last executing test programs: 2.587525393s ago: executing program 0 (id=868): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000080)={@private2, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x29, 0x6, 0xff, 0x1, 0x0, @empty, @mcast1, 0x10, 0x7, 0xffffff80, 0x80}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x5, 0x9}) r3 = syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) ptrace(0x10, r3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) ptrace$setregs(0xf, r5, 0x0, &(0x7f0000000480)="e4b752f7be318a03a6fc83f0c58996976fb4ed7af3cf26b692505f3ab9178c") (async) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) read(r0, &(0x7f0000000580)=""/41, 0x29) r6 = getpid() (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4012}, 0x4880) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) ptrace$getregset(0x4204, r6, 0x4, &(0x7f0000000180)={&(0x7f0000001780)=""/4096, 0x1000}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r1, 0x25, 0x2, @void}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async, rerun: 32) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r8}, 0x20) 2.515373381s ago: executing program 1 (id=870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="50df2b", 0x3, 0x60000800, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b52b0bb791553936866bcbbc5fe05388ca7648c43ea5eb574084009cd219c760fee1551a", 0x24, 0x51, &(0x7f0000000080)={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280), 0x0) listen(r0, 0x100101) socket(0x29, 0x0, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x9) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2.514952514s ago: executing program 0 (id=871): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x27, 0x4) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x40000fb, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30"], 0xec}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x6, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4}, {0xfb6, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.278777434s ago: executing program 0 (id=873): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)="a708724a412e054e0cea6fdb52c64d167e55fbb82bf2e45b3e3a82e1b008b336f5f02aee981dcbe751c896f8cbcbb04f6d723c82aab2d9934b6e86f42df62d93e61b00b9f4a9c8cd94d2b41eac6e4b509fb0f5615dc561184d59e0e577605f6f9e89219cd31cb6d2b11fdd946e71232cd9dd4e7ed3ab166687ebfb11a1426e2ac058ebdad54b5e9ca7f553905f62232430a881cf", 0x2, 0x680}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000000)={r6, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) munmap(&(0x7f0000127000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r7}) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001300)={'filter\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0x7]}, &(0x7f0000000140)=0x54) 2.102952946s ago: executing program 0 (id=877): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x8440, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x5c, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000000c0100005603030000af7a8a89164920dee27f73ba1d6d7c27e78cd9a653dc35463df3164e4a547e82c90037eae31201361296f5a311989be01a5a14aaf33c011ba4b475fd8b6a6c5441f8618011797ce3c5037ad88d2e0dc533c50089a9e8b99bcee4050000000000000000"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket(0x2000000000000021, 0x2, 0x10000000000002) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0xaea, 0x6, 0x3, "2cebe9e10e414effaa267dcd6bcfafa0010d6c8942acefd2ff960198de92dbfd", 0x32314d59}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000008798b98637f3eae5ce2d2936ee472b85de12af7bf0efa728c3c830c5bad86cefc7538147e068", @ANYRES16=r10, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000500020000000800030081000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) read$FUSE(r8, &(0x7f000000b1c0)={0x2020}, 0x2020) 1.611069897s ago: executing program 1 (id=883): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000040)=0x3de8e7ea, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) 1.502964017s ago: executing program 1 (id=885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x10003}], 0x1c) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x43fb, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x2, @empty, 0x2d}}, 0x7, 0x1, 0x200, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0x20000000000002, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) dup(r0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x10003}], 0x1c) (async) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x43fb, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x2, @empty, 0x2d}}, 0x7, 0x1, 0x200, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) pipe2$9p(&(0x7f0000000080), 0x0) (async) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) splice(r5, 0x0, r0, 0x0, 0x20000000000002, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) (async) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) 1.385543298s ago: executing program 1 (id=887): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) readlinkat(r1, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)=""/4112, 0x1010) 1.384842442s ago: executing program 1 (id=889): r0 = syz_open_dev$dri(&(0x7f0000000440), 0xb190, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x7, r1}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0xffffffffffffff56) accept4(r3, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x8000003) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffff1f) r6 = socket(0x9, 0x80009, 0x100000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB="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"], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x50}}, 0x2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x14}}, 0x4) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x1, 0x8, 0xff}) r8 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r9, 0xff03, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1b) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1.157006658s ago: executing program 0 (id=891): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'pids'}, {0x2b, 'hugetlb'}, {0x2d, 'perf_event'}]}, 0x33) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (rerun: 64) 1.077358649s ago: executing program 0 (id=892): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8ef, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}}, &(0x7f0000000240)=0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xd}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x7, @private0, 0x2e}}}, &(0x7f00000003c0)=0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="3d837d2750cffeb6d62892d36861a38e92b18bab84caf168889552e23fb9d6b2ea1773b30ac29a70c52ae186cf119b635847dd3be5707bfd6801646c6acd969756ab09d329cb650c8a1947c3e40aab2a505bac7c719bd09c091fc032ec3a2feccd5b61c9530f57bbd065e271ee371729e5000c506fecb76d518dc86a16f65b21980ae089dc6102825544d5fa", 0x8c}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0xce37, 0x0, 0x0, 0x8, r0}}, @sndrcv={0x30, 0x84, 0x1, {0xa1d, 0x7, 0x8008, 0x9, 0x9, 0x2, 0x2, 0x8, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x9, 0x1, 0x5976, 0x80000000, 0x0, 0x401, 0x4, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x4, 0x2, 0x4, 0x9, 0x4, 0xddaf, 0x3, r7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x81}}, @sndinfo={0x20, 0x84, 0x2, {0x4600, 0x8008, 0x2, 0x7, r8}}], 0x120, 0x4004000}, 0x40400c0) rmdir(&(0x7f0000000000)='./cgroup/../file0\x00') 831.564264ms ago: executing program 2 (id=897): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0xf6f}, {0x3, 0xfffffffa}]}, 0x14, 0x0) (async) sendto$netrom(r0, &(0x7f0000000000)="fd958653f1942ba487c25b61ec8acbfac79cbc42b8a9cb1d08319c9a0003ab908f2d8d9fa2", 0x25, 0xc8c0, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 747.690733ms ago: executing program 1 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = mq_open(&(0x7f00000005c0)='!selin\xdb\xa1\xc9\xcd.?w\x8c+\x02\xbf\xd9l\xd7\xcd\xc0a|se\xee\x0e\xcd\xce6?\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x22, &(0x7f0000000300)={0x1, 0x1, 0xec, 0xf2}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0xec, 0xd, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="b3915f8983bae828d57feab88cd891d5025016d22e12d69a920c7d5be9513c8cb20b7f9892e37cb90e5984cd01c1aa4e985f368565579292541d7c4e6228a4e5ef0b776beee32aad57adbc5f014591db91dc98e513f8d1805376bf96cd665801fa4ddcecdc387ffad73170305a56f3fba3cbf84f7d2f62f5f0fdf6f2263f225144", 0x81}, {&(0x7f0000000800)="d7ce155e4700b216ffcf81acb081ead37ed4564d55baac51f50ceda1fa06b98049139e143106bea8d629b6156c648fbeb4a0f005ea047a609141a0763338119351a923cf9a499e96", 0x48}], 0x2, &(0x7f0000000880)=[@op={0x18}], 0x18, 0x4000890}, 0x40800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000c31000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f83edfc4660f3a229f00015e660fc62f0b66b9950900000f320f23d80f21d6f832c410f810f80000ef0f23f866b8d70200000f23d00f21f866352000000e2e653e670fc729660f73d340", 0x75}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x10, 0x6, 0x5, 0xc3e9, 0xd, 0xae2c, 0xa00000000090, 0x7, 0xfffffdfffffeffff, 0xffffffffffffffff, 0x6, 0x0, 0x4, 0x4, 0x8, 0x3], 0x6000, 0x4080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, &(0x7f0000000a00)}}], 0x2, 0x12020, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, r2, 0xffffe000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r6, 0x8004af81, &(0x7f0000000440)) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7d7, 0x8, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="018500bd7000ffdbdf258200000008000300bb548a77c2a0ed738e664e7742d9287f7c2d5bed5390f48143ea9ed51820ca9cfbcfa14b493c9abe5623dea40da4547ac73031babf63b9c993fec97014f33e59fab2109417bb523a35487811b7058b9dbd95210a7e373011ee7a245715e47bfe1613731486606c8fea8c83", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7001fcdbdf0003000000000000000000020000000000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 747.108208ms ago: executing program 2 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 653.973772ms ago: executing program 2 (id=901): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x24) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="343963546a11df0c49782002de9e5e03", @ANYRES16=r2, @ANYBLOB="33030000000004000000150000000c0001800800030007000000"], 0x20}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r4}, &(0x7f0000000a40), 0x0}, 0x20) (async) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x2) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r9 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$BLKSSZGET(r9, 0x1268, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x10009, 0x34324241, 0x1, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 541.715834ms ago: executing program 2 (id=903): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1, 0x3, 0x0) 482.139369ms ago: executing program 2 (id=904): write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff9d, 0x69, 0x2, {0x2, 0x1, 0x3}}, 0x14) 481.053713ms ago: executing program 2 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@flushpolicy={0x1cc, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@algo_comp={0x108, 0x3, {{'deflate\x00'}, 0x600, "cb601b5d1748b111d293eb7e002f9b4b73706dd7b46a5bd9074e2b8788a342bbf29eee2d2e8b04f82eb83d18ef119b72b7190bffab0e86a8d4907eb7b6b3f133510bd430d32da7a398766097df940a07fa95173a535339946fbae41a9c4f2203c240dd17382e4e8f6c3a895eae38ef60da5d5b3f41aa74586ee3b194e736eda99ec554ed6d86a2527ba4b2ff917e7f0de3ffeb338e5c92f9a3b1f4f163c8d3eaa5c533c634aa154ee3d8e44f9401c45820f2857bc28c4d334e7c87d4d38f8c4e"}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010100, @in=@multicast2, 0xa, 0x2, 0x9}}, @algo_crypt={0x54, 0x2, {{'cbc(twofish)\x00'}, 0x60, "09c82ca79786754bdb597f4c"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2d, 0x70bd27, 0x70bd26, 0x394, [0x3]}}, @etimer_thresh={0x8, 0xc, 0x1000}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd27, 0x8001}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0xd1}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="bda3d60b4b26"}) writev(r0, &(0x7f0000000600)=[{&(0x7f00000005c0)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b70000180600405f6a5abeef4ba0d598446273cd3d0856ccec377a3f3b1876245aa44d0bbd887cfa368eb38787011284a16a9504e4b207c95104085f0836bfd11345eeb17f6151ad4948", 0x4a}], 0x2) 390.855921ms ago: executing program 3 (id=907): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x20000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x30, r1}, 0x18) execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 390.087028ms ago: executing program 3 (id=908): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x6, 0x58b43685, 0x2, @discrete={0xffffffc0, 