last executing test programs: 13m21.176184674s ago: executing program 0 (id=458): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x8, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x61, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x21, 0x0}, @multicast1, {[@noop, @rr={0x7, 0x1b, 0x1b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, @private=0xa010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0x23, 0xa9, [@empty, @empty, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @remote, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r4, r0, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x3, 'syz0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 13m20.704166802s ago: executing program 0 (id=461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x400, 0x550, 0x40, 0x4, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x7}, {0x350, 0x3d}, {0x20f4ef, 0x3}, {0xc0, 0xfffffffe, 0x7fe}, 0x3, 0x182, 0x0, 0xd614, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getgroups(0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)="68fef41376d7ab3c0f25b7ddf531bbdc380be1815e1a4c29983398fb", &(0x7f0000000000), 0x3f, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101801c111c800c11ed800c00000006000000000000009c0b8bd2bb1c3ec5ba48e0313e9d5414d60ff602b7"], 0x1138}}, 0xc000) 13m19.994192527s ago: executing program 0 (id=463): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x517a3000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x8000000000000002, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0, 0xdddd0000}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r1, 0xaf02, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) r6 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f0000000280)={r4, r0, 0x1ff}) r7 = socket$inet(0x10, 0x80000, 0x0) socket(0x1a, 0x80000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x376d, &(0x7f00000004c0)={0x0, 0x1341, 0x20, 0x3, 0x1df}, 0x0, 0x0) recvfrom(r3, &(0x7f0000000580)=""/192, 0xc0, 0x103, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff000000060040150024", 0x21}, {&(0x7f00000001c0)="7a113f5665669f3684ca3032becde575214d95409da5cefe486ed113c9a9ed12206554224845abe02f32", 0x2a}], 0x2}, 0x0) recvmmsg(r7, &(0x7f0000001300), 0x0, 0x40002000, 0x0) munlockall() 13m16.965462221s ago: executing program 0 (id=481): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff8d, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x420081) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a54000000060a09040000000000000000020082e6b5d97bf67b3b0000400004803c0001800e000100696d6d656469617465000000280002801c00028018000280090002"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x8864) 13m16.866704551s ago: executing program 0 (id=484): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r0 = socket(0xa, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00", 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x7f, 0x3, 0xf, 0xfffffff2, 0x5f, 0x10000a, 0x9, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0x8000ca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2a, 0x2, 0x6, 0x4, 0x3, 0x100, 0x107fff, 0x4c74, 0x40009, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x7, 0x3, 0x39, 0x2, 0x6, 0x81, 0x5, 0x5, 0x0, 0x8, 0xe1, 0x7f, 0x9, 0xaa10, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x7ffe, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x222d8, 0x1, 0x9, 0x10, 0x8, 0xfffffffe, 0x7, 0x5, 0x30, 0xc, 0x8, 0x200, 0x100ea4, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x881, 0x7, 0x4, 0x3, 0x106, 0x4, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x7, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x1, 0x74ec1f9b, 0x4, 0x6, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0x9e0, 0xd, 0x8ce, 0x2, 0x387d, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x76, 0x8, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb5, 0xd, 0x1000000f, 0xb, 0x4, 0x78000000, 0x7, 0x9, 0x10003, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7c, 0x4000005, 0x1, 0x54fe12d5, 0xbf, 0x200, 0x400, 0xcc, 0x6, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xd, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0xce5, 0x1fd, 0x7669b26d, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x1000, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82fffb, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x9, 0x4, 0xffffffff, 0x800001, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x20000007, 0x4, 0x5, 0xbc0c, 0x3, 0x99f5, 0xffff7441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x3, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 13m16.432287426s ago: executing program 0 (id=485): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000100000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 13m16.167786298s ago: executing program 32 (id=485): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000100000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m28.003980535s ago: executing program 4 (id=3515): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x6, 0xe}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042404"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x6a, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 1m25.154201594s ago: executing program 4 (id=3529): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000580)={0x5, @output={0x0, 0x1, {0x600003, 0x9}, 0x1c0, 0x2}}) (async) ioctl$PPPIOCSFLAGS1(r0, 0x80047453, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x7}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x1, 0x0, 0x24e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x80001, 0xd1) (async, rerun: 32) r6 = syz_open_procfs(r2, &(0x7f00000003c0)='net/ip_tables_targets\x00') (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680001000200d999ce334ac5940000fcffff7f0a00000036"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) pread64(r6, &(0x7f00000004c0)=""/176, 0xb0, 0x20000000000004) syz_io_uring_setup(0x498, &(0x7f00000007c0)={0x0, 0xed9e, 0x1, 0x8000, 0x36d, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000600)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000280)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c000009080020000000021800000002fd010000000008000100ac1414000800060008000000ac538acbea5164537e286c249f69f86c88c53e1f561700dd280425ff295542ce0378d178a9cee759fe1652e87e59a80564150b1f5fee8eb0be901b8317aa1827ca99b254e86a6e8d1e0d68828ac1b020feabb65af8163ba076dce4500cf8462540e8889153a1fedd8d01a136334b59132f4badcb786193d6d85f3c43a5e5316346659f671a6759adef307f034df0b82204c09c5bd52f3012b4e8353b32b9b0ac23759691398d1d282e82d683fbf5594681c034dd81943e3ea1dea186065308"], 0x2c}}, 0x0) 1m23.747812199s ago: executing program 4 (id=3534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x22, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 1m20.144741318s ago: executing program 4 (id=3545): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x5, &(0x7f0000000040)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1m16.386676493s ago: executing program 4 (id=3552): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="01000100020047ff32e3fef600711d707ca4b2", @ANYRESDEC=r0, @ANYBLOB="106430df2dfd13c6f8eec1b3797b8ff579ad8ec818e68ac78b3d0460e84daf8c211a2becbf1eb68083509ddce068ab020e49047eae3f6edb4a8c6148836a2743e925198c5d7c0e222106de23346ebd38c50130", @ANYRESDEC=r0]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r6, &(0x7f0000000600)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000400)=""/226, 0xe2}], 0x2, &(0x7f0000000500)=""/195, 0xc3}, 0x1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1a) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000300)={0x3, 0x0, [{0xa38, 0x0, 0x400}, {0xa6a, 0x0, 0x8}, {0xc0011031, 0x0, 0x4}]}) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$MON_IOCG_STATS(r10, 0xc0109207, &(0x7f0000000180)) r11 = socket(0x1, 0x3, 0x0) bind$unix(r11, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100393ef70aee73db65107a6ae94b8d600030400000000fedbdf2700002500", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002900ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r12, &(0x7f0000000080)="a1532a25fcca69be77f5c448e7b552dcf31e5aec5e86f91eaea3429f103795ef1522a248d8c45b383100c24b", 0x2c) 1m13.519930938s ago: executing program 4 (id=3573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4) 57.662788475s ago: executing program 33 (id=3573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4) 9.855491831s ago: executing program 6 (id=3822): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES64, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x48e0c0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="fcffffff0000000000000000ff010000850000000e000000850000005000000095318ed036cc6d45c0f1ee32de39345321c386f39838902ace84298d66568ce134e5cb3083d19cf2c6e88af517ff49726135e40e4b8f5eee6f7142c0e9cd70dff536c89dca81ad9ae21125a6acff6944ed07cde5d787a7d37f915deadee6947d565bfb1ad5a43f094d3cc8198550a61c93ab13f0bf77"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) socket(0x18, 0x800, 0xfff) 7.660126807s ago: executing program 3 (id=3827): syz_emit_ethernet(0x26b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='W'}) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x8000, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x1, 0x10001011, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) read$FUSE(r6, &(0x7f0000004500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000005c0)={0x50, 0x0, r8, {0x7, 0x2b, 0x9, 0x28000000, 0x5, 0x2, 0xd, 0x8, 0x0, 0x0, 0x80, 0x6b}}, 0x50) (async) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, r9, &(0x7f0000000040)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x6, 0xfed422d7f130613e, 0x2, 0x9, 0xffaf, 0x3}, 0x20) 7.311839288s ago: executing program 2 (id=3832): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0x6) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x140e, 0x8, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20044040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="350a0000000000006111940000000000180000000000000000000000000000009500000000000000afaf5c9491011c820ec64cf63db68d33b9a2fb7a0b0ebbf16e32be48f99605e7fda0acb754bee6caddaadfa954ccaee8f87b715cfd2d124b51d096b47702f2026059c7680a261dc1954d3f37a6eed690a2e3b5eb9b92fdad80cc015eaa3c88f10da3aa8cfc45d8bba333a372df1483374434f9af635ec082d86d3228ad7019c221cc3e232c8aa364e7cd73c611dafb21634608d97225ea1c9e7ab4a4e6bd6d6c4c78abc15dc4ff925d5e23879d26edea1010"], &(0x7f0000000000)='GPL\x00'}, 0x80) 7.292710567s ago: executing program 5 (id=3833): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x9, 0x6, 0x9, 0xfffffffffffffffa, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0x0, 0xb}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x0, 0x8, 0x4, 0xff}, {0x1, 0x80, 0xdb, 0x6}, {0x3, 0x3, 0x3, 0x18}, {0xee, 0x9, 0x2, 0x2}, {0xfff8, 0xc, 0x81, 0x7}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xfff3}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40090}, 0x200400c4) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0xfffffffffffffff7, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f00007a5000/0x2000)=nil, 0x2000, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002b6000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000c42000/0x1000)=nil) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000340)=""/165, 0x41000, 0x1c, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000200)={0x1009, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x0, 0x10, 0x91}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800090b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x80c5) 7.099056789s ago: executing program 6 (id=3835): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x46081, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0xce, 0x59, 0x7, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x10, 0x7, 0x9, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x62e2e8e356c30cfb}, 0x4040) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) connect$vsock_stream(r7, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$can_j1939(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)="d7b62ce4bd1c05c68ee30ff7fb59d64122ed6f7755b8bc2f692739fd923a66d340dba3e495d80b808bd1a75af50616011553587b36114cc66c4ade79e108ce0ee65ec2567beb4356f875b4a9e81f30fd1fa7525d6718c4e20be10389db90db4987548633d26462205d0b22ad40e37f333e4670c15bc499c664cc592d63b864da422b1ba09ff3447d65186c935fed7cfd7987637238b3f2f34276d97248ebb086ae930bd93ec3209ad953a4bb77e61ff43eb1f0eabd7188495f154e013f920cc099ec12c64317e96e3847bc42c8fec064ae6cc44b60de448d3629ec591795cf9d9a39bd746d6577c542782ae73353", 0xee}}, 0x8000) r8 = syz_open_dev$usbmon(&(0x7f0000000680), 0xc54, 0x1c9000) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) r9 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x4, 0xa2400) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', r6, 0x20, 0x700, 0x80800, 0x1, {{0x5c, 0x4, 0x1, 0x26, 0x170, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0xf, [{@local, 0x2}, {@empty, 0xfc46}, {@initdev={0xac, 0x1e, 0x5, 0x0}, 0x6}, {@local, 0x7}, {@empty, 0x3}, {@local, 0xb21}, {@empty, 0x4}]}, @cipso={0x86, 0x5b, 0xfffffffffffffffc, [{0x5, 0x11, "7703327f915bc3db01a07ae5247f7a"}, {0x0, 0xe, "60e491a8764fb927f1f52b70"}, {0x0, 0x7, "e60a2b2037"}, {0x0, 0x6, "eac0e155"}, {0x4, 0x9, "26cd9b334a1857"}, {0x1, 0xd, "5022329c9113e47def162c"}, {0x5, 0x6, "0aa0ca6a"}, {0x2, 0xd, "2036a74a6005828125d657"}]}, @end, @timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@local, 0x6}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x7}, {@local, 0xffffffff}, {@loopback, 0x3}]}, @ssrr={0x89, 0x7, 0xd, [@multicast2]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0x800}]}, @cipso={0x86, 0x40, 0x2, [{0x1, 0x5, "869db4"}, {0x2, 0x7, "1da364df75"}, {0x2, 0x5, "3ef365"}, {0x0, 0x2}, {0x7, 0x6, "7f3a4144"}, {0x1, 0x11, "ddd5750d3ca70cf3caabde6f59793f"}, {0x1, 0x10, "2b855636ec7b83c1d5d7577e9af7"}]}, @timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x3, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbf90}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x10000}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="08002dbd7000fddbdf25030000002c000680060001000200000008000700", @ANYRES32=r5, @ANYBLOB="060001000a000000050002000000000006000100020000002400068008000700", @ANYRES32=r5, @ANYBLOB="060001000a0000000800030000000000060005004e20000038000680060005004e23000008000700", @ANYRES32=r5, @ANYBLOB="050002d4000000000800f800", @ANYRES32=r6, @ANYBLOB="14000400fe8000000000000000000000000000aa0400068008000400faffffff0800030003000000"], 0xb0}, 0x1, 0x0, 0x0, 0xb0}, 0x4000004) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000b40)={[0x8, 0x7, 0xb, 0x678, 0x3, 0x4, 0x3ff, 0x7, 0x5, 0xe5df, 0x8, 0x3, 0x2, 0x4, 0x6, 0x40], 0x2, 0x6000}) r11 = fcntl$getown(r9, 0x9) sched_setscheduler(r11, 0x0, &(0x7f0000000c00)=0x5) ioctl$SNDCTL_TMR_STOP(r9, 0x5403) read(r9, &(0x7f0000000c40)=""/147, 0x93) tee(r10, r2, 0x0, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000d00)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000d40)) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d80)={0x0}, &(0x7f0000000dc0)=0xc) capget(&(0x7f0000000e00)={0x19980330, r12}, &(0x7f0000000e40)={0xd3e8, 0x1, 0x8, 0x40, 0xfffffffb, 0x7a8}) r13 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r13, 0x0, 0x0) 6.812742325s ago: executing program 3 (id=3836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002cff800000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.868537956s ago: executing program 3 (id=3837): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071102500000000f99400000703000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c0672855631685dc4fb63db7dda5c6e4945d339671d36b2752defa3ebb051df912"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x80) mkdirat(r2, 0x0, 0x189) mknodat(0xffffffffffffffff, 0x0, 0x4, 0xfffffffa) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000440)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9, 0x0) read$msr(r3, &(0x7f0000032680)=""/102395, 0x18ffb) r4 = socket(0x28, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@euid_eq}]}) chdir(&(0x7f0000000300)='./file0\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, &(0x7f0000000000)='./file0/../file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="c6d8d47cca047a24"}}) getpeername(0xffffffffffffffff, 0x0, 0x0) bind$bt_sco(r1, &(0x7f0000000000), 0x8) finit_module(0xffffffffffffffff, 0x0, 0x600) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 5.759827838s ago: executing program 2 (id=3838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000002ec0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000480)="cb5ff648ae793c7a454c64151a96863c332c2a7f6d557b163ff9738b8f6f39ce3824a26b36d075c1f266fe2458a10d1968fd8f74f4cf8ce84b5337f0098171c479e1d28181ceb90b312cb95caf5f47c577affbb950bf0de3750b52aac023328ce4b67da7bf50db9915739094902d52b7386a641ad1e06b86be01ff826c5f9d71e45167595234c31149fb457e12c5f5378d9bd04030d76da8a21c5187c79f85fef5d42fbdc9e407020ebabef87a1ce3513551e709d60e12db251550ff4ba062fd15e29c25db383e1afa832864e5f2ca7bc7f62061877084f3a598e056ef3cb89684a0b876dc42d074f0a2e0382b141be4bea4", 0xf2}, {&(0x7f0000000340)="00a42258d56f759b69bc1a576e57a074a3e2d00856e63548e280ebfdd2178a1079aef83555bfc9eda84dc660f5d0e54d37cbb16a8c", 0x35}, {&(0x7f0000000580)="5c4c22ffee637218e27f2d2c0874d719fdb2ecee70e568043879bb165236c4bc3671ecff98992076d9e5e04329022ef13067cd488365767217164f942bc209e388622670cc04bfc078fcf0cdfbeea404f377237b6338a344c726ddce8ef701b7a463ef4f03369a957134c721b32ce1b8b06987b02fa6bcfc962343d0b27933e98664343e998f83a7d39231c1c5b095dacf6c43fe7793302d54602e7782de26bd14fe56e3c1e72336f8352769ba79c35549", 0xb1}, {&(0x7f0000000780)="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", 0x1000}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001b80)="0aacd79bdb5b70a38a556d2db8cdae6ffd9b0101e7d7eee0a373f85f65cde5f7f156382e1291c5ec2a6e5b003fd9cc156c4e7f4eaa345b7daa53994ac6fd0314019387b21708814c2d94f750f5571c3e0c0e42b49f766381f5d201e7cd7b38407e524085c6b87d0d815f2b", 0x6b}, {&(0x7f0000001780)="331012d884cae911d78bd8f12baabaab2539ddf715e3cf0598ddb4b3c4a525e5874c39b97d1e9f85a9645ef3e42f38d634", 0x31}, {&(0x7f00000017c0)="f57984c9c19c37cf435fd264d76ed69a9dff6b5a19eea652c041a94d8d3ff2563c867234056d10bf7f9f895432b1ca10529a80719d80a758ed7e1029ae4c0e6d5dc7a7eeeea21a263ee5b0f71e80a44af92e821abf8b535e25e95f7d78a739e21daaad617758038fec4d5f8a93a735eaa57e3d6e1a30e68e7eaa2816", 