last executing test programs: 5m31.814469204s ago: executing program 0 (id=751): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32], 0x5c}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0xff, 0xc70}, &(0x7f0000000400)=0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008024}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) mq_getsetattr(r7, 0x0, 0x0) 5m28.687034052s ago: executing program 0 (id=761): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000180), 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000400)={0x7ff, 0x2, 0x6, 0x288f, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) getpeername$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000440)=0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) 5m27.115581768s ago: executing program 0 (id=765): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xb3, "cfeeda35a5cef8e60fc752029418ded48adac9b933a6e7d8552f4e044ab9d0f886d91784413a6f54c7362318e11fd7dc8cf9b7d14ed52f77e9efaa07b80640c555fa88bea28b3de73ddec26731fdffc0e359c3bd73f68a83c5dc663e072dc8d050ec7e23f61de79f1e055bd52c89d1428042c09c68c4c9fdd778727489c55327bb36e250fcdbfba27fa5e2873e2dd7d66d9989cb22d634486c13850ff5839f56c89978e756e1382251bda697f440fd9d1a4d7f"}, &(0x7f0000000100)=0xbb) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000200)=0x84) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x22c, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc4b9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "3f1d46010b063bb348ad954ea4c4b6f5b2200a2ad6ebb0ddc030a031535cdc6eabde902e7037"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc7a}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdb58}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "4e0711b8d89fff0e7b29c7f9152d5ff9b45602ca0d8e8d0e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbfa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x67bb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90e6}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x8010) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000580)=0x80000000, 0x4) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x301080, 0x1e107bfd569fc4e1) (async) r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000840)={&(0x7f0000000600), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x17c, r6, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x140, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffb}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x338}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4523}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x738}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x25b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x58f0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x46a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4040000) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x12, 0xb, 0x1c, "f32ee59bebc742965b79b21f87231f8c5285217ae125a63cd5b1ca5e6992998e57cf022a828f9670d6e4a43e4a6778ae2d7d91f872586189319a79a7ce4f101e", "bbbc1e9b2ad52664cbb8105f60dda182570790396cb7059213dd3848ab2b6b4b9c68e4dd05c13bfa719673006378d0dd67f697bc1b80e0a22416a4e9f1a057d4", "250f724941d533cef3e4a73dca597a65763e01d8473fc0563e32b1cc7edf3e75", [0x715, 0xace]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x200000, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000009c0)={0x7, "7da0031f1f6ea610ce94672692145fc2ca5d3f3b12ef48d5a569c007feedbe70", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000a00)={"0b0769f57ce751954d20c9edcb7d82be508edac0cd8436feb10475a0e3cf6150", r7}) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000a40)=0x7e3140b9) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000a80)={0x2, {0x2, 0x56, 0x4, 0xcb, 0x1, 0x1}}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000b00)) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000b40), 0x4) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000b80)={0x1, 0x30, 0xdbf}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000c00), 0x1, 0x161482) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000d40)={0x60, 0x15, 0x8, 0x2, 0xfb, 0x400, &(0x7f0000000c40)="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"}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r10, &(0x7f0000000d80)={[0xffffffffffffffff]}, 0x8) (async) mount$bind(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x265000, 0x0) (async) fsetxattr$trusted_overlay_origin(r10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x2, 0x2) (async) readv(r9, &(0x7f0000001f00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1) 5m26.001731844s ago: executing program 0 (id=767): getpgrp(0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (rerun: 32) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) (async, rerun: 64) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 5m18.662886158s ago: executing program 0 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [], {0x95, 0x0, 0x0, 0x90ff}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x80a0000, 0x2000, &(0x7f0000b07000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffb, 0xffffffff7fffffff, 0xe90, 0x6, 0x6da, 0x3, 0x95d9056, 0x2}, 0x0, &(0x7f0000000180)={0x0}) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1407, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$netlink(0x10, 0x3, 0x0) 5m17.85507374s ago: executing program 0 (id=795): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15) close(0x3) 5m17.536704311s ago: executing program 32 (id=795): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15) close(0x3) 3m55.137333291s ago: executing program 4 (id=1116): prlimit64(0x0, 0x8, &(0x7f0000000500)={0x100000009, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r6 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x1}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r7) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x58000) syz_open_procfs(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r9, 0x0, 0xe, 0x0, &(0x7f00000001c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3m53.274795871s ago: executing program 4 (id=1119): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) ioprio_set$uid(0x3, r5, 0x2000) fchdir(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0xc) r8 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0xfff) sendfile(r8, r7, 0x0, 0x5) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$vhost_msg(r9, &(0x7f0000000680)={0x1, {&(0x7f0000000700)=""/211, 0xd3, &(0x7f0000000600)=""/108, 0x2, 0x4}}, 0xffffffffffffff68) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000000)=""/222) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110f0000000f0b243e467e240f250672e2aa156b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m50.718331099s ago: executing program 4 (id=1131): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0xf0, 0x22044028}, 0x0) 3m50.170479265s ago: executing program 4 (id=1132): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, 0x0}) 3m49.968762603s ago: executing program 4 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x400fffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x7, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000100)={'ipvlan1\x00', 0x1}) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000009, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) unshare(0x22020600) 3m44.919913279s ago: executing program 4 (id=1151): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0xb5, "97e39832b02863cf3a39aa489c2ad21d2f2998bffe6edd75e5a16b1c2d95cddf54ff4e54986e3a624814ced64037e73d78d2d90051b1bc0a98e70848459507050367a8ecef7606c84484e56bae0c2a7577c8b882edaea5d06f4ce7ba95ac0a01eacba3f4467f459868ce7a3ea0da4c348ea07a69c64ee395fc5f3009966217df6b27a444fa4e0b8db29dce779f9aee6ab2482c56a384717bd360b57bfc9c348168e09812def93a3efca1239b4bcfe1c1a33a2a5a87"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x13}, &(0x7f00000003c0)={0xc0, 0x5, 0x6, "ec1b1d362620"}, &(0x7f0000000400)}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)={0x20, 0xf, 0x4, "230e01d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = socket(0x28, 0x5, 0x0) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000240)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 3m29.650711976s ago: executing program 33 (id=1151): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x60, 0x11, 0xb5, "97e39832b02863cf3a39aa489c2ad21d2f2998bffe6edd75e5a16b1c2d95cddf54ff4e54986e3a624814ced64037e73d78d2d90051b1bc0a98e70848459507050367a8ecef7606c84484e56bae0c2a7577c8b882edaea5d06f4ce7ba95ac0a01eacba3f4467f459868ce7a3ea0da4c348ea07a69c64ee395fc5f3009966217df6b27a444fa4e0b8db29dce779f9aee6ab2482c56a384717bd360b57bfc9c348168e09812def93a3efca1239b4bcfe1c1a33a2a5a87"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x13}, &(0x7f00000003c0)={0xc0, 0x5, 0x6, "ec1b1d362620"}, &(0x7f0000000400)}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)={0x20, 0xf, 0x4, "230e01d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = socket(0x28, 0x5, 0x0) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000240)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 10.819426796s ago: executing program 3 (id=1960): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xd) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) epoll_create1(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.873245835s ago: executing program 3 (id=1966): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109023b0001018010090904000602f4060009052406000005240000021d240f0109000000010003000609058202200007f94409050302ef0109032ec89c78436b7483d8db0eda4d416fc64822cc5d2c81d630fe7ba765bcd5799dfc261248e5d4a1b0155d1484dc"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="380307c5b8d69f41e48673f754baaad88fd826a50b2e38a712b42d83f502a5c8d29aa9c85b9d659727cfb0af07000000f4b1322a801fc0d8"]}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_setup(0x165d, &(0x7f0000000580)={0x0, 0x970, 0x8, 0x1, 0x40399}) 6.806012236s ago: executing program 5 (id=1979): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f00000004c0)={'fscrypt:', @desc1}, &(0x7f0000000500)={0x0, "3db5adc3dae6cd4dccfdb3f43bd716f7aa0a578627f35175f4f5d88be759ae28e22eb7dda06196d1cfb303cd7d6379bd1fa3264b98df4912fa1de6fec05c6f39", 0x33}, 0x48, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000003}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) read(r6, &(0x7f00000003c0)=""/209, 0xd1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.309591509s ago: executing program 5 (id=1981): r0 = syz_io_uring_setup(0x3bb5, &(0x7f0000000080)={0x0, 0x3354, 0x4000, 0x6, 0x20f}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r0, 0x5aac, 0x418b, 0x12, &(0x7f00000004c0)={[0x6c]}, 0x8) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000380)={0x3, 0xfffffffc, 0x0, 0x80880}) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0xd, 0x2, "d42b"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e00000010000001d0000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 6.185127769s ago: executing program 3 (id=1982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$amidi(0x0, 0x2, 0x181) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000240), 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="37060000", @ANYRES16=r5, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c001}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000457f71b7df035749b9779205cc9fd469a4e6f380d069b21bb486ebd725c253c837f9705937e89852c3", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf250d0000000c000180060001000a00000008000600010000001c000280080007000400000008000600f9ffffff06000b0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r6, 0xc01064c4, &(0x7f0000000340)={0x0}) ioperm(0x2, 0x1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x27, 0x4, @thr={&(0x7f0000000400)="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", &(0x7f0000002400)="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"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x39000, 0x0) write$binfmt_elf64(r9, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 5.756052773s ago: executing program 2 (id=1986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "88d36a5265c82923cea7a40da12a5f4e9ba2dadb7c8675b64f8d7a2e266929dbc3732412b9154fb022a1ad51ddfc36a39f5aaff73f1939baaad22750aa3c3953db985db77d7f35ed2a675e2508468744"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000094000000000000", 0x58}], 0x1) 5.658946065s ago: executing program 2 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x3c, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x50, 0x10}}, 0x124}}, 0x0) 5.564563302s ago: executing program 2 (id=1988): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x80}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f00000039c0)=0xba79236, 0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = epoll_create(0x80) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x3, 0x4000}, 0xc) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='pimreg0\x00', 0x76f27b72, 0x0, 0xd2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x40000004}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x769d0dc03297d17d}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004080) socket$inet(0x2, 0x1, 0x2) 5.42607997s ago: executing program 1 (id=1990): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109023b0001018010090904000602f4060009052406000005240000021d240f0109000000010003000609058202200007f94409050302ef0109032ec89c78436b7483d8db0eda4d416fc64822cc5d2c81d630fe7ba765bcd5799dfc261248e5d4a1b0155d1484dc"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="380307c5b8d69f41e48673f754baaad88fd826a50b2e38a712b42d83f502a5c8d29aa9c85b9d659727cfb0af07000000f4b1322a801fc0d8"]}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_setup(0x165d, &(0x7f0000000580)={0x0, 0x970, 0x8, 0x1, 0x40399}) 5.226295543s ago: executing program 3 (id=1993): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x8}]}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001800)={&(0x7f0000000800)=""/4096, 0x1000, 0x4, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x8}, 0x4760}, {{0x0, 0x0, 0x0}, 0xb27e}, {{0x0, 0x0, 0x0}, 0x66}], 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 4.165066545s ago: executing program 3 (id=1995): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01007c000000000004000100000008000100020001000100020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ecm(0x5, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x1, 0x1, 0x0, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "8f583cd645"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8, 0xfff, 0x5}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x9, [0x7, 0xa, 0x4, 0x401, 0x9, 0x8]}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x9, 0x3}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x8, 0x81, 0x1, 0xffff, 0x81}, @obex={0x5, 0x24, 0x15, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x10, 0x10, 0x5}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x7f, 0x3a, 0x28, 0x10, 0xf9}, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f1c00021410858a53e536ef4603100b00"/28], 0x5, [{0xcd, &(0x7f0000000600)=@string={0xcd, 0x3, "22d7c9b98b9c7423d11cca4e6f8777d1d305142a4867d74649eb74f0c359b3dcd238e1e301e5d0924e569c64638d711a7fe7f6650d6b68c3d24e2347a4e53651968ba70ba9e4faf35a1eb7396442109f717ada45e39a2b9ee76b63793782c268255e7299573d6a9feade757e4595b1af28119c6997379b17c0226adb355306750fd35a7e09d2944be50bc100d6ca8bcf5b7547527d7fa286160cfe1efc0930088e0fb1c86aa9d8677602ba5928f7de3a3345568abcab730c375b33886336a319ea7ee9b1e5c96dd15b51e7"}}, {0x58, &(0x7f0000000700)=@string={0x58, 0x3, "e32dc45935db890846f76b89cd646652b9e93038cf7020f36717ecf68179dd0cc247639fae579d6ee6ccd63b9b3bada656b63b14877e8bbba24678644ce963aa7b3f3fe42eea7374166b83fe5476d523d042fac9ef75"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x22, 0xe5, {0xe5, 0xf, "53070d25e4e4e1ef69fbb7c7ac03ee49d4ee070de8f895a1c4af124258b2d58a70605731f06a173d8166ad2584fdfc0cb577291bfa9dcc8f20f1236abca737013288b0434539b1aa42c5847562dedbd59d5524283fbc4f69063086e831eebbe1f90d95cf7c4e56c227550ec560532981bee826a7e43533d73355a2abb23750c977894a86e114d5391978c982455fad0af7fd9e95157f9f8fe2aac3b885d0241f9e5b00f0d03ac2bd4d9b8699ec281361977ef433c77ffd5fea6ad0ee100035b76cfc56621e79ffef54596c1e8b3f4ef952958223f53090149bdf86e10280cd9b242c96"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000a80)={0x40, 0xd, 0xdc, "eb77b4b10398a7e9f0f7ae0d1c262a86ebae5639534b9addb4069beec47b516a76dfd7de6f8056123b1882161b8b651aa7f41c3731606ce70e9a87321b0b886742983815f250e7d0d0bc4a89e78b6d27345e1f8007083553f23f47b1618c6d53c814584fef1dac9d9ce43cafc721eb740fd0ff6e22567b07ee9bea6269707e491f6c0868d38bc16111348343a6e9db30e7f9c3107c6dceeef4770c86e88a563f875ca405eae76984ff838a821b2a39d95373e6e892ff4115f9b7c2d682d955272c6bb2b93be49a24c49e40f21420f19ccac34abd832b706c21c50376"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)={0x45c, r0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x26}}}}, [@NL80211_ATTR_NAN_FUNC={0x254, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x244, 0xd, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xb6, 0x0, "9822fdbb7b16705bf8609c431e4bd0e0d386857b55fe2d093dfa9444b5b864e0e6a6ae47f5d4169660698a715ea4d7337fff36c9d69e453ddda73360a942b9aa35d17abc4fcdabf495dd7ed4f35fc096a42816dbcc096ee3c1742537e5afe0466809cb8bdc38f7f63bc561d35f9174e1aa9570a4f001237b72d08a82fb6cb376ce93e0555438cc68bd86f0c2c1d779abcc032a9dce9854eb5970ac29c5a1630fa8c05b2377da654ec367e2dde45ac0a00bac"}, {0x87, 0x0, "fb69125e80005910953f2b3c86f4481990fb6332c5134524ad8b4965d65ffeead5f9b302f40e8743512111adf2cfc564bb8cd05f1d24b6cca57ef7c6c5d3858224edc049533d1a5260c51d7d36bfbfe2463b53c05d6915b40cdcd1fc512e61ff025a3a7695fae12152ba28adb1e708b868edd81f58e2f5ab7900d842780b40929ac1d0"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x1b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1fc0000}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x17c, 0xd, 0x0, 0x1, [{0xaa, 0x0, "cfc544a9de2c8ac5ee84bdd8a1b8a937072f44b3ac510b1fa09d74ed854a6f820c8728a485c2be8024e2f319f6ed9915de1c2402247b4502f04f432c38e4cc99f76e54dd360b581d4a20c8c7e65f2f7b805cb171ce104a82fd6c01619d99db6482c9d24f7f12fda460facde00437fe60ac1377e392b4b68d8b6aadce08c766f9c852e1e28ac70fdfb205eab3c083f52095e478af9ce28919bbeb6a9f6a9b84de2ff315fbafc4"}, {0x15, 0x0, "87871fdd4b71565defe3e2ae0241bb02a9"}, {0xb3, 0x0, "58fd137e69cb0b790140f189fb6921b2b2bc71c45abce141ed4b11f2bd838edab6f069118a5e18b0b058b60dd372ca87e7cd416e532eb3560591ad7066762f3b78b81e19b4364cd301185f62b849297a2f56b88a89c1fa6adf86e053138933b9039cf8297be4ec74f5d5405542d15f44cd5fa25051c5e81ef27b4704505e453ea3be8711cc3ba0266729a87afc4caf77dbc8157d42b833f1fa994bc34f718efb80b6c2070d3c8709f1b51bf299fd0e"}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r6, 