0x6}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x1, "8ffc7fd060af5e28f061f32bcf9596f42850bb84d3f5b96ae3008766dd6876dc", 0x1, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x2, 0x2, 0x6}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000180)="25c21093e92ab6b3556818db06deef87aa1b642edf8cf01607f23583cbbfb20c10f37f7cf9ad0fa181f6a33d3910f0dbcc4b5fc80003c5cd2182b650b4e1906d3f5142471a2939817a6fa79901365e7dcf2ff1dce58fd8f78c05842313f13ab793ecc55c8158a45ca44d23d7a34535f2121c467b6864f53806a5f408f0322c8ac3a191dd195deab1b0dd75c42bc70e2e63e17e5c09aeb702868cc1f1dfa5d365a8b50c1bdcb7c964582f492373dd4088ccaf384bce8537b99c521540e59d5d96758fb1531236de00911632a2c35f2e6dd5178772980770a827dc9cb9d1f2729c4e2549e52b1159fa3fbfcf32ec0551cba98cd5c39dcb4e2b12608c85d4", 0xfd, 0x2}, {&(0x7f0000000280)="6734fd66d43160e0d3b575bf42ed527ccdb5c5f421dce2066902b71010534c01e63c96496969911c04bcf4132ffd5e5e24faecb6f0eddd90c1cabd294cd6798191542f5061c59d0f6bed714e3a6f5e907b7b2ba2abdc7c705840f6e8c397d2a48f60697b8921be7848b30a50414780e6a08d91bfa858201288a1046acb76682d0e34568c9792c255c6657a86ad239fba628ec14852fb34613142919f6d49f3b4435fa902a61f82b6e04f1d921b25c190c1789c3b3d04f9e0e423fb98b09a6d69eb04e5c993b3f77a44985159bdca39461b79f556e9b290b4508f43dab7", 0xdd, 0x3}, {&(0x7f0000000380)="55f685127fe8f6bf8f2fe14b2e422d9cb8a55833c0777ccde45f7a8e6bf7ac9cd478d4cd746d49566ffc58bc916df3497a5493a221aaa0fc08c5e1a241ce0da2b4ad89b32de31a9c2ee4c3e17a700f3c637bad31641a6a45fad10695f5fffae32d54", 0x62, 0x2}, {&(0x7f0000000400)="d17b805b79f122b4f8935732819a63268cbd6fd575b3aeda97c5e4353a3b2dce6cc83003fd50e901dc44cbcacf9834ed5de869046e904489b0c5850b6d270001a609ad94afe7a5192a0a28c27eb1780391231f762e45407fbac783bcf3e0d615a2a6ac9eeac08265dde550408072f60bfd2b9e63fca6d3730fe00cd6fbbf3ebb1bd6756ab6a77be923913d201ef7e1f396cfeb4d886f7519c341647ff0a8c91ff9447d32ae4e76d81740e3020d22d4faf265e8862a8fed5cc9910dcafcd824e0875d", 0xc2, 0x3}, {&(0x7f0000000500)="872967857bbb135b044a48863cb5dab8533e8ff35687dfbee2ad6da2eace1be915ac23fde5ff0047fb5d767af7cacfd31a400b6d954f84ece1017b83bb3028a41f6a9578473ac348cc6df069be87780f64a1cd2943ce7f29c2b595", 0x5b}, {&(0x7f0000000580)="61db5f015baf0dfcc9fbbbb8ac29f5b81b11b6dbe812d5dee015e7d00a376bee1858e8030e78219556add39ffa21d144870be30e01eacfe023420cddb1591ec8acf7ede66ba722f36fa4f998a1857fac01966ad965d4e1a8666ca368bd150420955c238e5662de78e4d98f1b52591236276e58967b24b8796c430b9f725eaa6e16d799586fdf3850b47c20", 0x8b, 0x1}]}, 0x6, 0x3}, 0x1) (async) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000006c0)={0xe7d0000, 0x8001, 0x3, r2, 0x0, &(0x7f0000000680)={0x980905, 0x7, '\x00', @ptr=0x6}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000700)={0xc0000000, 0x8, "ae6fdef0573256a5d0314612d22e183c676eeedd889165761a52f79b0250adac", 0xfffffffffffffff9, 0xcc2, 0x4, 0x9, 0x3ff, 0x4, 0x37, 0x0, [0xfd, 0x5, 0x0, 0x5]}) syz_open_dev$hiddev(&(0x7f0000000800), 0xf23a, 0x40040) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000840)={0x2, 0x1, @start={0x3a}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000a00)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) (async) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000a40)={0x1}) (async) r4 = accept$unix(r2, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e) shutdown(r4, 0x0) (async) r5 = accept$phonet_pipe(r2, &(0x7f0000000b40), &(0x7f0000000b80)=0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000002f00)=[{0x5, 0x1, 0x0, &(0x7f0000002000)=[{&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/74, 0x4a}, {&(0x7f0000000d80)=""/60, 0x3c}, {&(0x7f0000000dc0)=""/224, 0xe0}, {&(0x7f0000000ec0)=""/247, 0xf7}], &(0x7f0000002080)=[0x4, 0xc0, 0x3a4, 0xffff, 0x9, 0x5, 0x6, 0x0, 0x1a]}, {0x6, 0x1, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000fc0)=""/47, 0x2f}, {&(0x7f0000002100)=""/151, 0x97}, {&(0x7f00000021c0)=""/208, 0xd0}, {&(0x7f00000022c0)=""/92, 0x5c}, {&(0x7f0000002340)=""/67, 0x43}, {&(0x7f00000023c0)=""/243, 0xf3}], &(0x7f0000002540)=[0x4800, 0x4, 0x7]}, {0x3, 0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002580)=""/193, 0xc1}, {&(0x7f0000002680)=""/121, 0x79}, {&(0x7f0000002700)=""/236, 0xec}], &(0x7f0000002840)=[0x7, 0x8f05]}, {0x3, 0x1, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002880)=""/117, 0x75}, {&(0x7f0000002900)=""/98, 0x62}, {&(0x7f0000002980)=""/113, 0x71}], &(0x7f0000002a40)=[0x6, 0x3, 0x5d2f]}, {0x3, 0x1, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002a80)=""/154, 0x9a}, {&(0x7f0000002b40)=""/24, 0x18}, {&(0x7f0000002b80)=""/1, 0x1}], &(0x7f0000002c00)=[0x7fff, 0x3, 0x0, 0x10]}, {0x3, 0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002c40)=""/217, 0xd9}, {&(0x7f0000002d40)=""/183, 0xb7}, {&(0x7f0000002e00)=""/89, 0x59}], &(0x7f0000002ec0)=[0x2, 0x4]}], 0x6) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000004f40)=[{0x5, 0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002fc0)=""/226, 0xe2}, {&(0x7f00000030c0)=""/236, 0xec}, {&(0x7f00000031c0)=""/168, 0xa8}, {&(0x7f0000003280)=""/234, 0xea}, {&(0x7f0000003380)=""/1, 0x1}], &(0x7f0000003440)=[0x2, 0x1ff, 0x0, 0x0, 0x10001, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003480)=""/252, 0xfc}, {&(0x7f0000003580)=""/198, 0xc6}], &(0x7f00000036c0)=[0x9, 0x6a, 0x6, 0xffffffffffffffff, 0x2]}, {0x5, 0x1, 0x0, &(0x7f0000004940)=[{&(0x7f0000003700)=""/84, 0x54}, {&(0x7f0000003780)=""/179, 0xb3}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/63, 0x3f}, {&(0x7f0000004880)=""/180, 0xb4}], &(0x7f00000049c0)=[0x0, 0x3, 0xfffffffffffffffc, 0x8, 0x8]}, {0x6, 0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004a00)=""/167, 0xa7}, {&(0x7f0000004ac0)=""/221, 0xdd}, {&(0x7f0000004bc0)=""/185, 0xb9}, {&(0x7f0000004c80)=""/212, 0xd4}, {&(0x7f0000004d80)=""/187, 0xbb}, {&(0x7f0000004e40)=""/55, 0x37}], &(0x7f0000004f00)=[0x0, 0x9]}], 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000004fc0), 0x22100, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000005000)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000005140)={r7, 0x9, &(0x7f0000005040)=[0x9, 0x6, 0x6, 0x4, 0x7, 0x7, 0x9, 0x7fff, 0x2], &(0x7f0000005080)=[0x6, 0x4, 0x3, 0xffffff1f], 0x0, 0x3, 0x7, &(0x7f00000050c0)=[0x7, 0x3, 0xffffff80], &(0x7f0000005100)=[0x8, 0x8cc9, 0x81, 0x0, 0x1, 0x9, 0xbdf]}) (async) syz_open_dev$hiddev(&(0x7f0000005180), 0x4, 