ T5900] usb 3-1: USB disconnect, device number 96 [ 716.518839][T16162] syz.3.2030: attempt to access beyond end of device [ 716.518839][T16162] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 716.536170][T16162] hpfs: hpfs_map_sector(): read error [ 716.545266][T16163] syz.3.2030: attempt to access beyond end of device [ 716.545266][T16163] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 716.563727][T16163] hpfs: hpfs_map_sector(): read error [ 716.571757][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.747627][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.832846][ T29] audit: type=1400 audit(1730433145.152:1660): avc: denied { write } for pid=16157 comm="syz.3.2030" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 717.156925][ T29] audit: type=1400 audit(1730433145.472:1661): avc: denied { mounton } for pid=16182 comm="syz.2.2033" path="/404/bus" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 717.210853][ T5920] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 717.330875][ T5829] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 717.360790][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 717.373805][ T5920] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 717.386003][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.395191][ T5920] usb 5-1: Product: syz [ 717.399548][ T5920] usb 5-1: Manufacturer: syz [ 717.407361][ T5920] usb 5-1: SerialNumber: syz [ 717.423407][ T5920] usb 5-1: config 0 descriptor?? [ 717.470846][ T5900] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 717.494205][ T5829] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 717.633784][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.648677][ T5900] usb 3-1: config 0 has no interfaces? [ 717.656278][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 717.672207][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.869452][ T5900] usb 3-1: config 0 descriptor?? [ 718.078746][ T5900] usb 3-1: USB disconnect, device number 97 [ 718.088146][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.096839][ T5829] usb 4-1: Product: syz [ 718.535018][ T5900] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 718.703041][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.710826][ T5920] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 718.718603][ T5900] usb 3-1: config 0 has no interfaces? [ 718.722115][ T5920] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 718.726143][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 718.735636][ T5829] usb 4-1: Manufacturer: syz [ 718.754675][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.760733][ T5829] usb 4-1: SerialNumber: syz [ 718.766262][ T5900] usb 3-1: config 0 descriptor?? [ 718.777673][ T5829] usb 4-1: config 0 descriptor?? [ 718.785828][ T5829] gspca_main: kinect-2.14.0 probing 045e:02bf [ 718.838509][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.847428][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.859409][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.868585][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.891351][T16216] ntfs3(nullb0): Primary boot signature is not NTFS. [ 718.898597][T16216] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 719.082460][ T5900] usb 4-1: USB disconnect, device number 100 [ 719.347785][ T5829] usb 3-1: USB disconnect, device number 98 [ 719.379671][ T29] audit: type=1400 audit(1730433147.692:1662): avc: denied { listen } for pid=16243 comm="syz.2.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 719.644735][T16251] netlink: 'syz.0.2038': attribute type 3 has an invalid length. [ 719.670714][T16251] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2038'. [ 719.820144][ T5900] usb 5-1: USB disconnect, device number 103 [ 719.949331][ T29] audit: type=1326 audit(1730433148.262:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.4.2040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc40d7e719 code=0x0 [ 720.206481][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.227998][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.358195][T11556] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 720.765280][T16283] hfs: can't find a HFS filesystem on dev nullb0 [ 720.865196][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 720.880900][T11556] usb 5-1: Using ep0 maxpacket: 32 [ 720.903779][T11556] usb 5-1: unable to get BOS descriptor or descriptor too short [ 720.916796][T11556] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 720.925264][T11556] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 720.936133][T11556] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 720.945249][T11556] usb 5-1: config 128 has no interface number 0 [ 720.951573][T11556] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.961716][T11556] usb 5-1: config 128 interface 127 has no altsetting 0 [ 720.974472][T11556] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 720.983742][T11556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.995509][T11556] usb 5-1: Product: syz [ 720.999703][T11556] usb 5-1: Manufacturer: syz [ 721.004364][T11556] usb 5-1: SerialNumber: syz [ 721.248248][T11556] usb 5-1: USB disconnect, device number 104 [ 722.433312][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.534110][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 722.556751][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.910853][ T5829] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 722.984282][ T8] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 723.037117][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 723.049167][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 723.057456][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 723.066707][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 723.074642][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 723.083490][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 723.104628][T16332] Failed to initialize the IGMP autojoin socket (err -2) [ 723.120861][T11556] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 723.151082][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 723.158670][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.170814][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 723.179021][ T8] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 723.186251][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.187341][ T8] usb 4-1: config 0 has no interface number 0 [ 723.203492][ T8] usb 4-1: config 0 interface 111 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 723.215065][ T8] usb 4-1: config 0 interface 111 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 723.220789][ T5829] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 723.227141][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=e2.53 [ 723.243934][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.254037][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.260114][ T8] usb 4-1: Product: syz [ 723.272253][ T8] usb 4-1: Manufacturer: syz [ 723.273685][ T5829] usb 5-1: config 0 descriptor?? [ 723.281975][ T8] usb 4-1: SerialNumber: syz [ 723.292116][T11556] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 723.301279][T11556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.312984][ T8] usb 4-1: config 0 descriptor?? [ 723.326185][ T8] usbtouchscreen 4-1:0.111: probe with driver usbtouchscreen failed with error -12 [ 723.338842][T11556] pwc: Logitech ViewPort AV 100 webcam detected. [ 723.584074][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 723.693047][ T5829] mcp2200 0003:04D8:00DF.0019: item fetching failed at offset 2/5 [ 723.702698][ T5829] mcp2200 0003:04D8:00DF.0019: can't parse reports [ 723.709300][ T5829] mcp2200 0003:04D8:00DF.0019: probe with driver mcp2200 failed with error -22 [ 723.793827][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 723.810813][T16420] IPVS: Unknown mcast interface: vcan0 [ 723.830595][T16420] gretap1: entered promiscuous mode [ 723.835927][T16420] gretap1: entered allmulticast mode [ 723.867642][T16332] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 723.887609][T16332] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 723.913636][T16332] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 724.004810][ T29] audit: type=1400 audit(1730433152.312:1664): avc: denied { setattr } for pid=16307 comm="syz.4.2047" name="CAN_RAW" dev="sockfs" ino=53017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 724.027708][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.129242][T16332] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 724.483060][T11556] pwc: recv_control_msg error -32 req 02 val 2b00 [ 724.513501][T11556] pwc: recv_control_msg error -71 req 02 val 2700 [ 724.523380][T11556] pwc: recv_control_msg error -71 req 04 val 1600 [ 724.532596][T11556] pwc: recv_control_msg error -71 req 02 val 2c00 [ 724.540140][T11556] pwc: recv_control_msg error -71 req 04 val 1000 [ 724.556166][T11556] pwc: recv_control_msg error -71 req 04 val 1300 [ 724.571362][T11556] pwc: recv_control_msg error -71 req 04 val 1400 [ 724.582197][T11556] pwc: recv_control_msg error -71 req 02 val 2000 [ 724.589036][T11556] pwc: recv_control_msg error -71 req 02 val 2100 [ 724.597035][T11556] pwc: recv_control_msg error -71 req 06 val 0600 [ 724.604616][T11556] pwc: recv_control_msg error -71 req 04 val 1500 [ 724.612199][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.622319][T11556] pwc: recv_control_msg error -71 req 02 val 2500 [ 724.632202][T11556] pwc: recv_control_msg error -71 req 02 val 2400 [ 724.638782][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.647770][T11556] pwc: recv_control_msg error -71 req 02 val 2600 [ 724.658407][T11556] pwc: recv_control_msg error -71 req 02 val 2900 [ 724.663985][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.670978][T11556] pwc: recv_control_msg error -71 req 02 val 2800 [ 724.680546][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.690757][T11556] pwc: recv_control_msg error -71 req 04 val 1100 [ 724.700068][T11556] pwc: recv_control_msg error -71 req 04 val 1200 [ 724.710345][T11556] pwc: Registered as video103. [ 724.716840][T11556] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 724.733678][T11556] usb 3-1: USB disconnect, device number 99 [ 724.924402][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.936076][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.947011][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.957699][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.969832][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.981220][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.991286][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.001887][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.015387][T16332] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 725.033321][T16332] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 725.051292][T16332] wireguard: wg0: Could not create IPv4 socket [ 725.059018][T16332] wireguard: wg1: Could not create IPv4 socket [ 725.066959][T16332] wireguard: wg2: Could not create IPv4 socket [ 725.101308][T11370] Bluetooth: hci2: command tx timeout [ 725.336997][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2055'. [ 725.408190][T11556] usb 4-1: USB disconnect, device number 101 [ 725.523684][ T5871] usb 5-1: USB disconnect, device number 105 [ 725.531433][T16548] MTD: Couldn't look up 'mountinfo': -2 [ 725.617142][T16561] Failed to initialize the IGMP autojoin socket (err -2) [ 725.673822][T16564] Failed to initialize the IGMP autojoin socket (err -2) [ 726.238615][ T54] Bluetooth: hci2: sending frame failed (-49) [ 726.247759][T11370] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 726.625790][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 726.660552][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 727.424924][ T29] audit: type=1326 audit(1730433155.722:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.3.2066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x0 [ 727.447894][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.383839][ T5920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 730.382197][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.395190][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.509592][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 731.800873][T16693] syz.3.2075[16693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.800966][T16693] syz.3.2075[16693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.812657][T16693] syz.3.2075[16693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.825762][T16693] IPVS: Unknown mcast interface: vcan0 [ 732.278067][T16731] netlink: 'syz.2.2087': attribute type 4 has an invalid length. [ 732.389760][ T1146] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 732.402028][ T5920] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 732.592622][ T5920] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 732.624330][ T5920] usb 5-1: config 0 has no interface number 0 [ 732.631417][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=0901, bcdDevice=84.ec [ 732.673989][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.723683][ T5920] usb 5-1: config 0 descriptor?? [ 732.731307][ T5920] gspca_main: spca500-2.14.0 probing 046d:0901 [ 732.969451][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.001045][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.018368][ T5829] usb 5-1: USB disconnect, device number 107 [ 733.030814][ T5920] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 733.185127][ T5920] usb 3-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=b5.55 [ 733.206091][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.214987][ T5920] usb 3-1: Product: syz [ 733.219241][ T5920] usb 3-1: Manufacturer: syz [ 733.223920][ T5920] usb 3-1: SerialNumber: syz [ 733.231362][ T5920] usb 3-1: config 0 descriptor?? [ 733.239791][ T5920] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 733.643150][ T5920] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 733.847653][T16744] futex_wake_op: syz.2.2088 tries to shift op by 144; fix this program [ 733.856814][T16744] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 733.864581][T16744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2088'. [ 733.987407][T11556] usb 3-1: USB disconnect, device number 100 [ 734.750800][T16829] binder: 16826:16829 ioctl 400c620e 20000140 returned -22 [ 736.305180][T16864] hub 2-0:1.0: USB hub found [ 736.311352][T16864] hub 2-0:1.0: 1 port detected [ 736.378604][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.396362][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.414003][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.547277][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.559253][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 736.839115][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.860937][T16859] Failed to initialize the IGMP autojoin socket (err -2) [ 737.181805][ T29] audit: type=1326 audit(1730433164.832:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.3.2097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1dc17e719 code=0x0 [ 737.451451][ T29] audit: type=1400 audit(1730433165.762:1667): avc: denied { bind } for pid=16888 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 737.513841][ T29] audit: type=1400 audit(1730433165.832:1668): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.515332][ T5829] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 737.540148][ T29] audit: type=1400 audit(1730433165.832:1669): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.580940][T16910] batadv_slave_1: entered promiscuous mode [ 737.605988][ T29] audit: type=1400 audit(1730433165.832:1670): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.721073][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 737.730235][T16909] batadv_slave_1: left promiscuous mode [ 737.740707][ T5829] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 737.760904][ T5829] usb 4-1: config 0 has no interface number 0 [ 737.767076][ T5829] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 737.788388][ T5829] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 737.800005][ T5829] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 737.809944][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 737.822404][ T5829] usb 4-1: Product: syz [ 737.827568][ T5829] usb 4-1: SerialNumber: syz [ 737.834482][ T5829] usb 4-1: config 0 descriptor?? [ 737.842370][ T5829] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 737.853022][ T5829] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input45 [ 738.037751][T11556] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 738.081162][ T5871] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 738.097392][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 738.141565][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 738.212155][T11556] usb 3-1: Using ep0 maxpacket: 32 [ 738.219004][T11556] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 738.228239][T11556] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 738.237445][T11556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.249455][T11556] usb 3-1: config 0 descriptor?? [ 738.252143][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.281807][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.298295][ T5871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.310358][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.332965][ T5871] usb 5-1: config 0 descriptor?? [ 738.375374][T16859] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 738.397904][T16859] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 738.416056][T16859] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 738.431220][T16859] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 738.469394][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.469950][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.474161][ T5900] usb 3-1: USB disconnect, device number 101 [ 738.622154][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 738.622492][ T5829] usb 4-1: USB disconnect, device number 102 [ 738.629122][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 738.650758][ T5829] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 739.001941][T16920] syz.2.2105 (16920) used greatest stack depth: 20448 bytes left [ 739.053308][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.075569][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.100843][ T54] Bluetooth: hci2: command tx timeout [ 739.480726][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.495268][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.523771][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.567517][ T29] audit: type=1400 audit(1730433167.862:1671): avc: denied { ioctl } for pid=17057 