0x7c}, {&(0x7f0000001840)="1ad2ed9962c0253fae2a78ec4eb43e59d130aecbd4342517c1ccc68e4336867db03fbe321ec874777c76934e9314d05e4cac3e95ff0a98a7cbff47e38047ab731276ef3d1232d49a957718c8721306c5a666ab3d513735dc5667b8cdde03f25d89390db839ccd0a4af2a8660be4ebbd884f9da458a8fe112c68650d45b69c73fe29a119632f00e966825732f0ef461a5fed00f84e23f0c12ab1d2434a47be0d364821cbbd68473b238c648eae417c36e78ce3c4aa948fa2c977c0b5d7144ff46e93cc1d35ba3be3e2d2ccb8ecd9c05e1afed56f015b6ac4975bf3617b134d6cc15a54688e29c53a1", 0xe8}, {&(0x7f0000001940)="e1b0667e279e06339289cefd0fabee2995958c2345579c", 0x17}, {&(0x7f0000001980)="d3501d92740e1412e6e19e5967df6651c494621b2cf0ae98eceeed41a0fc18b1f3ae05564ac9ee6998ee5c613aaba0dd7ee0ffd3cae8c924fe1e7c35e8889905a395ee15f8b71591ef454774145dc72bf3d6", 0x52}, {&(0x7f0000001a00)="dce5ae6a045dfed4793d033e62a33756a7919af47040dcd8e34214b676243dfaf08463d3504e603710e2c7d6bd7609177ba7f19a75d682963a87fab3e6e1984ff3ef674f73b4e68396c802f0c06b3d3b955568b58db9582e6c2e93615d65dde280f3101df4bb845b9e41e286fdadf13ca2f0e5be7db8c408dc477cbf01b1235d64a1c33fd782d628711fb2b2ee7c8dd5929bef1f0a70691411a0a1d143a5627391656eef58d46324796897f7dfbd8f4b787dc846573498f21d8afbd27aa90a118538c35ff54efb210ece55f3dfbba001dce8cd199139e6702316d83d460c2a3faa466610d2d17a0be80c1836826feb212a735dcb34", 0xf5}], 0x7, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r8, r10, r1, r1, r13, r3]}}], 0x48, 0x800}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001d80)="86d0e82514837c6bab5e757c325ed0a39f6e22b19124763a9aa9e9c1c78c41705ac5782eb911a8d6d6a052d4c841a43c51112484023c547bd7188e1da3e5a7df2cf805b32bdf78f442205aade53770d7ae9e72db16462d5e14b7c0ff81118ca53b1277ca05531b977cd434b4e0b731c6f9c800841db34eb163ba7a1689da05778ac55240202eab6e39ec4e82b67dd35b2b3be981eb8801be829b6d82b7b068858338d1b3824f93812d668ceb34e3829daa3900408f16e1723496c6d007cb12ee94cfc52661da046d7987a467c99beff0d6a8fb5c7187440880e8a713921a57b0c54168fe8e3aa3dbafe80297cf8380f68d5c99", 0xf3}, {&(0x7f0000001e80)="eebac986f4c209d9cb5ae8afaf451f2902d62f0771eca3894b9d5fb4634a837a605eec9f6f9271ede32b41e151a9ae3f15b3dc8b8ea83f8050494ca14137306b34053b776391ac4b18ccae71c3d6737eca290d7208ad27144ebcf0cd9ad7f7d141ec85a88e4a05b99a955116", 0x6c}, {&(0x7f0000001f00)="d3d579d6927f0757b5aa7ec2c50d4a44ae5e2d1cb49894a92fb353d4c71df363d8534f8e4c8794a8c2c1769aa19d90872d59ea1980535e5587f7df4438541f035a7322e8f5f839b6c0d31cab7aed073ca6bc53a3fb64a5c393fce44b6ac250731488ec545f31b394dd59bf8fe142ef7c854a0352644fc5d9ea1b8afbd9b2848a652115510481db453016f67dd52fc97d17b0f3d5abd79ea558d1f2cada1567109bc59fd22f8963d722f45e1cd1aee61236fcf8dfa361ccfeba7c", 0xba}, {&(0x7f0000001fc0)="aec7509009", 0x5}, {&(0x7f0000002000)="e13a89eaa242cc69b21543727256c4dae53ca69fd326e85bdacc8d9a41cb91ae0d8976839dff7903d0819b", 0x2b}, {&(0x7f0000002040)="334488d8a09608d58cd8f3ae5a733dec4bfa24c1a9d65c390373c8c78d300d7022bf544793982604443af4c75bec8534cd6f8860d54e6b0464f94c2030b8532b681c692b794fa1ee6ea054c86f00229c0b742d3896c65fa57db6136a6531b888d9a9f57a4a43660e2e2344f25b583e3928d7b0455df55af5ac4cef", 0x7b}, {&(0x7f00000020c0)="c6eca6ce76ba8d9a54e384e122631d27f383f0a0e70542ac4646c6e45a9d0c8c23a4b0bf86388cadb5992f4f88b2191098dd5a61960c8127f57c2cca1ba57ef20ef93698ff902eea11882de1f710c017a3767f830b2b67eeab52597f62204e95998aad493e7454e09b688435684150e64d213fc672b5c027956182821df9397b540b528670166242dd86ae2848f0ab9de44783a4302c61ec336889f0237628bbd1298bba8d96ae8c029d1b551d7606a3e3eafcb16793c7e4e273a6867224328ff2c0", 0xc2}, {&(0x7f00000021c0)='5', 0x1}, {&(0x7f0000002200)="197528cfbf9ffae2609d71ca9140c80c92bc09774b9ab1eda744", 0x1a}], 0x9, &(0x7f0000002340)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r12, 0xffffffffffffffff, r3, r13, r10]}}, @rights={{0x20, 0x1, 0x1, [r8, r10, r8, r12]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x68, 0x2400c010}}, {{&(0x7f00000023c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002440)="8051cfce07cd6b60e879f9a8c4e1ed0e329b0bcbce81", 0x16}, {&(0x7f0000002480)="745a846eb9ba77b849ed941c46aa6bcdb77615a526496b27489d986bafb7d2bfd79e38a2695b68094f6a5f24847baefe4baccd4f6fa044e556fa0663c804c87526ed52cb762141a8df15ad2809ea700b0b837a71a259dc6e1f3d7f8fd9ebe2aab3141d80317c9503ece0094192856a8eb10888b5902343815f6ef983580eb11e970f8b138a04654ffa74b88dd6cf1f5080f38630cf22d92ec36c2e828cd3ee9b898e0b96c2d48b915cc9408b86aa1079a9145baa1567b1315a040667c666", 0xbe}, {&(0x7f0000002540)="dd33846323e63f020d462a573d6821a3f851bf3b6c18324adfcedb4f6ecf72ca1e1547f610d81e9130f737d0580608a0bd2ebd93e24af61cb953046f0fbb46369b386e3696ad35c7fc8d4dec7a8c7b1380ad0adfd01cb996cf9bbd65365509b1fffab9d552ab575bb026898e25e08d90002af32f000af50bed86b541fb8251e236a87eb6026829c8caa18cd6ed365868e79983ccaccd2fc3f98bd5f8c9896bed6c20eb3c339aa47ab2fa8807258593975b58b73f646fc65e9d9cbc615fc3a5394023e265dd543943874335f0e1b06ba3f3fc4c7fe47876972a3182cd29867762d52cb493ee9f293eb2f150f4366466ae", 0xf0}, {&(0x7f0000002640)="95fe62c51de7485b8fe3a39028b6af04a2536011fcba1922be8cbfee592cb7f28cbec3644a43f43645e5f76f000551b80bcfdba0dceb493eacc304da8dc0f9e58fdb265b97385c033bbdde76b38b", 0x4e}, {&(0x7f00000026c0)="1787b5cd34f707035467bc2059684fd34da43e4f273825371b108a9639bb89f3280a735a8f27f9ccc05dfe9f75eadf2a053989f5131e5f41022c130e055598e946805bc4daf45320a1e3fb4a8afa896cc5340334939922dfd6ababb3ec56533d4464161d5716d17f649741e202114735a75ae242131da940d9e45c32d0fdc213a76ebf31bdc121380f5d0f51068f9282aac3ab3349eb0c39b957d659f6be736dc08d588b44533b6d3e3592fadd47ce0e6f5cbf67be42cb3bd6e0177acc16c3cb2b014ea62628dbe0fa725499b16b3f28e6d4bf80f53e713170aa56fde53f41f7f10dbe", 0xe3}, {&(0x7f00000027c0)="ca0565367862863620dae5fd9e0d0a6dd6129b5f8d699856bbba1b6c8324d7c4e2ad4b37888b0e3562c59448e1bad49bbe6d1c4a589a54decc73ba8ca64b96528f639f3cb382e7f9f6f60c5a5553286b76679b33281cb5bce1f00323cbb9ec4befb7470bccd13cc2e87a333d9d1418df6463dce71a9783f9302019fbfcffc1e1859d6c51be2b60f636245afdfae6b9157c08d56d4941ddbce799e1ffb693689cacce2167755d5cc42dc21d9c7aacb773021cba604045fa844695ead38b75d5d6c2f97011c0bdf27a8a1f3af05052171a4c", 0xd1}], 0x6, &(0x7f0000002980)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}], 0x78, 0x4000000}}, {{&(0x7f0000002a00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a80)="65d40cbf2cbde7ecd36af4c9b1c7deaefb35757ab3f4ad7443786154a10b94a400b6abca4083f10ccaee071f0ef7b698a51cc5ac1346b8ce83500ea869", 0x3d}, {&(0x7f0000002ac0)="9d388c250f62fe2b5d8a56ea8f0a8723d61d9c48709597fd96f9231ead641c9998b3f1b22550167bdf27526233d065e8abb83444076d9e7fb3c8f3e93c46f2dc291ed676945d48396b3a75fa93ca9638ed8e7cd93abfb316bc6b87b09348134e38a57511aa793bbe8ae5273adb4529caf5830889c3923e5c97f5f8dabb0ad2fdabd371c3eff47be9c36fba41ad7378b299f9e05a3ed15468299a8393c8f89dd3e41f48cd8d7f5f3a48e4a3df6dca8dff", 0xb0}], 0x2, &(0x7f0000002c00)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r11, 0xffffffffffffffff, r8, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xa0, 0x44084}}, {{&(0x7f0000002cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002d40)="8176d6c715ba0aa6a784a3bd567ca6e355e4ae0f3ca6c81a1b4e70f6a3b0a4efc3bde70dbf85f43276075cc8c9c449cca23ad09c4e16e2781f234ce39b72c9bcb29a9a17be3909948e4d0190ef696352ec26b019354319d25d2f0f8da899e0240945799e2256442aa6a627cae3cf4a1fddd08765ead4ddffc62eeeba129b2dfc6548e72553818da5a2396f2878", 0x8d}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r9, r8]}}, @cred={{0x1c}}], 0x58, 0x1}}], 0x6, 0x4040004) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) 5.677436029s ago: executing program 5 (id=3839): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005f4000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = socket(0x1f, 0x1, 0xffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040001) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r3) 5.091275086s ago: executing program 1 (id=3840): pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000280)={0x1d, r4}, 0x10) r5 = socket(0x10, 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) epoll_create1(0x80000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f000086fff4)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) close_range(r9, 0xffffffffffffffff, 0x3e00000000000000) ioctl$TIOCSETD(r7, 0x5423, 0x0) r10 = fcntl$dupfd(r1, 0x406, r0) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000000)={0x8, 0x3, {0x0}, {0xffffffffffffffff}, 0xffffffff, 0xffffffffffff45e7}) sched_setattr(r11, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x6, 0x31c, 0x2, 0x4b4, 0x8, 0x5, 0x4d72}, 0x0) ioctl$TCFLSH(r10, 0x400455c8, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 5.020219805s ago: executing program 6 (id=3841): timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) r0 = socket$kcm(0x1e, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000400)}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3d, &(0x7f0000000380)=ANY=[@ANYBLOB="fd00677f2745850000f8779c5f616ff0b82059bc699385fa68b180e71b790a4f09615339b852540000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x2b, 0x6, 0xffffc) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f00000002c0)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x83) 4.999976263s ago: executing program 6 (id=3842): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x20048010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000079c0)={0x0, 0x989680}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x318, 0x11, 0x148, 0x318, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7, 0x58}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x18, r9, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 4.727487351s ago: executing program 2 (id=3843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000000740)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000000), 0x2}, {&(0x7f0000000400)="d077d9ba65c7921d0a53a860e37b7a27185afc8b61b1b875d591d92a68d1cad65c8bd4fcfcc9e976fe788c88dcb9e251b6cced9b7474a894d44e99fae8ad854a2af6f356aa1d9d4a04f6349675f2184c89fa8e778e3cc35e15e6c0", 0x5b}, {&(0x7f0000000480)="6f03e9f5af4252efc2f86177d771d934fe273df6b88e71af4b04a7fcca40e03ef474714039dab6c7337a98afd6880913917c666b823978c894014dc0b917b24c8cc6d47f1b03c8fcedb19982de401f2f15e4b616bae04d70273e8e4da3a32a73b6f214bf892479679ec95d063297d3ecc0b718c77db1ecc1ddc3c9044e360ccf2e0c38e13ce1da396b1b40fe4d999c55c259039e4f4fa7ca497ebbed557aecbe23e156eea40021a63b8b922cac89d632ae98e1c8044599a62ae2bbf0633878bcbe2ce09c8367d14c16a21004a902d2a317296f8226b034e87eaa1f7f6d8e7715883c8a84c08375f2f14dbd04c1bcf7a105ffd085d143e5b23e", 0xf9}], 0x3, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r4}}}], 0x20, 0x1}}], 0x1, 0x4000041) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000003500), 0x0, 0x0, 0x0) unshare(0x6020400) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e001000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x141000) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000300)={0x50, 0x5648, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000}]}) r9 = openat$cgroup_pressure(r6, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r9, &(0x7f0000000040)=""/252, 0xfc) 4.138051448s ago: executing program 1 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000240)="451d6d241fba6485b7bfce259935721c1ce14fed821f348aeec4da3b22095e4364ec37b368354c4a8fa101a45474f415845891771dd76ed7673e701d697fac748198df95a4c77d7df7eaf2b696be2c4f8abd90e5d572e276d1e3812cc70dd9d1745f899376ab9bb8758c466969525263", &(0x7f00000002c0)=""/4096}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700000000000250000001e00017369000f0002006e657464657673696930000008008c0001f100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xec, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r4}, &(0x7f0000001480), &(0x7f00000014c0)=r1}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008044}, 0x4880) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000240)="451d6d241fba6485b7bfce259935721c1ce14fed821f348aeec4da3b22095e4364ec37b368354c4a8fa101a45474f415845891771dd76ed7673e701d697fac748198df95a4c77d7df7eaf2b696be2c4f8abd90e5d572e276d1e3812cc70dd9d1745f899376ab9bb8758c466969525263", &(0x7f00000002c0)=""/4096}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700000000000250000001e00017369000f0002006e657464657673696930000008008c0001f100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xec, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r4}, &(0x7f0000001480), &(0x7f00000014c0)=r1}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008044}, 0x4880) (async) 4.032071579s ago: executing program 1 (id=3845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3a3f5d2129ffc724bcebbf31c6bdac74", 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r8, 0x1) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r8, r10, 0x0, 0xffffffff004) close_range(r0, r0, 0x0) 3.774886895s ago: executing program 1 (id=3846): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x8001, 0x1000}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_usb_connect(0x2, 0x58e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f61f6d10b82225649e110102030109027c050100000000090452000a020a0000052406000105240005000d240f0107000000000403000306241a2b00020724140008080005240103160524150400052415000807"], 0x0) 2.958658927s ago: executing program 2 (id=3847): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x678, 0x400000000000, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x6, 0x1, 0x9, 0x1a}, {0x5, 0x5, 0x10, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r3 = syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000640)={0x4}) mmap(&(0x7f00000d5000/0x3000)=nil, 0x3000, 0x1000002, 0x4000010, r1, 0x2c7f3000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)=']&-{$+@[\x00') fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x5, 0x2, 0x0, 0x4032, 'syz1\x00', 0x1}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x402, 'syz0\x00', 0x0}) 2.715992519s ago: executing program 3 (id=3848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.610018043s ago: executing program 5 (id=3849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/147, 0x93}], 0x4, &(0x7f0000000840)=""/31, 0x1f}, 0x76}, {{&(0x7f0000000880)=@l2, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/87, 0x57}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000a80)=""/21, 0x15}, {&(0x7f0000000ac0)=""/216, 0xd8}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/75, 0x4b}, {&(0x7f0000000d40)=""/44, 0x2c}, {&(0x7f0000000d80)=""/183, 0xb7}, {&(0x7f0000000e40)=""/125, 0x7d}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x7, &(0x7f0000000f80)=""/106, 0x6a}}, {{&(0x7f0000002080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001000)=[{&(0x7f0000002100)=""/235, 0xeb}, {&(0x7f0000002200)=""/137, 0x89}, {&(0x7f00000022c0)=""/122, 0x7a}], 0x3, &(0x7f0000002340)=""/44, 0x2c}, 0xcf}, {{&(0x7f0000002380)=@qipcrtr, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/138, 0x8a}], 0x1, &(0x7f0000002500)=""/241, 0xf1}, 0x1}, {{&(0x7f0000002600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)=""/15, 0xf}, 0x6}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/238, 0xee}, {&(0x7f0000002b40)=""/89, 0x59}], 0x2, &(0x7f0000002c00)=""/114, 0x72}, 0x7}, {{&(0x7f0000002c80)=@generic, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d00)=""/237, 0xed}, {&(0x7f0000002e00)=""/97, 0x61}, {&(0x7f0000002e80)=""/133, 0x85}, {&(0x7f0000002f40)=""/75, 0x4b}, {&(0x7f0000002fc0)=""/117, 0x75}], 0x5, &(0x7f00000030c0)=""/115, 0x73}, 0x3ff}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003140)=""/89, 0x59}], 0x1, &(0x7f0000003200)=""/178, 0xb2}, 0x3d}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000440)={0x0, 0x11e, 0x4, 0x2, 0x382}, &(0x7f0000000280), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x7f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) bind$packet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) r5 = io_uring_setup(0x2f10, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385, 0x0, r5}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000380)={{0x8, 0x4}, 0x1, 0xffffff8a, 0x400, {0x6, 0x6}, 0x8, 0x8}) pread64(r2, &(0x7f0000000000)=""/74, 0x4a, 0x80000001) socket(0x1d, 0x2, 0x6) 2.130680867s ago: executing program 1 (id=3850): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000800000000000600040001150000"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x37, 0xea5, './file0\x00'}}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.760289823s ago: executing program 6 (id=3851): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f00003bd000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) gettid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 1.599692264s ago: executing program 5 (id=3852): syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x8002, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}}, 0xfe44, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000006c0)={[0x7, 0x401, 0xaf, 0xb3, 0xfff, 0x1, 0x4, 0xe7, 0x3, 0x3e4b, 0x0, 0x6, 0x1, 0x3d31, 0x1, 0x37b5], 0xdddd1000, 0x2}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x20, "8100e1c8e80b598c36ff000800"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x0, 0x1b8, 0x428, 0x428, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], 0x10}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x6, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 1.270849907s ago: executing program 2 (id=3853): poll(0x0, 0x0, 0x7) (async) poll(0x0, 0x0, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x800008) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x40, 0x65, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x40, 0x65, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}, 0x20) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000005000000ff0f00000900000002600000", @ANYRES32, @ANYBLOB="00000100000000000000000000000000000000003ff801df59126452a3f218184b05ba56e7d393e5a96461d830e431ce5feaa8024cf9ba7c226fba228f8697a328beac1120", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/28], 0x50) 1.253438412s ago: executing program 3 (id=3854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef001cca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.168372935s ago: executing program 5 (id=3855): r0 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) fsync(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port0\x00', 0x63, 0x100c11, 0x6a81, 0x1, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810d8}) 667.966456ms ago: executing program 5 (id=3856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffeffffffff, 0xfffffffffffff7c3, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x2}, 'port0\x00', 0x7b, 0x120c16, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x14) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 125.097744ms ago: executing program 6 (id=3857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r4, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14b440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000ffffffffa000b07412d2a8de", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 105.889123ms ago: executing program 1 (id=3858): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0x8000) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 203.797µs ago: executing program 3 (id=3859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002cffb00000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x400, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) kernel console output (not intermixed with test programs): syz [ 854.457942][ T8668] usb 5-1: Manufacturer: syz [ 854.472785][ T8668] usb 5-1: SerialNumber: syz [ 854.479882][ T8668] usb 5-1: config 0 descriptor?? [ 854.520791][T18501] bond1: (slave geneve2): making interface the new active one [ 854.532172][T18483] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 854.542396][ T8668] spcp8x5 5-1:0.110: SPCP8x5 converter detected [ 854.564624][T18501] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 854.627619][ T6984] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 854.638422][ T8668] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 854.665841][ T6984] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 854.718287][ T6984] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 854.728354][ T6984] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 854.730979][T18507] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 854.749407][ T5869] usb 5-1: USB disconnect, device number 83 [ 854.759422][T18507] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3354'. [ 854.769205][ T5869] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 854.794706][ T5869] spcp8x5 5-1:0.110: device disconnected [ 854.806342][ T30] audit: type=1400 audit(4000792836.189:2113): avc: denied { create } for pid=18512 comm="syz.2.