0x8400) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000051c0)={{0x3, @name="69635db28461fcf65ddc5105d5d66b0a2446570358f319bf01518154051ebd6d"}, "5388f25075343ea20f8d324905d3c6005757e71b74fa5ea3e96b2f3c1dfd36f6", 0x7}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000052c0)={0x4, 0x30314142, 0x1, @discrete={0x2, 0x4}}) (async) lseek(r5, 0xe, 0x2) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000005300)=0x20) 318.991369ms ago: executing program 3 (id=909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000c00)={0x9, 0x10001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)={0x0, 0xfb, 0x60, 0x4, 0xf, "a5a4d35b3d20f5d6c7063737e72446d9", "76ed0778e215c2469565f164b5b8243ebf47971e8acd0fb6fb7a8a79eadb86a0e35926b4e2352b2f44b97d52b9b4ac3259e790f8a4689610b7b4bb1ccc7f2201e9f0ab5951342a3e3f1315"}, 0x60, 0x1) sendmmsg$unix(r1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x2, 0x2, 0x0, 0x2, 0xffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000800)=""/93, 0x5d}], 0x5, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/200, 0xc8}, {&(0x7f0000001280)=""/143, 0x8f}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000000cc0)=""/183, 0xb7}, {&(0x7f0000001200)=""/123, 0x7b}, {&(0x7f0000000e00)=""/190, 0xbe}, {&(0x7f0000000ec0)=""/127, 0x7f}], 0x7, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x2, 0x0, &(0x7f0000001180)) r5 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x11, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r5, 0x54, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000005c0)=ANY=[@ANYRES32], 0x28}}, 0x10) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 267.630067ms ago: executing program 3 (id=910): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00g\rGU\x00\x00'], 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x81, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf251d00000008001d000600000008001e009006000086001f0008de58725e70371e4b82ec16a7930074d78f3a4012f570ad74a415ec6a89a169d88a22b99871ce2f13d25ab3697d11e250436d961dd0ff03000036a07a875cd9f6c7d09ff9ab5cf73834292e22a94122d0e05caf0ba199195570fc5131e145bd0851d62bb6baff3999ef776587cbea8e5bf6b9f9b87b058718f9a9f5e16e02caed4000aa08001e0000000000080001"], 0xcc}, 0x1, 0x0, 0x0, 0x2400c000}, 0x200048c0) accept4(r0, 0x0, 0x0, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags=0x100}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000780)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[r4], &(0x7f0000000340)=[{0x2, 0x5, 0xf, 0x9}, {0x5, 0x3, 0x9, 0x6}, {0x0, 0x2, 0xd, 0x7}, {0x5, 0x5, 0x4}, {0x4, 0x1, 0x3, 0x4}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x2}, {0x5, 0x2, 0x3, 0xa}, {0x3, 0x3, 0xa}, {0x1, 0x4, 0x3, 0xb}], 0x10, 0x3}, 0x94) ioctl$sock_proto_private(r3, 0x8b21, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 134.809455ms ago: executing program 3 (id=911): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r0, 0x0) write$qrtrtun(r0, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)={0x234, 0x7d, 0x1, {{0x500, 0xf3, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x10000000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x57, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbb\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x0eG'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 0s ago: executing program 3 (id=912): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x3, 0x8248}) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x0) (async) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r7 = fanotify_init(0x200, 0x1) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3e9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x60, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) fanotify_mark(r7, 0x39, 0x1a, r6, 0x0) getdents(r6, &(0x7f0000000400)=""/108, 0x6c) (async) readv(r5, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x300}, {0x0}], 0x5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$assume_authority(0x10, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): sim2 : renamed from netdevsim0 (while UP) [ 389.460482][ T6759] mmap: syz.1.197 (6759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 389.515078][ T6754] veth3: entered promiscuous mode [ 389.517704][ T6759] program syz.1.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.559437][ C0] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 389.562968][ C0] sr 2:0:0:0: [sr0] tag#0 CDB: Security protocol in [ 389.565258][ C0] sr 2:0:0:0: [sr0] tag#0 CDB[00]: a2 9f 03 e5 a0 02 24 9a 30 68 a3 49 4f e3 7b 1b [ 389.568294][ C0] sr 2:0:0:0: [sr0] tag#0 CDB[10]: f8 10 fc ab 00 3a 72 75 f4 30 ee ad 2a [ 389.708483][ T6778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.203'. [ 389.785283][ T6785] Set syz1 is full, maxelem 14 reached [ 390.024683][ T6090] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 390.097624][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 390.174612][ T6090] usb 7-1: Using ep0 maxpacket: 32 [ 390.178297][ T6090] usb 7-1: config index 0 descriptor too short (expected 18468, got 36) [ 390.181596][ T6090] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 390.186069][ T6090] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 390.186560][ T6815] macvtap0: entered allmulticast mode [ 390.189862][ T6090] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 390.193296][ T6815] veth0_macvtap: entered allmulticast mode [ 390.196051][ T6090] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 390.200956][ T6090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.204896][ T837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 390.250714][ T6820] program syz.0.