0x10001, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000080000000000009500f084c76f4576"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 4.051961287s ago: executing program 6 (id=1996): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @loopback}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x48a, &(0x7f00000005c0)) r6 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="41836fd7e0d066e1"}}) accept4(r3, 0x0, 0x0, 0x80800) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xcf46, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x10, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) 3.585407704s ago: executing program 2 (id=1997): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x37, &(0x7f0000000040)=0x3, 0x4) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303f0000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="d3e30f41ca0c976bbc37d3d04caa0597e41a60e4f5d01ca1"], 0x1c}}, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xfffe, 0x7}, 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000340)=0xc) 3.579651704s ago: executing program 6 (id=1998): sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="08002bbd70d100080004001400b31c00000003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 3.577656886s ago: executing program 1 (id=1999): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.742962025s ago: executing program 1 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 2.456834418s ago: executing program 5 (id=2001): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.456433758s ago: executing program 6 (id=2002): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061188b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = eventfd2(0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x3, 0x6c, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @loopback, {[@noop, @timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0x5, [{@empty, 0x1}, {@multicast1, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x3, [{0x1, 0x12, "e2dbd615e5dc94551676192b17c41469"}, {0x0, 0x8, "8d7f09228e36"}]}, @generic={0x86, 0xa, "cdfbe7ea8863ed77"}]}}}}}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r5, 0x25, 0x6, @val=@iter={&(0x7f00000000c0)=@map_fd=r0, 0x10}}, 0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000740)) 2.32270504s ago: executing program 6 (id=2003): r0 = socket(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x26a6, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="c6e73300000000", 0x7}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f00000004c0)="e3cb8bc7195b", 0x6}], 0x3, 0x0, 0x0, 0x40000000}, 0x20004b88) 2.249143181s ago: executing program 6 (id=2004): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0xfffffffffffffd2d, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x100000000000000) 2.241621776s ago: executing program 2 (id=2005): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x8}]}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001800)={&(0x7f0000000800)=""/4096, 0x1000, 0x4, 0x80000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x8}, 0x4760}, {{0x0, 0x0, 0x0}, 0xb27e}, {{0x0, 0x0, 0x0}, 0x66}], 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.215976751s ago: executing program 5 (id=2006): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x0, 0x4}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = add_key(0x0, &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) ftruncate(0xffffffffffffffff, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 1.911122734s ago: executing program 1 (id=2007): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x6, 0x7}, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) (async) sched_setaffinity(0x0, 0x18, &(0x7f0000000040)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x1, 0x0) (async) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r5, 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000007060500000000000000000000050001000700000008000640000000030900020073797a31000000000900020073797a30000000000800"/73], 0x54}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.442836218s ago: executing program 6 (id=2008): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00020000000800b70b0200090400ff"], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x560f}, {0x400000b1, 0x0, 0x5}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 1.412211482s ago: executing program 1 (id=2009): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @loopback}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x48a, &(0x7f00000005c0)) r6 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="41836fd7e0d066e1"}}) accept4(r3, 0x0, 0x0, 0x80800) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xcf46, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x10, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) 952.112394ms ago: executing program 5 (id=2010): syz_open_dev$vim2m(&(0x7f0000000400), 0x8, 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2b, 0x801, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x10) fcntl$dupfd(0xffffffffffffffff, 0x25, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, 0x0, 0x0, 0x0, 0x0) 795.951374ms ago: executing program 1 (id=2011): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) memfd_create(&(0x7f0000000000)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\x03\x00\xb2\xf2\xff\x90\a\xa9\xc4\x15\xf4\x18\xd5\x8e\n=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91\x00\x00\x00\x00w(\x11\xe1\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94G\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\1\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5\xfa\"\xee;\xe7D\xf4*\xe3X\x1d\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xb1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xb6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xac+\x9b\xb5\x85\x97e\xa6t\xcb\xa1p}\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x00\x00\x00\x00', 0x5) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000840)='.log\x00', 0x0, 0x1ca) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x30, 0x140e, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000004100", @ANYRES32=0x1, @ANYBLOB="fcffff"], 0x50) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602020000000700100002000d240902"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x7, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6e, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}]}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x6, 0x4, 0xb, 0x10, 0x82}, 0x4d, &(0x7f0000000500)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7, 0xf00, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x6, 0x0, 0xb, 0xfc}, @generic={0x13, 0x10, 0xa, "b14f47ac435ffa6340290b3824afe756"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f2d748fb9e42b1bf45e32c69ad04f753"}]}, 0x7, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x459}}, {0x1a, &(0x7f0000000600)=@string={0x1a, 0x3, "ba51044ed7faf77bf167e995e7a6d569a2f813ca2779be8c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x92, &(0x7f0000000700)=@string={0x92, 0x3, "c30f6589fe5ab9527393ac62c95aa8ed7ad56b48ef64deb062f6cc99f6980aaae5c1d9db003f7d3ab61a04b830a092d2c75a61109b47817359a890dc199670694630abec28652e29fcd6333e3fbdab7032f8510756f43b4ef023e978e35284f29a85628010bbbecd8650912f094b209bd063820c89f06b5a4425defe316b5fe5e34bee1045164b53368e8049b3bb9827"}}]}) 155.028229ms ago: executing program 2 (id=2012): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 154.456814ms ago: executing program 3 (id=2013): writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0c005080080007"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x44040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x6c, r1, 0x401, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7d1355d1c39672e0}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c00)=ANY=[@ANYRES32=r2, @ANYBLOB="e295b1f7403f5e7a5e1f8d10bd058e76152b2a4e1558bec2ad7f599e3b53126ad79ac18ce448774f90980c3710fd5ef9c9f94d169633f093670bc4094b71ac46c6364590e7d26a7446f24928972500010a7be7b37f6851bd59b5cf8462de0ac461e68845cb6fec1f75544ec2c80074d3ca953796cf9a835579dba0529be43dd60c093e4d2edcaf31d04c83b7b6852f309b6bf2840e2fba784a9b57eb076489367fa8ba7d45b9c7c7e8da1567e016c0b6b88fb5724e9d5cc82ddedb60ef4505f172db405a20bb8c4fec44b780831b6dcf502682efb3ec74a2aff4f604e0629d9d2971a11b77e323e499ac566042cae54f597fa4c33a5e281ba22879a5eafdac27024f3f8e2ede3ab13701fa39b94a196192aa67c825f35e27291ad34f9ec5ddb6fcaa9b0757a73faff4de1f0a54bcc191a2141d09c04ddb8305ed535a928fa0ef2fb6cf4c0e33a820328ad091d28e106656cdf4d0fb79c14bf4a557e574f3f4860cefbfabebf8802ae2d4017677617f0dbb1054654cbe419ed0c1caa6eb800fcf3a011fad8fdbcebfa1863e07de2ee8c1665c4ae53b3b2b3b1e8746c119fbf36a51a6d79e0bb9983ddd3b77bc0f5039dafc320baab97e022cb3a4196bacc7ea85c52c26f2ac0db230b47ef72bed8ccf5ed2f68d6ad3f930a00e69e4455eb74b3f541b375ff52558cf714472926e0d3eae8edd8accda7eab8513d78353c36bb47faca332c1f24021537f5aef728f17e895113cbe58f9a781289c89e1f4211ffb148be482a2d1d8304be884657028f81a2259720aabfa6743c9dbd01b07ecfa5dd4864c216a7e59604234d7c91b12ffceb023c97c7a39155804de8b1c270277cdf3fb08c5351059f4206b81b515ea036a09b2363dd503a9ba2da93b723cc989cc57a87c9d38aec40dd236ddf9daa34979d9c88717b6e17f6f36cb66908a798a74aff7aced31b7a5af722e68afdde71afcfde5395957065d76f1f3acbfda9a19149ac18578d71aa69e77810167e16c209bb41afcc3f58c2f622b0b55d192102a62db681044bb46822a00ed91219bca8ee8e7aa46a0468eb09ea26ac9307af6f844be57495bcf86a2469460293f646983226c0e6216815f4e084f325abbdfb894085b715297df1485f66e6d530a650f8eee4c3b0ed4368e467bdf3fde8945d3c5954494fa8d828f1d4cdd7632315dd1d14ab7542a0f5bc8a675026bae7db319be27d1ff6258aa5874c78f05d9c5d6711bd95f9e63d1ea286e811d3b3ed054dbc8ba66b34d3d957c4259af0cc846c6f98b1b6e6bc5865e858a4713bf8a388c694438a99097d426e98aa0a1c09bf762188af1cb7dec7ce8ab79f1a417864d24d1dba109eca5e5454f878758c5f422373b1a26d0ab15eac4955b446f394ba752617cefd5b539aa52d15bef04b14a5cafc0f8ebc838b2f580f672be498833533a96bef83a8d82e4acff26ee7bdee2853fca30d241f162f3144e88cef9387a94eb2c5308e7993554c28e117ebdce2986a86b87f3da51ffbc6ad8442605d75299681c5bcd4368736dc95ce716ec24b270f853127424221ec767003aa35fb4fa85f4c98651f75b86ec019beaf9f45d5a200cca0154380ebdbb5251da9c6419e7cde6f66d3065442105a3c258ba69a2a0aff84cf5ea14d9bef837fdc00c347f27d032c1575fa2ba8c3004b8e6cc7bea88a54a8b38f45c730c120d3c428e7f2dddc3fadae57dedd442218c419f9a5c25cd9b38283ce5533f2a7ae9ef09b430943831ecc00871cf4d494d9889a32e7b4c32264b9cdb55b85dcdf08bd24091ba6a42d4d63a35a8e37425e3ad26a6e4ecb138113a5493bbdd73e7d9eb097617e1289ebc2059dfcb93c6693a0ebaec004ffba05b010cc70823e45c2ae1f1f13d8a129fbb96d3cd635bea96ba03ed03441396f8ed63f60442788a08b9fb7afa8a80b6542c66f098d0cb6e7dee4e0947ce0488f45eee77ebf3605971074c50a4392b4f193ad8a1d25dc68ba59dcfd848480ab8234cdd75e5ba6b73185793e93e38f9472ce683bee23a7f0e67408855499d8366b085a2040c0eb3cccae8f8ab2de93729673cbe09b20af4bfcbb76a8203d19458f3b43515b3451c50a62d49fac2bdd59bf6217600e2a299a07dc0f72c48b9c1f9daff2b77dc76dd95d3a8d322d0b6ed0584bf908fd585e65032f3d91572e2515662a5ed602b0126cff10e8f26174afc72ff5de316f59ca882582c297290cfddd54ad5f83b80af76a8b02ecf69fe5c399ba3f3bd7dfc9dbd5d8faffb3ce0f5efd46f4e7c8fbf969c0de016b075ab4ccd46e9338422ef3ed0fa6eb4b921687668633c94f697c2d9c22e61923cd7d840077e1ddf8a4280d38c95ae34955ecf610754d5c2a56094adaec6480f7613fe4d205c518c6839422822dee1e1b47bff2a5cabb824399632075c9ed6cf41c2f8a9517deba44e2855036a39b9cc84e3a52247924a7406c05eeb18b27b1e09451f68eb7b26d9aaa34619893d5549f0a2b42c60764bef6e6cebf67c5799b5beb7387c38e9c90dc182d77e316ac5d760baef4ca076aacf4bc88432f8f3623f2f1ba4f20f2f1a5c7fd3dd18d669f07d4f2ec07470c90e37851ffc49dbd3fd411b3327c0631607379600ad4ffcc0f649b7739779a96cc2ef9098d3b4fb8b4d1a813ccd9b6031a94589b238a30bc1f18d3c575a98fe0558248817deccb2b7d45abd2f39499e06205dedd662569f2b68704d29d7283ca8d91fec524ba3b8e9bf8f25879b5974a6106c9572c3ef9844804bfc795811e4194ab5836d7bbbb32a98dd5bae0580e0b1d81f14d166fe75da8c24d98891fc3246dcda1c3a1bb55ddb40051c281cd17160cc2315d91d2577bd4f4af6518e29200fc8034e8f5db18da194e9322edbae738c5ccfae51a66b05e398210a0754bce3e86e6b12cd908a4afb52be838da3267608b269d9fed378f1c4aacdc233ed384b02e34f723318f9697c963a7812ec961067eb853868c295e95893f46d64ece8ba3e1532af72768ae4cf68ca6c8829857f2d2b527e651eb9042d7e2730f41e1ff1c2d696a5b4b35e72fccf80b453a2560bfd623b3b7eb3864f0ae4fdcc4efe161fe8db18986e85d9ff505a38d94c8511c3df9b979ce8ef09004798bbcc067c8a2ee4f58cfb55095ffd785b31c1a8c62558ce4cced772ac4cb522df51fec4246de31c45cfb6d7aa292cd76dc9fcb1c9987a5025661d9c0ea84b0c0fd664ec8a232647227184aa86ccebbfcdc55ef49fae86729b313d91b87f906e8348643258385a2bb09565e1580309dcb2d9e402b1a63acf8cbd9468d1fac404c7d7a128afebb8c07cb92a37e9eb2b6de2b313e19cd9b471dc8ef2b84ca136bec586dd2d3f4c0c5c5659f1245f3eed820d51aca6e124d1834cd6b486f0a7f4a9a7c8845bd4cafb2afd761b039816ac676dae42d4e62e4f0b1f566a83cd89c863791faf74c812201a35e85a37c78f5a4c4c0030f40f622d2620711845bd8199f59911ab71c62e7d86cf2b2f6f9ceb944d621af79aa1dcbcd7297e3f33f81421ee0697881b41c42ab0f2d4e5b63e5e03897c9c80380dc273037932a5182d4a549447baf2d3d90541546f11b9683fc7910a9c355dff45ffca36b3b8e447991e116c0aca3fb60584c7d0281f9eb94c6baa284bdff76ab339e9324ac567ccdfcedd95018c6275fee4ec16a9a9f8af1e2fd6050ae4ffbdf9214b85e49292485c60a97ab7d805a10bbce87c752b1d4f6ad943cba8f8b4b8dbb2d9692b05ab988f652285a418590062c40c40ef5fa445103ba347672a5628824bd2ae94d675ee7c8adb57342fe1300d3231325b9189837d36065f9df1329b0bd87a0ca06d501dcdb0e8ee41ba641cdcc9a14259cfe48fd0a25102c0059ad5f6455ca8d84d914e29a1181274920f16b9939f936ecf33f2926b10f16fbaeb2b724cc28deb2d52993c8e69e88649ea7f4f2dab4f1c12a12af22c9aaecd210677e49de5dceb0cfaa871400f2ac6683bda8a74e3bfc3af0eeda797976c9dcc7205db5d52149f00914b05028d89794aa31cd796562e01019c12f50ba54a5efd3d2b0e7934127dc6450757693be6db6ed08ae11f686ef6683c18154820764015cda54f912f84adb2bdd6cffb48c6140d2a0df136de8afe91e6039b9841d55f881a0ba79d9399fe83c77640d43f6b1e095306133a0c4f67be0e5fd9a7f7be0b47117d09c1a30ec04d4ad625b3f5cbe57a1f71e81734d1669191b05bba33f540ed614540ae4cee190d55d437c54cf9cb44616f9ff26f5a1ff4512964d60885c0b767f645089fbee9d852017c5bce8a111e2fb33d9367f7754664192897dbb6e8b73df9e27c54ccc135585fac8b2233c07992cca66223b4071b7c9694058d7145be02ddb7474c0d3e02e30702c9859e0426e7b4c9060e44e884b6d0a9098b0925fa83b1df4b9ad061a61aca5c4aa0ed0551d117314fcda424362f85cee974d81c396e1689ab561c27dbb0d63726b42a417fcbd229176258a34c6b0a41792494a50b77dd47da68294f665dc5d2792e4261c1fd19f094b33d42f633e6a516d9494f1ec64d275ebff0e1f9066bc08322ae9710e91c3af23e1939de9db5b0687f9dc39a33fa24c18060d6112a21157e40d80d9aeec40a4dee3c4dbd536610db0cb424216de3ba72a0033095e2cdb3402d3db5a2e87428763bfa50735ccf3782ba6b7b44ba3a8bb79f0765c66331ca10851c714dd319c284bead9ba6c52801fe8ee3395a4e8911030bfc029969a537ac18020454d4bc7057dabadc72f5757212bbf558ef515a018b94f9723b1ef35e13f11253107ad2de8a9bb7e202d10cf6f7f96d0e0bc9b6b4172bb9b01edfa0c5dd143b415714f88a6d6b1acc35c9586dcf9352f6b384a7307c2b01593497710ccf029edf48274e749d096a2bec7853d178c38d409fed0c9225a7310488fe8b4fe1fdb5b820a9a76c90cdb6591e121cb3e0fa62c464b639ae6a77eccbf7b56cb1f82e93aaeea72431034c7ff1bc15c6b957539f6028a596619de7ecbf1534933a4f462bbd7727801ec6c108c13ef4bc74aafe3885c620f136cb85fc489b4981832c4e9fe69bb6a352c0880599f777bfecfe06c509d29314c70f72d8bbf17afced4df759289bcaed7c815d2bf054c2ce7c4032d9ba6b4a1ac50f16c4932f7372d1409ccd1388a28fee68830940d754468a39c9daca90095d4e32575dec3a617e97192bb9e6a1d76f18d8cc33d42cb573a6524f59f94335cc40d77aa91daf3ccb21f36d9778de674eae3ec014860f04417a98d9279962f9069a0f6d6a1145b6d59d7165c8de11b61f5b60c9cc67330dcc74c4b919ef26363353c3adf49209f44a42680a3be19037e05010c21a383701f6e5d58dd49f22cceeff992d9be54e82e73fe79ab5615e41952a14da29e3f3fbd9aa1499964983c44fdfdeb7a301c8aab440965996496ee25ae475e4bfdbe551f9e903ca113a1a95db65d2205f17c3188d3d2cd6145ff8969d61b64cc0960e578bd8fa021b7b957e84601c848ec0d321760eaa7de77ba2e07291000a6637efffaaf48bac1811cdc22e478e6fe8d0a3091f560f553b289daacce10ddff203b263637c26fc6414342be97323d5cfcd3dd2ed20bf5553adce00a5231a91571c1225afdedde8c687ca3969da4238334fa40363546cab2c371334d89135c7506de351adcc96df74d4a7c76b3687197aea47d4d2aa89fffa71041ec1a0bedd79295b616219d6ba01ee6637685c7c121b4fd0a90ec6e7746c1dc770418c080458875ea2535f0374da544e6ad4bad146dfb2e17e4bbba8ca", @ANYRES8=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x20064801) recvmmsg(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x3}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x102, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xa}) 0s ago: executing program 5 (id=2014): r0 = syz_io_uring_setup(0x3bb5, &(0x7f0000000080)={0x0, 0x3354, 0x4000, 0x6, 0x20f}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r0, 0x5aac, 0x418b, 0x12, &(0x7f00000004c0)={[0x6c]}, 0x8) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000380)={0x3, 0xfffffffc, 0x0, 0x80880}) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0xd, 0x2, "d42b"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000210000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): ber: 1 but max is 0 [ 472.224078][ T5699] usb 6-1: config 0 has no interface number 0 [ 472.238467][ T5699] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 472.250426][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.259696][ T5699] usb 6-1: Product: syz [ 472.278770][ T5699] usb 6-1: Manufacturer: syz [ 472.562584][ T5699] usb 6-1: SerialNumber: syz [ 472.619315][ T5699] usb 6-1: config 0 descriptor?? [ 472.650408][ T5699] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 472.695100][ T5699] usb 6-1: selecting invalid altsetting 1 [ 472.701972][T11612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.707991][T11612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.714042][T11612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.719986][T11612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.726344][ T5699] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 472.736814][T11612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.863851][ T5699] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.965206][ T5699] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 472.974828][ T30] audit: type=1400 audit(2000000404.099:680): avc: denied { call } for pid=11604 comm="syz.5.