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 854.831747][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'. [ 854.971546][T18517] FAULT_INJECTION: forcing a failure. [ 854.971546][T18517] name failslab, interval 1, probability 0, space 0, times 0 [ 854.975456][ T8668] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 854.984476][T18517] CPU: 0 UID: 0 PID: 18517 Comm: syz.2.3358 Not tainted syzkaller #0 PREEMPT(full) [ 854.984499][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 854.984508][T18517] Call Trace: [ 854.984514][T18517] [ 854.984520][T18517] dump_stack_lvl+0x16c/0x1f0 [ 854.984547][T18517] should_fail_ex+0x512/0x640 [ 854.984565][T18517] ? __kmalloc_cache_noprof+0x5f/0x780 [ 854.984588][T18517] should_failslab+0xc2/0x120 [ 854.984659][T18517] __kmalloc_cache_noprof+0x72/0x780 [ 854.984679][T18517] ? do_raw_spin_lock+0x12c/0x2b0 [ 854.984696][T18517] ? kobject_uevent_env+0x265/0x1870 [ 854.984717][T18517] ? kobject_uevent_env+0x265/0x1870 [ 854.984733][T18517] kobject_uevent_env+0x265/0x1870 [ 854.984749][T18517] ? __pfx_dev_uevent_name+0x10/0x10 [ 854.984776][T18517] ? bus_to_subsys+0x131/0x160 [ 854.984799][T18517] device_add+0x10dd/0x1aa0 [ 854.984819][T18517] ? __pfx_device_add+0x10/0x10 [ 854.984835][T18517] ? __pfx___mutex_lock+0x10/0x10 [ 854.984858][T18517] input_register_device+0x7e8/0x1180 [ 854.984885][T18517] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 854.984903][T18517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 854.984924][T18517] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 854.984940][T18517] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 854.984975][T18517] ? selinux_file_ioctl+0x180/0x270 [ 854.984990][T18517] ? selinux_file_ioctl+0xb4/0x270 [ 854.985008][T18517] ? __pfx_uinput_ioctl+0x10/0x10 [ 854.985024][T18517] __x64_sys_ioctl+0x18e/0x210 [ 854.985047][T18517] do_syscall_64+0xcd/0xfa0 [ 854.985071][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.985086][T18517] RIP: 0033:0x7f0a5bf8efc9 [ 854.985099][T18517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.985113][T18517] RSP: 002b:00007f0a5ce67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.985128][T18517] RAX: ffffffffffffffda RBX: 00007f0a5c1e5fa0 RCX: 00007f0a5bf8efc9 [ 854.985137][T18517] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 854.985146][T18517] RBP: 00007f0a5ce67090 R08: 0000000000000000 R09: 0000000000000000 [ 854.985154][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.985163][T18517] R13: 00007f0a5c1e6038 R14: 00007f0a5c1e5fa0 R15: 00007fffd88115c8 [ 854.985185][T18517] [ 854.985215][T18517] input: syz1 as /devices/virtual/input/input75 [ 855.167075][ T8668] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.241832][ T8668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.253618][ T8668] usb 2-1: Product: syz [ 855.352008][ T8668] usb 2-1: Manufacturer: syz [ 855.357079][ T8668] usb 2-1: SerialNumber: syz [ 855.364799][ T8668] usb 2-1: config 0 descriptor?? [ 855.896114][T18533] IPv6: NLM_F_CREATE should be specified when creating new route [ 856.013448][ T8668] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.137186][T18535] fuse: Bad value for 'fd' [ 856.628621][T18538] input: syz1 as /devices/virtual/input/input76 [ 856.635148][T18538] input: failed to attach handler leds to device input76, error: -6 [ 856.775048][ T8668] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 856.819201][T18540] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 857.958145][ T8668] usb 2-1: USB disconnect, device number 117 [ 858.140001][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 858.149066][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 858.272377][T18564] loop2: detected capacity change from 0 to 7 [ 858.281987][T18564] loop2: [ 858.286402][T18564] loop2: partition table partially beyond EOD, truncated [ 858.738768][T18568] tmpfs: Unknown parameter 'quTta' [ 859.749875][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3376'. [ 859.798453][ T30] audit: type=1400 audit(4000792841.139:2114): avc: denied { map } for pid=18579 comm="syz.3.3376" path="socket:[80521]" dev="sockfs" ino=80521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 859.840027][T18589] input: syz1 as /devices/virtual/input/input77 [ 859.846614][T18589] input: failed to attach handler leds to device input77, error: -6 [ 860.229451][T18592] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 862.510880][ T30] audit: type=1400 audit(4000792843.889:2115): avc: denied { map } for pid=18629 comm="syz.3.3389" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 863.013097][ T30] audit: type=1400 audit(4000792843.889:2116): avc: denied { execute } for pid=18629 comm="syz.3.3389" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 863.167368][T18648] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 863.175335][T18648] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3393'. [ 863.378553][T18651] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3394'. [ 863.387646][T18651] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3394'. [ 863.396617][T18651] netlink: 'syz.5.3394': attribute type 6 has an invalid length. [ 863.404658][T18651] netlink: 'syz.5.3394': attribute type 5 has an invalid length. [ 863.412438][T18651] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3394'. [ 864.233720][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'. [ 864.251126][T18652] ceph: No mds server is up or the cluster is laggy [ 864.263428][T18654] ceph: No mds server is up or the cluster is laggy [ 864.462665][T18676] input: syz1 as /devices/virtual/input/input78 [ 864.478616][T18676] input: failed to attach handler leds to device input78, error: -6 [ 864.877040][ T5816] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 865.123520][T18678] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 865.835924][ T60] Bluetooth: Error in BCSP hdr checksum [ 866.085748][T18703] xt_connbytes: Forcing CT accounting to be enabled [ 866.104226][ T30] audit: type=1400 audit(4000792847.479:2117): avc: denied { listen } for pid=18696 comm="syz.1.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 866.602850][ T8667] kernel write not supported for file /comedi4 (pid: 8667 comm: kworker/1:8) [ 867.514231][ T8667] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 867.621377][ T5816] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 867.691013][ T8667] usb 3-1: device descriptor read/64, error -71 [ 867.945571][ T8667] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 868.123566][ T8667] usb 3-1: device descriptor read/64, error -71 [ 868.188780][ T42] kernel write not supported for file /comedi4 (pid: 42 comm: kworker/1:1) [ 868.254749][ T8667] usb usb3-port1: attempt power cycle [ 868.294154][ T5889] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 868.614713][ T8667] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 868.890331][T18767] loop2: detected capacity change from 0 to 7 [ 868.898649][ T8667] usb 3-1: device descriptor read/8, error -71 [ 868.914943][T18767] loop2: [ 868.917929][T18767] loop2: partition table partially beyond EOD, truncated [ 869.014285][ T5889] usb 2-1: device descriptor read/64, error -71 [ 869.217607][ T8667] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 869.268546][ T8667] usb 3-1: device descriptor read/8, error -71 [ 869.285200][ T5889] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 869.394777][ T8667] usb usb3-port1: unable to enumerate USB device [ 869.446817][ T5889] usb 2-1: device descriptor read/64, error -71 [ 869.514352][T18775] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3430'. [ 869.566084][T18775] gretap0: entered promiscuous mode [ 869.582054][T18776] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3430'. [ 869.697027][ T5889] usb usb2-port1: attempt power cycle [ 869.697279][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.717619][T18776] 0ªî{X¹¦: renamed from gretap0 [ 869.746930][T18776] 0ªî{X¹¦: left promiscuous mode [ 869.752086][T18776] 0ªî{X¹¦: entered allmulticast mode [ 869.761519][T18776] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 870.074282][ T5889] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 870.104632][ T5889] usb 2-1: device descriptor read/8, error -71 [ 870.144932][T18784] netlink: 62 bytes leftover after parsing attributes in process `syz.3.3431'. [ 870.404047][ T5889] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 870.536486][ T5889] usb 2-1: device descriptor read/8, error -71 [ 870.644463][ T5889] usb usb2-port1: unable to enumerate USB device [ 870.930763][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3433'. [ 871.776393][ T5937] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 872.003423][ T8667] kernel write not supported for file /comedi4 (pid: 8667 comm: kworker/1:8) [ 872.126546][T18810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.182391][T18809] IPVS: Scheduler module ip_vs_ not found [ 872.189483][T18810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3440'. [ 872.313156][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3441'. [ 872.399136][T18814] macvlan2: entered promiscuous mode [ 872.404530][T18814] macvlan2: entered allmulticast mode [ 872.410701][T18814] bond2: entered promiscuous mode [ 872.421230][T18814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 872.494232][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 872.513070][T18814] bond2: left promiscuous mode [ 872.534156][ T5937] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 872.562954][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.573081][ T5937] usb 3-1: config 0 descriptor?? [ 872.581255][ T5937] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 872.634171][ T5889] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 873.232857][ T5937] gspca_sonixj: reg_w1 err -110 [ 873.249356][ T5937] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 873.286394][ T5889] usb 5-1: device descriptor read/64, error -71 [ 873.574170][ T5889] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 873.744983][ T5889] usb 5-1: device descriptor read/64, error -71 [ 873.907473][ T5889] usb usb5-port1: attempt power cycle [ 874.079141][T18835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3446'. [ 874.749075][ T5937] usb 3-1: USB disconnect, device number 110 [ 874.784153][ T5889] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 874.816274][ T5889] usb 5-1: device descriptor read/8, error -71 [ 874.930565][ T977] kernel write not supported for file /comedi4 (pid: 977 comm: kworker/0:2) [ 875.034175][ T42] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 875.114900][ T5889] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 875.154620][ T5889] usb 5-1: device descriptor read/8, error -71 [ 875.186175][ T42] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 875.195759][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.207151][ T42] usb 4-1: config 0 descriptor?? [ 875.274241][ T977] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 875.282249][ T5889] usb usb5-port1: unable to enumerate USB device [ 875.980475][ T42] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 875.990770][ T42] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 875.998341][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 876.009575][ T42] asix 4-1:0.0: probe with driver asix failed with error -71 [ 876.020247][ T42] usb 4-1: USB disconnect, device number 103 [ 876.024805][ T977] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 876.034853][ T977] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.046760][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 876.056810][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.066856][ T977] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.080103][ T977] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 876.089273][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.995704][T18869] sd 0:0:1:0: PR command failed: 1026 [ 877.001197][T18869] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 877.008074][T18869] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 877.033294][ T977] usb 2-1: usb_control_msg returned -32 [ 877.041976][ T977] usbtmc 2-1:16.0: can't read capabilities [ 877.684185][ T42] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 877.748705][T18880] input: syz1 as /devices/virtual/input/input79 [ 877.755950][T18880] input: failed to attach handler leds to device input79, error: -6 [ 877.837395][ T42] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 877.855796][ T42] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 877.857674][T18881] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 877.875595][ T42] usb 3-1: Product: syz [ 877.879851][ T42] usb 3-1: Manufacturer: syz [ 877.884680][ T42] usb 3-1: SerialNumber: syz [ 877.956089][ T42] usb 3-1: config 0 descriptor?? [ 877.975061][ T42] ch341 3-1:0.0: ch341-uart converter detected [ 878.714709][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 878.727745][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 878.742093][ T5937] usb 2-1: USB disconnect, device number 122 [ 878.751475][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 878.755203][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.784290][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.797411][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.803660][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.811900][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.818106][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.826912][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.834430][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.835407][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 878.842227][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.860556][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.868371][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.874838][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.883541][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.890507][ T30] audit: type=1400 audit(4000792860.269:2118): avc: denied { call } for pid=18888 comm="syz.5.