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.330054][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 390.357962][ T837] usb 6-1: config 0 has no interfaces? [ 390.363342][ T837] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 390.374557][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.381348][ T837] usb 6-1: config 0 descriptor?? [ 390.425250][ T6785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.432004][ T6090] usb 7-1: string descriptor 0 read error: -71 [ 390.440637][ T6090] usb 7-1: USB disconnect, device number 7 [ 390.475481][ T6835] "syz.0.220" (6835) uses obsolete ecb(arc4) skcipher [ 390.512551][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 390.512566][ T40] audit: type=1400 audit(1766734238.810:409): avc: denied { write } for pid=6841 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 390.611181][ T40] audit: type=1400 audit(1766734238.910:410): avc: denied { ioctl } for pid=6850 comm="syz.0.225" path="socket:[15054]" dev="sockfs" ino=15054 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 390.623322][ T40] audit: type=1400 audit(1766734238.910:411): avc: denied { ioctl } for pid=6850 comm="syz.0.225" path="socket:[15055]" dev="sockfs" ino=15055 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 390.654130][ T40] audit: type=1400 audit(1766734238.950:412): avc: denied { mount } for pid=6805 comm="syz.1.211" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 390.665065][ T6084] usb 6-1: USB disconnect, device number 4 [ 390.679496][ T40] audit: type=1400 audit(1766734238.980:413): avc: denied { ioctl } for pid=6854 comm="syz.0.226" path="socket:[12242]" dev="sockfs" ino=12242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.321109][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 391.382577][ T6881] Scaler: ================= START STATUS ================= [ 391.387539][ T6881] Scaler: ================== END STATUS ================== [ 391.453851][ T40] audit: type=1400 audit(1766734239.750:414): avc: denied { mount } for pid=6882 comm="syz.1.233" name="/" dev="autofs" ino=15066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 391.469621][ T40] audit: type=1400 audit(1766734239.770:415): avc: denied { create } for pid=6885 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 391.478937][ T40] audit: type=1400 audit(1766734239.770:416): avc: denied { bind } for pid=6885 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 391.604332][ T40] audit: type=1400 audit(1766734239.900:417): avc: denied { unmount } for pid=5999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 391.728848][ T40] audit: type=1400 audit(1766734240.030:418): avc: denied { create } for pid=6898 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.736776][ T6898] ALSA: mixer_oss: invalid OSS volume ';' [ 391.786960][ T6907] netlink: 'syz.0.242': attribute type 21 has an invalid length. [ 391.790420][ T6907] netlink: 156 bytes leftover after parsing attributes in process `syz.0.242'. [ 391.858102][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'. [ 391.907820][ T6926] vlan2: entered promiscuous mode [ 391.910520][ T6926] bridge0: entered promiscuous mode [ 392.013499][ T6932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1033199157 (2066398314 ns) > initial count (263680 ns). Using initial count to start timer. [ 392.030489][ T6940] program syz.0.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.068371][ T6947] vlan2: entered allmulticast mode [ 392.070181][ T6947] bond0: entered allmulticast mode [ 392.071948][ T6947] bond_slave_0: entered allmulticast mode [ 392.073939][ T6947] bond_slave_1: entered allmulticast mode [ 392.140959][ T6950] syzkaller0: entered promiscuous mode [ 392.143208][ T6950] syzkaller0: entered allmulticast mode [ 392.156439][ T6950] vcan1: entered allmulticast mode [ 392.344600][ T5960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 392.495943][ T5960] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.499887][ T5960] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 392.503386][ T5960] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.506643][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.512465][ T6947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.519656][ T5960] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.717863][ T6947] faux_driver vkms: [drm] Unknown color mode 2147483648; guessing buffer size. [ 392.723659][ T5960] usb 5-1: USB disconnect, device number 6 [ 393.165244][ T6972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.261'. [ 393.169254][ T6972] tipc: Invalid UDP bearer configuration [ 393.169301][ T6972] tipc: Enabling of bearer rejected, failed to enable media [ 393.218456][ T6986] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 393.234790][ T6986] bond1: entered promiscuous mode [ 393.238082][ T6986] bond1: entered allmulticast mode [ 393.240244][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.251023][ T6986] erspan1: entered allmulticast mode [ 393.254911][ T6986] bond1: (slave erspan1): making interface the new active one [ 393.257470][ T6986] erspan1: entered promiscuous mode [ 393.261134][ T6986] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 393.271905][ C1] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 393.275266][ C1] sr 2:0:0:0: [sr0] tag#19 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 393.282488][ T6989] SELinux: policydb magic number 0xbbbbbbbb does not match expected magic number 0xf97cff8c [ 393.283328][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 393.292772][ T6989] SELinux: failed to load policy [ 393.376016][ T6986] bond1 (unregistering): (slave erspan1): Releasing active interface [ 393.378883][ T6986] erspan1: left promiscuous mode [ 393.384437][ T6986] bond1 (unregistering): Released all slaves [ 393.459571][ T6997] pimreg3: entered allmulticast mode [ 393.919253][ T7039] program syz.1.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.088173][ T6001] Bluetooth: hci1: Unable to find connection for big 0x00 [ 394.374617][ T6257] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 394.507688][ T7052] __nla_validate_parse: 2 callbacks suppressed [ 394.507713][ T7052] netlink: 92 bytes leftover after parsing attributes in process `syz.3.285'. [ 394.535100][ T6257] usb 6-1: Using ep0 maxpacket: 16 [ 394.542943][ T6257] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 394.546987][ T6257] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.552725][ T6257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 394.559079][ T6257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 394.563707][ T6257] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.569047][ T6257] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 394.572159][ T6257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.579427][ T6257] usb 6-1: config 0 descriptor?? [ 394.588948][ T6257] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 394.595201][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.602430][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.606347][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.615400][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.618999][ T6255] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.622877][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.631023][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.642822][ T5327] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.758330][ T7061] openvswitch: netlink: Key 3 has unexpected len 8 expected 4 [ 394.786971][ T7044] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 394.792655][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.802812][ T6084] usb 6-1: USB disconnect, device number 5 [ 395.024732][ T6257] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 395.152178][ T7079] random: crng reseeded on system resumption [ 395.184605][ T6257] usb 8-1: Using ep0 maxpacket: 8 [ 395.191640][ T6257] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.196878][ T6257] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.201036][ T6257] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 395.205629][ T6257] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.210980][ T6257] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.215147][ T6257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.427565][ T6257] usb 8-1: GET_CAPABILITIES returned 0 [ 395.432471][ T6257] usbtmc 8-1:16.0: can't read capabilities [ 395.633746][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 395.633761][ T40] audit: type=1326 audit(1766734243.930:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.639479][ T6005] usb 8-1: USB disconnect, device number 3 [ 395.643682][ T40] audit: type=1326 audit(1766734243.940:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.654106][ T40] audit: type=1326 audit(1766734243.940:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079378e010 code=0x7ffc0000 [ 395.664331][ T40] audit: type=1326 audit(1766734243.940:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.672594][ T40] audit: type=1326 audit(1766734243.940:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.680158][ T40] audit: type=1326 audit(1766734243.940:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.688971][ T40] audit: type=1326 audit(1766734243.940:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.696620][ T40] audit: type=1326 audit(1766734243.940:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.704655][ T40] audit: type=1326 audit(1766734243.940:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.712630][ T40] audit: type=1326 audit(1766734243.940:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079378f7c9 code=0x7ffc0000 [ 395.771984][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 395.895374][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 395.895406][ T1113] ata1: failed to read log page 10h (errno=-5) [ 395.895417][ T1113] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 395.895428][ T1113] ata1.00: irq_stat 0x40000000 [ 395.895438][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 395.895445][ T1113] ata1.00: cmd 61/00:60:36:41:04/01:00:00:00:00/40 tag 12 ncq dma 131072 out [ 395.895445][ T1113] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 395.895475][ T1113] ata1.00: status: { DRDY } [ 395.900940][ T1113] ata1.00: configured for UDMA/100 [ 395.922868][ T1113] ata1: EH complete [ 396.058744][ T7122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.309'. [ 396.069833][ T7122] syzkaller1: entered promiscuous mode [ 396.072252][ T7122] syzkaller1: entered allmulticast mode [ 396.105939][ T7125] bond1: option xmit_hash_policy: invalid value (6) [ 396.111203][ T7125] bond1 (unregistering): Released all slaves [ 396.140904][ T7127] netlink: 84 bytes leftover after parsing attributes in process `syz.3.310'. [ 396.148927][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 396.152792][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 396.277645][ T7132] tipc: Started in network mode [ 396.281171][ T7132] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 396.286728][ T7132] tipc: Enabled bearer , priority 10 [ 396.307171][ T7132] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 396.323261][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.313'. [ 396.326522][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7132 comm=syz.3.313 [ 396.415553][ T7131] [U] [ 396.694328][ T849] IPVS: starting estimator thread 0... [ 396.695841][ T7155] dns_resolver: Unsupported server list version (0) [ 396.744257][ T7158] sg_write: data in/out 1376413916/43 bytes for SCSI command 0x0-- guessing data in; [ 396.744257][ T7158] program syz.2.319 not setting count and/or reply_len properly [ 396.784862][ T7156] IPVS: using max 42 ests per chain, 100800 per kthread [ 396.828376][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 396.831735][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 396.835822][ T7163] netlink: 'syz.2.321': attribute type 19 has an invalid length. [ 396.974745][ T7170] program syz.0.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.981039][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 396.981436][ T6001] Bluetooth: min 6 > max 0 [ 396.987883][ T7170] hsr_slave_0: left promiscuous mode [ 396.991174][ T7170] hsr_slave_1: left promiscuous mode [ 397.097224][ T7174] IPv6: sit1: Disabled Multicast RS [ 397.100830][ T7174] sit1: entered allmulticast mode [ 397.416048][ T6084] tipc: Node number set to 4269801488 [ 397.434328][ T7210] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 397.436754][ T7210] dvmrp1: persist enabled [ 397.438591][ T7210] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 397.440517][ T7210] dvmrp1: persist disabled [ 397.448750][ T7212] random: crng reseeded on system resumption [ 397.554744][ T6257] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 397.602263][ T7212] syz.3.337 (7212) used greatest stack depth: 18808 bytes left [ 397.714676][ T6257] usb 5-1: Using ep0 maxpacket: 16 [ 397.720785][ T6257] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 397.725557][ T6257] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.731587][ T6257] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.738550][ T6257] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 397.744860][ T6257] usb 5-1: config 7 interface 0 has no altsetting 0 [ 397.748205][ T6257] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 