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 473.003879][ T5699] usb 6-1: media controller created [ 473.048171][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.186673][T11642] serio: Serial port ttyS3 [ 473.192880][ T5699] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 473.216588][ T5699] zl10353_read_register: readreg error (reg=127, ret==-71) [ 473.239221][ T5699] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 473.635421][ T5699] usb 6-1: USB disconnect, device number 30 [ 473.924286][ T30] audit: type=1400 audit(2000000405.059:681): avc: denied { write } for pid=11627 comm="syz.1.1561" path="socket:[31765]" dev="sockfs" ino=31765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 474.120735][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.140996][ T5728] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 474.330748][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 474.351777][ T5728] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 474.391146][ T5728] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 79, changing to 7 [ 474.442467][ T5728] usb 6-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 474.473498][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.493578][ T5728] usb 6-1: Product: 蜼é§æ«³â¼åŸ€éª’ꃜãµä¯¢ïœ¼á©·ï¡‹âª¹ç“겹錗ä‰á‰íŠ¦íˆƒï€¡ì´“岯芅羃à·ïª‘鴜ඎ璒䷲疥ᣭê¸å™¿ïš‡ë¢­äž±à§—ì¡®êˆá¥žë¡¥ä†â•Ÿë™¬ì¸…☊絋ᘸ [ 474.562571][ T5728] usb 6-1: Manufacturer: 絑âˆí€šë²¤ØŠá¦Šåºžé„“䬚咃奾햅Ồ綳椡㺌欦낌쟩蜚矲ﾈã¸Ï“æ•ãƒá „撲ç˜í䎲鯘ᰃ礹쵎ḷ [ 474.716443][ T5728] usb 6-1: SerialNumber: á Œ [ 474.763166][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 474.769312][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 474.775888][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.781991][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.807218][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 474.816499][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 475.177131][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.191485][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.231678][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.243212][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.335734][T11660] vivid-007: ================= START STATUS ================= [ 475.354225][T11660] vivid-007: Enable Output Cropping: true [ 475.384521][T11660] vivid-007: Enable Output Composing: true [ 475.432443][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.519487][T11660] vivid-007: Enable Output Scaler: true [ 475.555937][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.585123][T11660] vivid-007: Tx RGB Quantization Range: Automatic [ 475.625886][T11660] vivid-007: Transmit Mode: HDMI [ 475.662902][T11660] vivid-007: Hotplug Present: 0x00000000 [ 475.704491][T11660] vivid-007: RxSense Present: 0x00000000 [ 475.733314][T11660] vivid-007: EDID Present: 0x00000000 [ 475.753415][T11660] vivid-007: ================== END STATUS ================== [ 475.811586][ T5728] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 475.908091][ T5728] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 475.964144][ T5728] usb 6-1: USB disconnect, device number 31 [ 476.011833][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.083461][T11675] syzkaller1: entered promiscuous mode [ 476.095316][T11675] syzkaller1: entered allmulticast mode [ 476.102029][T11677] FAULT_INJECTION: forcing a failure. [ 476.102029][T11677] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 476.141424][T11677] CPU: 0 UID: 0 PID: 11677 Comm: syz.3.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.141458][T11677] Tainted: [L]=SOFTLOCKUP [ 476.141465][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.141475][T11677] Call Trace: [ 476.141480][T11677] [ 476.141487][T11677] dump_stack_lvl+0x100/0x190 [ 476.141514][T11677] should_fail_ex.cold+0x5/0xa [ 476.141532][T11677] ? prepare_alloc_pages+0x16d/0x5f0 [ 476.141554][T11677] should_fail_alloc_page+0xeb/0x140 [ 476.141573][T11677] prepare_alloc_pages+0x1f0/0x5f0 [ 476.141593][T11677] ? kernel_text_address+0x8d/0x100 [ 476.141620][T11677] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 476.141647][T11677] ? __lock_acquire+0x4a5/0x2630 [ 476.141672][T11677] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 476.141694][T11677] ? stack_trace_save+0x8e/0xc0 [ 476.141714][T11677] ? look_up_lock_class+0x55/0x120 [ 476.141733][T11677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 476.141756][T11677] ? register_lock_class+0x40/0x560 [ 476.141778][T11677] ? ima_match_policy+0x8b8/0x2340 [ 476.141815][T11677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.141838][T11677] ? policy_nodemask+0xed/0x4f0 [ 476.141859][T11677] alloc_pages_mpol+0x1fb/0x540 [ 476.141878][T11677] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 476.141898][T11677] ? __lock_acquire+0x4a5/0x2630 [ 476.141918][T11677] folio_alloc_mpol_noprof+0x36/0x260 [ 476.141939][T11677] vma_alloc_folio_noprof+0xed/0x1d0 [ 476.141957][T11677] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 476.141979][T11677] do_anonymous_page+0xb46/0x2050 [ 476.142001][T11677] ? rcu_read_unlock+0x2d/0xb0 [ 476.142028][T11677] __handle_mm_fault+0x1d2c/0x2a00 [ 476.142056][T11677] ? mt_find+0x45e/0x8e0 [ 476.142077][T11677] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.142096][T11677] ? __pfx_mt_find+0x10/0x10 [ 476.142118][T11677] ? find_vma+0xbf/0x140 [ 476.142128][T11677] ? __pfx_find_vma+0x10/0x10 [ 476.142140][T11677] handle_mm_fault+0x36d/0xa20 [ 476.142158][T11677] do_user_addr_fault+0x74c/0x12f0 [ 476.142175][T11677] ? trace_page_fault_kernel+0x7a/0x200 [ 476.142191][T11677] exc_page_fault+0x6f/0xd0 [ 476.142203][T11677] asm_exc_page_fault+0x26/0x30 [ 476.142214][T11677] RIP: 0010:__put_user_4+0xd/0x20 [ 476.142226][T11677] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 476.142236][T11677] RSP: 0018:ffffc9000551fb70 EFLAGS: 00050202 [ 476.142246][T11677] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000140 [ 476.142252][T11677] RDX: ffff88807b92a500 RSI: ffffffff82595941 RDI: ffffffff8c1c3600 [ 476.142258][T11677] RBP: ffff88803c381260 R08: 0000000000000001 R09: 00000000000001c8 [ 476.142264][T11677] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000aa3f72 [ 476.142277][T11677] R13: 0000000100000002 R14: ffffc9000551fbb0 R15: 0000000100000003 [ 476.142294][T11677] ? __might_fault+0x111/0x140 [ 476.142318][T11677] tty_mode_ioctl+0xaf3/0xd40 [ 476.142331][T11677] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 476.142347][T11677] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 476.142367][T11677] ? __pfx_n_tty_ioctl+0x10/0x10 [ 476.142382][T11677] n_tty_ioctl_helper+0x47/0x2b0 [ 476.142394][T11677] n_tty_ioctl+0x53/0x350 [ 476.142408][T11677] ? __pfx_uart_ioctl+0x10/0x10 [ 476.142424][T11677] ? __pfx_n_tty_ioctl+0x10/0x10 [ 476.142438][T11677] tty_ioctl+0x11c2/0x1640 [ 476.142453][T11677] ? __pfx_tty_ioctl+0x10/0x10 [ 476.142467][T11677] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 476.142486][T11677] ? __fget_files+0x215/0x3d0 [ 476.142498][T11677] ? hook_file_ioctl_common+0x149/0x410 [ 476.142518][T11677] ? selinux_file_ioctl+0x13b/0x290 [ 476.142533][T11677] ? selinux_file_ioctl+0xb6/0x290 [ 476.142547][T11677] ? __pfx_tty_ioctl+0x10/0x10 [ 476.142561][T11677] __x64_sys_ioctl+0x18e/0x210 [ 476.142574][T11677] do_syscall_64+0x10b/0xf80 [ 476.142585][T11677] ? clear_bhb_loop+0x40/0x90 [ 476.142598][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.142608][T11677] RIP: 0033:0x7f18f9f9cdd9 [ 476.142617][T11677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.142627][T11677] RSP: 002b:00007f18faeb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.142636][T11677] RAX: ffffffffffffffda RBX: 00007f18fa215fa0 RCX: 00007f18f9f9cdd9 [ 476.142643][T11677] RDX: 0000200000000140 RSI: 0000000000005419 RDI: 0000000000000003 [ 476.142649][T11677] RBP: 00007f18faeb1090 R08: 0000000000000000 R09: 0000000000000000 [ 476.142654][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.142660][T11677] R13: 00007f18fa216038 R14: 00007f18fa215fa0 R15: 00007ffc50697918 [ 476.142674][T11677] [ 476.959990][T11681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.071758][T11684] binder: 11683:11684 ioctl c018620c 200000000000 returned -22 [ 477.561487][ T5739] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 477.820716][ T5739] usb 7-1: Using ep0 maxpacket: 16 [ 477.931291][ T5739] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 477.942729][ T5739] usb 7-1: config 0 has no interface number 0 [ 477.949328][ T5739] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 477.960595][ T5739] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.971076][ T5739] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 478.003766][ T5739] usb 7-1: config 0 interface 41 has no altsetting 0 [ 478.042578][ T5739] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 478.060377][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.060971][ T5699] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 478.080765][ T5739] usb 7-1: Product: syz [ 478.112303][ T5739] usb 7-1: Manufacturer: syz [ 478.124799][ T5739] usb 7-1: SerialNumber: syz [ 478.150156][ T5739] usb 7-1: config 0 descriptor?? [ 478.166846][T11679] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 478.234712][ T5739] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 478.839059][ T5699] usb 4-1: device descriptor read/64, error -71 [ 478.842301][T11705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.889406][T11705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.960757][ T5739] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 479.191963][ T5699] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 479.356878][ T5699] usb 4-1: device descriptor read/64, error -71 [ 479.482204][ T5699] usb usb4-port1: attempt power cycle [ 479.712513][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 479.841118][ T5699] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 479.882584][ T5699] usb 4-1: device descriptor read/8, error -71 [ 480.046751][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.050024][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 480.057923][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.074506][ T7800] usb 7-1: USB disconnect, device number 11 [ 480.086814][ T5739] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.098239][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.127986][ T5739] usb 3-1: config 0 descriptor?? [ 480.172143][ T5699] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 480.653381][T11712] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 481.064906][ T5699] usb 4-1: device not accepting address 56, error -71 [ 481.081465][ T5699] usb usb4-port1: unable to enumerate USB device [ 481.511299][ T5739] usbhid 3-1:0.0: can't add hid device: -71 [ 481.528096][ T5739] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 481.538674][ T9708] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 481.626264][ T5739] usb 3-1: USB disconnect, device number 55 [ 481.633979][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 481.645766][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 482.907414][T11750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11750 comm=syz.6.1597 [ 483.001681][T11754] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1599'. [ 483.059700][T11754] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1599'. [ 483.110381][T11754] netlink: 'syz.5.1599': attribute type 6 has an invalid length. [ 483.128026][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1603'. [ 483.154134][T11754] netlink: 'syz.5.1599': attribute type 6 has an invalid length. [ 483.187088][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 483.216983][T11764] bond8: entered promiscuous mode [ 483.226468][T11764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 483.234158][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 483.268554][T11768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1604'. [ 483.375365][ T7800] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 483.443309][T11767] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1604'. [ 483.637632][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.670565][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.666607][ T7800] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 484.684612][ T7800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.696780][ T7800] usb 4-1: config 0 descriptor?? [ 485.141312][T11790] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 485.153499][T11761] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 485.175913][ T7800] hid_parser_main: 73 callbacks suppressed [ 485.175934][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.190999][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.197958][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.204911][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.212063][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.219720][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.227519][ T7800] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 485.256534][ T7800] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 485.393341][ T7800] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 485.424443][ T7800] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 485.492385][ T7800] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 485.529087][ T7800] usb 4-1: USB disconnect, device number 57 [ 486.344731][ T30] audit: type=1400 audit(2000000416.849:682): avc: denied { execmem } for pid=11794 comm="syz.6.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 486.368846][ T30] audit: type=1400 audit(2000000416.949:683): avc: denied { read } for pid=11794 comm="syz.6.1612" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 486.431818][ T30] audit: type=1400 audit(2000000416.949:684): avc: denied { open } for pid=11794 comm="syz.6.1612" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 486.468268][ T30] audit: type=1400 audit(2000000417.599:685): avc: denied { create } for pid=11783 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.556886][ T30] audit: type=1400 audit(2000000417.609:686): avc: denied { write } for pid=11783 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.621772][ T30] audit: type=1400 audit(2000000417.609:687): avc: denied { read } for pid=11783 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.650881][ T5612] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 486.680954][ T30] audit: type=1400 audit(2000000417.769:688): avc: denied { write } for pid=11783 comm="syz.2.1611" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 486.711023][ T30] audit: type=1400 audit(2000000417.779:689): avc: denied { allowed } for pid=11783 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 486.732825][ T30] audit: type=1400 audit(2000000417.809:690): avc: denied { recv } for pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.112 dest=59774 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 486.759685][ T30] audit: type=1400 audit(2000000417.819:691): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.053500][T11808] macvtap1: entered promiscuous mode [ 487.612631][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'. [ 488.047268][T11814] bond5: entered promiscuous mode [ 488.078170][T11814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.229658][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1618'. [ 489.061812][ T5805] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 489.401927][ T5805] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 489.841060][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.869468][ T5805] usb 3-1: Product: syz [ 489.881402][ T5805] usb 3-1: Manufacturer: syz [ 489.891013][ T5805] usb 3-1: SerialNumber: syz [ 489.905323][ T5805] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.122328][T11833] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.132205][T11833] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.226155][ T7800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 491.619341][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 491.621001][ T7800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 491.633895][ T5739] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 491.653087][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 491.653102][ T30] audit: type=1400 audit(2000000422.029:745): avc: denied { create } for pid=11858 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 492.026119][ T5805] usb 3-1: USB disconnect, device number 56 [ 492.040854][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 492.045312][ T7800] ath9k_htc: Failed to initialize the device [ 492.055526][ T5739] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 492.064508][ T5805] usb 3-1: ath9k_htc: USB layer deinitialized [ 492.079982][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.091841][ T5739] usb 6-1: config 0 has no interface number 0 [ 492.105143][ T30] audit: type=1400 audit(2000000423.239:746): avc: denied { create } for pid=11862 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 492.132201][ T5739] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 492.146976][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.164867][ T5739] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 492.175501][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.260744][ T30] audit: type=1400 audit(2000000423.239:747): avc: denied { map_create } for pid=11864 comm="syz.2.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.280096][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.294079][ T30] audit: type=1400 audit(2000000423.239:748): avc: denied { map_read map_write } for pid=11864 comm="syz.2.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.316301][ T5739] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 492.328484][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 492.336794][ T9] usb 7-1: config 0 descriptor?? [ 492.350258][ T5739] usb 6-1: Manufacturer: syz [ 492.355516][ T5739] usb 6-1: SerialNumber: syz [ 492.366384][ T5739] usb 6-1: config 0 descriptor?? [ 492.371628][ T30] audit: type=1400 audit(2000000423.239:749): avc: denied { create } for pid=11864 comm="syz.2.