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 878.890741][T18894] binder_alloc: 18888: binder_alloc_buf, no vma [ 878.917839][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.926321][T18894] binder_alloc: 18888: binder_alloc_buf, no vma [ 878.951651][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.959119][ T42] usb 3-1: failed to send control message: -71 [ 878.959126][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 878.959213][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 878.965511][ T42] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 878.973033][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 879.032342][ T42] usb 3-1: USB disconnect, device number 111 [ 879.047623][ T42] ch341 3-1:0.0: device disconnected [ 879.048038][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 879.077750][T18896] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 879.085266][T18896] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 879.093161][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 879.109300][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 879.133889][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 879.141037][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 879.156510][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 879.166628][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 879.197203][T18892] binder: BINDER_SET_CONTEXT_MGR already set [ 879.203595][T18892] binder: 18888:18892 ioctl 4018620d 200000000040 returned -16 [ 879.244004][T18890] binder_alloc: binder_alloc_mmap_handler: 18888 200000ffc000-200000ffe000 already mapped failed -16 [ 879.544450][ T977] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 879.695713][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 879.725454][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.756709][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 879.769819][T18917] veth3: entered promiscuous mode [ 879.789924][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 879.883430][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 879.934937][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.954704][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.017933][T18923] libceph: resolve '4.' (ret=-3): failed [ 880.035790][ T977] usb 5-1: Manufacturer: syz [ 880.050633][ T977] usb 5-1: config 0 descriptor?? [ 880.359883][T18925] veth0: entered promiscuous mode [ 880.380377][T18925] veth0: left promiscuous mode [ 880.482603][T18933] input: syz1 as /devices/virtual/input/input81 [ 880.489036][ T977] rc_core: IR keymap rc-hauppauge not found [ 880.489963][T18933] input: failed to attach handler leds to device input81, error: -6 [ 880.495119][ T977] Registered IR keymap rc-empty [ 880.510143][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 880.534464][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 880.560943][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 880.583605][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 [ 880.741269][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 881.550444][T18939] vivid-003: ================= START STATUS ================= [ 881.564224][T18939] vivid-003: Radio HW Seek Mode: Bounded [ 881.570092][T18939] vivid-003: Radio Programmable HW Seek: false [ 881.574884][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 881.583624][T18939] vivid-003: RDS Rx I/O Mode: Block I/O [ 881.594661][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 881.614312][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.004147][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 882.031318][T18937] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 882.044473][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.053670][T18939] vivid-003: Generate RBDS Instead of RDS: false [ 882.064387][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.078907][T18939] vivid-003: RDS Reception: true [ 882.084333][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.114346][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.133946][T18939] vivid-003: RDS Program Type: 0 inactive [ 882.144517][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.154386][T18939] vivid-003: RDS PS Name: inactive [ 882.160941][T18939] vivid-003: RDS Radio Text: inactive [ 882.202123][T18939] vivid-003: RDS Traffic Announcement: false inactive [ 882.204138][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 882.209096][T18939] vivid-003: RDS Traffic Program: false inactive [ 882.222934][T18939] vivid-003: RDS Music: false inactive [ 882.228964][T18939] vivid-003: ================== END STATUS ================== [ 882.246229][ T977] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 882.256521][ T977] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 882.267834][ T977] usb 5-1: USB disconnect, device number 88 [ 882.434141][ T42] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 882.464141][ T5889] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 882.587341][ T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 882.597809][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.605880][ T42] usb 4-1: Product: syz [ 882.610100][ T42] usb 4-1: Manufacturer: syz [ 882.614743][ T42] usb 4-1: SerialNumber: syz [ 882.625597][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.631030][ T42] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 882.638697][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.645601][ T8668] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 882.662764][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.672581][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.682506][ T5889] usb 3-1: Product: syz [ 882.686732][ T5889] usb 3-1: Manufacturer: syz [ 882.689238][ T5869] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 882.691344][ T5889] usb 3-1: SerialNumber: syz [ 882.847445][ T8668] usb 2-1: config 1 interface 0 has no altsetting 0 [ 882.865585][ T8668] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 882.880287][ T8668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.888600][ T8668] usb 2-1: Product: syz [ 882.892842][ T8668] usb 2-1: Manufacturer: syz [ 882.897853][ T8668] usb 2-1: SerialNumber: syz [ 883.100436][T18965] sp0: Synchronizing with TNC [ 883.124585][ T5889] usb 3-1: cannot find UAC_HEADER [ 883.149456][ T5889] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 883.162343][ T5889] usb 3-1: USB disconnect, device number 112 [ 883.335378][ T8668] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 883.754536][ T5869] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 883.786854][ T5869] ath9k_htc: Failed to initialize the device [ 883.851699][ T42] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 883.865294][ T5869] usb 4-1: ath9k_htc: USB layer deinitialized [ 884.026959][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 884.047695][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.093281][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.135454][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 884.149361][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 884.161684][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 884.169270][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.183050][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.281742][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 884.309303][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 884.349830][ T42] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 884.357970][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.395585][ T42] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.431750][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 884.443127][ T42] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 884.458694][ T42] usb 5-1: string descriptor 0 read error: -22 [ 884.465472][ T42] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 884.475042][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.490865][ T42] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 884.554247][ T977] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 884.695212][ T8668] usb 5-1: USB disconnect, device number 89 [ 884.724119][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 884.772325][ T977] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 884.797562][ T977] usb 3-1: config 0 has no interface number 0 [ 884.936316][ T977] usb 3-1: config 0 interface 31 has no altsetting 0 [ 884.960598][ T977] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a3a, bcdDevice=82.49 [ 884.982839][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.001166][ T977] usb 3-1: Product: syz [ 885.010941][ T977] usb 3-1: Manufacturer: syz [ 885.021981][ T977] usb 3-1: SerialNumber: syz [ 885.042268][ T977] usb 3-1: config 0 descriptor?? [ 885.181556][ T977] usb 2-1: USB disconnect, device number 123 [ 885.190625][ T977] usblp0: removed [ 885.320690][ T30] audit: type=1400 audit(4000792866.659:2119): avc: denied { setopt } for pid=18984 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 885.423964][ T977] usb 4-1: USB disconnect, device number 104 [ 886.304154][ T5869] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 886.455569][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.533227][ T977] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 886.724914][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 886.736195][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 886.747269][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 886.762673][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.772031][ T5869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.780580][ T5869] usb 4-1: Manufacturer: syz [ 886.790527][ T5869] usb 4-1: config 0 descriptor?? [ 886.810223][ T977] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.821639][ T977] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.831641][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 886.839013][ T977] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 886.848321][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.859433][ T977] usb 5-1: config 0 descriptor?? [ 886.895022][ T30] audit: type=1400 audit(4000792868.279:2120): avc: denied { watch } for pid=19009 comm="syz.5.3493" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 886.921080][ T30] audit: type=1400 audit(4000792868.279:2121): avc: denied { watch_sb watch_reads } for pid=19009 comm="syz.5.3493" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 887.064178][ T5869] rc_core: IR keymap rc-hauppauge not found [ 887.070973][ T5869] Registered IR keymap rc-empty [ 887.078299][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.104390][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.125235][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 887.140382][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input82 [ 887.154566][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.221861][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.250019][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.270249][T19003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.284354][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.294653][T19003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.305904][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.321787][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 887.333008][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 887.334625][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.342856][ T977] usb 5-1: USB disconnect, device number 90 [ 887.360011][ T30] audit: type=1400 audit(4000792868.739:2122): avc: denied { read } for pid=19015 comm="syz.1.3494" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 887.383752][ T30] audit: type=1400 audit(4000792868.739:2123): avc: denied { open } for pid=19015 comm="syz.1.3494" path="/102/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 887.383838][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.413910][ T30] audit: type=1400 audit(4000792868.759:2124): avc: denied { ioctl } for pid=19015 comm="syz.1.3494" path="/102/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 887.456207][T15557] usb 3-1: USB disconnect, device number 113 [ 887.465597][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 887.472788][T18998] vivid-001: ================= START STATUS ================= Mode: Bounded [ 888.085822][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 888.131206][T19019] virtiofs: Unknown parameter 'always 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 18 nlmon0 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 20 batadv0 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 21 vxcan0 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 22 vxcan1 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 23 veth0 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 24 veth1 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 25 wg0 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 26 wg1 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 27 wg2 : 1 V3 [ 888.131206][T19019] 010000E0 1 0:00000000 0 [ 888.131206][T19019] 28 veth0_to_bridge: 1 ' [ 888.239752][T18998] vivid-001: Radio Programmable HW Seek: false [ 888.247482][T18998] vivid-001: RDS Rx I/O Mode: Block I/O [ 888.253183][T18998] vivid-001: Generate RBDS Instead of RDS: false [ 888.259759][T18998] vivid-001: RDS Reception: true [ 888.264803][T18998] vivid-001: RDS Program Type: 0 inactive [ 888.270542][T18998] vivid-001: RDS PS Name: inactive [ 888.276237][T18998] vivid-001: RDS Radio Text: inactive [ 888.281723][T18998] vivid-001: RDS Traffic Announcement: false inactive [ 888.288627][T18998] vivid-001: RDS Traffic Program: false inactive [ 888.292407][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 888.295064][T18998] vivid-001: RDS Music: false inactive [ 888.309338][T18998] vivid-001: ================== END STATUS ================== [ 888.321597][T19016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3494'. [ 888.375653][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 888.400912][ T5869] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 889.061986][ T5869] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 889.101208][ T5869] usb 4-1: USB disconnect, device number 105 [ 889.814673][T15557] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 890.115533][T15557] usb 5-1: Using ep0 maxpacket: 8 [ 890.254685][T15557] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.274456][T15557] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.284268][T15557] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 890.294188][T15557] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.307270][T15557] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 890.316481][T15557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.440328][T15557] usb 5-1: GET_CAPABILITIES returned 0 [ 891.450090][T15557] usbtmc 5-1:16.0: can't read capabilities [ 892.023412][T19070] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 892.057265][T19070] overlayfs: missing 'lowerdir' [ 892.451266][T19075] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 892.459178][T19075] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 892.469129][T19075] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 892.478970][ T5869] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 892.490457][T19075] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 892.645754][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.673221][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 892.689233][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 892.691954][T19082] netlink: 62 bytes leftover after parsing attributes in process `syz.2.3510'. [ 892.703193][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 892.712936][T19080] : Can't lookup blockdev [ 892.726357][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 892.744228][ T5869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 892.769589][T19083] delete_channel: no stack [ 892.774667][T19083] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 892.786117][T19083] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3513'. [ 892.795817][T19083] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 892.862290][ T5869] usb 4-1: Manufacturer: syz [ 892.888771][ T5869] usb 4-1: config 0 descriptor?? [ 892.895200][T15557] usb 5-1: USB disconnect, device number 91 [ 892.954214][T19085] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3511'. [ 893.175397][ T5869] rc_core: IR keymap rc-hauppauge not found [ 893.181407][ T5869] Registered IR keymap rc-empty [ 893.186904][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.228653][T19092] delete_channel: no stack [ 893.344558][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.379617][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 893.397350][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 893.484911][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.524462][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.534565][T15557] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 893.544423][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.564401][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.596678][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.670902][T19098] vivid-001: ================= START STATUS ================= [ 893.679105][T19098] vivid-001: Radio HW Seek Mode: Bounded [ 893.686045][T19098] vivid-001: Radio Programmable HW Seek: false [ 893.692649][T19098] vivid-001: RDS Rx I/O Mode: Block I/O [ 893.699052][T19098] vivid-001: Generate RBDS Instead of RDS: false [ 893.705734][T15557] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 893.714369][T15557] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 893.716118][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.729848][T19098] vivid-001: RDS Reception: true [ 893.729875][T19098] vivid-001: RDS Program Type: 0 inactive [ 893.729900][T19098] vivid-001: RDS PS Name: inactive [ 893.729923][T19098] vivid-001: RDS Radio Text: inactive [ 893.729945][T19098] vivid-001: RDS Traffic Announcement: false inactive [ 893.729968][T19098] vivid-001: RDS Traffic Program: false inactive [ 893.729989][T19098] vivid-001: RDS Music: false inactive [ 893.730012][T19098] vivid-001: ================== END STATUS ================== [ 893.730851][T15557] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 893.754415][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.770761][T15557] usb 5-1: config 220 has no interface number 2 [ 893.794361][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.808575][T15557] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 893.821740][T15557] usb 5-1: config 220 interface 0 has no altsetting 0 [ 893.824459][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 893.828648][T15557] usb 5-1: config 220 interface 76 has no altsetting 0 [ 893.828669][T15557] usb 5-1: config 220 interface 1 has no altsetting 0 [ 893.830336][T15557] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 893.854391][ T5869] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 894.355658][ T5869] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 894.365485][ T5869] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 894.378266][T15557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.380398][ T5869] usb 4-1: USB disconnect, device number 106 [ 894.392862][T15557] usb 5-1: Product: syz [ 894.392882][T15557] usb 5-1: Manufacturer: syz [ 894.392897][T15557] usb 5-1: SerialNumber: syz [ 894.415240][T19103] input: syz1 as /devices/virtual/input/input84 [ 894.423271][T19103] input: failed to attach handler leds to device input84, error: -6 [ 894.613085][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.624755][T17169] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 894.881298][T19106] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 894.888893][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.124243][T15557] usb 5-1: selecting invalid altsetting 0 [ 895.342010][T15557] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 895.349478][T15557] uvcvideo 5-1:220.0: No valid video chain found. [ 895.376245][T15557] usb 5-1: selecting invalid altsetting 0 [ 895.389898][T15557] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 895.411185][T15557] usb 5-1: USB disconnect, device number 92 [ 895.504725][T19128] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3525'. [ 895.544156][ T8668] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 895.694168][ T8668] usb 3-1: Using ep0 maxpacket: 16 [ 895.706364][ T8668] usb 3-1: config 4 has an invalid