397.753551][ T6257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.810328][ T7231] mkiss: ax0: crc mode is auto. [ 397.846004][ T7234] fuse: Unknown parameter 'rootmof' [ 397.848386][ T7234] fuse: Unknown parameter 'rootmof' [ 397.850831][ T7234] fuse: Unknown parameter 'rootmof' [ 397.852984][ T7234] fuse: Unknown parameter 'rootmof' [ 397.855984][ T7234] fuse: Unknown parameter 'rootmof' [ 397.858034][ T7234] fuse: Unknown parameter 'rootmof' [ 397.860345][ T7234] fuse: Unknown parameter 'rootmof' [ 397.862672][ T7234] fuse: Unknown parameter 'rootmof' [ 397.864734][ T7234] fuse: Unknown parameter 'rootmof' [ 397.866755][ T7234] fuse: Unknown parameter 'rootmof' [ 397.868893][ T7234] fuse: Unknown parameter 'rootmof' [ 397.871119][ T7234] fuse: Unknown parameter 'rootmof' [ 397.873437][ T7234] fuse: Unknown parameter 'rootmof' [ 397.875928][ T7234] fuse: Unknown parameter 'rootmof' [ 397.878701][ T7234] fuse: Unknown parameter 'rootmof' [ 397.880776][ T7234] fuse: Unknown parameter 'rootmof' [ 397.883179][ T7234] fuse: Unknown parameter 'rootmof' [ 397.886095][ T7234] fuse: Unknown parameter 'rootmof' [ 397.893425][ T7234] fuse: Unknown parameter 'rootmof' [ 397.897719][ T7234] fuse: Unknown parameter 'rootmof' [ 397.900245][ T7234] fuse: Unknown parameter 'rootmof' [ 397.903545][ T7234] fuse: Unknown parameter 'rootmof' [ 397.906387][ T7234] fuse: Unknown parameter 'rootmof' [ 397.909166][ T7234] fuse: Unknown parameter 'rootmof' [ 397.911781][ T7234] fuse: Unknown parameter 'rootmof' [ 397.914104][ T7234] fuse: Unknown parameter 'rootmof' [ 397.916327][ T7234] fuse: Unknown parameter 'rootmof' [ 397.918315][ T7234] fuse: Unknown parameter 'rootmof' [ 397.920411][ T7234] fuse: Unknown parameter 'rootmof' [ 397.922687][ T7234] fuse: Unknown parameter 'rootmof' [ 397.924908][ T7234] fuse: Unknown parameter 'rootmof' [ 397.926867][ T7234] fuse: Unknown parameter 'rootmof' [ 397.928756][ T7234] fuse: Unknown parameter 'rootmof' [ 398.101281][ T7246] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 398.105279][ T7246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.208021][ T6084] IPVS: starting estimator thread 0... [ 398.300247][ T7248] kvm: kvm [7247]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 398.305001][ T7254] IPVS: using max 44 ests per chain, 105600 per kthread [ 398.328618][ T6257] usbhid 5-1:7.0: can't add hid device: -71 [ 398.332939][ T6257] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 398.342922][ T6257] usb 5-1: USB disconnect, device number 7 [ 398.345838][ T7248] kvm: kvm [7247]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 398.765823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 398.855254][ T6001] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 399.006251][ T7295] syz.0.361 (7295): drop_caches: 0 [ 399.035101][ T6001] Bluetooth: hci3: command tx timeout [ 399.036199][ T7293] loop4: detected capacity change from 0 to 524288000 [ 399.125490][ T6257] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 399.126880][ T7298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 399.190768][ T7311] macsec1: entered promiscuous mode [ 399.192646][ T7311] macsec1: entered allmulticast mode [ 400.117023][ T7318] /dev/sg0: Can't lookup blockdev [ 400.124959][ T7319] __nla_validate_parse: 5 callbacks suppressed [ 400.124970][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 400.154323][ T7319] veth1_to_hsr: entered promiscuous mode [ 400.158067][ T7319] macvlan2: entered allmulticast mode [ 400.160839][ T7319] veth1_to_hsr: entered allmulticast mode [ 400.175408][ T7328] netlink: 'syz.2.372': attribute type 9 has an invalid length. [ 400.178849][ T7328] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.372'. [ 400.188700][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 400.213614][ T7328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.390830][ T7350] netlink: 172 bytes leftover after parsing attributes in process `syz.2.379'. [ 400.669182][ T7364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.115486][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 401.131442][ T7371] netlink: 296 bytes leftover after parsing attributes in process `syz.0.385'. [ 401.143492][ T7374] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=67 sclass=netlink_xfrm_socket pid=7374 comm=syz.0.385 [ 401.152926][ T7373] netlink: 296 bytes leftover after parsing attributes in process `syz.0.385'. [ 401.159021][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 401.159033][ T40] audit: type=1326 audit(1766734249.460:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.384" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fac3218f7c9 code=0x0 [ 401.256962][ T40] audit: type=1400 audit(1766734249.560:526): avc: denied { map } for pid=7384 comm="syz.2.390" path="socket:[17026]" dev="sockfs" ino=17026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 401.273382][ T40] audit: type=1400 audit(1766734249.560:527): avc: denied { accept } for pid=7384 comm="syz.2.390" path="socket:[17026]" dev="sockfs" ino=17026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 401.281675][ T40] audit: type=1400 audit(1766734249.570:528): avc: denied { read write } for pid=7388 comm="syz.3.392" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.292564][ T40] audit: type=1400 audit(1766734249.570:529): avc: denied { open } for pid=7388 comm="syz.3.392" path="/dev/usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.319107][ T40] audit: type=1400 audit(1766734249.620:530): avc: denied { map } for pid=7384 comm="syz.2.390" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.324281][ T7386] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 401.330248][ T7386] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 401.333056][ T7386] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 401.334609][ T40] audit: type=1400 audit(1766734249.620:531): avc: denied { execute } for pid=7384 comm="syz.2.390" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.335684][ T7386] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 401.348784][ T40] audit: type=1400 audit(1766734249.650:532): avc: denied { connect } for pid=7395 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.401341][ T7401] input: syz1 as /devices/virtual/input/input11 [ 401.418584][ T7400] netlink: 