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 492.392662][ T30] audit: type=1400 audit(2000000423.269:750): avc: denied { write } for pid=11862 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 492.497759][ T30] audit: type=1400 audit(2000000423.619:751): avc: denied { append } for pid=11870 comm="syz.3.1633" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 492.515484][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 492.738683][ T5739] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 492.751732][ T5739] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 492.791415][ T7800] kernel read not supported for file /dsp (pid: 7800 comm: kworker/1:8) [ 492.803695][ T5739] usb 6-1: USB disconnect, device number 32 [ 493.162077][T11883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=11883 comm=syz.3.1635 [ 493.965872][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 493.998721][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 494.006899][ T30] audit: type=1400 audit(2000000425.129:752): avc: denied { unmount } for pid=10256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 494.045201][ T9] usb 7-1: USB disconnect, device number 12 [ 494.079978][ T30] audit: type=1400 audit(2000000425.189:753): avc: denied { create } for pid=11889 comm="syz.5.1639" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 494.158191][ T30] audit: type=1400 audit(2000000425.289:754): avc: denied { setopt } for pid=11889 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.824718][T11913] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 494.837537][T11913] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 496.578319][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.622392][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.680722][ T8824] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 496.880883][ T8824] usb 6-1: Using ep0 maxpacket: 32 [ 496.900880][ T8824] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 496.931633][ T8824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.982533][ T8824] usb 6-1: config 0 descriptor?? [ 497.023365][ T8824] as10x_usb: device has been detected [ 497.044103][ T8824] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 497.092316][T11928] Mount JFS Failure: -22 [ 497.096769][T11928] jfs_mount failed w/return code = -22 [ 497.097381][ T8824] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 497.165801][ T8824] as10x_usb: error during firmware upload part1 [ 497.174801][ T8824] Registered device nBox DVB-T Dongle [ 497.270562][ T5720] usb 6-1: USB disconnect, device number 33 [ 497.361870][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 497.361886][ T30] audit: type=1400 audit(2000000428.499:763): avc: denied { map } for pid=11931 comm="syz.2.1650" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 497.667675][ T30] audit: type=1400 audit(2000000428.699:764): avc: denied { ioctl } for pid=11931 comm="syz.2.1650" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 497.754612][ T5720] Unregistered device nBox DVB-T Dongle [ 497.768087][ T5720] as10x_usb: device has been disconnected [ 498.108532][ T30] audit: type=1400 audit(2000000429.239:765): avc: denied { read write } for pid=11935 comm="syz.1.1652" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 498.184408][ T30] audit: type=1400 audit(2000000429.239:766): avc: denied { open } for pid=11935 comm="syz.1.1652" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 498.261206][ T30] audit: type=1400 audit(2000000429.239:767): avc: denied { ioctl } for pid=11935 comm="syz.1.1652" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 499.059705][T11950] netlink: 'syz.1.1655': attribute type 12 has an invalid length. [ 499.527478][T11956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=11956 comm=syz.3.1648 [ 500.320768][ T30] audit: type=1400 audit(2000000429.239:768): avc: denied { set_context_mgr } for pid=11935 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 500.703644][ T30] audit: type=1400 audit(2000000429.629:769): avc: denied { bind } for pid=11942 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 500.737080][ T30] audit: type=1400 audit(2000000429.629:770): avc: denied { write } for pid=11942 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 500.757441][ T30] audit: type=1400 audit(2000000429.649:771): avc: denied { read } for pid=11942 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 500.798581][ T30] audit: type=1400 audit(2000000430.249:772): avc: denied { mount } for pid=11949 comm="syz.1.1655" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 500.887884][T11967] fuse: Unknown parameter '' [ 500.980891][ T5805] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 501.141968][ T5805] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 501.165953][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.197738][ T5805] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 501.230290][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.266463][ T5805] usb 4-1: config 0 descriptor?? [ 501.383420][ T5612] Bluetooth: hci1: unexpected event for opcode 0x203d [ 501.484960][T11978] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 501.494348][T11978] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 501.511849][T11978] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 501.676494][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1664'. [ 502.414151][T11982] bond4: entered promiscuous mode [ 502.422087][T11982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.069299][T11997] qnx4: no qnx4 filesystem (no root dir). [ 503.128453][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 503.128470][ T30] audit: type=1400 audit(2000000434.259:781): avc: denied { create } for pid=12002 comm="syz.5.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 503.416514][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'. [ 503.758494][ T30] audit: type=1400 audit(2000000434.479:782): avc: denied { create } for pid=11994 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 503.779824][ T30] audit: type=1400 audit(2000000434.619:783): avc: denied { connect } for pid=12002 comm="syz.5.1670" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 503.830006][ T30] audit: type=1400 audit(2000000434.959:784): avc: denied { create } for pid=11994 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 503.878418][ T9] usb 4-1: USB disconnect, device number 58 [ 503.998922][ T30] audit: type=1400 audit(2000000435.129:785): avc: denied { getopt } for pid=12014 comm="syz.6.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 504.095102][ T30] audit: type=1400 audit(2000000435.229:786): avc: denied { create } for pid=12018 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.419635][ T30] audit: type=1400 audit(2000000435.549:787): avc: denied { ioctl } for pid=12018 comm="syz.3.1674" path="socket:[32388]" dev="sockfs" ino=32388 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.470836][ T5739] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 504.505641][ T30] audit: type=1400 audit(2000000435.609:788): avc: denied { ioctl } for pid=12018 comm="syz.3.1674" path="socket:[33312]" dev="sockfs" ino=33312 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.571400][ T30] audit: type=1400 audit(2000000435.699:789): avc: denied { watch_mount watch_reads } for pid=12012 comm="syz.1.1673" path="/349" dev="tmpfs" ino=1850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 504.621095][ T5739] usb 7-1: device descriptor read/64, error -71 [ 504.643952][ T30] audit: type=1400 audit(2000000435.769:790): avc: denied { sys_module } for pid=12018 comm="syz.3.1674" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 504.735740][T12024] syzkaller1: entered promiscuous mode [ 504.750047][T12024] syzkaller1: entered allmulticast mode [ 504.841087][ T7800] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 504.870886][ T5739] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 504.960888][ T5720] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 504.981738][ T7800] usb 2-1: device descriptor read/64, error -71 [ 505.000702][ T5739] usb 7-1: device descriptor read/64, error -71 [ 505.120704][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 505.128856][ T5739] usb usb7-port1: attempt power cycle [ 505.129865][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.167842][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.192143][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.214383][ T5720] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.224270][ T7800] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 505.238900][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.279914][ T5720] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.290966][ T5720] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.309355][ T5720] usb 6-1: Manufacturer: syz [ 505.322154][ T5720] usb 6-1: config 0 descriptor?? [ 505.390722][ T7800] usb 2-1: device descriptor read/64, error -71 [ 505.400939][ T5612] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 505.412293][ T5612] Bluetooth: hci1: Injecting HCI hardware error event [ 505.422421][ T4927] Bluetooth: hci1: hardware error 0x00 [ 505.501038][ T5805] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 505.530758][ T5739] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 505.541060][ T7800] usb usb2-port1: attempt power cycle [ 505.565991][ T5739] usb 7-1: device descriptor read/8, error -71 [ 505.600718][ T5720] rc_core: IR keymap rc-hauppauge not found [ 505.606902][ T5720] Registered IR keymap rc-empty [ 505.620360][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.652070][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.660744][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 505.667650][ T5805] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 505.679876][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 505.693778][ T5805] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 505.704228][ T5805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 505.714663][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 505.728003][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.739709][ T5805] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.749635][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.758425][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 505.771661][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.779426][ T5805] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 505.790756][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.799642][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.811091][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.822820][ T5805] usb 4-1: config 0 descriptor?? [ 505.830797][ T5739] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 505.840981][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.860939][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.861317][ T5739] usb 7-1: device descriptor read/8, error -71 [ 505.880972][ T7800] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 505.896853][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.922655][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.930572][ T7800] usb 2-1: device descriptor read/8, error -71 [ 505.950807][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.954339][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.973094][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.993236][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.001523][ T5739] usb usb7-port1: unable to enumerate USB device [ 506.005890][ T5720] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 506.017629][ T5720] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 506.099095][ T5739] usb 6-1: USB disconnect, device number 34 [ 506.167783][ T5805] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 506.180549][ T7800] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 506.226122][ T7800] usb 2-1: device descriptor read/8, error -71 [ 506.402267][ T7800] usb usb2-port1: unable to enumerate USB device [ 506.549090][ T5805] usb 4-1: USB disconnect, device number 59 [ 506.673987][ T5805] usblp0: removed [ 507.481282][ T4927] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 507.613955][ T5739] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 507.879041][ T5739] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 507.937311][ T5739] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 508.006462][ T5739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.065209][ T5739] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 508.154873][ T5739] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 508.231844][ T5739] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 508.276798][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 508.327190][ T5739] usb 3-1: Product: syz [ 508.350441][ T5739] usb 3-1: Manufacturer: syz [ 508.471796][ T5739] cdc_wdm 3-1:1.0: skipping garbage [ 508.498651][ T5739] cdc_wdm 3-1:1.0: skipping garbage [ 508.526422][ T5739] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 508.551099][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1688'. [ 508.560017][ T5739] cdc_wdm 3-1:1.0: Unknown control protocol [ 508.792275][ T5706] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 508.893541][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.949682][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.963353][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 508.963364][ T30] audit: type=1400 audit(2000000440.099:803): avc: denied { read write } for pid=12052 comm="syz.2.1682" name="cdc-wdm0" dev="devtmpfs" ino=3983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 509.029930][ T30] audit: type=1400 audit(2000000440.099:804): avc: denied { open } for pid=12052 comm="syz.2.1682" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 509.059531][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.075088][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.088473][ T5706] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 509.098543][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.119599][ T5706] usb 2-1: config 0 descriptor?? [ 509.256524][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1692'. [ 509.311543][ T5728] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 509.642722][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.650132][ T5728] usb 7-1: unable to get BOS descriptor or descriptor too short [ 509.658377][ T5728] usb 7-1: not running at top speed; connect to a high speed hub [ 509.666902][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.676209][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.684011][ T5728] usb 7-1: config 8 has an invalid interface number: 227 but max is 1 [ 509.694921][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.708460][ T5728] usb 7-1: config 8 has an invalid interface number: 123 but max is 1 [ 509.724181][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.775433][ T5728] usb 7-1: config 8 has no interface number 0 [ 509.840909][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 509.871570][ T5728] usb 7-1: config 8 has no interface number 1 [ 510.070286][ T5706] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 510.077520][ T5728] usb 7-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 510.090418][ T5728] usb 7-1: config 8 interface 227 has no altsetting 0 [ 510.097916][ T5706] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 510.114233][ T5728] usb 7-1: config 8 interface 123 has no altsetting 0 [ 510.126319][ T5728] usb 7-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 510.158935][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.184923][ T5728] usb 7-1: Product: syz [ 510.197843][ T5728] usb 7-1: Manufacturer: syz [ 510.219578][ T5728] usb 7-1: SerialNumber: syz [ 510.239861][ T5728] usb 7-1: Interface #227 referenced by multiple IADs [ 510.251470][ T5728] usb 7-1: Interface #123 referenced by multiple IADs [ 510.652071][ T5706] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 510.663802][ T5706] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 510.704416][ T5728] cp210x 7-1:8.227: cp210x converter detected [ 510.736660][ T5728] cp210x 7-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 510.752696][ T5706] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 510.770431][ T5739] usb 3-1: USB disconnect, device number 57 [ 510.780713][ T5728] cp210x 7-1:8.227: querying part number failed [ 510.838013][ T30] audit: type=1400 audit(2000000441.969:805): avc: denied { ioctl } for pid=12103 comm="syz.2.1696" path="socket:[32603]" dev="sockfs" ino=32603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.930593][ T5706] usb 2-1: USB disconnect, device number 48 [ 511.003893][ T30] audit: type=1400 audit(2000000441.999:806): avc: denied { write } for pid=12103 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 511.411690][ T5728] usb 7-1: cp210x converter now attached to ttyUSB0 [ 511.444794][ T30] audit: type=1400 audit(2000000441.999:807): avc: denied { bind } for pid=12103 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.478367][ T5728] cp210x 7-1:8.123: cp210x converter detected [ 511.491324][ T5728] cp210x 7-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 511.507447][ T5728] cp210x 7-1:8.123: querying part number failed [ 512.268510][ T5728] usb 7-1: cp210x converter now attached to ttyUSB1 [ 512.269698][ T30] audit: type=1400 audit(2000000441.999:808): avc: denied { setopt } for pid=12103 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 512.320514][ T5728] usb 7-1: USB disconnect, device number 17 [ 512.336347][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.345896][ T5728] cp210x 7-1:8.227: device disconnected [ 512.408541][ T5728] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 512.428232][T12123] ipvlan2: entered promiscuous mode [ 512.451977][ T5728] cp210x 7-1:8.123: device disconnected [ 513.640422][ T30] audit: type=1400 audit(2000000444.769:809): avc: denied { read append } for pid=12128 comm="syz.3.1703" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 513.782339][ T30] audit: type=1400 audit(2000000444.769:810): avc: denied { open } for pid=12128 comm="syz.3.1703" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 513.841477][ T30] audit: type=1400 audit(2000000444.819:811): avc: denied { connect } for pid=12128 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.853820][ T5728] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 513.870060][T12136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.876219][T12136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.882181][T12136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.919037][T12136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 514.171273][ T5728] usb 7-1: Using ep0 maxpacket: 16 [ 514.178204][ T5728] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 514.186814][ T5728] usb 7-1: config 0 has no interface number 0 [ 514.193408][ T5728] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 514.203887][ T5728] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.214443][ T5728] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 514.224613][ T5728] usb 7-1: config 0 interface 41 has no altsetting 0 [ 514.328684][T12142] Mount JFS Failure: -22 [ 514.333094][T12142] jfs_mount failed w/return code = -22 [ 514.424270][ T5728] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 514.444904][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.453266][ T5728] usb 7-1: Product: syz [ 514.458062][ T5728] usb 7-1: Manufacturer: syz [ 514.463210][ T5728] usb 7-1: SerialNumber: syz [ 514.484718][ T5728] usb 7-1: config 0 descriptor?? [ 514.498513][T12126] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 514.528545][ T5728] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 514.557943][ T30] audit: type=1400 audit(2000000445.689:812): avc: denied { mount } for pid=12148 comm="syz.2.1708" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 514.624641][ T30] audit: type=1400 audit(2000000445.689:813): avc: denied { mount } for pid=12148 comm="syz.2.1708" name="/" dev="hugetlbfs" ino=32660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 515.092134][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.121528][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.138507][ T30] audit: type=1400 audit(2000000446.269:814): avc: denied { write } for pid=12124 comm="syz.6.