interface number: 61 but max is 1 [ 895.729954][ T8668] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 895.739019][ T8668] usb 3-1: config 4 has an invalid interface number: 34 but max is 1 [ 895.749141][ T8668] usb 3-1: config 4 has an invalid interface number: 8 but max is 1 [ 895.760235][ T8668] usb 3-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 895.769706][ T8668] usb 3-1: config 4 has no interface number 0 [ 895.777414][ T8668] usb 3-1: config 4 has no interface number 1 [ 895.783545][ T8668] usb 3-1: config 4 has no interface number 2 [ 895.795971][ T8668] usb 3-1: config 4 interface 61 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 895.821351][ T8668] usb 3-1: config 4 interface 61 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 895.832720][ T8668] usb 3-1: config 4 interface 61 altsetting 253 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 895.847730][T19144] netlink: 62 bytes leftover after parsing attributes in process `syz.3.3527'. [ 895.888613][ T8668] usb 3-1: config 4 interface 61 altsetting 253 bulk endpoint 0xB has invalid maxpacket 1023 [ 895.904963][ T8668] usb 3-1: config 4 interface 61 altsetting 253 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 895.916932][ T8668] usb 3-1: config 4 interface 61 altsetting 253 endpoint 0x2 has an invalid bInterval 138, changing to 11 [ 895.928534][ T8668] usb 3-1: config 4 interface 61 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 895.939701][ T8668] usb 3-1: config 4 interface 61 altsetting 253 has a duplicate endpoint with address 0xB, skipping [ 895.950981][ T8668] usb 3-1: config 4 interface 34 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 895.962172][ T8668] usb 3-1: config 4 interface 34 altsetting 107 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 895.978159][ T8668] usb 3-1: too many endpoints for config 4 interface 8 altsetting 219: 101, using maximum allowed: 30 [ 895.989585][ T8668] usb 3-1: config 4 interface 8 altsetting 219 has a duplicate endpoint with address 0xB, skipping [ 896.000608][ T8668] usb 3-1: config 4 interface 8 altsetting 219 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 896.011885][ T8668] usb 3-1: config 4 interface 8 altsetting 219 has a duplicate endpoint with address 0x3, skipping [ 896.023577][ T8668] usb 3-1: config 4 interface 8 altsetting 219 has 3 endpoint descriptors, different from the interface descriptor's value: 101 [ 896.037136][ T8668] usb 3-1: config 4 interface 61 has no altsetting 0 [ 896.043862][ T8668] usb 3-1: config 4 interface 34 has no altsetting 0 [ 896.051278][ T8668] usb 3-1: config 4 interface 8 has no altsetting 0 [ 896.063028][ T8668] usb 3-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=36.58 [ 896.072341][ T8668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.098273][ T8668] usb 3-1: Product: syz [ 896.124297][T19147] netlink: 14516 bytes leftover after parsing attributes in process `syz.1.3530'. [ 896.140445][ T8668] usb 3-1: Manufacturer: syz [ 896.145175][ T8668] usb 3-1: SerialNumber: syz [ 896.178217][ T8668] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 896.324403][ T8668] usb 3-1: no configuration chosen from 1 choice [ 897.136086][T15557] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 897.342132][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3534'. [ 897.351841][T19160] netlink: 'syz.4.3534': attribute type 7 has an invalid length. [ 897.359639][T19160] netlink: 'syz.4.3534': attribute type 8 has an invalid length. [ 897.367537][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'. [ 897.383955][T15557] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.413382][T19160] bond0: entered promiscuous mode [ 897.418594][T19160] bond_slave_0: entered promiscuous mode [ 897.425361][T19160] bond_slave_1: entered promiscuous mode [ 897.439090][T19160] bond0: left promiscuous mode [ 897.443961][T19160] bond_slave_0: left promiscuous mode [ 897.450201][T19160] bond_slave_1: left promiscuous mode [ 897.994878][ T8668] usb 3-1: USB disconnect, device number 114 [ 898.636866][T17169] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 898.645753][T17169] Bluetooth: hci4: Injecting HCI hardware error event [ 898.655301][ T5816] Bluetooth: hci4: hardware error 0x00 [ 899.051826][T15557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 899.474435][T15557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 899.485456][T15557] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 899.509584][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3537'. [ 899.546699][T15557] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.579528][T15557] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.617341][T15557] usb 4-1: Manufacturer: syz [ 899.638711][T15557] usb 4-1: config 0 descriptor?? [ 899.909912][T15557] usb 4-1: can't set config #0, error -71 [ 899.939682][T15557] usb 4-1: USB disconnect, device number 107 [ 900.727651][T19193] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 900.743124][ T30] audit: type=1800 audit(4000792882.119:2125): pid=19195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3544" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 900.772928][T19193] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 900.781580][ T977] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 900.914098][T19193] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 900.924030][T19193] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 900.987208][T19196] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3542'. [ 901.054151][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 901.055583][ T977] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 901.074852][ T977] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.086834][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 901.097367][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 901.148141][ T977] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.162354][ T977] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 901.171783][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.180296][ T5889] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 901.394123][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 901.400837][ T5889] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 901.410532][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.437632][ T5889] usb 5-1: config 0 descriptor?? [ 902.036448][ T5816] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 902.055000][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 903.165383][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 903.198910][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 903.215007][ T977] usb 2-1: usb_control_msg returned -71 [ 903.220834][ T5889] usb 5-1: media controller created [ 903.238565][ T977] usbtmc 2-1:16.0: can't read capabilities [ 903.286955][ T977] usb 2-1: USB disconnect, device number 124 [ 903.298305][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.334187][ T5889] az6027: usb out operation failed. (-71) [ 903.340255][ T5889] az6027: usb out operation failed. (-71) [ 903.349867][ T5889] stb0899_attach: Driver disabled by Kconfig [ 903.369163][ T5889] az6027: no front-end attached [ 903.369163][ T5889] [ 903.388680][ T5889] az6027: usb out operation failed. (-71) [ 903.404149][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 903.453806][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 903.485669][ T5889] dvb-usb: schedule remote query interval to 400 msecs. [ 903.993087][ T5889] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 904.005874][ T5889] usb 5-1: USB disconnect, device number 93 [ 904.124224][ T977] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 904.428017][ T5889] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 904.453510][T19224] vivid-001: ================= START STATUS ================= [ 904.461294][T19224] vivid-001: Radio HW Seek Mode: Bounded [ 904.467215][T19224] vivid-001: Radio Programmable HW Seek: false [ 904.473482][T19224] vivid-001: RDS Rx I/O Mode: Block I/O [ 904.479297][T19224] vivid-001: Generate RBDS Instead of RDS: false [ 904.485783][T19224] vivid-001: RDS Reception: true [ 904.490799][T19224] vivid-001: RDS Program Type: 0 inactive [ 904.496938][T19224] vivid-001: RDS PS Name: inactive [ 904.502219][T19224] vivid-001: RDS Radio Text: inactive [ 904.509612][T19224] vivid-001: RDS Traffic Announcement: false inactive [ 904.516512][T19224] vivid-001: RDS Traffic Program: false inactive [ 904.523004][T19224] vivid-001: RDS Music: false inactive [ 904.528717][T19224] vivid-001: ================== END STATUS ================== [ 904.554130][ T977] usb 2-1: device descriptor read/64, error -71 [ 904.683905][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3555'. [ 904.875558][ T977] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 904.893781][T19238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=19238 comm=syz.4.3552 [ 905.104160][ T977] usb 2-1: device descriptor read/64, error -71 [ 905.414504][ T977] usb usb2-port1: attempt power cycle [ 905.436395][ T30] audit: type=1800 audit(4000792886.819:2126): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3556" name="bus" dev="overlay" ino=418 res=0 errno=0 [ 905.774332][ T977] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 905.782824][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 905.792008][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 905.837886][ T977] usb 2-1: device descriptor read/8, error -71 [ 905.995435][ T5816] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 906.178630][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.179057][ T6984] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.205697][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.217954][ T6984] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.227723][ T6984] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.229971][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.236522][ T6984] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.255623][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 906.284170][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.297385][ T977] usb 2-1: device descriptor read/8, error -71 [ 906.332780][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.342904][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.342967][T19266] vivid-002: ================= START STATUS ================= [ 906.425700][T19266] vivid-002: Radio HW Seek Mode: Bounded [ 906.425765][ T977] usb usb2-port1: unable to enumerate USB device [ 906.431381][T19266] vivid-002: Radio Programmable HW Seek: false [ 906.431408][T19266] vivid-002: RDS Rx I/O Mode: Block I/O [ 906.527175][T19266] vivid-002: Generate RBDS Instead of RDS: false [ 906.533584][T19266] vivid-002: RDS Reception: true [ 906.573129][T19266] vivid-002: RDS Program Type: 0 inactive [ 906.581808][T19266] vivid-002: RDS PS Name: inactive [ 906.664188][T19266] vivid-002: RDS Radio Text: inactive [ 906.691198][T19266] vivid-002: RDS Traffic Announcement: false inactive [ 906.712736][T19266] vivid-002: RDS Traffic Program: false inactive [ 906.774346][T19266] vivid-002: RDS Music: false inactive [ 906.780190][T19266] vivid-002: ================== END STATUS ================== [ 907.189880][T17169] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 907.330705][ T30] audit: type=1800 audit(4000792888.709:2127): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3568" name="bus" dev="overlay" ino=447 res=0 errno=0 [ 907.369886][ T30] audit: type=1400 audit(4000792888.749:2128): avc: denied { append } for pid=19290 comm="syz.2.3570" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 907.430400][ T30] audit: type=1400 audit(4000792888.789:2129): avc: denied { setattr } for pid=15399 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 907.793468][T15558] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 907.914480][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 907.989922][T15558] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 908.014175][T15558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.075771][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 908.083455][ T5889] usb 2-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.096242][T15558] usb 3-1: config 0 descriptor?? [ 908.108439][ T6984] Bluetooth: Error in BCSP hdr checksum [ 908.115414][T15558] cp210x 3-1:0.0: cp210x converter detected [ 908.123443][ T5889] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.138978][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 908.145801][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 908.159257][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.170005][ T5889] usb 2-1: config 0 descriptor?? [ 908.527154][T15558] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 908.535109][T15558] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 908.542682][T15558] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 908.550448][T15558] usb 3-1: cp210x converter now attached to ttyUSB0 [ 908.555479][T19312] netlink: 'syz.2.3576': attribute type 10 has an invalid length. [ 908.558759][T15558] usb 3-1: USB disconnect, device number 115 [ 908.573618][T15558] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 908.585207][T15558] cp210x 3-1:0.0: device disconnected [ 908.597504][T19312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3576'. [ 908.613425][ T5889] logitech-djreceiver 0003:046D:C513.001A: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.1-1/input0 [ 908.626095][T19312] veth0_vlan: entered allmulticast mode [ 908.635536][T19312] bridge0: port 3(veth0_vlan) entered blocking state [ 908.661413][T19312] bridge0: port 3(veth0_vlan) entered disabled state [ 908.677640][T19312] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 909.112596][T19305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.126841][T19305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.213887][T15558] usb 2-1: USB disconnect, device number 3 [ 909.652390][T19332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19332 comm=syz.5.3580 [ 909.834212][T17169] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 910.664786][ T30] audit: type=1800 audit(4000792892.049:2130): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3582" name="bus" dev="overlay" ino=1762 res=0 errno=0 [ 910.950081][T19351] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3585'. [ 910.959500][T19351] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 910.974871][T19351] 0ªX¹¦D: entered allmulticast mode [ 910.980538][T19351] veth0_macvtap: entered allmulticast mode [ 910.987741][T19351] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 911.043086][T19362] input: syz1 as /devices/virtual/input/input87 [ 911.049585][T19362] input: failed to attach handler leds to device input87, error: -6 [ 911.579313][T19364] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 911.624448][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 911.789650][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 911.936190][ T5869] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 911.954234][ T5869] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 911.996341][ T5869] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.016809][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.034817][ T5869] usb 2-1: Product: syz [ 912.069524][ T5869] usb 2-1: Manufacturer: syz [ 912.100051][ T5869] usb 2-1: SerialNumber: syz [ 912.426588][T17269] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 912.458373][ T5869] usb 2-1: USB disconnect, device number 4 [ 912.584210][T17269] usb 3-1: Using ep0 maxpacket: 32 [ 912.594241][T17269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.610617][T17269] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 912.623894][T17269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.634692][T17269] usb 3-1: Product: syz [ 912.638946][T17269] usb 3-1: Manufacturer: syz [ 912.643590][T17269] usb 3-1: SerialNumber: syz [ 912.663941][T17269] usb 3-1: config 0 descriptor?? [ 912.940088][T17269] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 912.970666][T17269] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 913.025419][T17269] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 913.245738][T17269] usb 3-1: USB disconnect, device number 116 [ 913.875408][T19401] lo speed is unknown, defaulting to 1000 [ 914.133897][ T30] audit: type=1400 audit(4000792895.509:2131): avc: denied { unmount } for pid=18138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 914.274179][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 914.434176][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 914.592792][ T5869] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 914.616982][ T5869] usb 2-1: config 0 has no interface number 0 [ 914.651516][ T5869] usb 2-1: too many endpoints for config 0 interface 52 altsetting 197: 210, using maximum allowed: 30 [ 914.813285][ T5869] usb 2-1: config 0 interface 52 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 914.854146][ T5869] usb 2-1: config 0 interface 52 has no altsetting 0 [ 914.872079][ T5869] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 914.890875][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.909094][ T5869] usb 2-1: config 0 descriptor?? [ 914.942531][T19410] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 914.962367][T19410] netlink: 'syz.3.3596': attribute type 2 has an invalid length. [ 915.262416][T19426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'. [ 915.562193][T19431] input: syz1 as /devices/virtual/input/input88 [ 915.568722][T19431] input: failed to attach handler leds to device input88, error: -6 [ 915.653842][T19432] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 915.994180][T19400] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 916.398513][T19441] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 916.424402][T19440] lo speed is unknown, defaulting to 1000 [ 916.430491][T19441] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 916.442682][T19441] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 916.451167][T19441] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 916.465349][ T30] audit: type=1400 audit(4000792897.829:2132): avc: denied { map } for pid=19438 comm="syz.3.3605" path="socket:[85729]" dev="sockfs" ino=85729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 916.619303][ T30] audit: type=1400 audit(4000792897.999:2133): avc: denied { map } for pid=19445 comm="syz.2.3607" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 916.659161][T19444] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3606'. [ 917.069345][ T5869] usb 2-1: string descriptor 0 read error: -71 [ 917.095287][ T5869] asix 2-1:0.