comm="syz.2.2111" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 739.593041][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.619644][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.640734][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.654164][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.668151][T16859] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 739.689481][T16859] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 739.691038][T17058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 739.714242][T16859] wireguard: wg0: Could not create IPv4 socket [ 739.715613][T17058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 739.724048][T16859] wireguard: wg1: Could not create IPv4 socket [ 739.729717][T17058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 739.735155][T16859] wireguard: wg2: Could not create IPv4 socket [ 739.833981][T17058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 739.921580][T17067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.936558][T17067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.480544][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2116'. [ 740.590002][T17111] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 740.600015][T17111] wlan1: mtu less than device minimum [ 740.606091][T17111] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 740.619149][T17112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.649779][T17112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.703952][T17112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.722224][T17112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.869775][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 740.877348][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 740.887333][ T5871] usb 5-1: USB disconnect, device number 108 [ 740.973777][T17136] Dev loop7: unable to read RDB block 10 [ 740.982417][T17137] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 740.982663][T17136] loop7: unable to read partition table [ 740.992290][T17137] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 741.000176][T17136] loop7: partition table beyond EOD, truncated [ 741.015933][T17136] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 741.065570][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 741.120804][ T5900] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 741.270783][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 741.277257][ T5900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.289170][ T5900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 741.298961][ T5900] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 741.309054][ T5900] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 741.322943][ T5900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.332248][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 741.340291][ T5900] usb 3-1: SerialNumber: syz [ 741.349721][ T5900] cdc_acm 3-1:1.0: skipping garbage [ 741.355116][ T5900] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 741.742137][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 742.088888][ T5871] usb 3-1: USB disconnect, device number 102 [ 742.552893][ T5900] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 743.337015][ T5900] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 743.349370][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.357820][ T5900] usb 5-1: Product: syz [ 743.372367][ T5900] usb 5-1: Manufacturer: syz [ 743.377009][ T5900] usb 5-1: SerialNumber: syz [ 743.385531][ T5900] usb 5-1: config 0 descriptor?? [ 743.393039][ T5900] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 743.471513][T17180] 9pnet: Could not find request transport: ld [ 743.764408][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.794720][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.876540][ T5900] sonixb 5-1:0.0: Error reading register 00: -71 [ 743.885633][ T5900] usb 5-1: USB disconnect, device number 109 [ 743.901827][T11442] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 744.010738][ T8] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 744.216305][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 744.255771][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.359577][ T8] usb 4-1: config 0 descriptor?? [ 744.533889][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2134'. [ 744.893169][ T8] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 745.296393][ T8] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 745.512411][ T8] usb 4-1: USB disconnect, device number 103 [ 746.790929][ T8] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 746.923597][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.936022][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.945380][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.953352][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.961886][T11370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 746.969231][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.980929][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 747.037236][T17265] Failed to initialize the IGMP autojoin socket (err -2) [ 747.108321][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.131429][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 747.140162][ T8] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 747.311802][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 747.319418][ T8] usb usb5-port1: attempt power cycle [ 747.325621][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 747.345901][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.363534][ T9] usb 4-1: config 0 descriptor?? [ 747.519562][T17316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.545478][T17316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.681009][ T8] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 747.712321][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 747.788890][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 747.853533][ T8] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 747.885758][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 747.896106][ T8] usb usb5-port1: unable to enumerate USB device [ 747.908600][T17265] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 747.926557][T17265] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 747.945390][T17265] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 747.961102][T17265] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 748.198149][ T9] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 748.650514][T17423] Failed to initialize the IGMP autojoin socket (err -2) [ 748.684209][ T9] usb 4-1: USB disconnect, device number 104 [ 748.700308][T17428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.768111][T17428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.868082][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.884256][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.899104][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.909886][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.922861][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.933578][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.944019][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.954998][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.968017][T17265] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 748.986793][T17265] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 749.005348][T17265] wireguard: wg0: Could not create IPv4 socket [ 749.014183][T17265] wireguard: wg1: Could not create IPv4 socket [ 749.020950][T11370] Bluetooth: hci2: command tx timeout [ 749.022508][T17265] wireguard: wg2: Could not create IPv4 socket [ 749.033601][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 749.046261][ T29] audit: type=1400 audit(1730433177.362:1672): avc: denied { module_load } for pid=17427 comm="syz.2.2149" path="/sys/power/wakeup_count" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 749.184177][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2150'. [ 749.259130][T17464] input: syz0 as /devices/virtual/input/input46 [ 750.650488][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2155'. [ 751.224702][T17501] FAULT_INJECTION: forcing a failure. [ 751.224702][T17501] name failslab, interval 1, probability 0, space 0, times 0 [ 751.238591][T17501] CPU: 1 UID: 0 PID: 17501 Comm: syz.2.2157 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 751.249365][T17501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 751.259408][T17501] Call Trace: [ 751.262674][T17501] [ 751.265588][T17501] dump_stack_lvl+0x16c/0x1f0 [ 751.270280][T17501] should_fail_ex+0x497/0x5b0 [ 751.274944][T17501] ? fs_reclaim_acquire+0xae/0x150 [ 751.280040][T17501] should_failslab+0xc2/0x120 [ 751.284718][T17501] __kmalloc_cache_noprof+0x6b/0x300 [ 751.290009][T17501] ? alloc_pipe_info+0x10e/0x590 [ 751.294966][T17501] alloc_pipe_info+0x10e/0x590 [ 751.299743][T17501] splice_direct_to_actor+0x793/0xa40 [ 751.305135][T17501] ? __pfx_direct_splice_actor+0x10/0x10 [ 751.310785][T17501] ? inode_has_perm+0x16f/0x1d0 [ 751.315660][T17501] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 751.321573][T17501] ? __pfx_file_has_perm+0x10/0x10 [ 751.326710][T17501] do_splice_direct+0x178/0x250 [ 751.330779][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 751.331567][T17501] ? __pfx_do_splice_direct+0x10/0x10 [ 