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.159278][ T30] audit: type=1400 audit(2000000446.269:815): avc: denied { nlmsg_write } for pid=12124 comm="syz.6.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.431080][ T5728] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 515.590700][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 515.607726][ T5728] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 515.622130][ T5728] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 515.635263][ T5728] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.660790][ T5728] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.678748][ T5728] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.689868][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.894594][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.960833][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 515.966969][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.973198][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.995739][ T5728] usb 2-1: usb_control_msg returned -32 [ 516.017229][ T5728] usbtmc 2-1:16.0: can't read capabilities [ 516.042814][ T7800] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 516.053208][ T30] audit: type=1400 audit(2000000447.159:816): avc: denied { name_bind } for pid=12158 comm="syz.1.1711" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 516.273015][ T5728] usb 7-1: USB disconnect, device number 18 [ 516.378859][T12170] tipc: Started in network mode [ 516.404884][T12170] tipc: Node identity c6d027651f1, cluster identity 4711 [ 516.432161][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.448021][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.458168][T12170] tipc: Enabled bearer , priority 0 [ 516.465525][ T30] audit: type=1400 audit(2000000447.599:817): avc: denied { create } for pid=12171 comm="syz.2.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 516.471342][ T7800] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 516.500408][ T7800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.508999][T12170] syzkaller0: entered promiscuous mode [ 516.514742][T12170] syzkaller0: entered allmulticast mode [ 516.551199][ T30] audit: type=1400 audit(2000000447.689:818): avc: denied { create } for pid=12171 comm="syz.2.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 516.559829][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 516.575059][ T30] audit: type=1400 audit(2000000447.689:819): avc: denied { read write } for pid=12171 comm="syz.2.1716" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 516.629379][ T7800] usb 4-1: config 0 descriptor?? [ 516.664493][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 516.666999][ T30] audit: type=1400 audit(2000000447.689:820): avc: denied { open } for pid=12171 comm="syz.2.1716" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 516.961052][ T30] audit: type=1400 audit(2000000448.059:821): avc: denied { write } for pid=12158 comm="syz.1.1711" name="usbtmc0" dev="devtmpfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 516.997437][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 516.998712][T12170] tipc: Resetting bearer [ 517.005713][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.108092][T12169] tipc: Resetting bearer [ 517.116150][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.143957][T12169] tipc: Disabling bearer [ 517.152605][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.168236][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.177048][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.185137][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.194444][ T5720] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.208585][ T5720] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò [ 517.208585][ T5720] ãуPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZCz2ñ] on [ 517.242980][ T7800] pyra 0003:1E7D:2CF6.0016: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 517.367437][T12180] fido_id[12180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.777352][ T7800] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 517.789365][ T7800] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 517.816551][ T7800] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 517.826849][T12178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.832960][T12178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.838932][T12178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.845808][T12178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.911311][ T7800] usb 4-1: USB disconnect, device number 60 [ 517.975715][T12192] netlink: 'syz.5.1721': attribute type 6 has an invalid length. [ 518.228791][T12196] omfs: Invalid superblock (0) [ 518.235142][ T5728] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 518.855852][T12200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=12200 comm=syz.5.1722 [ 519.147917][ T8824] usb 2-1: USB disconnect, device number 49 [ 519.240757][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.274104][ T5728] usb 7-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 519.284651][ T5728] usb 7-1: config 0 interface 0 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.298439][ T5728] usb 7-1: config 0 interface 0 has no altsetting 0 [ 519.305939][ T5728] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 519.323695][ T5728] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 519.343481][ T5728] usb 7-1: Manufacturer: syz [ 519.350747][ T5739] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 519.363120][ T5728] usb 7-1: config 0 descriptor?? [ 519.521035][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 519.530398][ T5739] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 519.545323][ T5739] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 519.556831][ T5739] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 519.566506][ T8824] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 519.609596][ T5739] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 519.669831][ T5739] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 519.717181][ T5728] usb 7-1: USB disconnect, device number 19 [ 519.736125][ T5739] usb 3-1: config 0 has no interface number 0 [ 519.759265][ T7800] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 519.775812][ T5739] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 519.797645][ T8824] usb 2-1: device descriptor read/64, error -71 [ 519.858947][ T5739] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 519.881852][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 519.888122][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 519.895950][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.918617][ T5739] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.955425][ T5739] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.973074][ T5739] usb 3-1: config 0 interface 125 has no altsetting 0 [ 519.980012][ T5739] usb 3-1: config 0 interface 125 has no altsetting 2 [ 519.994219][ T5739] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 520.006020][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.017024][ T5739] usb 3-1: Product: syz [ 520.032803][ T5739] usb 3-1: Manufacturer: syz [ 520.037861][ T5739] usb 3-1: SerialNumber: syz [ 520.080734][ T8824] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 520.097172][ T5739] usb 3-1: config 0 descriptor?? [ 520.147796][ T5739] usb 3-1: selecting invalid altsetting 2 [ 520.231019][ T8824] usb 2-1: device descriptor read/64, error -71 [ 520.295107][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 520.295189][ T30] audit: type=1400 audit(2000000451.429:826): avc: denied { read } for pid=12211 comm="syz.6.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 520.321888][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1727'. [ 520.340770][ T7800] usb 6-1: device descriptor read/64, error -71 [ 520.348665][T12213] syzkaller0: entered promiscuous mode [ 520.355401][T12213] syzkaller0: entered allmulticast mode [ 520.355649][ T8824] usb usb2-port1: attempt power cycle [ 520.367771][T12213] autofs: Unknown parameter '/dev/net/tun' [ 520.377921][ T5706] IPVS: starting estimator thread 0... [ 520.385295][ T30] audit: type=1400 audit(2000000451.509:827): avc: denied { create } for pid=12210 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.405304][ T30] audit: type=1400 audit(2000000451.509:828): avc: denied { setopt } for pid=12210 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.471081][T12214] IPVS: using max 46 ests per chain, 110400 per kthread [ 520.601021][ T7800] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 520.640796][ T30] audit: type=1400 audit(2000000451.769:829): avc: denied { watch } for pid=12216 comm="syz.3.1729" path="/375/control" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 520.702790][ T8824] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 520.733027][ T8824] usb 2-1: device descriptor read/8, error -71 [ 520.740786][ T7800] usb 6-1: device descriptor read/64, error -71 [ 520.863455][ T7800] usb usb6-port1: attempt power cycle [ 521.051218][ T8824] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 521.102264][ T8824] usb 2-1: device descriptor read/8, error -71 [ 521.178374][T12228] netlink: 'syz.6.1732': attribute type 12 has an invalid length. [ 521.211263][ T8824] usb usb2-port1: unable to enumerate USB device [ 521.241176][ T5739] get_1284_register timeout [ 521.258703][ C0] usb 3-1: async_complete: urb error -104 [ 521.360725][ T7800] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 521.381554][ T7800] usb 6-1: device descriptor read/8, error -71 [ 521.430715][ T5720] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 521.591067][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 521.597781][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 521.609349][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.622396][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 521.631833][ T7800] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 521.639403][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.647593][ T5720] usb 4-1: Product: syz [ 521.651987][ T5720] usb 4-1: Manufacturer: syz [ 521.656599][ T5720] usb 4-1: SerialNumber: syz [ 521.663049][ T5720] usb 4-1: config 0 descriptor?? [ 521.670539][ T5720] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 521.679953][ T5720] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 521.687948][ T7800] usb 6-1: device descriptor read/8, error -71 [ 521.811306][ T7800] usb usb6-port1: unable to enumerate USB device [ 522.012837][ T5739] usb 3-1: USB disconnect, device number 58 [ 522.150947][T12236] tipc: Enabled bearer , priority 0 [ 522.159480][T12236] syzkaller0: entered promiscuous mode [ 522.165340][T12236] syzkaller0: entered allmulticast mode [ 522.297544][ T5720] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 522.306485][T12236] tipc: Resetting bearer [ 522.450915][T12243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=12243 comm=syz.2.1734 [ 522.580411][T12235] tipc: Resetting bearer [ 522.615870][ T30] audit: type=1400 audit(2000000453.699:830): avc: denied { create } for pid=12225 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 522.727900][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 522.745892][ T30] audit: type=1400 audit(2000000453.789:831): avc: denied { write } for pid=12225 comm="syz.3.1731" path="socket:[33870]" dev="sockfs" ino=33870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 522.803053][ T30] audit: type=1400 audit(2000000453.919:832): avc: denied { bind } for pid=12244 comm="syz.5.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 522.805480][ T5720] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 522.897800][T12235] tipc: Disabling bearer [ 523.067519][ T5720] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 523.080329][T12258] syzkaller1: entered promiscuous mode [ 523.095793][ T5720] em28xx 4-1:0.0: No AC97 audio processor [ 523.100779][T12258] syzkaller1: entered allmulticast mode [ 523.125146][ T30] audit: type=1400 audit(2000000454.259:833): avc: denied { read write } for pid=12259 comm="syz.2.1741" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 523.188419][ T30] audit: type=1400 audit(2000000454.259:834): avc: denied { open } for pid=12259 comm="syz.2.1741" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 523.450914][ T8824] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 523.506134][T12270] netlink: 'syz.1.1745': attribute type 12 has an invalid length. [ 523.616656][ T8824] usb 3-1: Using ep0 maxpacket: 8 [ 523.628980][ T8824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.643888][ T8824] usb 3-1: config 1 has an invalid interface number: 97 but max is 0 [ 523.656015][ T8824] usb 3-1: config 1 has no interface number 0 [ 523.666889][ T8824] usb 3-1: config 1 interface 97 has no altsetting 0 [ 523.695197][ T8824] usb 3-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=2a.87 [ 523.705691][ T8824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.716087][ T8824] usb 3-1: Product: syz [ 523.721361][ T8824] usb 3-1: Manufacturer: syz [ 523.726486][ T8824] usb 3-1: SerialNumber: syz [ 523.741069][ T5720] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 523.867614][ T7800] usb 4-1: USB disconnect, device number 61 [ 523.877580][ T7800] em28xx 4-1:0.0: Disconnecting em28xx [ 523.903193][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 523.914752][ T5720] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 523.934833][ T5720] usb 6-1: config 0 has no interface number 0 [ 523.943791][ T7800] em28xx 4-1:0.0: Freeing device [ 523.949102][ T5720] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 523.962360][ T5720] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 523.973243][ T5720] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 523.985264][ T5720] usb 6-1: config 0 interface 41 has no altsetting 0 [ 523.994409][ T5720] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 524.004026][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.013099][ T5720] usb 6-1: Product: syz [ 524.017511][ T5720] usb 6-1: Manufacturer: syz [ 524.022693][ T5720] usb 6-1: SerialNumber: syz [ 524.065450][ T5720] usb 6-1: config 0 descriptor?? [ 524.074115][T12268] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 524.083600][ T5720] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 524.476873][ T30] audit: type=1400 audit(2000000455.609:835): avc: denied { bind } for pid=12272 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 524.653462][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.696922][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.781083][ T7800] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 524.930930][ T7800] usb 2-1: device descriptor read/64, error -71 [ 525.252489][ T7800] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 525.391162][ T7800] usb 2-1: device descriptor read/64, error -71 [ 525.593241][ T7800] usb usb2-port1: attempt power cycle [ 525.776437][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 525.776453][ T30] audit: type=1400 audit(2000000456.909:838): avc: denied { create } for pid=12289 comm="syz.3.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 525.886655][ T30] audit: type=1400 audit(2000000457.019:839): avc: denied { read } for pid=12289 comm="syz.3.1751" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 525.944551][ T30] audit: type=1400 audit(2000000457.079:840): avc: denied { bind } for pid=12289 comm="syz.3.1751" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 525.972071][ T7800] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 526.001394][ T7800] usb 2-1: device descriptor read/8, error -71 [ 526.186532][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 526.206565][ T8824] gspca_main: finepix-2.14.0 probing 04cb:013d [ 526.238062][ T8824] usb 3-1: USB disconnect, device number 59 [ 526.250932][ T7800] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 526.397938][T12302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=12302 comm=syz.3.1752 [ 526.728210][ T7800] usb 2-1: device descriptor read/8, error -71 [ 526.749296][ T5739] usb 6-1: USB disconnect, device number 39 [ 526.837133][T12306] tipc: Started in network mode [ 526.844384][ T7800] usb usb2-port1: unable to enumerate USB device [ 526.845593][T12306] tipc: Node identity e6ec1690dd86, cluster identity 4711 [ 526.860252][T12306] tipc: Enabled bearer , priority 0 [ 526.867125][T12308] netlink: 'syz.2.1756': attribute type 12 has an invalid length. [ 526.876626][T12306] syzkaller0: entered promiscuous mode [ 526.882915][T12306] syzkaller0: entered allmulticast mode [ 527.082732][T12306] tipc: Resetting bearer [ 527.092901][T12304] tipc: Resetting bearer [ 527.114580][T12304] tipc: Disabling bearer [ 529.573008][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1760'. [ 529.659927][ T30] audit: type=1400 audit(2000000460.789:841): avc: denied { create } for pid=12333 comm="syz.6.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 529.692361][ T30] audit: type=1400 audit(2000000460.819:842): avc: denied { connect } for pid=12333 comm="syz.6.