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 917.125736][ T5869] asix 2-1:0.52: probe with driver asix failed with error -71 [ 917.240978][ T5869] usb 2-1: USB disconnect, device number 5 [ 918.225329][T19466] virtiofs: Unknown parameter 'always1 0:00000000 0 [ 918.225329][T19466] 18 nlmon0 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 20 batadv0 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 23 veth0 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 24 veth1 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 25 wg0 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 26 wg1 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 27 wg2 : 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 28 veth0_to_bridge: 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 29 bridge_slave_0: 1 V3 [ 918.225329][T19466] 010000E0 1 0:00000000 0 [ 918.225329][T19466] 30 veth1_to_bridge: 1 V3 [ 918.225329][T19466] 010000E0 ' [ 918.539906][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'. [ 918.815428][ T30] audit: type=1800 audit(4000792900.199:2134): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3616" name="bus" dev="overlay" ino=1810 res=0 errno=0 [ 918.946056][T19477] netlink: 'syz.3.3615': attribute type 10 has an invalid length. [ 919.060463][T19477] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 919.414149][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 919.541557][T19483] nfs4: Deprecated parameter 'intr' [ 919.546805][T19483] nfs4: Unknown parameter 'smackfsroot' [ 919.659745][T19488] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 919.774155][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 919.782806][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 919.791239][ T5869] usb 2-1: config 0 has no interface number 0 [ 919.799653][ T5869] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 919.810301][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.818782][ T5869] usb 2-1: Product: syz [ 919.823179][ T5869] usb 2-1: Manufacturer: syz [ 919.827935][ T5869] usb 2-1: SerialNumber: syz [ 919.838883][ T5869] usb 2-1: config 0 descriptor?? [ 919.853563][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 919.895724][T19498] bridge0: entered allmulticast mode [ 920.154488][ T977] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 920.300336][T19502] netlink: 'syz.2.3622': attribute type 21 has an invalid length. [ 920.318992][T19502] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3622'. [ 920.334367][ T977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 920.350641][T19502] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 920.358903][ T977] usb 4-1: not running at top speed; connect to a high speed hub [ 920.375110][ T977] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 920.383307][ T977] usb 4-1: config 14 has no interface number 0 [ 920.398298][T19502] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3622'. [ 920.408890][ T977] usb 4-1: config 14 interface 21 has no altsetting 0 [ 920.436898][ T977] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 920.464269][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.472646][ T977] usb 4-1: Product: syz [ 920.477712][ T977] usb 4-1: Manufacturer: syz [ 920.489733][ T977] usb 4-1: SerialNumber: syz [ 920.723354][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.730554][ T977] usb 4-1: MIDIStreaming interface descriptor not found [ 920.780747][ T977] usb 4-1: USB disconnect, device number 109 [ 921.862426][ T5869] gspca_spca1528: reg_r err -71 [ 921.868573][ T5869] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 922.683709][ T5869] usb 2-1: USB disconnect, device number 6 [ 923.375688][T19533] input: syz1 as /devices/virtual/input/input89 [ 923.384212][T19533] input: failed to attach handler leds to device input89, error: -6 [ 923.495213][T19534] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 924.730879][T14083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.776879][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.789624][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.854007][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.861640][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.869157][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 924.920203][T14083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.049015][T14083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.088734][T19543] lo speed is unknown, defaulting to 1000 [ 925.334138][T17269] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 925.385970][T14083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.440662][T19558] pim6reg: entered allmulticast mode [ 925.464227][T17269] usb 4-1: device descriptor read/64, error -71 [ 925.715592][T17269] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 925.974447][T17269] usb 4-1: device descriptor read/64, error -71 [ 926.124605][T17269] usb usb4-port1: attempt power cycle [ 926.129711][ T30] audit: type=1400 audit(4000792907.509:2135): avc: denied { watch } for pid=19570 comm="syz.1.3639" path="/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 926.157402][T19571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.176643][T19543] chnl_net:caif_netlink_parms(): no params data found [ 926.226477][T14083] dummy0: left allmulticast mode [ 926.231999][T14083] bridge0: port 3(dummy0) entered disabled state [ 926.249792][T14083] bridge_slave_1: left allmulticast mode [ 926.262868][T14083] bridge_slave_1: left promiscuous mode [ 926.274012][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.293291][T14083] bridge_slave_0: left allmulticast mode [ 926.293318][T19573] ufs: You didn't specify the type of your ufs filesystem [ 926.293318][T19573] [ 926.293318][T19573] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 926.293318][T19573] [ 926.293318][T19573] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 926.299117][T14083] bridge_slave_0: left promiscuous mode [ 926.329671][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.332963][T19573] ufs: ufstype=old is supported read-only [ 926.372165][T14083] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.536635][T17269] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 926.569876][T17269] usb 4-1: device descriptor read/8, error -71 [ 926.939910][T14083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.951547][T14083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.954197][ T5816] Bluetooth: hci1: command tx timeout [ 926.968257][T14083] bond0 (unregistering): Released all slaves [ 926.974899][T17269] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 927.005369][T17269] usb 4-1: device descriptor read/8, error -71 [ 927.068874][T19543] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.076203][T19543] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.083364][T19543] bridge_slave_0: entered allmulticast mode [ 927.090558][T19543] bridge_slave_0: entered promiscuous mode [ 927.098118][T19543] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.105736][T19543] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.113173][T19543] bridge_slave_1: entered allmulticast mode [ 927.121005][T19543] bridge_slave_1: entered promiscuous mode [ 927.125598][T17269] usb usb4-port1: unable to enumerate USB device [ 927.212380][T19543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.227734][T19543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.259954][T19543] team0: Port device team_slave_0 added [ 927.269497][T19543] team0: Port device team_slave_1 added [ 927.333250][T14083] hsr_slave_0: left promiscuous mode [ 927.344005][T14083] hsr_slave_1: left promiscuous mode [ 927.357298][T14083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.378054][T19595] 9pnet_virtio: no channels available for device syz [ 927.383280][T14083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.479881][T14083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.488931][T14083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.513790][T14083] veth1_macvtap: left promiscuous mode [ 927.520392][T14083] veth0_macvtap: left promiscuous mode [ 927.529556][T14083] veth1_vlan: left promiscuous mode [ 927.534906][T17269] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 927.544539][T14083] veth0_vlan: left promiscuous mode [ 927.723742][T19603] 9p: Unknown Cache mode or invalid value fscach [ 927.730257][T17269] usb 3-1: Using ep0 maxpacket: 16 [ 927.744951][T17269] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.768896][T17269] usb 3-1: config 0 has no interface number 0 [ 927.805904][T17269] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 927.846182][T17269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.863705][T17269] usb 3-1: Product: syz [ 927.874414][T17269] usb 3-1: Manufacturer: syz [ 927.885889][T17269] usb 3-1: SerialNumber: syz [ 927.924622][T17269] usb 3-1: config 0 descriptor?? [ 927.965725][T17269] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 927.976257][T19603] Bluetooth: MGMT ver 1.23 [ 928.920898][T19604] bridge_slave_0: default FDB implementation only supports local addresses [ 928.937628][T19543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.960566][T19543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.013040][T19543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.035033][ T5816] Bluetooth: hci1: command tx timeout [ 929.041497][T19543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.063026][T19543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.125819][T19543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.293334][T19619] binder: 19585:19619 ioctl c0306201 200000000040 returned -22 [ 929.554476][T17269] gspca_spca1528: reg_w err -110 [ 929.561928][T17269] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 929.688502][T17269] usb 3-1: USB disconnect, device number 117 [ 929.768131][T19543] hsr_slave_0: entered promiscuous mode [ 929.942069][T19543] hsr_slave_1: entered promiscuous mode [ 929.967806][ T30] audit: type=1400 audit(4000792911.339:2136): avc: denied { mount } for pid=19631 comm="syz.3.3653" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 929.974800][T19543] debugfs: 'hsr0' already exists in 'hsr' [ 930.059970][ T30] audit: type=1400 audit(4000792911.339:2137): avc: denied { mounton } for pid=19631 comm="syz.3.3653" path="/100/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 930.063143][T19543] Cannot create hsr debugfs directory [ 930.565345][T19642] usb usb8: usbfs: process 19642 (syz.5.3654) did not claim interface 0 before use [ 930.630990][T19647] cgroup: Invalid name [ 930.730858][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3654'. [ 930.884140][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 930.941874][T19543] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 930.969398][T19543] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 931.065176][T19543] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 931.087238][T19543] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 931.088085][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.117093][ T5816] Bluetooth: hci1: command tx timeout [ 931.122795][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.130097][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 931.141401][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 931.205573][ T5869] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 931.218685][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.227252][ T5869] usb 2-1: Product: syz [ 931.252190][ T5869] usb 2-1: Manufacturer: syz [ 931.265545][ T5869] usb 2-1: SerialNumber: syz [ 931.285076][ T5869] usb 2-1: config 0 descriptor?? [ 931.319511][ T5869] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 931.382201][ T30] audit: type=1400 audit(4000792912.739:2138): avc: denied { create } for pid=19655 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 931.403390][ T30] audit: type=1400 audit(4000792912.739:2139): avc: denied { accept } for pid=19655 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 931.425199][ T5869] uvcvideo 2-1:0.0: No valid video chain found. [ 931.442853][T19543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.488202][T19543] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.556178][T19648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.576599][T14083] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.583708][T14083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.595464][T19648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.635723][T19648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.648755][T19648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.703414][T14083] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.710582][T14083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.845053][ T8668] usb 2-1: USB disconnect, device number 7 [ 931.962140][T19543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.010929][ T977] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 932.224108][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 932.246481][ T977] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 932.255401][ T977] usb 4-1: config 0 has no interface number 0 [ 932.276116][ T977] usb 4-1: config 0 interface 184 has no altsetting 0 [ 932.322103][ T977] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 932.342149][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.350749][ T977] usb 4-1: Product: syz [ 932.364166][ T977] usb 4-1: Manufacturer: syz [ 932.374399][ T977] usb 4-1: SerialNumber: syz [ 932.385987][ T977] usb 4-1: config 0 descriptor?? [ 932.403371][ T977] smsc75xx v1.0.0 [ 932.599678][T19543] veth0_vlan: entered promiscuous mode [ 932.630836][T19543] veth1_vlan: entered promiscuous mode [ 932.683354][T19543] veth0_macvtap: entered promiscuous mode [ 932.692368][T19543] veth1_macvtap: entered promiscuous mode [ 932.712841][T19543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.726097][T19543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.740784][T14089] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.749930][T14089] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.271595][T17169] Bluetooth: hci1: command tx timeout [ 933.295957][ T6984] Bluetooth: Error in BCSP hdr checksum [ 933.314663][ T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 933.340372][ T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 933.570205][T14089] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.697546][T14089] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.820461][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.828729][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.851929][T14083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.862888][T14083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.316874][T19717] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 934.328045][T19717] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 934.908087][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 935.467165][ T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 935.516411][ T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 935.546372][ T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 935.548547][T19725] vcan1: entered promiscuous mode [ 935.567041][ T977] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 935.578586][ T977] usb 4-1: USB disconnect, device number 114 [ 935.584700][T19725] vcan1: entered allmulticast mode [ 937.304139][ T5937] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 937.485093][ T5937] usb 7-1: Using ep0 maxpacket: 8 [ 937.534469][ T5937] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.554148][ T8668] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 937.562301][ T5937] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 937.592247][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.623079][ T5937] usb 7-1: config 0 descriptor?? [ 937.639922][ T5937] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 937.714148][ T8668] usb 2-1: Using ep0 maxpacket: 16 [ 937.721131][T17169] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 937.730074][ T8668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.759106][ T8668] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.770152][ T8668] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 937.779507][ T8668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.789755][ T8668] usb 2-1: config 0 descriptor?? [ 937.883430][T19770] bridge1: entered promiscuous mode [ 937.923202][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3685'. [ 937.928777][ T30] audit: type=1400 audit(4000792919.299:2140): avc: denied { mount } for pid=19765 comm="syz.2.3685" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 937.956050][ T30] audit: type=1400 audit(4000792919.299:2141): avc: denied { search } for pid=19765 comm="syz.2.3685" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 937.999678][ T30] audit: type=1400 audit(4000792919.379:2142): avc: denied { write } for pid=19773 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 938.358098][T19782] fuse: Bad value for 'fd' [ 938.840826][ T5937] gspca_vc032x: reg_r err -110 [ 938.846390][ T5937] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 939.258436][T19751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.321428][T19751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.904197][T19804] can0: slcan on ptm0. [ 940.387129][T19812] 9pnet_virtio: no channels available for device syz [ 940.628137][ T8668] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 940.645311][T19815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.654007][T19815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.770082][T17269] usb 7-1: USB disconnect, device number 2 [ 940.830475][ T8668] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.840960][ T8668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 940.852332][ T8668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 940.863864][ T8668] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 940.882025][ T8668] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 940.912363][ T8668] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 940.937855][ T8668] usb 4-1: Manufacturer: syz [ 940.962045][ T8668] usb 4-1: config 0 descriptor?? [ 941.063316][T19817] 9p: Unknown Cache mode or invalid value fscach [ 941.324254][T17269] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 941.784490][T17269] usb 7-1: device descriptor read/64, error -71 [ 941.824053][T19759] can0 (unregistered): slcan off ptm0. [ 941.833865][ T42] usb 2-1: USB disconnect, device number 8 [ 941.884148][ T8668] rc_core: IR keymap rc-hauppauge not found [ 941.935018][ T8668] Registered IR keymap rc-empty [ 942.090555][T19837] fuse: Unknown parameter '2~¹ç!”