751.344535][T17501] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 751.350415][T17501] ? bpf_lsm_file_permission+0x9/0x10 [ 751.355769][T17501] ? security_file_permission+0x71/0x210 [ 751.361390][T17501] do_sendfile+0xb0c/0xe40 [ 751.365801][T17501] ? __pfx_do_sendfile+0x10/0x10 [ 751.370731][T17501] ? __fget_files+0x244/0x3f0 [ 751.375404][T17501] __x64_sys_sendfile64+0x1da/0x220 [ 751.380599][T17501] ? ksys_write+0x1ad/0x260 [ 751.385091][T17501] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 751.390827][T17501] do_syscall_64+0xcd/0x250 [ 751.395342][T17501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.401223][T17501] RIP: 0033:0x7fb06477e719 [ 751.405620][T17501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.425216][T17501] RSP: 002b:00007fb0655e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 751.433613][T17501] RAX: ffffffffffffffda RBX: 00007fb064935f80 RCX: 00007fb06477e719 [ 751.441573][T17501] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 751.449530][T17501] RBP: 00007fb0655e8090 R08: 0000000000000000 R09: 0000000000000000 [ 751.457489][T17501] R10: 000000000000ee33 R11: 0000000000000246 R12: 0000000000000001 [ 751.465454][T17501] R13: 0000000000000000 R14: 00007fb064935f80 R15: 00007ffcdede2508 [ 751.473426][T17501] [ 751.476437][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.491895][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 751.508796][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.523396][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.532546][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 751.559440][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.580645][ T9] usb 4-1: config 0 descriptor?? [ 751.819258][T17527] netlink: 'syz.2.2164': attribute type 11 has an invalid length. [ 752.404605][ T9] usb 4-1: USB disconnect, device number 105 [ 752.434396][T17536] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2165'. [ 752.444076][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 752.546917][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 752.556076][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 752.816505][T17541] Failed to initialize the IGMP autojoin socket (err -2) [ 753.380782][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 753.415523][T17555] FAULT_INJECTION: forcing a failure. [ 753.415523][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 753.451396][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.2.2169 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 753.462185][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 753.472234][T17555] Call Trace: [ 753.475518][T17555] [ 753.478455][T17555] dump_stack_lvl+0x16c/0x1f0 [ 753.483160][T17555] should_fail_ex+0x497/0x5b0 [ 753.487847][T17555] ? fs_reclaim_acquire+0xae/0x150 [ 753.492969][T17555] should_failslab+0xc2/0x120 [ 753.497662][T17555] __kmalloc_noprof+0xcb/0x400 [ 753.502441][T17555] ? kasan_save_track+0x14/0x30 [ 753.507314][T17555] alloc_pipe_info+0x1ec/0x590 [ 753.512091][T17555] splice_direct_to_actor+0x793/0xa40 [ 753.517482][T17555] ? __pfx_direct_splice_actor+0x10/0x10 [ 753.523138][T17555] ? inode_has_perm+0x16f/0x1d0 [ 753.528008][T17555] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 753.533915][T17555] ? __pfx_file_has_perm+0x10/0x10 [ 753.539047][T17555] do_splice_direct+0x178/0x250 [ 753.543915][T17555] ? __pfx_do_splice_direct+0x10/0x10 [ 753.549299][T17555] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 753.555202][T17555] ? bpf_lsm_file_permission+0x9/0x10 [ 753.560567][T17555] ? security_file_permission+0x71/0x210 [ 753.566199][T17555] do_sendfile+0xb0c/0xe40 [ 753.570615][T17555] ? __pfx_do_sendfile+0x10/0x10 [ 753.575550][T17555] ? __fget_files+0x244/0x3f0 [ 753.580228][T17555] __x64_sys_sendfile64+0x1da/0x220 [ 753.585416][T17555] ? ksys_write+0x1ad/0x260 [ 753.589911][T17555] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 753.595627][T17555] do_syscall_64+0xcd/0x250 [ 753.600132][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.606021][T17555] RIP: 0033:0x7fb06477e719 [ 753.610424][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.630019][T17555] RSP: 002b:00007fb0655e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.638422][T17555] RAX: ffffffffffffffda RBX: 00007fb064935f80 RCX: 00007fb06477e719 [ 753.646380][T17555] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 753.654338][T17555] RBP: 00007fb0655e8090 R08: 0000000000000000 R09: 0000000000000000 [ 753.662315][T17555] R10: 000000000000ee33 R11: 0000000000000246 R12: 0000000000000001 [ 753.670271][T17555] R13: 0000000000000000 R14: 00007fb064935f80 R15: 00007ffcdede2508 [ 753.678242][T17555] [ 753.813220][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 753.844560][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 753.853782][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 753.863005][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.875905][ T9] usb 4-1: config 0 descriptor?? [ 753.971155][T17572] dlm: no local IP address has been set [ 753.977206][T17572] dlm: cannot start dlm midcomms -107 [ 754.144700][ T6012] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 754.531310][ T8] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 754.558485][ T9] usb 4-1: USB disconnect, device number 106 [ 754.748527][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 754.758097][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.874550][ T8] usb 3-1: config 0 descriptor?? [ 754.884417][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 754.971640][ T29] audit: type=1400 audit(1730433183.282:1673): avc: denied { append } for pid=17589 comm="syz.4.2176" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 755.092280][ T8] gspca_sn9c2028: read1 error -32 [ 755.416096][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.416220][ T8] gspca_sn9c2028: read1 error -32 [ 755.505759][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.600887][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.629897][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.650959][ T5871] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 755.721536][T17623] FAULT_INJECTION: forcing a failure. [ 755.721536][T17623] name failslab, interval 1, probability 0, space 0, times 0 [ 755.749196][T17623] CPU: 1 UID: 0 PID: 17623 Comm: syz.3.2181 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 755.759975][T17623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 755.770020][T17623] Call Trace: [ 755.773286][T17623] [ 755.776201][T17623] dump_stack_lvl+0x16c/0x1f0 [ 755.780869][T17623] should_fail_ex+0x497/0x5b0 [ 755.785525][T17623] ? fs_reclaim_acquire+0xae/0x150 [ 755.790617][T17623] should_failslab+0xc2/0x120 [ 755.795284][T17623] __kmalloc_noprof+0xcb/0x400 [ 755.800044][T17623] copy_splice_read+0x1a8/0xb90 [ 755.804881][T17623] ? look_up_lock_class+0x6b/0x150 [ 755.809977][T17623] ? __pfx_copy_splice_read+0x10/0x10 [ 755.815339][T17623] ? __pfx_register_lock_class+0x10/0x10 [ 755.820961][T17623] ? __pfx_copy_splice_read+0x10/0x10 [ 755.826316][T17623] do_splice_read+0x282/0x370 [ 755.830978][T17623] splice_direct_to_actor+0x2a4/0xa40 [ 755.836332][T17623] ? __pfx_direct_splice_actor+0x10/0x10 [ 755.841949][T17623] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 755.847821][T17623] ? __pfx_file_has_perm+0x10/0x10 [ 755.852941][T17623] do_splice_direct+0x178/0x250 [ 755.857778][T17623] ? __pfx_do_splice_direct+0x10/0x10 [ 755.863135][T17623] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 755.869010][T17623] ? bpf_lsm_file_permission+0x9/0x10 [ 755.874361][T17623] ? security_file_permission+0x71/0x210 [ 755.879978][T17623] do_sendfile+0xb0c/0xe40 [ 755.884385][T17623] ? __pfx_do_sendfile+0x10/0x10 [ 755.889308][T17623] ? __fget_files+0x244/0x3f0 [ 755.893977][T17623] __x64_sys_sendfile64+0x1da/0x220 [ 755.899158][T17623] ? ksys_write+0x1ad/0x260 [ 755.903659][T17623] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 755.909381][T17623] do_syscall_64+0xcd/0x250 [ 755.913907][T17623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.919833][T17623] RIP: 0033:0x7fc1dc17e719 [ 755.924238][T17623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.944013][T17623] RSP: 002b:00007fc1dcf31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.952440][T17623] RAX: ffffffffffffffda RBX: 00007fc1dc335f80 RCX: 00007fc1dc17e719 [ 755.960421][T17623] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 755.968382][T17623] RBP: 00007fc1dcf31090 R08: 0000000000000000 R09: 0000000000000000 [ 755.976338][T17623] R10: 000000000000ee33 R11: 0000000000000246 R12: 0000000000000001 [ 755.984294][T17623] R13: 0000000000000000 R14: 00007fc1dc335f80 R15: 00007ffc06f16088 [ 755.992263][T17623] [ 756.030810][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 756.041513][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.056924][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 756.077611][ T5871] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 756.087115][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.103587][ T5871] usb 5-1: config 0 descriptor?? [ 756.321468][ T5871] usb 5-1: USB disconnect, device number 114 [ 756.350906][ T5829] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 756.523323][ T5829] usb 4-1: config 0 has no interfaces? [ 756.541837][ T5829] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.00 [ 756.551574][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.559702][ T5829] usb 4-1: Product: syz [ 756.580724][ T5829] usb 4-1: Manufacturer: syz [ 756.595777][ T5829] usb 4-1: SerialNumber: syz [ 756.608402][ T5829] usb 4-1: config 0 descriptor?? [ 756.621467][T17626] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 756.773832][T11556] usb 3-1: USB disconnect, device number 103 [ 756.843530][ T5829] usb 4-1: USB disconnect, device number 107 [ 758.685772][T17673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.698655][T17673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.723868][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.796800][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 758.814078][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.825389][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.837536][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.880283][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 758.891334][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.045277][T17676] Failed to initialize the IGMP autojoin socket (err -2) [ 759.250915][ T8] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 759.275706][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 759.517749][T17718] FAULT_INJECTION: forcing a failure. [ 759.517749][T17718] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 759.531334][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.2.2192 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 759.542119][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 759.552185][T17718] Call Trace: [ 759.555475][T17718] [ 759.558408][T17718] dump_stack_lvl+0x16c/0x1f0 [ 759.563100][T17718] should_fail_ex+0x497/0x5b0 [ 759.567765][T17718] ? fs_reclaim_acquire+0xae/0x150 [ 759.572880][T17718] should_fail_alloc_page+0xe7/0x130 [ 759.578181][T17718] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 759.584340][T17718] __alloc_pages_noprof+0x190/0x25a0 [ 759.589635][T17718] ? copy_splice_read+0x1a8/0xb90 [ 759.594655][T17718] ? stack_trace_save+0x95/0xd0 [ 759.599494][T17718] ? __pfx_stack_trace_save+0x10/0x10 [ 759.604854][T17718] ? stack_depot_save_flags+0x28/0x8f0 [ 759.610298][T17718] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 759.616006][T17718] ? copy_splice_read+0x1a8/0xb90 [ 759.621027][T17718] ? kasan_save_stack+0x33/0x60 [ 759.625903][T17718] ? kasan_save_track+0x14/0x30 [ 759.630745][T17718] ? __kasan_kmalloc+0xaa/0xb0 [ 759.635512][T17718] ? __kmalloc_noprof+0x1e8/0x400 [ 759.640521][T17718] ? copy_splice_read+0x1a8/0xb90 [ 759.645532][T17718] ? do_splice_read+0x282/0x370 [ 759.650384][T17718] ? splice_direct_to_actor+0x2a4/0xa40 [ 759.655929][T17718] alloc_pages_bulk_noprof+0x77c/0x1110 [ 759.661480][T17718] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 759.667454][T17718] ? trace_kmalloc+0x2d/0xe0 [ 759.672042][T17718] ? __kmalloc_noprof+0x207/0x400 [ 759.677075][T17718] copy_splice_read+0x1e3/0xb90 [ 759.681926][T17718] ? look_up_lock_class+0x6b/0x150 [ 759.687030][T17718] ? __pfx_copy_splice_read+0x10/0x10 [ 759.692403][T17718] ? __pfx_register_lock_class+0x10/0x10 [ 759.698052][T17718] ? __pfx_copy_splice_read+0x10/0x10 [ 759.703417][T17718] do_splice_read+0x282/0x370 [ 759.708085][T17718] splice_direct_to_actor+0x2a4/0xa40 [ 759.713453][T17718] ? __pfx_direct_splice_actor+0x10/0x10 [ 759.719104][T17718] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 759.724993][T17718] ? __pfx_file_has_perm+0x10/0x10 [ 759.730094][T17718] do_splice_direct+0x178/0x250 [ 759.734954][T17718] ? __pfx_do_splice_direct+0x10/0x10 [ 759.740330][T17718] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 759.746210][T17718] ? bpf_lsm_file_permission+0x9/0x10 [ 759.751573][T17718] ? security_file_permission+0x71/0x210 [ 759.757224][T17718] do_sendfile+0xb0c/0xe40 [ 759.761634][T17718] ? __pfx_do_sendfile+0x10/0x10 [ 759.766560][T17718] ? __fget_files+0x244/0x3f0 [ 759.771248][T17718] __x64_sys_sendfile64+0x1da/0x220 [ 759.776450][T17718] ? ksys_write+0x1ad/0x260 [ 759.780942][T17718] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 759.786648][T17718] do_syscall_64+0xcd/0x250 [ 759.791153][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.797054][T17718] RIP: 0033:0x7fb06477e719 [ 759.801453][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.821052][T17718] RSP: 002b:00007fb0655e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.829452][T17718] RAX: ffffffffffffffda RBX: 00007fb064935f80 RCX: 00007fb06477e719 [ 759.837431][T17718] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 759.845405][T17718] RBP: 00007fb0655e8090 R08: 0000000000000000 R09: 0000000000000000 [ 759.853381][T17718] R10: 000000000000ee33 R11: 0000000000000246 R12: 0000000000000001 [ 759.861359][T17718] R13: 0000000000000000 R14: 00007fb064935f80 R15: 00007ffcdede2508 [ 759.869335][T17718] [ 759.904669][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 759.923902][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 759.938758][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.953863][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.962412][ T8] usb 5-1: Product: ﬊闆Ὺ덛릋슳笈裟㇛綩惔猄﯉紦૽氎費‚ᗩ協賘봺뭵ꇸ蟨٦˂ݤ뗴ᾶ삌榣녗穂ೢ苄띴휖āḜܩ팘ғᾼ剋뻇쭚븕瑤嗹䧁쪧陓ꬥ혱㮁ᑝ燞쉤撼朏븃駑肌ꓱՠ骑쌓䏓鼐쉢䠍췽끵눿퍜鿼 [ 759.996782][T17726] bridge2: entered promiscuous mode [ 760.003330][T17726] bridge2: entered allmulticast mode [ 760.008923][ T8] usb 5-1: Manufacturer: ⠊ [ 760.014106][ T8] usb 5-1: SerialNumber: syz [ 760.074297][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.085312][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.179963][T17758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.196423][T17758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.231280][ T5871] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 760.259470][T11556] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 760.280501][ T8] cdc_ncm 5-1:1.0: bind() failure [ 760.304811][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 760.313434][ T8] cdc_ncm 5-1:1.1: bind() failure [ 760.323544][ T8] usb 5-1: USB disconnect, device number 115 [ 760.384156][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.396832][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.427601][ T5871] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 760.437164][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.445673][T11556] usb 4-1: Using ep0 maxpacket: 16 [ 760.462294][ T5871] usb 3-1: config 0 descriptor?? [ 760.480022][T11556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.508339][T11556] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.542910][T11556] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.569168][T11556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.583133][T17676] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 760.602301][T11556] usb 4-1: config 0 descriptor?? [ 760.634656][T17676] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 760.661376][T17676] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 760.698249][T17676] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 760.837847][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.868570][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.885796][ T5871] hid (null): bogus close delimiter [ 761.020903][ T54] Bluetooth: hci2: command tx timeout [ 761.097081][ T5871] usb 3-1: string descriptor 0 read error: -22 [ 761.126546][T11556] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input47 [ 761.180960][ T5920] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 761.228114][T11556] microsoft 0003:045E:07DA.001B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 761.315524][T17734] openvswitch: netlink: Actions may not be safe on all matching packets [ 761.340834][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 761.362304][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.373828][ T5871] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input48 [ 761.391465][ T5920] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.402501][ T5920] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 761.413210][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.451155][ T5920] usb 5-1: config 0 descriptor?? [ 761.478733][ T5871] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input49 [ 761.528524][ T5871] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input50 [ 761.561081][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.574326][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.585730][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.599057][ T5871] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input51 [ 761.611882][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.628186][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.640556][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.651501][ T5871] uclogic 0003:256C:006D.001A: input,hidraw2: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 761.671047][ T5871] usb 3-1: USB disconnect, device number 104 [ 761.681354][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.693069][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.706459][ T51] usb 5-1: USB disconnect, device number 116 [ 761.724523][T17676] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 761.750534][T17676] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 761.770157][T17676] wireguard: wg0: Could not create IPv4 socket [ 761.789664][T17676] wireguard: wg1: Could not create IPv4 socket [ 761.799486][T17676] wireguard: wg2: Could not create IPv4 socket [ 761.939548][T17735] team0: entered promiscuous mode [ 761.945736][T17735] team_slave_0: entered promiscuous mode [ 761.951998][T17735] team_slave_1: entered promiscuous mode [ 761.960481][T17735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.976579][T17735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.437060][T17940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 762.448119][T17940] overlayfs: maximum fs stacking depth exceeded [ 763.093023][T17725] team0: left promiscuous mode [ 763.097816][T17725] team_slave_0: left promiscuous mode [ 763.149643][T17725] team_slave_1: left promiscuous mode [ 763.210987][ T29] audit: type=1400 audit(1730433191.492:1674): avc: denied { setopt } for pid=17955 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 763.268782][ T8] usb 4-1: USB disconnect, device number 108 [ 763.568071][ T29] audit: type=1400 audit(1730433191.882:1675): avc: denied { rename } for pid=17978 comm="syz.3.2203" name="file0" dev="tmpfs" ino=2660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 763.656534][ T29] audit: type=1400 audit(1730433191.972:1676): avc: denied { getopt } for pid=17984 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 764.507038][T18003] netlink: 'syz.4.2206': attribute type 10 has an invalid length. [ 764.521390][T18003] bond0: (slave bond_slave_0): Releasing backup interface [ 764.800916][ T51] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 764.970906][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 764.997277][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.017059][ T51] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 765.027000][ T51] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 765.032520][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 765.070127][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.096537][ T51] usb 4-1: config 0 descriptor?? [ 765.259441][T18021] FAULT_INJECTION: forcing a failure. [ 765.259441][T18021] name failslab, interval 1, probability 0, space 0, times 0 [ 765.272805][T18021] CPU: 0 UID: 0 PID: 18021 Comm: syz.4.2211 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 765.283582][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 765.293625][T18021] Call Trace: [ 765.296891][T18021] [ 765.299808][T18021] dump_stack_lvl+0x16c/0x1f0 [ 765.304486][T18021] should_fail_ex+0x497/0x5b0 [ 765.309154][T18021] ? fs_reclaim_acquire+0xae/0x150 [ 765.314263][T18021] should_failslab+0xc2/0x120 [ 765.318931][T18021] __kmalloc_noprof+0xcb/0x400 [ 765.323689][T18021] copy_splice_read+0x1a8/0xb90 [ 765.328533][T18021] ? __pfx_copy_splice_read+0x10/0x10 [ 765.333909][T18021] ? __pfx_copy_splice_read+0x10/0x10 [ 765.339270][T18021] do_splice_read+0x282/0x370 [ 765.343956][T18021] splice_direct_to_actor+0x2a4/0xa40 [ 765.349322][T18021] ? __pfx_direct_splice_actor+0x10/0x10 [ 765.354950][T18021] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 765.360836][T18021] ? __pfx_file_has_perm+0x10/0x10 [ 765.365957][T18021] do_splice_direct+0x178/0x250 [ 765.370799][T18021] ? __pfx_do_splice_direct+0x10/0x10 [ 765.376163][T18021] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 765.382050][T18021] ? bpf_lsm_file_permission+0x9/0x10 [ 765.387409][T18021] ? security_file_permission+0x71/0x210 [ 765.393036][T18021] do_sendfile+0xb0c/0xe40 [ 765.397455][T18021] ? __pfx_do_sendfile+0x10/0x10 [ 765.402385][T18021] ? __fget_files+0x244/0x3f0 [ 765.407059][T18021] __x64_sys_sendfile64+0x1da/0x220 [ 765.412244][T18021] ? ksys_write+0x1ad/0x260 [ 765.416743][T18021] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 765.422462][T18021] do_syscall_64+0xcd/0x250 [ 765.426964][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.432851][T18021] RIP: 0033:0x7efc40d7e719 [ 765.437251][T18021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.456847][T18021] RSP: 002b:00007efc41baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 765.465248][T18021] RAX: ffffffffffffffda RBX: 00007efc40f35f80 RCX: 00007efc40d7e719 [ 765.473209][T18021] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 765.481165][T18021] RBP: 00007efc41baa090 R08: 0000000000000000 R09: 0000000000000000 [ 765.489121][T18021] R10: 000000000000ee33 R11: 0000000000000246 R12: 0000000000000001 [ 765.497078][T18021] R13: 0000000000000000 R14: 00007efc40f35f80 R15: 00007fff47e1c768 [ 765.505046][T18021] [ 765.567960][ T51] usb 4-1: USB disconnect, device number 109 [ 765.655269][T18026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 765.673594][T18026] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 765.681850][T18026] gretap1: entered promiscuous mode [ 765.687274][T18026] gretap1: entered allmulticast mode [ 765.864979][T18047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.875884][T18047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.516035][T18057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.541485][T18057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.810790][ T51] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 766.890833][ T5871] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 766.962444][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 766.973637][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 766.985075][ T51] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 766.994575][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.002882][ T51] usb 3-1: Product: syz [ 767.007049][ T51] usb 3-1: Manufacturer: syz [ 767.011798][ T51] usb 3-1: SerialNumber: syz [ 767.018165][ T51] usb 3-1: config 0 descriptor?? [ 767.026342][ T51] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 767.035015][ T51] usb 3-1: Detected SIO [ 767.039202][ T51] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 767.048116][ T51] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 767.056541][ T5871] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 767.070715][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.082629][ T5871] usb 5-1: config 0 descriptor?? [ 767.222688][T18088] hfs: can't find a HFS filesystem on dev nullb0 [ 767.297866][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 767.324460][ T8] usb 3-1: USB disconnect, device number 105 [ 767.346380][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 767.422466][ T8] ftdi_sio 3-1:0.0: device disconnected [ 767.491977][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 767.515989][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 767.543898][ T9] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 767.566491][ T9] usb 4-1: config 0 has no interface number 0 [ 767.602725][ T9] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 767.656520][ T9] usb 4-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 767.711613][ T9] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 767.723856][ T9] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 767.759754][ T9] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 767.772743][ T9] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 767.789862][ T9] usb 4-1: config 0 interface 122 has no altsetting 0 [ 767.829017][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 767.888893][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.990782][ T9] usb 4-1: Product: syz [ 768.021532][ T9] usb 4-1: Manufacturer: syz [ 768.026173][ T9] usb 4-1: SerialNumber: syz [ 768.061915][ T9] usb 4-1: config 0 descriptor?? [ 768.095799][ T5871] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 768.096157][T18072] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 768.112050][T18072] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 768.306263][ T5871] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 768.326323][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.337417][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.348614][T18072] netlink: 'syz.3.2221': attribute type 10 has an invalid length. [ 768.364549][ T9] pl2303 4-1:0.122: pl2303 converter detected [ 768.373313][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 768.381825][ T9] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 768.390202][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 768.398610][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 768.407088][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 768.415419][ T9] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 768.423860][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 768.432195][ T9] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 768.440390][ T9] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 768.448807][ T9] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 768.457259][ T9] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 768.466655][ T9] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 768.476406][ T9] usb 4-1: USB disconnect, device number 110 [ 768.484713][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 768.492917][ T9] pl2303 4-1:0.122: device disconnected [ 768.525680][ T5871] usb 5-1: USB disconnect, device number 117 [ 770.056472][T18138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.081633][T18138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.298015][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 770.311788][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 770.322709][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 770.577003][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 770.589326][T11370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 