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 529.793906][T12330] bond1: entered promiscuous mode [ 529.833872][T12330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.846258][ T5805] hid_parser_main: 13 callbacks suppressed [ 529.846275][ T5805] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 529.874249][ T5805] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 529.902269][ T5805] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 530.001408][ T8824] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 530.017171][ T30] audit: type=1400 audit(2000000461.149:843): avc: denied { mount } for pid=12333 comm="syz.6.1763" name="/" dev="ramfs" ino=34872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 530.055518][T12345] fido_id[12345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.082001][ T5720] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 530.134171][ T30] audit: type=1400 audit(2000000461.269:844): avc: denied { execute } for pid=12349 comm="syz.5.1767" path="/189/file0" dev="tmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.159213][ T30] audit: type=1804 audit(2000000461.269:845): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1767" name="/newroot/189/file0" dev="tmpfs" ino=996 res=1 errno=0 [ 530.182301][ T8824] usb 2-1: Using ep0 maxpacket: 16 [ 530.189092][ T8824] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 530.197730][ T8824] usb 2-1: config 0 has no interface number 0 [ 530.204369][ T8824] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 530.214862][ T8824] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.225294][ T8824] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 530.237613][ T8824] usb 2-1: config 0 interface 41 has no altsetting 0 [ 530.248131][ T8824] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 530.257978][ T8824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.266737][ T8824] usb 2-1: Product: syz [ 530.271904][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 530.271919][ T8824] usb 2-1: Manufacturer: syz [ 530.271962][ T8824] usb 2-1: SerialNumber: syz [ 530.296921][ T5720] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 530.306033][ T8824] usb 2-1: config 0 descriptor?? [ 530.307729][ T5720] usb 3-1: config 0 has no interface number 0 [ 530.317328][ T5720] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 530.330427][T12340] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 530.339819][ T5720] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.349993][ T5720] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 530.363134][ T8824] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 530.364807][ T5720] usb 3-1: config 0 interface 41 has no altsetting 0 [ 530.382659][ T5720] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 530.392752][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.401146][ T5720] usb 3-1: Product: syz [ 530.405609][ T5720] usb 3-1: Manufacturer: syz [ 530.410336][ T5720] usb 3-1: SerialNumber: syz [ 530.439948][ T5720] usb 3-1: config 0 descriptor?? [ 530.449342][T12343] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 530.459455][ T5720] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 531.070824][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.085882][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.127032][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.137868][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.573604][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 531.628969][T12364] netlink: 'syz.5.1771': attribute type 12 has an invalid length. [ 531.923201][ T30] audit: type=1400 audit(2000000463.059:846): avc: denied { create } for pid=12365 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.943470][ T30] audit: type=1400 audit(2000000463.069:847): avc: denied { setopt } for pid=12365 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.963548][ T30] audit: type=1400 audit(2000000463.089:848): avc: denied { create } for pid=12365 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 531.983974][ T30] audit: type=1400 audit(2000000463.099:849): avc: denied { ioctl } for pid=12365 comm="syz.3.1772" path="socket:[34979]" dev="sockfs" ino=34979 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 533.398438][ T8824] usb 3-1: USB disconnect, device number 60 [ 533.453711][ T5728] usb 2-1: USB disconnect, device number 58 [ 533.762412][ T30] audit: type=1400 audit(2000000464.609:850): avc: denied { accept } for pid=12378 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 533.830748][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 533.888175][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1776'. [ 533.929216][ T30] audit: type=1400 audit(2000000464.609:851): avc: denied { write } for pid=12378 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 534.178244][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 534.216254][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1776'. [ 534.498454][T12398] ipvlan2: left promiscuous mode [ 534.505682][T12398] ipvlan3: left promiscuous mode [ 534.513052][T12398] ipvlan4: left promiscuous mode [ 534.525111][T12398] bond1: left promiscuous mode [ 534.539211][T12398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.563071][T12398] bond3: left promiscuous mode [ 534.570914][T12398] bond4: left promiscuous mode [ 534.584372][T12398] bond5: left promiscuous mode [ 534.704334][ T30] audit: type=1400 audit(2000000465.419:852): avc: denied { mounton } for pid=12390 comm="syz.3.1780" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.114586][T12383] input: syz1 as /devices/virtual/input/input26 [ 535.149504][ T30] audit: type=1400 audit(2000000465.429:853): avc: denied { mount } for pid=12390 comm="syz.3.1780" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 535.279112][ T30] audit: type=1400 audit(2000000466.229:854): avc: denied { read write } for pid=12378 comm="syz.5.1776" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 535.524930][T12409] syzkaller1: entered promiscuous mode [ 535.546770][T12409] syzkaller1: entered allmulticast mode [ 535.558181][ T30] audit: type=1400 audit(2000000466.229:855): avc: denied { open } for pid=12378 comm="syz.5.1776" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 535.595133][T12408] 9p: Bad value for 'rfdno' [ 535.604445][T12408] Mount JFS Failure: -22 [ 535.604578][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.608738][T12408] jfs_mount failed w/return code = -22 [ 535.797712][ T7800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.809229][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.837462][T12411] netlink: 'syz.3.1785': attribute type 12 has an invalid length. [ 536.151009][ T7800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 536.334004][T12430] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 537.000986][ T5699] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 537.141263][ T5805] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 537.350835][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 537.380202][ T5805] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 537.395271][ T5805] usb 6-1: config 0 has no interface number 0 [ 537.402284][ T5805] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 537.412331][ T5805] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.423973][ T5699] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 537.512378][ T5805] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.534358][ T5805] usb 6-1: config 0 interface 41 has no altsetting 0 [ 537.543668][ T5805] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 537.553264][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.562593][ T5805] usb 6-1: Product: syz [ 537.566836][ T5805] usb 6-1: Manufacturer: syz [ 537.571766][ T5805] usb 6-1: SerialNumber: syz [ 537.578826][ T5805] usb 6-1: config 0 descriptor?? [ 537.587331][T12423] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 537.599061][ T5805] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 538.293771][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.319425][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.330043][ T5699] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 538.340767][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.352363][ T5699] usb 4-1: config 0 descriptor?? [ 538.373896][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'. [ 538.417527][T12448] bond5: entered promiscuous mode [ 538.423279][T12448] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.522624][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 538.658094][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.679982][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.742137][T12453] 9p: Bad value for 'rfdno' [ 538.748321][T12453] Mount JFS Failure: -22 [ 538.752713][T12453] jfs_mount failed w/return code = -22 [ 538.859505][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.870212][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.880803][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.887626][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.895618][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.909865][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.925947][ T5699] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 538.949670][ T5699] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 539.464755][ T5699] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 539.485972][ T5699] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 539.517901][ T5699] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71 [ 539.540242][ T5699] usb 4-1: USB disconnect, device number 62 [ 539.561238][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.748739][ T5720] usb 6-1: USB disconnect, device number 40 [ 539.870849][ T5728] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 540.759501][ T5728] usb 7-1: device descriptor read/64, error -71 [ 541.122795][T12477] ceph: No mds server is up or the cluster is laggy [ 541.361385][T12482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12482 comm=syz.5.1801 [ 541.397063][T12482] input: syz0 as /devices/virtual/input/input27 [ 541.423228][ T5728] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 541.455539][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 541.455553][ T30] audit: type=1400 audit(2000000472.589:858): avc: denied { create } for pid=12485 comm="syz.2.1802" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.558908][ T30] audit: type=1400 audit(2000000472.589:859): avc: denied { write } for pid=12485 comm="syz.2.1802" name="file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.611165][ T5728] usb 7-1: device descriptor read/64, error -71 [ 541.619009][ T30] audit: type=1400 audit(2000000472.589:860): avc: denied { open } for pid=12485 comm="syz.2.1802" path="/367/file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.655346][ T30] audit: type=1400 audit(2000000472.589:861): avc: denied { ioctl } for pid=12485 comm="syz.2.1802" path="/367/file0" dev="tmpfs" ino=1933 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.742245][ T5739] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 541.752496][ T5728] usb usb7-port1: attempt power cycle [ 541.794170][T12490] netlink: 'syz.5.1801': attribute type 1 has an invalid length. [ 541.892431][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.906517][ T5739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.926789][ T5739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.945368][T12491] bond2: (slave bridge3): making interface the new active one [ 541.958497][ T5739] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 541.973015][T12491] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 541.985084][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.993283][ T5739] usb 3-1: Product: syz [ 542.002013][T12498] ipvlan2: entered promiscuous mode [ 542.017396][ T5739] usb 3-1: Manufacturer: syz [ 542.022361][ T8824] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 542.037993][ T5739] usb 3-1: SerialNumber: syz [ 542.182467][ T8824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.194122][ T8824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.304648][ T5739] usb 3-1: skipping empty audio interface (v1) [ 542.321400][ T8824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.327536][T12502] 9p: Bad value for 'rfdno' [ 542.341175][T12502] Mount JFS Failure: -22 [ 542.345420][T12502] jfs_mount failed w/return code = -22 [ 542.459702][ T8824] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.523839][ T8824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.569774][ T5739] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.583334][ T8824] usb 4-1: config 0 descriptor?? [ 542.617387][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.638464][ T5739] usb 3-1: USB disconnect, device number 61 [ 542.852241][ T30] audit: type=1400 audit(2000000473.989:862): avc: denied { unlink } for pid=5615 comm="syz-executor" name="file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 543.048996][ T8824] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 543.064440][ T5617] Bluetooth: hci3: unexpected event for opcode 0x203d [ 543.228491][T12521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=12521 comm=syz.1.1811 [ 543.256801][T12495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.606807][ T30] audit: type=1400 audit(2000000474.679:863): avc: denied { map } for pid=12516 comm="syz.2.1812" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 543.643127][T12495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.673213][ T8824] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 543.697280][T12526] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1813'. [ 543.712755][ T30] audit: type=1400 audit(2000000474.679:864): avc: denied { read write } for pid=12516 comm="syz.2.1812" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 543.788895][ T30] audit: type=1400 audit(2000000474.709:865): avc: denied { accept } for pid=12516 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 543.932452][T12526] bond1: entered promiscuous mode [ 543.985058][T12526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.578085][T12535] tipc: Started in network mode [ 544.602468][T12535] tipc: Node identity 16b83f7b6bcc, cluster identity 4711 [ 544.603268][ T8824] usb 4-1: USB disconnect, device number 63 [ 544.633832][T12535] tipc: Enabled bearer , priority 0 [ 545.004669][ T30] audit: type=1800 audit(2000000476.129:866): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1814" name="/newroot/372/pids.events" dev="tmpfs" ino=1978 res=0 errno=0 [ 545.142904][T12534] tipc: Disabling bearer [ 547.081840][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 547.085440][ T5617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 547.100705][ T5617] Bluetooth: hci3: Injecting HCI hardware error event [ 547.128157][ T5612] Bluetooth: hci3: hardware error 0x00 [ 547.990998][T12580] net_ratelimit: 11 callbacks suppressed [ 547.991015][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.086983][ T30] audit: type=1400 audit(2000000479.219:867): avc: denied { write } for pid=12572 comm="syz.6.1825" name="sg0" dev="devtmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 548.765679][ T30] audit: type=1400 audit(2000000479.829:868): avc: denied { connect } for pid=12571 comm="syz.1.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.251215][ T5612] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 549.464356][T12604] tipc: Enabled bearer , priority 0 [ 549.485171][T12604] syzkaller0: entered promiscuous mode [ 549.498180][T12604] syzkaller0: entered allmulticast mode [ 549.651595][T12604] tipc: Resetting bearer [ 550.096262][ T30] audit: type=1400 audit(2000000481.229:869): avc: denied { name_connect } for pid=12596 comm="syz.3.1831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 550.124417][T12603] tipc: Resetting bearer [ 550.177372][T12603] tipc: Disabling bearer [ 550.180172][ T30] audit: type=1400 audit(2000000481.229:870): avc: denied { shutdown } for pid=12596 comm="syz.3.1831" lport=41458 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 550.201996][T12617] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 550.213249][ T30] audit: type=1400 audit(2000000481.279:871): avc: denied { ioctl } for pid=12608 comm="syz.2.1834" path="socket:[35540]" dev="sockfs" ino=35540 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.246433][ T30] audit: type=1800 audit(2000000481.299:872): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.1833" name="/newroot/201/pids.events" dev="tmpfs" ino=1057 res=0 errno=0 [ 550.313323][ T30] audit: type=1400 audit(2000000481.319:873): avc: denied { connect } for pid=12608 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.337773][ T30] audit: type=1400 audit(2000000481.319:874): avc: denied { write } for pid=12608 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.769500][ T30] audit: type=1400 audit(2000000481.869:875): avc: denied { getopt } for pid=12622 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.201180][ T5699] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 551.371414][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 551.461590][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.569060][ T5699] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 551.588482][ T5699] usb 2-1: config 6 has an invalid descriptor of length 189, skipping remainder of the config [ 551.627006][ T5699] usb 2-1: config 6 has no interface number 0 [ 551.649957][ T5699] usb 2-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.668866][ T5699] usb 2-1: config 6 interface 113 has no altsetting 0 [ 551.694066][ T30] audit: type=1400 audit(2000000482.819:876): avc: denied { write } for pid=12642 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 551.724635][ T5699] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 551.748117][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.776850][ T5699] usb 2-1: SerialNumber: syz [ 552.467493][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1841'. [ 552.487859][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.497565][T12661] ipvlan5: entered promiscuous mode [ 552.738125][T12667] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1850'. [ 552.749240][T12667] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1850'. [ 553.223376][ T7800] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 553.459313][ T5699] ftdi_sio 2-1:6.113: FTDI USB Serial Device converter detected [ 553.540992][ T7800] usb 3-1: Using ep0 maxpacket: 16 [ 553.632426][ T7800] usb 3-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 553.684746][ T5699] usb 2-1: Detected SIO [ 553.700367][ T7800] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 553.721654][ T5699] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 553.740352][ T7800] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 553.764669][ T5699] usb 2-1: USB disconnect, device number 59 [ 553.781080][ T7800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.797764][ T7800] usb 3-1: Product: syz [ 553.807366][ T5699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 553.817574][ T7800] usb 3-1: Manufacturer: syz [ 553.826341][ T7800] usb 3-1: SerialNumber: syz [ 553.834411][ T5699] ftdi_sio 2-1:6.113: device disconnected [ 554.205472][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 554.205483][ T30] audit: type=1400 audit(2000000485.339:881): avc: denied { create } for pid=12671 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.250275][ T30] audit: type=1400 audit(2000000485.379:882): avc: denied { read } for pid=12671 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.301031][ T5805] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 554.308479][ T5739] usb 3-1: USB disconnect, device number 62 [ 554.480959][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 554.490177][ T5805] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 554.517450][ T5805] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 554.535255][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.553444][ T5805] usb 7-1: Product: syz [ 554.565775][ T5805] usb 7-1: Manufacturer: syz [ 554.593124][ T5805] usb 7-1: SerialNumber: syz [ 554.988171][ T5720] IPVS: starting estimator thread 0... [ 555.109242][ T30] audit: type=1400 audit(2000000486.239:883): avc: denied { read write } for pid=12683 comm="syz.6.1856" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.134813][T12691] IPVS: using max 37 ests per chain, 88800 per kthread [ 555.584582][ T30] audit: type=1400 audit(2000000486.239:884): avc: denied { ioctl open } for pid=12683 comm="syz.6.1856" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 557.058042][ T30] audit: type=1400 audit(2000000488.189:885): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 557.099252][T12695] can0: slcan on ttyS3. [ 557.156030][ T30] audit: type=1400 audit(2000000488.249:886): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.333527][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.340332][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.386818][ T30] audit: type=1400 audit(2000000488.249:887): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.443515][ T30] audit: type=1400 audit(2000000488.249:888): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.543143][ T30] audit: type=1400 audit(2000000488.249:889): avc: denied { read } for pid=5271 comm="dhcpcd" name="n40" dev="tmpfs" ino=10244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 557.603105][T12696] can0 (unregistered): slcan off ttyS3. [ 557.605035][ T30] audit: type=1400 audit(2000000488.249:890): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=10244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 557.650438][ T5805] usb 7-1: selecting invalid altsetting 1 [ 557.677051][ T5805] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 557.677141][ T5805] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 558.045980][T12709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 558.052242][T12709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 558.058256][T12709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 558.186976][ T5805] usb 7-1: USB disconnect, device number 23 [ 558.449016][T12742] fuse: Unknown parameter '00000000000000000000003ÿ' [ 558.713937][T12752] tipc: Enabled bearer , priority 0 [ 558.730979][T12752] syzkaller0: entered promiscuous mode [ 558.744532][T12752] syzkaller0: entered allmulticast mode [ 559.148645][T12752] tipc: Resetting bearer [ 559.194564][T12751] tipc: Resetting bearer [ 559.281738][T12751] tipc: Disabling bearer [ 559.482189][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.028949][T12784] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 560.119179][T12784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.150746][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 560.157183][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 560.198363][T12791] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 560.278437][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 560.278452][ T30] audit: type=1400 audit(2000000491.409:905): avc: denied { sqpoll } for pid=12787 comm="syz.6.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 560.885078][T12815] fuse: Bad value for 'fd' [ 560.907479][T12773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.945218][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.953158][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.965643][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.160809][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.311872][ T30] audit: type=1400 audit(2000000491.539:906): avc: denied { create } for pid=12787 comm="syz.6.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 561.359168][T12773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.367812][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.376884][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.389718][T12815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 561.400633][T12815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.405451][T12773] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.415810][T12815] veth1_vlan: left promiscuous mode [ 561.423734][T12815] veth0_vlan: left promiscuous mode [ 561.429928][T12815] veth0_vlan: entered promiscuous mode [ 561.437861][T12815] veth1_vlan: entered promiscuous mode [ 561.442230][ T30] audit: type=1400 audit(2000000491.579:907): avc: denied { write } for pid=12766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.445815][T12815] veth1_macvtap: left promiscuous mode [ 561.473168][T12815] veth0_macvtap: left promiscuous mode [ 561.479616][T12815] veth0_macvtap: entered promiscuous mode [ 561.486390][T12815] veth1_macvtap: entered promiscuous mode [ 561.496909][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.505580][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.513581][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.522092][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.533325][T12815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.581038][ T30] audit: type=1400 audit(2000000491.739:908): avc: denied { write } for pid=12806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.639957][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.647084][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.992376][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.999581][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.325054][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.348127][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.750723][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.844687][T12838] tipc: Enabled bearer , priority 0 [ 562.868322][T12835] syzkaller0: entered promiscuous mode [ 562.910964][T12835] syzkaller0: entered allmulticast mode [ 562.944793][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.976737][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.529883][ T30] audit: type=1400 audit(2000000494.379:909): avc: denied { bind } for pid=12844 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.561953][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 563.568125][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 563.622172][ T6650] Bluetooth: (null): Invalid header checksum [ 564.029235][T12841] tipc: Resetting bearer [ 564.065036][ T1225] tipc: Node number set to 3653248869 [ 564.207529][T12834] tipc: Resetting bearer [ 564.520560][T12834] tipc: Disabling bearer [ 566.200958][T12889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 566.207163][T12889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 566.214212][T12889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 566.408410][T12901] tipc: Enabled bearer , priority 0 [ 566.425696][ T30] audit: type=1400 audit(2000000497.559:910): avc: denied { nlmsg_read } for pid=12904 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 566.492186][T12901] syzkaller0: entered promiscuous mode [ 566.516883][T12901] syzkaller0: entered allmulticast mode [ 566.681277][ T5805] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 566.870968][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 566.949514][ T5805] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 566.978150][ T5805] usb 2-1: config 2 has no interface number 0 [ 566.991975][ T5805] usb 2-1: config 2 interface 31 has no altsetting 0 [ 567.011818][ T5805] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 567.033717][T12901] tipc: Resetting bearer [ 567.039812][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.065768][ T5805] usb 2-1: Product: syz [ 567.078161][ T5805] usb 2-1: Manufacturer: syz [ 567.083190][T12900] tipc: Resetting bearer [ 567.094751][ T5805] usb 2-1: SerialNumber: syz [ 567.144894][T12900] tipc: Disabling bearer [ 567.272272][ T30] audit: type=1800 audit(2000000498.409:911): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.1910" name="/newroot/137/pids.events" dev="tmpfs" ino=734 res=0 errno=0 [ 567.782851][ T30] audit: type=1400 audit(2000000498.919:912): avc: denied { mounton } for pid=12928 comm="syz.3.1911" path="/414/file0" dev="tmpfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 568.249238][T12949] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 568.258662][T12949] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 568.362071][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 568.362197][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.377719][ T5805] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 568.478848][T12940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.485449][T12940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.491596][T12940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 568.704730][T12953] XFS (nbd6): SB validate failed with error -5. [ 569.438023][T12976] 9p: Bad value for 'rfdno' [ 569.443484][T12976] Mount JFS Failure: -22 [ 569.447739][T12976] jfs_mount failed w/return code = -22 [ 569.580454][ T5728] usb 2-1: USB disconnect, device number 60 [ 569.890669][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.981737][T12987] tipc: Enabled bearer , priority 0 [ 570.021732][ T30] audit: type=1800 audit(2000000501.159:913): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1925" name="/newroot/386/pids.events" dev="tmpfs" ino=2052 res=0 errno=0 [ 570.240263][ T30] audit: type=1400 audit(2000000501.349:914): avc: denied { write } for pid=12988 comm="syz.1.1925" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 570.264611][ T30] audit: type=1400 audit(2000000501.349:915): avc: denied { open } for pid=12988 comm="syz.1.1925" path="/386/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 570.289764][ T30] audit: type=1400 audit(2000000501.349:916): avc: denied { ioctl } for pid=12988 comm="syz.1.1925" path="/386/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 570.316284][T12987] syzkaller0: entered promiscuous mode [ 570.350791][T12987] syzkaller0: entered allmulticast mode [ 570.414005][T12987] tipc: Resetting bearer [ 570.430395][T12986] tipc: Resetting bearer [ 570.482856][T12986] tipc: Disabling bearer [ 570.601075][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 570.607131][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.814976][T13006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 570.824683][T13006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 572.504653][T13031] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1939'. [ 572.854007][ T5699] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 573.020730][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 573.061027][ T5699] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 573.108226][ T5699] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=ea.7b [ 573.139308][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.173291][ T5699] usb 2-1: Product: syz [ 573.183831][ T5699] usb 2-1: Manufacturer: syz [ 573.199225][ T5699] usb 2-1: SerialNumber: syz [ 573.203027][ T30] audit: type=1400 audit(2000000504.329:917): avc: denied { append } for pid=13047 comm="syz.2.1944" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 573.338903][ T30] audit: type=1400 audit(2000000504.469:918): avc: denied { read } for pid=13052 comm="syz.6.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 573.373992][T13053] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1946'. [ 573.422693][ T5699] etas_es58x 2-1:2.0: Starting syz syz (Serial Number syz) [ 574.503354][ T5699] usb 2-1: USB disconnect, device number 61 [ 574.760695][T13046] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 574.769986][T13046] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 575.048205][T13068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.920480][ T30] audit: type=1400 audit(2000000509.049:919): avc: denied { mount } for pid=13100 comm="syz.2.1958" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 578.094563][ T30] audit: type=1400 audit(2000000509.229:920): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 578.520279][T13119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.372566][T13124] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 579.381945][T13124] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 579.750746][ T5728] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 579.930920][ T5805] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 579.943405][ T5728] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.964812][ T5728] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 579.994001][ T5728] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.010842][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.026152][T13126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 580.080398][ T5728] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.090925][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 580.122578][ T5805] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 580.150786][ T5739] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 580.168983][ T5805] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 580.192468][ T5805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 580.217156][ T5805] usb 6-1: config 1 has no interface number 0 [ 580.231359][ T5805] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.271220][ T5805] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 580.304622][ T5805] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 580.314365][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.320641][ T5739] usb 4-1: Using ep0 maxpacket: 32 [ 580.372760][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 580.378629][ T5805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 580.383244][T13141] FAULT_INJECTION: forcing a failure. [ 580.383244][T13141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 580.414104][ T5739] usb 4-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 580.432483][ T5739] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.445627][T13141] CPU: 1 UID: 0 PID: 13141 Comm: syz.1.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.445656][T13141] Tainted: [L]=SOFTLOCKUP [ 580.445662][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.445671][T13141] Call Trace: [ 580.445677][T13141] [ 580.445684][T13141] dump_stack_lvl+0x100/0x190 [ 580.445708][T13141] should_fail_ex.cold+0x5/0xa [ 580.445732][T13141] _copy_from_iter+0x1f4/0x1690 [ 580.445762][T13141] ? rcu_is_watching+0x12/0xc0 [ 580.445785][T13141] ? trace_kmem_cache_alloc+0xd5/0x100 [ 580.445803][T13141] ? __kasan_slab_alloc+0x89/0x90 [ 580.445818][T13141] ? __pfx__copy_from_iter+0x10/0x10 [ 580.445841][T13141] ? __asan_memset+0x23/0x50 [ 580.445862][T13141] ? __build_skb_around+0x278/0x390 [ 580.445883][T13141] ? is_vmalloc_addr+0x86/0xa0 [ 580.445909][T13141] netlink_sendmsg+0x808/0xda0 [ 580.445932][T13141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.445950][T13141] ? pti_set_user_pgtbl+0x30/0x50 [ 580.445979][T13141] ____sys_sendmsg+0x9e1/0xb70 [ 580.445996][T13141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.446017][T13141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.446045][T13141] ___sys_sendmsg+0x190/0x1e0 [ 580.446066][T13141] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.446110][T13141] __sys_sendmsg+0x170/0x220 [ 580.446134][T13141] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.446167][T13141] ? rcu_is_watching+0x12/0xc0 [ 580.446192][T13141] do_syscall_64+0x10b/0xf80 [ 580.446210][T13141] ? clear_bhb_loop+0x40/0x90 [ 580.446229][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.446245][T13141] RIP: 0033:0x7fd3cbb9cdd9 [ 580.446259][T13141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.446274][T13141] RSP: 002b:00007fd3cca6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.446290][T13141] RAX: ffffffffffffffda RBX: 00007fd3cbe15fa0 RCX: 00007fd3cbb9cdd9 [ 580.446300][T13141] RDX: 0000000020008054 RSI: 0000200000000000 RDI: 0000000000000003 [ 580.446310][T13141] RBP: 00007fd3cca6d090 R08: 0000000000000000 R09: 0000000000000000 [ 580.446320][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.446329][T13141] R13: 00007fd3cbe16038 R14: 00007fd3cbe15fa0 R15: 00007ffc4d534fa8 [ 580.446350][T13141] [ 580.696299][ T5805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 580.706390][ T5739] usb 4-1: config 1 interface 0 has no altsetting 0 [ 580.722153][ T5739] usb 4-1: string descriptor 0 read error: -22 [ 580.729255][ T5739] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.768427][ T5728] usb 3-1: USB disconnect, device number 63 [ 580.778692][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.101827][ T30] audit: type=1400 audit(2000000512.239:921): avc: denied { ioctl } for pid=13148 comm="syz.6.1974" path="socket:[36328]" dev="sockfs" ino=36328 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 581.105164][ T5805] usb 6-1: USB disconnect, device number 41 [ 581.222760][ T5805] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 581.346258][T13152] tipc: Enabled bearer , priority 0 [ 581.374936][T13152] syzkaller0: entered promiscuous mode [ 581.389711][T13152] syzkaller0: entered allmulticast mode [ 581.459739][T13152] tipc: Resetting bearer [ 581.491626][T13151] tipc: Resetting bearer [ 581.531189][T13151] tipc: Disabling bearer [ 581.610027][ T5728] usb 4-1: USB disconnect, device number 64 [ 582.703041][ T30] audit: type=1400 audit(2000000513.839:922): avc: denied { write } for pid=13173 comm="syz.3.1982" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 582.861431][ T5739] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 582.938409][T13182] tipc: Enabled bearer , priority 0 [ 582.957269][T13182] syzkaller0: entered promiscuous mode [ 582.970479][T13182] syzkaller0: entered allmulticast mode [ 582.994232][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1985'. [ 583.005271][T13182] tipc: Resetting bearer [ 583.015278][T13181] tipc: Resetting bearer [ 583.021434][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 583.031312][ T5739] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 583.040546][ T5739] usb 6-1: config 0 has no interface number 0 [ 583.065323][ T5739] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 583.076373][T13181] tipc: Disabling bearer [ 583.084322][ T5739] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.096609][ T5739] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.107291][ T5739] usb 6-1: config 0 interface 41 has no altsetting 0 [ 583.128962][ T5739] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 583.142964][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.173890][T13184] bond9: entered promiscuous mode [ 583.179335][T13184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.180964][ T5739] usb 6-1: Product: syz [ 583.216714][ T5739] usb 6-1: Manufacturer: syz [ 583.239593][ T5739] usb 6-1: SerialNumber: syz [ 583.253360][ T5739] usb 6-1: config 0 descriptor?? [ 583.261920][T13176] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 583.283869][ T5739] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 583.444601][ T30] audit: type=1400 audit(2000000514.579:923): avc: denied { map } for pid=13198 comm="syz.6.1992" path="socket:[37541]" dev="sockfs" ino=37541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 583.489599][ T30] audit: type=1400 audit(2000000514.579:924): avc: denied { accept } for pid=13198 comm="syz.6.1992" path="socket:[37541]" dev="sockfs" ino=37541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 583.515825][ T5805] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 583.523891][ T8824] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 583.670776][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 583.678756][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.694463][ T5805] usb 2-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 583.705039][ T5805] usb 2-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 583.718678][ T5805] usb 2-1: config 1 interface 0 has no altsetting 0 [ 583.722293][ T8824] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.748944][ T8824] usb 3-1: config 0 has no interface number 0 [ 583.755253][ T8824] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 583.758231][ T5805] usb 2-1: string descriptor 0 read error: -22 [ 583.769173][ T8824] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 583.775991][ T5805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.794327][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.800738][ T8824] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.843906][ T8824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.861076][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.873602][ T8824] usb 3-1: config 0 descriptor?? [ 583.879461][T13191] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 583.913362][ T8824] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.915312][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.109533][ T30] audit: type=1400 audit(2000000515.239:925): avc: denied { setopt } for pid=13190 comm="syz.2.