–GŽjAN¶–^ ’S‡0Â~¬*æ}' [ 942.101599][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 942.965802][T17269] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 943.024829][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 943.158209][ T8668] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 943.197352][ T8668] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input90 [ 943.270419][T19854] fuse: Bad value for 'fd' [ 943.630544][T17269] usb 7-1: device descriptor read/64, error -71 [ 943.739963][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 943.746886][T17269] usb usb7-port1: attempt power cycle [ 943.776015][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.264366][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.286248][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.317688][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.355486][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.385654][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.490792][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.524091][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.545318][ T8668] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 944.548287][T19866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.858378][T19867] lo speed is unknown, defaulting to 1000 [ 944.924511][ T8668] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 944.932977][ T8668] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.968265][ T8668] usb 4-1: USB disconnect, device number 115 [ 945.008382][T19866] netlink: 'syz.1.3707': attribute type 12 has an invalid length. [ 945.544141][ T30] audit: type=1400 audit(4000792926.919:2143): avc: denied { setattr } for pid=19879 comm="syz.2.3713" name="secretmem" dev="secretmem" ino=89345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 945.585821][ T30] audit: type=1326 audit(4000792926.919:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.2.3713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5bf8efc9 code=0x0 [ 945.608818][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.620369][ T30] audit: type=1326 audit(4000792926.989:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.2.3713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5bf8efc9 code=0x0 [ 945.643324][ C1] vkms_vblank_simulate: vblank timer overrun [ 946.294085][ T977] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 946.460869][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.481330][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 946.502571][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 946.533904][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 946.555708][ T977] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 946.706834][ T977] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 946.715401][ T977] usb 4-1: Manufacturer: syz [ 946.724773][ T977] usb 4-1: config 0 descriptor?? [ 946.834172][T19895] fuse: Bad value for 'fd' [ 947.496440][ T977] rc_core: IR keymap rc-hauppauge not found [ 947.508047][ T977] Registered IR keymap rc-empty [ 947.521074][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.574340][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.603561][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 947.617229][T19907] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3718'. [ 947.715476][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 947.759718][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.819434][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.844603][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.870211][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 947.964662][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.054776][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.288506][ T30] audit: type=1400 audit(4000792929.279:2146): avc: denied { read } for pid=19911 comm="syz.6.3720" laddr=fe80::2096:70ff:fef4:302c lport=55099 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 948.374526][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.394823][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.414477][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.455533][ T977] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 948.499945][ T977] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 948.525440][ T977] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 948.547271][ T977] usb 4-1: USB disconnect, device number 116 [ 948.689476][T19918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3724'. [ 948.770029][T19920] 9pnet_virtio: no channels available for device syz [ 949.354774][T19925] 9p: Unknown Cache mode or invalid value fscach [ 949.574642][T19928] bridge_slave_0: default FDB implementation only supports local addresses [ 949.593044][ T30] audit: type=1326 audit(4000792930.949:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.2.3722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a5bf8efc9 code=0x0 [ 949.755584][ T30] audit: type=1400 audit(4000792931.089:2148): avc: denied { read write } for pid=19543 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.879007][ T30] audit: type=1400 audit(4000792931.089:2149): avc: denied { open } for pid=19543 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 949.910861][ T30] audit: type=1400 audit(4000792931.089:2150): avc: denied { ioctl } for pid=19543 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.385058][ T30] audit: type=1400 audit(4000792931.159:2151): avc: denied { read } for pid=19919 comm="syz.5.3723" dev="nsfs" ino=4026533466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 950.414220][ T30] audit: type=1400 audit(4000792931.169:2152): avc: denied { open } for pid=19919 comm="syz.5.3723" path="net:[4026533466]" dev="nsfs" ino=4026533466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 950.559692][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 950.559707][ T30] audit: type=1400 audit(4000792931.939:2161): avc: denied { map_create } for pid=19948 comm="syz.3.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 950.725521][ T30] audit: type=1400 audit(4000792931.939:2162): avc: denied { perfmon } for pid=19948 comm="syz.3.3730" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 950.754391][ T30] audit: type=1400 audit(4000792931.939:2163): avc: denied { map_read map_write } for pid=19948 comm="syz.3.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 951.161103][ T30] audit: type=1400 audit(4000792931.969:2164): avc: denied { prog_load } for pid=19948 comm="syz.3.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 951.208249][ T30] audit: type=1400 audit(4000792931.969:2165): avc: denied { bpf } for pid=19948 comm="syz.3.3730" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 951.489533][ T30] audit: type=1400 audit(4000792932.179:2166): avc: denied { create } for pid=19948 comm="syz.3.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 951.521829][ T30] audit: type=1400 audit(4000792932.539:2167): avc: denied { create } for pid=19946 comm="syz.1.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 951.579288][ T30] audit: type=1400 audit(4000792932.549:2168): avc: denied { ioctl } for pid=19946 comm="syz.1.3729" path="socket:[89527]" dev="sockfs" ino=89527 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 951.736007][T19962] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 951.803227][T19962] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 951.960676][ T30] audit: type=1400 audit(4000792932.839:2169): avc: denied { connect } for pid=19946 comm="syz.1.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 951.994165][ T30] audit: type=1400 audit(4000792932.989:2170): avc: denied { create } for pid=19958 comm="syz.3.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 952.028869][T19963] lo speed is unknown, defaulting to 1000 [ 952.175663][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 952.375722][T19967] SELinux: failed to load policy [ 952.957325][T19985] bond1: (slave batadv0): Device is not bonding slave [ 952.964259][T19985] bond1: option active_slave: invalid value (batadv0) [ 953.024810][T19985] bond1 (unregistering): Released all slaves [ 953.172750][T19995] loop2: detected capacity change from 0 to 7 [ 953.203683][T19995] loop2: [ 953.207244][T19995] loop2: partition table partially beyond EOD, truncated [ 953.455985][ T5937] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 954.574083][ T5937] usb 3-1: device descriptor read/64, error -71 [ 954.825640][ T5937] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 954.910257][T20019] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 954.920162][T20019] cramfs: wrong magic [ 954.974182][ T5937] usb 3-1: device descriptor read/64, error -71 [ 955.134109][ T5937] usb usb3-port1: attempt power cycle [ 955.524940][T20032] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 955.543568][ T5937] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 955.573206][T20032] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 955.586718][ T5937] usb 3-1: device descriptor read/8, error -71 [ 955.599804][T20032] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 955.613212][T20032] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 955.781520][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 955.781536][ T30] audit: type=1400 audit(4000792937.129:2238): avc: denied { read } for pid=20034 comm="syz.3.3751" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 955.851917][ T5937] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 955.970466][ T5937] usb 3-1: device descriptor read/8, error -71 [ 956.003574][ T30] audit: type=1400 audit(4000792937.129:2239): avc: denied { open } for pid=20034 comm="syz.3.3751" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.083271][ T30] audit: type=1400 audit(4000792937.129:2240): avc: denied { write } for pid=20034 comm="syz.3.3751" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.086831][T20032] netlink: 62 bytes leftover after parsing attributes in process `syz.1.3750'. [ 956.116112][ T5937] usb usb3-port1: unable to enumerate USB device [ 956.193491][ T30] audit: type=1400 audit(4000792937.149:2241): avc: denied { ioctl } for pid=20034 comm="syz.3.3751" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 956.263584][ T30] audit: type=1400 audit(4000792937.439:2242): avc: denied { open } for pid=20041 comm="syz.6.3752" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 956.447500][ T30] audit: type=1800 audit(4000792937.449:2243): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3752" name="bus" dev="overlay" ino=125 res=0 errno=0 [ 956.583862][ T30] audit: type=1400 audit(4000792937.949:2244): avc: denied { setopt } for pid=20034 comm="syz.3.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 956.647196][ T30] audit: type=1400 audit(4000792938.019:2245): avc: denied { unmount } for pid=13367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 956.704140][ T42] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 956.738193][ T30] audit: type=1400 audit(4000792938.119:2246): avc: denied { ioctl } for pid=20050 comm="syz.2.3755" path="socket:[89760]" dev="sockfs" ino=89760 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 956.934159][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 958.064127][ T30] audit: type=1400 audit(4000792939.159:2247): avc: denied { read write } for pid=20055 comm="syz.2.3757" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 958.126850][ T42] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 958.142300][ T42] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 958.152313][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.160758][ T42] usb 7-1: Product: syz [ 958.165028][ T42] usb 7-1: Manufacturer: syz [ 958.169682][ T42] usb 7-1: SerialNumber: syz [ 958.213584][ T42] usb 7-1: config 0 descriptor?? [ 958.231555][T17169] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 958.428644][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 958.474289][ T42] usb 7-1: USB disconnect, device number 6 [ 958.614311][ T9] usb 3-1: device descriptor read/64, error -71 [ 958.716071][T20090] lo speed is unknown, defaulting to 1000 [ 958.924463][T20092] sd 0:0:1:0: PR command failed: 1026 [ 958.929905][T20092] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 958.936662][T20092] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 958.954722][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 959.104116][ T9] usb 3-1: device descriptor read/64, error -71 [ 959.214447][ T9] usb usb3-port1: attempt power cycle [ 959.482437][T20098] bond1: entered allmulticast mode [ 959.487957][T20098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.495327][T20098] bridge0: port 3(bond1) entered blocking state [ 959.501643][T20098] bridge0: port 3(bond1) entered disabled state [ 959.509825][T20098] bond1: entered promiscuous mode [ 959.515164][T20098] bridge0: port 3(bond1) entered blocking state [ 959.521423][T20098] bridge0: port 3(bond1) entered forwarding state [ 959.607109][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 959.616337][ T6984] bridge0: port 3(bond1) entered disabled state [ 959.643915][ T9] usb 3-1: device descriptor read/8, error -71 [ 959.985901][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 960.491383][ T9] usb 3-1: device descriptor read/8, error -71 [ 960.604408][ T9] usb usb3-port1: unable to enumerate USB device [ 960.659139][T20116] batman_adv: batadv0: Adding interface: ipvlan2 [ 960.660675][T20117] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3770'. [ 960.687914][T20116] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.804800][T20116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.839812][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 960.839828][ T30] audit: type=1400 audit(4000792942.219:2273): avc: denied { create } for pid=20102 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 960.874044][T20116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.894375][T20116] batman_adv: batadv0: Interface activated: ipvlan2 [ 961.069610][ T30] audit: type=1400 audit(4000792942.249:2274): avc: denied { write } for pid=20102 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 961.199902][T20123] i2c i2c-0: Invalid block write size 34 [ 961.232253][T20125] loop2: detected capacity change from 0 to 7 [ 961.238865][T20125] loop2: [ 961.241877][T20125] loop2: partition table partially beyond EOD, truncated [ 961.417511][ T30] audit: type=1400 audit(4000792942.799:2275): avc: denied { create } for pid=20128 comm="syz.1.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 961.442196][ T30] audit: type=1400 audit(4000792942.819:2276): avc: denied { write } for pid=20128 comm="syz.1.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 961.464666][ T30] audit: type=1400 audit(4000792942.819:2277): avc: denied { read } for pid=20128 comm="syz.1.3774" lport=12115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 961.543591][ T30] audit: type=1400 audit(4000792942.889:2278): avc: denied { mount } for pid=20130 comm="syz.6.3775" name="/" dev="ramfs" ino=91165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 961.573868][ T30] audit: type=1400 audit(4000792942.919:2279): avc: denied { execute } for pid=20130 comm="syz.6.3775" path="/file1" dev="ramfs" ino=91166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 961.725806][ T30] audit: type=1400 audit(4000792943.109:2280): avc: denied { create } for pid=20132 comm="syz.6.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 961.783396][ T30] audit: type=1400 audit(4000792943.129:2281): avc: denied { ioctl } for pid=20132 comm="syz.6.3776" path="socket:[91178]" dev="sockfs" ino=91178 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 962.092723][T20142] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 962.124616][ T30] audit: type=1400 audit(4000792943.499:2282): avc: denied { name_bind } for pid=20137 comm="syz.6.3778" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 962.248635][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3780'. [ 963.760832][T17269] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 963.940978][T17269] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.037376][T17269] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.104478][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 964.112110][T17169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 964.296447][T17269] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 964.305550][T17269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.325972][T17269] usb 7-1: config 0 descriptor?? [ 965.095210][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 965.253406][T17269] samsung 0003:0419:0600.001B: unknown global tag 0xc [ 965.260309][T17269] samsung 0003:0419:0600.001B: item 0 2 1 12 parsing failed [ 965.268186][T17269] samsung 0003:0419:0600.001B: parse failed [ 965.274267][T17269] samsung 0003:0419:0600.001B: probe with driver samsung failed with error -22 [ 965.588629][T20184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20184 comm=syz.1.3788 [ 965.611222][T20184] SELinux: Context system_u:object is not valid (left unmapped). [ 965.949878][T20183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3789'. [ 965.971799][T20149] lo speed is unknown, defaulting to 1000 [ 965.978584][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 965.978598][ T30] audit: type=1400 audit(4000792947.359:2290): avc: denied { ioctl } for pid=20179 comm="syz.5.3790" path="socket:[91303]" dev="sockfs" ino=91303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 966.074835][ T30] audit: type=1326 audit(4000792947.449:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd42d58efc9 code=0x7fc00000 [ 966.144179][ T30] audit: type=1326 audit(4000792947.449:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42d58efc9 code=0x7fc00000 [ 966.186043][ T30] audit: type=1326 audit(4000792947.449:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42d58efc9 code=0x7fc00000 [ 966.209858][ T30] audit: type=1326 audit(4000792947.459:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42d58efc9 code=0x7fc00000 [ 966.376831][ T8668] usb 7-1: USB disconnect, device number 7 [ 966.388643][ T30] audit: type=1400 audit(4000792947.769:2295): avc: denied { mounton } for pid=20189 comm="syz.2.3792" path="/104/file0" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 966.628888][T20197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.010506][ T5937] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 967.024385][ T30] audit: type=1400 audit(4000792947.989:2296): avc: denied { write } for pid=20194 comm="syz.5.3793" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.148150][ T30] audit: type=1400 audit(4000792948.529:2297): avc: denied { create } for pid=20199 comm="syz.2.