770.599823][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.781014][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 770.821942][T18151] Failed to initialize the IGMP autojoin socket (err -2) [ 770.845364][T18162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.854602][T18162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.921787][ T5871] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 771.215891][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 771.226199][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.237284][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.246434][ T5871] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 771.255645][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.806133][ T5871] usb 5-1: config 0 descriptor?? [ 772.063347][T18207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2231'. [ 772.065345][ T5871] usb 5-1: USB disconnect, device number 118 [ 772.434049][T18239] hfs: can't find a HFS filesystem on dev nullb0 [ 772.783402][T11370] Bluetooth: hci2: command tx timeout [ 774.349268][T18151] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 774.443437][T18151] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 774.463369][ T29] audit: type=1400 audit(1730433458.787:1677): avc: denied { append } for pid=18300 comm="syz.2.2240" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 774.511496][T18151] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 774.579050][T18151] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 774.616743][T18315] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 774.651112][T18315] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.2242'. [ 774.669243][T18315] netlink: 'syz.0.2242': attribute type 39 has an invalid length. [ 774.861000][ T5829] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 774.861921][ T54] Bluetooth: hci2: command tx timeout [ 775.020793][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 775.040364][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.079581][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.100940][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.115485][ T5829] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 775.126873][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.750528][ T5829] usb 5-1: config 0 descriptor?? [ 775.846780][T18370] hugetlbfs: Unknown parameter 'nr_indes' [ 775.847337][ T29] audit: type=1400 audit(1730433460.167:1678): avc: denied { remount } for pid=18369 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 775.910113][T18151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.922580][T18151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.933163][T18151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.943925][T18151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.956241][T18151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.968688][T18151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.978569][T18151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.966775][ T5871] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 776.968491][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 777.382967][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 777.399744][T18151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.416026][T18151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 777.442548][T18151] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 777.464322][T18151] wireguard: wg0: Could not create IPv4 socket [ 777.476376][T18151] wireguard: wg1: Could not create IPv4 socket [ 777.485698][T18151] wireguard: wg2: Could not create IPv4 socket [ 777.568078][T18383] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.687853][ T5829] creative-sb0540 0003:041E:3100.001C: No inputs registered, leaving [ 777.721558][ T5829] creative-sb0540 0003:041E:3100.001C: hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 777.740801][ T5829] usb 5-1: USB disconnect, device number 119 [ 777.970897][T11556] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 778.443478][T11556] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 778.452829][T11556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.472518][T11556] usb 3-1: config 0 descriptor?? [ 778.480299][T11556] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 779.076006][T18425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.235681][ T5871] usb 4-1: device descriptor read/all, error -71 [ 779.242972][T18425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.050284][ T29] audit: type=1400 audit(1730433464.367:1679): avc: denied { search } for pid=18449 comm="syz.3.2253" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 780.101055][ T29] audit: type=1400 audit(1730433464.367:1680): avc: denied { write } for pid=18449 comm="syz.3.2253" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 780.140810][ T29] audit: type=1400 audit(1730433464.367:1681): avc: denied { add_name } for pid=18449 comm="syz.3.2253" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 780.180809][ T29] audit: type=1400 audit(1730433464.367:1682): avc: denied { create } for pid=18449 comm="syz.3.2253" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 780.517939][T18464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'. [ 780.531238][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 780.544561][T18466] openvswitch: netlink: Actions may not be safe on all matching packets [ 780.606645][T18466] fuse: Bad value for 'fd' [ 780.615459][T18466] fuse: Bad value for 'fd' [ 780.671759][T11556] usb 3-1: USB disconnect, device number 106 [ 781.126267][T18460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 781.421102][T11556] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 781.555521][ T8] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 781.728653][T11556] usb 3-1: no configurations [ 781.734488][T11556] usb 3-1: can't read configurations, error -22 [ 781.902161][T11556] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 781.918464][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 781.968428][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 781.978300][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.993966][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.183243][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.192561][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.200562][ T8] usb 4-1: Product: syz [ 782.205662][ T8] usb 4-1: Manufacturer: syz [ 782.210519][ T8] usb 4-1: SerialNumber: syz [ 782.215440][T11556] usb 3-1: no configurations [ 782.220044][T11556] usb 3-1: can't read configurations, error -22 [ 782.227887][T11556] usb usb3-port1: attempt power cycle [ 782.541326][T11370] Bluetooth: hci4: command 0x0c1a tx timeout [ 782.621137][T11556] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 782.654115][T11556] usb 3-1: no configurations [ 782.658778][T11556] usb 3-1: can't read configurations, error -22 [ 782.677616][ T8] usb 4-1: 0:2 : does not exist [ 782.850938][T18512] binder: 18509:18512 ioctl c0306201 0 returned -14 [ 782.954418][ T296] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 783.375702][T11556] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 783.402019][T11556] usb 3-1: no configurations [ 783.406679][T11556] usb 3-1: can't read configurations, error -22 [ 783.413560][T11556] usb usb3-port1: unable to enumerate USB device [ 783.846166][ T8] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 783.864590][ T8] usb 4-1: USB disconnect, device number 113 [ 785.803294][T18542] hub 6-0:1.0: USB hub found [ 785.828358][T18542] hub 6-0:1.0: 1 port detected [ 785.952604][ T29] audit: type=1326 audit(1730433470.267:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18536 comm="syz.2.2265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x0 [ 786.003202][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2267'. [ 786.629068][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.640588][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 786.646810][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.656666][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.664666][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.725819][T18583] hfs: unable to parse mount options [ 786.741654][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 786.749350][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.785477][T18574] Failed to initialize the IGMP autojoin socket (err -2) [ 786.946581][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 787.221794][T18571] ceph: No mds server is up or the cluster is laggy [ 787.491993][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 788.140432][T18635] binder: 18629:18635 ioctl c0306201 0 returned -14 [ 788.816969][T11442] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 788.926581][ T54] Bluetooth: hci2: command tx timeout [ 789.449345][T18673] 9pnet_fd: Insufficient options for proto=fd [ 789.491378][T18673] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 789.498981][T18673] Bluetooth: MGMT ver 1.23 [ 790.074426][T18710] zonefs (nullb0) ERROR: Not a zoned block device [ 790.545092][T18710] can: request_module (can-proto-3) failed. [ 790.946594][T18714] overlayfs: missing 'lowerdir' [ 790.951795][ T54] Bluetooth: hci2: command tx timeout [ 791.103462][T18734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1569 sclass=netlink_route_socket pid=18734 comm=syz.2.2285 [ 791.841791][ T29] audit: type=1400 audit(1730433475.587:1684): avc: denied { accept } for pid=18712 comm="syz.4.