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 584.136684][ T30] audit: type=1400 audit(2000000515.239:926): avc: denied { ioctl } for pid=13190 comm="syz.2.1988" path="socket:[37621]" dev="sockfs" ino=37621 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 584.439401][ T5805] usb 3-1: USB disconnect, device number 64 [ 584.511456][ T8824] usb 2-1: USB disconnect, device number 62 [ 584.585625][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 584.841021][ T7800] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 585.021107][ T7800] usb 4-1: Using ep0 maxpacket: 32 [ 585.029449][ T7800] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 585.051503][ T7800] usb 4-1: config 0 has no interface number 0 [ 585.066430][ T7800] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 585.083402][ T7800] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 585.093960][ T7800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.102736][ T7800] usb 4-1: Product: syz [ 585.106979][ T7800] usb 4-1: Manufacturer: syz [ 585.112104][ T7800] usb 4-1: SerialNumber: syz [ 585.131252][ T7800] usb 4-1: config 0 descriptor?? [ 585.159080][ T7800] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 585.189098][ T7800] em28xx 4-1:0.132: Video interface 132 found: [ 585.279096][T13224] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 585.373128][T13223] netlink: 'syz.6.1998': attribute type 1 has an invalid length. [ 585.410092][T13223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.601168][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.658840][T13227] bond6: (slave geneve1): making interface the new active one [ 585.675228][T13227] bond6: (slave geneve1): Enslaving as an active interface with an up link [ 585.695138][ T1169] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 585.747310][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.024695][ T9708] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 586.058322][ T7800] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 586.117662][ T9708] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 586.239887][ T9708] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 586.298748][ T5699] usb 6-1: USB disconnect, device number 42 [ 586.343037][T13230] tipc: Started in network mode [ 586.366469][T13230] tipc: Node identity 1efe46d566be, cluster identity 4711 [ 586.375538][T13230] tipc: Enabled bearer , priority 0 [ 586.394833][T13230] syzkaller0: entered promiscuous mode [ 586.420973][T13230] syzkaller0: entered allmulticast mode [ 586.501854][T13230] tipc: Resetting bearer [ 586.529226][T13229] tipc: Resetting bearer [ 586.535572][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2004'. [ 586.563057][T13229] tipc: Disabling bearer [ 586.570495][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.585232][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.624814][ T30] audit: type=1400 audit(2000000517.739:927): avc: denied { unlink } for pid=13214 comm="syz.3.1995" name="#13" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 586.737794][ T7800] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 586.785401][T13242] bond2: entered promiscuous mode [ 586.794558][ T7800] em28xx 4-1:0.132: board has no eeprom [ 586.817639][T13242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.851679][ T30] audit: type=1400 audit(2000000517.789:928): avc: denied { mount } for pid=13214 comm="syz.3.1995" name="/" dev="overlay" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 587.032481][ T7800] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 587.042900][ T7800] em28xx 4-1:0.132: analog set to bulk mode. [ 587.155231][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.210491][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.230541][ T5805] em28xx 4-1:0.132: Registering V4L2 extension [ 587.322258][T13215] trusted_key: encrypted_key: insufficient parameters specified [ 587.732909][ T1225] usb 4-1: USB disconnect, device number 65 [ 587.739512][ T5805] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 587.753936][ T1225] em28xx 4-1:0.132: Disconnecting em28xx [ 588.268224][ T30] audit: type=1400 audit(2000000519.399:929): avc: denied { read write } for pid=13255 comm="syz.6.2008" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.334364][ T5805] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 588.343843][ T5805] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 588.352013][ T30] audit: type=1400 audit(2000000519.429:930): avc: denied { open } for pid=13255 comm="syz.6.2008" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.376718][ T5805] em28xx 4-1:0.132: No AC97 audio processor [ 588.395808][ T30] audit: type=1400 audit(2000000519.429:931): avc: denied { ioctl } for pid=13255 comm="syz.6.2008" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.401733][T13273] ip6erspan0: entered allmulticast mode [ 588.465454][ T5805] usb 4-1: Decoder not found [ 588.540127][ T30] audit: type=1400 audit(2000000519.669:932): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 588.561610][ T5805] em28xx 4-1:0.132: failed to create media graph [ 588.573538][ T5805] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 588.653355][ T5728] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 588.722745][T13275] ================================================================== [ 588.729548][ T5805] em28xx 4-1:0.132: Remote control support is not available for this card. [ 588.730836][T13275] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 588.730867][T13275] Read of size 4 at addr ffff888036aec860 by task v4l_id/13275 [ 588.730881][T13275] [ 588.730892][T13275] CPU: 0 UID: 0 PID: 13275 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 588.730915][T13275] Tainted: [L]=SOFTLOCKUP [ 588.730921][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.730931][T13275] Call Trace: [ 588.730937][T13275] [ 588.730943][T13275] dump_stack_lvl+0x100/0x190 [ 588.730963][T13275] print_report+0x13d/0x4b0 [ 588.730987][T13275] ? __virt_addr_valid+0x239/0x430 [ 588.731006][T13275] ? v4l2_open+0x351/0x490 [ 588.731027][T13275] kasan_report+0xdf/0x1d0 [ 588.731046][T13275] ? v4l2_open+0x351/0x490 [ 588.731070][T13275] v4l2_open+0x351/0x490 [ 588.731093][T13275] ? __pfx_v4l2_open+0x10/0x10 [ 588.731115][T13275] chrdev_open+0x234/0x6a0 [ 588.731136][T13275] ? __pfx_chrdev_open+0x10/0x10 [ 588.731156][T13275] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 588.731183][T13275] do_dentry_open+0x6d8/0x1660 [ 588.731201][T13275] ? __pfx_chrdev_open+0x10/0x10 [ 588.731219][T13275] vfs_open+0x82/0x3f0 [ 588.731239][T13275] path_openat+0x208c/0x31a0 [ 588.731260][T13275] ? __pfx_path_openat+0x10/0x10 [ 588.731281][T13275] do_file_open+0x20e/0x430 [ 588.731300][T13275] ? __pfx_do_file_open+0x10/0x10 [ 588.731324][T13275] ? alloc_fd+0x476/0x790 [ 588.731343][T13275] ? do_getname+0x191/0x390 [ 588.731371][T13275] do_sys_openat2+0x10d/0x1e0 [ 588.731391][T13275] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.731414][T13275] __x64_sys_openat+0x12d/0x210 [ 588.731435][T13275] ? __pfx___x64_sys_openat+0x10/0x10 [ 588.731457][T13275] ? rcu_is_watching+0x12/0xc0 [ 588.731480][T13275] do_syscall_64+0x10b/0xf80 [ 588.731498][T13275] ? clear_bhb_loop+0x40/0x90 [ 588.731515][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.731529][T13275] RIP: 0033:0x7fd3fdca7407 [ 588.731542][T13275] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 588.731556][T13275] RSP: 002b:00007ffc92c5ef70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 588.731571][T13275] RAX: ffffffffffffffda RBX: 00007fd3fe463880 RCX: 00007fd3fdca7407 [ 588.731581][T13275] RDX: 0000000000000000 RSI: 00007ffc92c60f1b RDI: ffffffffffffff9c [ 588.731591][T13275] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 588.731599][T13275] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 588.731608][T13275] R13: 00007ffc92c5f1c0 R14: 00007fd3fe5ca000 R15: 00005560206df4d8 [ 588.731623][T13275] [ 588.731628][T13275] [ 588.749959][ T1225] em28xx 4-1:0.132: Closing input extension [ 588.754458][T13275] Allocated by task 5805: [ 588.754473][T13275] kasan_save_stack+0x30/0x50 [ 588.754500][T13275] kasan_save_track+0x14/0x30 [ 588.754522][T13275] __kasan_kmalloc+0xaa/0xb0 [ 588.754542][T13275] em28xx_v4l2_init.cold+0x94/0x3a40 [ 588.754559][T13275] em28xx_init_extension+0x13a/0x200 [ 588.754585][T13275] request_module_async+0x61/0x80 [ 588.754598][T13275] process_one_work+0xa0e/0x1980 [ 588.754616][T13275] worker_thread+0x5ef/0xe50 [ 588.754633][T13275] kthread+0x370/0x450 [ 588.754649][T13275] ret_from_fork+0x72b/0xd50 [ 588.754667][T13275] ret_from_fork_asm+0x1a/0x30 [ 588.754689][T13275] [ 588.754693][T13275] Freed by task 5805: [ 588.754701][T13275] kasan_save_stack+0x30/0x50 [ 588.754719][T13275] kasan_save_track+0x14/0x30 [ 589.076137][T13275] kasan_save_free_info+0x3b/0x70 [ 589.081153][T13275] __kasan_slab_free+0x5f/0x80 [ 589.085893][T13275] kfree+0x223/0x6c0 [ 589.089768][T13275] kref_put.isra.0+0x53/0x75 [ 589.094334][T13275] em28xx_v4l2_init.cold+0x280/0x3a40 [ 589.099686][T13275] em28xx_init_extension+0x13a/0x200 [ 589.104954][T13275] request_module_async+0x61/0x80 [ 589.109961][T13275] process_one_work+0xa0e/0x1980 [ 589.114877][T13275] worker_thread+0x5ef/0xe50 [ 589.119444][T13275] kthread+0x370/0x450 [ 589.123493][T13275] ret_from_fork+0x72b/0xd50 [ 589.128064][T13275] ret_from_fork_asm+0x1a/0x30 [ 589.132809][T13275] [ 589.135111][T13275] The buggy address belongs to the object at ffff888036aec000 [ 589.135111][T13275] which belongs to the cache kmalloc-8k of size 8192 [ 589.149140][T13275] The buggy address is located 2144 bytes inside of [ 589.149140][T13275] freed 8192-byte region [ffff888036aec000, ffff888036aee000) [ 589.163083][T13275] [ 589.165387][T13275] The buggy address belongs to the physical page: [ 589.171771][T13275] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36ae8 [ 589.180504][T13275] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 589.188977][T13275] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 589.196498][T13275] page_type: f5(slab) [ 589.200457][T13275] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 589.209016][T13275] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 589.217575][T13275] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 589.226219][T13275] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 589.234864][T13275] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 589.243510][T13275] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 589.252157][T13275] page dumped because: kasan: bad access detected [ 589.258540][T13275] page_owner tracks the page as allocated [ 589.264228][T13275] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18194796232, free_ts 15662416696 [ 589.283998][T13275] post_alloc_hook+0x153/0x170 [ 589.288750][T13275] get_page_from_freelist+0x11a6/0x33b0 [ 589.294276][T13275] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 589.300150][T13275] new_slab+0xa6/0x6c0 [ 589.304198][T13275] refill_objects+0x277/0x420 [ 589.308856][T13275] __pcs_replace_empty_main+0x375/0x650 [ 589.314383][T13275] __kmalloc_cache_noprof+0x493/0x6f0 [ 589.319737][T13275] tomoyo_init_log+0xc4f/0x20c0 [ 589.320794][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.324567][T13275] tomoyo_supervisor+0x506/0x1340 [ 589.337003][T13275] tomoyo_env_perm+0x191/0x200 [ 589.341746][T13275] tomoyo_find_next_domain+0x13d7/0x2010 [ 589.347358][T13275] tomoyo_bprm_check_security+0x12d/0x1d0 [ 589.353060][T13275] security_bprm_check+0x87/0x1e0 [ 589.358061][T13275] bprm_execve+0x845/0x1650 [ 589.362542][T13275] kernel_execve+0x31e/0x3a0 [ 589.367115][T13275] try_to_run_init_process+0x14/0x60 [ 589.372379][T13275] page last free pid 10 tgid 10 stack trace: [ 589.378332][T13275] __free_frozen_pages+0x747/0x1040 [ 589.383515][T13275] vfree+0x15f/0x8d0 [ 589.387390][T13275] delayed_vfree_work+0x56/0x80 [ 589.392218][T13275] process_one_work+0xa0e/0x1980 [ 589.397137][T13275] worker_thread+0x5ef/0xe50 [ 589.401706][T13275] kthread+0x370/0x450 [ 589.405755][T13275] ret_from_fork+0x72b/0xd50 [ 589.410322][T13275] ret_from_fork_asm+0x1a/0x30 [ 589.415070][T13275] [ 589.417371][T13275] Memory state around the buggy address: [ 589.422977][T13275] ffff888036aec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.431013][T13275] ffff888036aec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.439061][T13275] >ffff888036aec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.447111][T13275] ^ [ 589.454295][T13275] ffff888036aec880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.462347][T13275] ffff888036aec900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.470393][T13275] ================================================================== [ 589.537932][ T30] audit: type=1400 audit(2000000520.659:933): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 589.568837][T13285] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 589.587610][T13285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.589269][ T30] audit: type=1400 audit(2000000520.659:934): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.600966][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.649700][ T1225] em28xx 4-1:0.132: Freeing device [ 589.662707][ T30] audit: type=1400 audit(2000000520.659:935): avc: denied { append } for pid=4958 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.726972][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.746750][ T5728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.750708][ T7800] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 589.763439][T13275] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.770639][T13275] CPU: 0 UID: 0 PID: 13275 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 589.781220][T13275] Tainted: [L]=SOFTLOCKUP [ 589.785520][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.795550][T13275] Call Trace: [ 589.798811][T13275] [ 589.801720][T13275] dump_stack_lvl+0x100/0x190 [ 589.806391][T13275] vpanic+0x552/0x970 [ 589.810348][T13275] ? __pfx_vpanic+0x10/0x10 [ 589.814831][T13275] ? v4l2_open+0x351/0x490 [ 589.819236][T13275] panic+0xd1/0xe0 [ 589.822932][T13275] ? __pfx_panic+0x10/0x10 [ 589.827324][T13275] ? v4l2_open+0x351/0x490 [ 589.831723][T13275] ? preempt_schedule_common+0x42/0xc0 [ 589.837186][T13275] ? check_panic_on_warn+0x1f/0x90 [ 589.842311][T13275] check_panic_on_warn.cold+0x19/0x34 [ 589.847671][T13275] end_report.part.0+0x3a/0x90 [ 589.852421][T13275] kasan_report.cold+0xe/0x18 [ 589.857084][T13275] ? v4l2_open+0x351/0x490 [ 589.861487][T13275] v4l2_open+0x351/0x490 [ 589.865720][T13275] ? __pfx_v4l2_open+0x10/0x10 [ 589.870465][T13275] chrdev_open+0x234/0x6a0 [ 589.874865][T13275] ? __pfx_chrdev_open+0x10/0x10 [ 589.879784][T13275] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 589.886111][T13275] do_dentry_open+0x6d8/0x1660 [ 589.890857][T13275] ? __pfx_chrdev_open+0x10/0x10 [ 589.895787][T13275] vfs_open+0x82/0x3f0 [ 589.899844][T13275] path_openat+0x208c/0x31a0 [ 589.904422][T13275] ? __pfx_path_openat+0x10/0x10 [ 589.909345][T13275] do_file_open+0x20e/0x430 [ 589.913831][T13275] ? __pfx_do_file_open+0x10/0x10 [ 589.918845][T13275] ? alloc_fd+0x476/0x790 [ 589.923155][T13275] ? do_getname+0x191/0x390 [ 589.927647][T13275] do_sys_openat2+0x10d/0x1e0 [ 589.932308][T13275] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.937493][T13275] __x64_sys_openat+0x12d/0x210 [ 589.942327][T13275] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.947686][T13275] ? rcu_is_watching+0x12/0xc0 [ 589.952438][T13275] do_syscall_64+0x10b/0xf80 [ 589.957011][T13275] ? clear_bhb_loop+0x40/0x90 [ 589.961673][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.967543][T13275] RIP: 0033:0x7fd3fdca7407 [ 589.971937][T13275] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 589.991523][T13275] RSP: 002b:00007ffc92c5ef70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 589.999915][T13275] RAX: ffffffffffffffda RBX: 00007fd3fe463880 RCX: 00007fd3fdca7407 [ 590.007862][T13275] RDX: 0000000000000000 RSI: 00007ffc92c60f1b RDI: ffffffffffffff9c [ 590.015810][T13275] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 590.023759][T13275] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 590.031705][T13275] R13: 00007ffc92c5f1c0 R14: 00007fd3fe5ca000 R15: 00005560206df4d8 [ 590.039658][T13275] [ 590.043096][T13275] Kernel Offset: disabled [ 590.047396][T13275] Rebooting in 86400 seconds..