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 967.168988][ T30] audit: type=1400 audit(4000792948.549:2298): avc: denied { bind } for pid=20199 comm="syz.2.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 967.257701][ T5937] usb 2-1: device descriptor read/64, error -71 [ 967.454494][ T977] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 967.566424][T20203] CIFS: Unable to determine destination address [ 967.579765][T20203] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 967.615116][ T5937] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 967.724399][ T977] usb 3-1: device descriptor read/64, error -71 [ 967.764488][ T30] audit: type=1400 audit(4000792949.149:2299): avc: denied { read } for pid=20213 comm="syz.6.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 967.785293][ T5937] usb 2-1: device descriptor read/64, error -71 [ 967.904336][ T5937] usb usb2-port1: attempt power cycle [ 967.919901][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3800'. [ 967.959580][T20222] syz_tun: entered allmulticast mode [ 967.974152][ T977] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 967.983482][T20221] syz_tun: left allmulticast mode [ 968.039652][T20230] binfmt_misc: register: failed to install interpreter file ./file0 [ 968.055612][ T6984] Bluetooth: Error in BCSP hdr checksum [ 968.124085][ T977] usb 3-1: device descriptor read/64, error -71 [ 968.235114][ T977] usb usb3-port1: attempt power cycle [ 968.274222][ T5937] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 968.304927][ T5937] usb 2-1: device descriptor read/8, error -71 [ 968.314518][ T6986] Bluetooth: Error in BCSP hdr checksum [ 968.544111][ T5937] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 968.574832][ T5937] usb 2-1: device descriptor read/8, error -71 [ 968.594322][ T977] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 968.614720][ T977] usb 3-1: device descriptor read/8, error -71 [ 968.687812][ T5937] usb usb2-port1: unable to enumerate USB device [ 968.904171][ T977] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 968.924922][ T977] usb 3-1: device descriptor read/8, error -71 [ 969.036862][ T977] usb usb3-port1: unable to enumerate USB device [ 969.835533][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 969.842042][T17169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 970.002093][T20255] x_tables: duplicate underflow at hook 2 [ 970.804257][ T5937] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 970.984107][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 970.990738][ T5937] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 971.000459][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 971.000474][ T30] audit: type=1400 audit(4000792952.369:2310): avc: denied { execute_no_trans } for pid=20290 comm="syz.6.3820" path="/38/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 971.034522][ T5937] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.046141][ T6986] Bluetooth: Error in BCSP hdr checksum [ 971.046145][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.061573][ T30] audit: type=1400 audit(4000792952.419:2311): avc: denied { bind } for pid=20292 comm="syz.6.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 971.081171][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 971.089300][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3822'. [ 971.091251][ T5937] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.113157][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 971.122808][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.291151][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 971.296355][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 971.300365][T20299] bridge_slave_1: left allmulticast mode [ 971.309249][ T6986] Bluetooth: Error in BCSP hdr checksum [ 971.314810][T20299] bridge_slave_1: left promiscuous mode [ 971.314972][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.337625][T20299] bridge_slave_0: left promiscuous mode [ 971.344824][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.970510][ T5937] usb 2-1: usb_control_msg returned -32 [ 971.977215][ T5937] usbtmc 2-1:16.0: can't read capabilities [ 972.006472][ T30] audit: type=1400 audit(4000792953.379:2312): avc: denied { firmware_load } for pid=20285 comm="syz.1.3818" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 972.795433][T17169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 973.163859][ T30] audit: type=1400 audit(4000792954.429:2313): avc: denied { ioctl } for pid=20311 comm="syz.3.3825" path="socket:[91510]" dev="sockfs" ino=91510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 973.272294][ T30] audit: type=1400 audit(4000792954.649:2314): avc: denied { map } for pid=20318 comm="syz.3.3827" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 973.363290][T20326] overlayfs: overlapping lowerdir path [ 973.441373][T20323] sp0: Synchronizing with TNC [ 973.447676][ T30] audit: type=1400 audit(4000792954.829:2315): avc: denied { create } for pid=20327 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 973.449553][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 973.514451][T20322] [U] è [ 973.578022][ T5937] usb 2-1: USB disconnect, device number 13 [ 973.638655][ T30] audit: type=1400 audit(4000792954.859:2316): avc: denied { bind } for pid=20327 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 973.685980][ T30] audit: type=1400 audit(4000792954.859:2317): avc: denied { create } for pid=20327 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 973.719685][ T30] audit: type=1400 audit(4000792954.859:2318): avc: denied { prog_load } for pid=20327 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 973.758236][ T30] audit: type=1400 audit(4000792954.859:2319): avc: denied { bpf } for pid=20327 comm="syz.5.3829" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 974.184097][ T5937] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 974.357771][ T5937] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.715755][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.751022][ T5937] usb 7-1: Product: syz [ 974.767307][ T5937] usb 7-1: Manufacturer: syz [ 974.781004][ T5937] usb 7-1: SerialNumber: syz [ 975.265542][ T5937] cdc_ncm 7-1:1.0: bind() failure [ 975.274355][ T5937] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 975.285049][ T5937] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 975.295738][ T5937] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 975.313904][ T5937] usb 7-1: USB disconnect, device number 8 [ 975.384942][T15558] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 975.650706][T15558] usb 4-1: device descriptor read/64, error -71 [ 975.895286][T15558] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 975.905964][T20370] overlayfs: missing 'lowerdir' [ 976.034076][T15558] usb 4-1: device descriptor read/64, error -71 [ 976.097569][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 976.097580][ T30] audit: type=1400 audit(4000792957.475:2376): avc: denied { checkpoint_restore } for pid=20371 comm="syz.1.3840" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 976.144859][T15558] usb usb4-port1: attempt power cycle [ 976.159866][ T30] audit: type=1326 audit(4000792957.525:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20371 comm="syz.1.3840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd42d58efc9 code=0x0 [ 976.206519][T17269] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 976.218813][ T30] audit: type=1400 audit(4000792957.595:2378): avc: denied { create } for pid=20376 comm="syz.2.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 976.239223][ T30] audit: type=1400 audit(4000792957.595:2379): avc: denied { setopt } for pid=20376 comm="syz.2.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 976.344070][T17269] usb 7-1: device descriptor read/64, error -71 [ 976.411624][ T30] audit: type=1400 audit(4000792957.785:2380): avc: denied { mount } for pid=20376 comm="syz.2.3843" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 976.494091][T15558] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 976.515051][T15558] usb 4-1: device descriptor read/8, error -71 [ 976.594088][T17269] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 976.644071][ T8668] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 976.724388][T17269] usb 7-1: device descriptor read/64, error -71 [ 976.754142][T15558] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 976.774754][T15558] usb 4-1: device descriptor read/8, error -71 [ 976.800563][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 976.811036][ T8668] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 976.830068][ T8668] usb 3-1: config 179 has no interface number 0 [ 976.836796][T17269] usb usb7-port1: attempt power cycle [ 976.842875][ T8668] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 976.854116][ T8668] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 976.865448][ T8668] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 976.877706][ T8668] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 976.894496][T15558] usb usb4-port1: unable to enumerate USB device [ 976.896170][ T8668] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 976.911024][ T8668] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 976.919541][ T8668] usb 3-1: Product: syz [ 976.926659][T20377] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 977.160924][ T8668] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input93 [ 977.176100][T17269] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 977.185048][ T30] audit: type=1400 audit(4000792958.555:2381): avc: denied { read } for pid=5172 comm="acpid" name="js0" dev="devtmpfs" ino=3540 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.212807][ T30] audit: type=1400 audit(4000792958.555:2382): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3540 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.239275][ T30] audit: type=1400 audit(4000792958.555:2383): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3540 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 977.239608][T17269] usb 7-1: device descriptor read/8, error -71 [ 977.454236][ T8668] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 977.514250][T17269] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 977.534645][T17269] usb 7-1: device descriptor read/8, error -71 [ 977.605437][ T8668] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 977.613696][ T8668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.623850][ T8668] usb 2-1: config 0 has no interface number 0 [ 977.629994][ T8668] usb 2-1: config 0 interface 82 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 977.644366][T17269] usb usb7-port1: unable to enumerate USB device [ 977.652549][ T8668] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 977.661807][ T8668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.670103][ T8668] usb 2-1: Product: syz [ 977.674526][ T8668] usb 2-1: Manufacturer: syz [ 977.679140][ T8668] usb 2-1: SerialNumber: syz [ 977.686252][ T8668] usb 2-1: config 0 descriptor?? [ 977.693892][ T8668] cdc_ether 2-1:0.82: skipping garbage [ 977.699505][ T8668] cdc_ether 2-1:0.82: invalid descriptor buffer length [ 977.706628][ T8668] usb 2-1: bad CDC descriptors [ 977.712171][ T8668] usb 2-1: unsupported MDLM descriptors [ 977.719367][ T8668] cdc_acm 2-1:0.82: skipping garbage [ 977.724777][ T8668] cdc_acm 2-1:0.82: invalid descriptor buffer length [ 977.890243][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 977.898574][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 977.899837][T15558] usb 2-1: USB disconnect, device number 14 [ 977.931964][ T8668] usb 3-1: USB disconnect, device number 4 [ 978.434130][ T30] audit: type=1400 audit(4000792959.795:2384): avc: denied { map } for pid=20392 comm="syz.2.3847" path="socket:[91622]" dev="sockfs" ino=91622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 978.726534][ T30] audit: type=1400 audit(4000792959.905:2385): avc: denied { setattr } for pid=20392 comm="syz.2.3847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 979.244857][T20413] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.252680][T20413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 979.261291][T20413] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.269150][T20413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 979.603026][T20418] netlink: 62 bytes leftover after parsing attributes in process `syz.1.3850'. [ 981.031563][T20448] [ 981.033919][T20448] ============================================ [ 981.040055][T20448] WARNING: possible recursive locking detected [ 981.046197][T20448] syzkaller #0 Not tainted [ 981.050587][T20448] -------------------------------------------- [ 981.056705][T20448] syz.6.3857/20448 is trying to acquire lock: [ 981.062735][T20448] ffffffff8f2c5bb8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x1380 [ 981.072976][T20448] [ 981.072976][T20448] but task is already holding lock: [ 981.080310][T20448] ffffffff8f2c5bb8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x1380 [ 981.090541][T20448] [ 981.090541][T20448] other info that might help us debug this: [ 981.098576][T20448] Possible unsafe locking scenario: [ 981.098576][T20448] [ 981.106012][T20448] CPU0 [ 981.109279][T20448] ---- [ 981.112541][T20448] lock(qp_broker_list.mutex); [ 981.117373][T20448] lock(qp_broker_list.mutex); [ 981.122212][T20448] [ 981.122212][T20448] *** DEADLOCK *** [ 981.122212][T20448] [ 981.130335][T20448] May be due to missing lock nesting notation [ 981.130335][T20448] [ 981.138632][T20448] 1 lock held by syz.6.3857/20448: [ 981.143718][T20448] #0: ffffffff8f2c5bb8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x1380 [ 981.154411][T20448] [ 981.154411][T20448] stack backtrace: [ 981.160289][T20448] CPU: 1 UID: 0 PID: 20448 Comm: syz.6.3857 Not tainted syzkaller #0 PREEMPT(full) [ 981.160309][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 981.160320][T20448] Call Trace: [ 981.160328][T20448] [ 981.160335][T20448] dump_stack_lvl+0x116/0x1f0 [ 981.160361][T20448] print_deadlock_bug+0x1e9/0x240 [ 981.160385][T20448] __lock_acquire+0x1106/0x1c90 [ 981.160409][T20448] ? stack_depot_save_flags+0x3de/0x9c0 [ 981.160428][T20448] lock_acquire+0x179/0x350 [ 981.160440][T20448] ? vmci_qp_broker_detach+0x14c/0x1380 [ 981.160458][T20448] ? __pfx___might_resched+0x10/0x10 [ 981.160477][T20448] ? vmci_ctx_enqueue_datagram+0x4c5/0x650 [ 981.160495][T20448] ? vmci_datagram_dispatch+0x42e/0xd30 [ 981.160512][T20448] ? qp_notify_peer+0x19d/0x260 [ 981.160524][T20448] ? vmci_qp_broker_detach+0x14c/0x1380 [ 981.160539][T20448] __mutex_lock+0x193/0x1060 [ 981.160551][T20448] ? vmci_qp_broker_detach+0x14c/0x1380 [ 981.160568][T20448] ? __pfx___mutex_lock+0x10/0x10 [ 981.160586][T20448] ? vmci_qp_broker_detach+0x14c/0x1380 [ 981.160605][T20448] vmci_qp_broker_detach+0x14c/0x1380 [ 981.160621][T20448] ? kasan_quarantine_put+0x10a/0x240 [ 981.160634][T20448] ? lockdep_hardirqs_on+0x7c/0x110 [ 981.160655][T20448] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 981.160670][T20448] ? ctx_free_ctx+0x4b4/0xdb0 [ 981.160689][T20448] ctx_free_ctx+0x51b/0xdb0 [ 981.160709][T20448] ? __pfx_ctx_free_ctx+0x10/0x10 [ 981.160727][T20448] ? preempt_schedule_thunk+0x16/0x30 [ 981.160750][T20448] ? preempt_schedule_common+0x44/0xc0 [ 981.160770][T20448] ? preempt_schedule_thunk+0x16/0x30 [ 981.160793][T20448] vmci_ctx_enqueue_datagram+0x4c5/0x650 [ 981.160812][T20448] vmci_datagram_dispatch+0x42e/0xd30 [ 981.160831][T20448] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 981.160848][T20448] ? find_held_lock+0x2b/0x80 [ 981.160865][T20448] ? vmci_qp_broker_detach+0x103d/0x1380 [ 981.160881][T20448] qp_notify_peer+0x19d/0x260 [ 981.160894][T20448] ? __pfx_qp_notify_peer+0x10/0x10 [ 981.160911][T20448] vmci_qp_broker_detach+0x604/0x1380 [ 981.160928][T20448] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 981.160943][T20448] ? ctx_free_ctx+0x4b4/0xdb0 [ 981.160961][T20448] ctx_free_ctx+0x51b/0xdb0 [ 981.160978][T20448] ? __pfx_ctx_free_ctx+0x10/0x10 [ 981.160994][T20448] ? __pfx_autoremove_wake_function+0x10/0x10 [ 981.161015][T20448] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 981.161033][T20448] vmci_ctx_destroy+0x15b/0x1d0 [ 981.161050][T20448] vmci_host_close+0x115/0x1a0 [ 981.161071][T20448] ? __pfx_vmci_host_close+0x10/0x10 [ 981.161091][T20448] __fput+0x402/0xb70 [ 981.161110][T20448] task_work_run+0x150/0x240 [ 981.161125][T20448] ? __pfx_task_work_run+0x10/0x10 [ 981.161139][T20448] ? __pfx___do_sys_close_range+0x10/0x10 [ 981.161157][T20448] exit_to_user_mode_loop+0xec/0x130 [ 981.161173][T20448] do_syscall_64+0x426/0xfa0 [ 981.161200][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.161214][T20448] RIP: 0033:0x7f8dd3b8efc9 [ 981.161228][T20448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.161243][T20448] RSP: 002b:00007f8dd49cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 981.161259][T20448] RAX: 0000000000000000 RBX: 00007f8dd3de6090 RCX: 00007f8dd3b8efc9 [ 981.161267][T20448] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 981.161276][T20448] RBP: 00007f8dd3c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 981.161284][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.161292][T20448] R13: 00007f8dd3de6128 R14: 00007f8dd3de6090 R15: 00007ffc90a15b98 [ 981.161306][T20448] [ 981.812485][T20436] ceph: No mds server is up or the cluster is laggy [ 981.858715][T20433] ceph: No mds server is up or the cluster is laggy