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 793.020855][ T54] Bluetooth: hci2: command tx timeout [ 793.356750][T18574] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 793.376234][T18574] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 793.397699][T18574] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 793.452870][T18574] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 793.606750][T18801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.709358][ T29] audit: type=1326 audit(2000000001.050:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 794.815566][ T29] audit: type=1326 audit(2000000001.050:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 794.962897][ T29] audit: type=1326 audit(2000000001.050:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.066834][ T29] audit: type=1326 audit(2000000001.050:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.096232][T18574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.118191][ T54] Bluetooth: hci2: command tx timeout [ 795.140679][T18574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.170705][ T29] audit: type=1326 audit(2000000001.050:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.196723][T18574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.226453][T18574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.256843][T18574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.277992][ T29] audit: type=1326 audit(2000000001.050:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.320687][T18574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.347562][T18574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.368347][ T29] audit: type=1326 audit(2000000001.050:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.400722][T18574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.448621][ T29] audit: type=1326 audit(2000000001.050:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 795.517834][ T29] audit: type=1326 audit(2000000001.050:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb06477e719 code=0x7ffc0000 [ 820.700880][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2680 jiffies s: 23765 root: 0x2/. [ 820.712693][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 820.719815][ T19] Sending NMI from CPU 0 to CPUs 1: [ 820.725047][ C1] NMI backtrace for cpu 1 [ 820.725060][ C1] CPU: 1 UID: 0 PID: 18799 Comm: syz.3.2290 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 820.725084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 820.725095][ C1] RIP: 0010:lock_acquire.part.0+0x142/0x380 [ 820.725122][ C1] Code: ad ff ff 48 c7 c7 40 d3 6c 8b 48 83 c4 28 e8 55 70 b8 09 b8 ff ff ff ff 65 0f c1 05 50 dd 97 7e 83 f8 01 0f 85 d0 01 00 00 9c <58> f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 48 b8 00 [ 820.725142][ C1] RSP: 0018:ffffc90000a18be8 EFLAGS: 00000046 [ 820.725158][ C1] RAX: 0000000000000001 RBX: 1ffff9200014317f RCX: 0000000000000001 [ 820.725171][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cd340 RDI: ffffffff8bd1adc0 [ 820.725185][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dc5588 [ 820.725198][ C1] R10: ffffffff96e2ac47 R11: 0000000000000000 R12: 0000000000000000 [ 820.725211][ C1] R13: ffffffff9a9c3c08 R14: 0000000000000000 R15: 0000000000000000 [ 820.725224][ C1] FS: 0000555568eb9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 820.725245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.725259][ C1] CR2: 000000110c346461 CR3: 0000000067b40000 CR4: 00000000003526f0 [ 820.725273][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 820.725285][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 820.725298][ C1] Call Trace: [ 820.725305][ C1] [ 820.725313][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 820.725341][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 820.725372][ C1] ? nmi_handle+0x1a9/0x5c0 [ 820.725393][ C1] ? lock_acquire.part.0+0x142/0x380 [ 820.725413][ C1] ? default_do_nmi+0x6a/0x160 [ 820.725437][ C1] ? exc_nmi+0x170/0x1e0 [ 820.725459][ C1] ? end_repeat_nmi+0xf/0x53 [ 820.725494][ C1] ? lock_acquire.part.0+0x142/0x380 [ 820.725514][ C1] ? lock_acquire.part.0+0x142/0x380 [ 820.725535][ C1] ? lock_acquire.part.0+0x142/0x380 [ 820.725565][ C1] [ 820.725572][ C1] [ 820.725579][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 820.725599][ C1] ? rcu_is_watching+0x12/0xc0 [ 820.725624][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 820.725649][ C1] ? __pfx_lock_release+0x10/0x10 [ 820.725667][ C1] ? debug_object_activate+0x199/0x540 [ 820.725696][ C1] ? lock_acquire+0x2f/0xb0 [ 820.725714][ C1] ? debug_object_activate+0x199/0x540 [ 820.725743][ C1] ? __pfx_advance_sched+0x10/0x10 [ 820.725766][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 820.725792][ C1] ? debug_object_activate+0x199/0x540 [ 820.725819][ C1] debug_object_activate+0x199/0x540 [ 820.725848][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 820.725877][ C1] ? rcu_is_watching+0x12/0xc0 [ 820.725901][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 820.725926][ C1] ? __pfx_advance_sched+0x10/0x10 [ 820.725947][ C1] ? enqueue_hrtimer+0x25/0x3c0 [ 820.725966][ C1] enqueue_hrtimer+0x25/0x3c0 [ 820.725986][ C1] __hrtimer_run_queues+0x903/0xae0 [ 820.726012][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 820.726035][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 820.726067][ C1] hrtimer_interrupt+0x31b/0x800 [ 820.726095][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 820.726118][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 820.726147][ C1] [ 820.726153][ C1] [ 820.726160][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 820.726190][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 820.726213][ C1] Code: a9 0a 00 00 44 8b 0d 57 bf 02 0f 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 79 63 38 00 fb 65 48 8b 1d e0 15 a7 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 820.726231][ C1] RSP: 0018:ffffc9000457f818 EFLAGS: 00000202 [ 820.726246][ C1] RAX: 00000000000016f7 RBX: ffff888063c70000 RCX: 1ffffffff2dc688d [ 820.726261][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd040 RDI: ffffffff8bd1adc0 [ 820.726274][ C1] RBP: ffffc9000457f860 R08: 0000000000000001 R09: fffffbfff2dc558a [ 820.726288][ C1] R10: ffffffff96e2ac57 R11: 0000000000000000 R12: ffff8880b873fca0 [ 820.726302][ C1] R13: ffff88807e5e4880 R14: 0000000000000000 R15: ffff8880b863ee80 [ 820.726322][ C1] ? finish_task_switch.isra.0+0x217/0xcc0 [ 820.726343][ C1] ? __switch_to+0x749/0x1180 [ 820.726369][ C1] __schedule+0xe5d/0x5730 [ 820.726397][ C1] ? __pfx_mark_lock+0x10/0x10 [ 820.726418][ C1] ? __pfx___schedule+0x10/0x10 [ 820.726443][ C1] ? debug_object_activate+0x34d/0x540 [ 820.726474][ C1] ? mark_held_locks+0x9f/0xe0 [ 820.726494][ C1] preempt_schedule_irq+0x51/0x90 [ 820.726522][ C1] irqentry_exit+0x36/0x90 [ 820.726550][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 820.726584][ C1] RIP: 0010:schedule+0x26e/0x350 [ 820.726610][ C1] Code: 00 00 00 8b 43 2c a8 20 75 7a a8 10 75 6c 48 8d bb 78 12 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 be 00 00 00 48 8b bb 78 12 00 00 48 85 ff 74 0a be 01 00 00 [ 820.726628][ C1] RSP: 0018:ffffc9000457fae8 EFLAGS: 00000246 [ 820.726643][ C1] RAX: dffffc0000000000 RBX: ffff888063c70000 RCX: ffffffff8b242efd [ 820.726657][ C1] RDX: 1ffff1100c78e24f RSI: ffffffff8b6cd340 RDI: ffff888063c71278 [ 820.726672][ C1] RBP: ffffc9000457fcd0 R08: 0000000000000000 R09: fffffbfff2dc558a [ 820.726685][ C1] R10: ffffffff96e2ac57 R11: 0000000000000000 R12: ffff888063c7002c [ 820.726699][ C1] R13: ffff888063c70000 R14: ffffffff81811211 R15: dffffc0000000000 [ 820.726714][ C1] ? futex_wait_queue+0x41/0x1f0 [ 820.726745][ C1] ? schedule+0x1fd/0x350 [ 820.726772][ C1] ? schedule+0x1fd/0x350 [ 820.726797][ C1] futex_wait_queue+0xfc/0x1f0 [ 820.726826][ C1] __futex_wait+0x291/0x3c0 [ 820.726856][ C1] ? __pfx___futex_wait+0x10/0x10 [ 820.726884][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 820.726906][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 820.726938][ C1] ? ktime_add_safe+0x60/0x70 [ 820.726958][ C1] futex_wait+0xe9/0x380 [ 820.726986][ C1] ? __pfx_futex_wait+0x10/0x10 [ 820.727017][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 820.727037][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 820.727062][ C1] ? ktime_get+0xd9/0x1a0 [ 820.727090][ C1] do_futex+0x22b/0x350 [ 820.727115][ C1] ? __pfx_do_futex+0x10/0x10 [ 820.727144][ C1] __x64_sys_futex+0x1e1/0x4c0 [ 820.727171][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 820.727197][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 820.727224][ C1] do_syscall_64+0xcd/0x250 [ 820.727255][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.727283][ C1] RIP: 0033:0x7fc1dc17e719 [ 820.727299][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.727317][ C1] RSP: 002b:00007ffc06f161e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 820.727335][ C1] RAX: ffffffffffffffda RBX: 00007ffc06f16310 RCX: 00007fc1dc17e719 [ 820.727349][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1dc335f8c [ 820.727362][ C1] RBP: 00007fc1dc335f8c R08: 00007fc1dcf32080 R09: 00007ffc06f164df [ 820.727376][ C1] R10: 00007ffc06f162f0 R11: 0000000000000246 R12: 00000000000c1c4d [ 820.727389][ C1] R13: 00007ffc06f162f0 R14: 0000000000000032 R15: 00000000000c1c1b [ 820.727408][ C1]