'syz.3.395': attribute type 30 has an invalid length. [ 401.591839][ T40] audit: type=1400 audit(1766734249.890:533): avc: denied { bind } for pid=7409 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 401.629379][ T7422] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 401.844796][ T5960] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 401.994630][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 401.998866][ T5960] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 402.001742][ T5960] usb 7-1: can't read configurations, error -61 [ 402.124587][ T5960] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 402.163644][ T40] audit: type=1400 audit(1766734250.460:534): avc: denied { setopt } for pid=7425 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.274667][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 402.279931][ T5960] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 402.283150][ T5960] usb 7-1: can't read configurations, error -61 [ 402.286656][ T5960] usb usb7-port1: attempt power cycle [ 402.327120][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 402.331416][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 402.334857][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 402.401493][ T7434] mkiss: ax0: crc mode is auto. [ 402.634670][ T5960] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 402.666346][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 402.670650][ T5960] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 402.673463][ T5960] usb 7-1: can't read configurations, error -61 [ 402.825344][ T5960] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 402.845013][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 402.848463][ T5960] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 402.851223][ T5960] usb 7-1: can't read configurations, error -61 [ 402.853901][ T5960] usb usb7-port1: unable to enumerate USB device [ 402.914634][ T849] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 403.066015][ T849] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 403.069775][ T849] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 403.073725][ T849] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.078432][ T849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 403.082610][ T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.085714][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.089042][ T849] usb 5-1: Product: syz [ 403.090889][ T849] usb 5-1: Manufacturer: syz [ 403.092552][ T849] usb 5-1: SerialNumber: syz [ 403.096902][ T7450] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.100304][ T7450] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.103458][ T7450] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.313973][ T849] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 403.325309][ T849] usb 5-1: USB disconnect, device number 8 [ 403.755657][ T6001] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 403.756423][ T5292] Bluetooth: hci4: command 0x1003 tx timeout [ 404.564640][ T837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 404.726899][ T837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.729760][ T837] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 404.733140][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.739067][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 404.744531][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 404.751632][ T837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.756024][ T837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.759541][ T837] usb 5-1: Product: syz [ 404.761134][ T837] usb 5-1: Manufacturer: syz [ 404.778645][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 404.781306][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 404.787873][ T837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 404.790289][ T837] cdc_wdm 5-1:1.0: Unknown control protocol [ 404.823675][ T7491] xt_hashlimit: size too large, truncated to 1048576 [ 405.052753][ T7508] ipip0: entered promiscuous mode [ 405.055543][ T7508] ipip0: entered allmulticast mode [ 405.059793][ T7510] syzkaller0: entered promiscuous mode [ 405.062177][ T7510] syzkaller0: entered allmulticast mode [ 405.085397][ T837] usb 5-1: USB disconnect, device number 9 [ 405.284304][ T7534] syzkaller0: entered promiscuous mode [ 405.288449][ T7534] syzkaller0: entered allmulticast mode [ 405.379938][ T7539] __nla_validate_parse: 4 callbacks suppressed [ 405.379954][ T7539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.438'. [ 405.388279][ T7539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.438'. [ 405.435407][ T7545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.555455][ T7553] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.608806][ T7555] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.444'. [ 405.618182][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 405.621388][ T7555] nbd: illegal input index 1879048192 [ 405.673526][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.813784][ T6085] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 405.842092][ T7575] netlink: 'syz.3.449': attribute type 11 has an invalid length. [ 405.923411][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 405.964672][ T6085] usb 6-1: Using ep0 maxpacket: 8 [ 405.973382][ T6085] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 405.978664][ T6085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.000229][ T6085] pvrusb2: Hardware description: Terratec Grabster AV400 [ 406.003830][ T6085] pvrusb2: ********** [ 406.009654][ T6085] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 406.014239][ T6085] pvrusb2: Important functionality might not be entirely working. [ 406.018279][ T6085] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 406.023257][ T6085] pvrusb2: ********** [ 406.169680][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 406.169698][ T40] audit: type=1400 audit(1766734254.470:557): avc: denied { unlink } for pid=5994 comm="syz-executor" name="file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 406.200536][ T2488] pvrusb2: Invalid write control endpoint [ 406.252095][ T2488] pvrusb2: Invalid write control endpoint [ 406.263823][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 406.269025][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 406.272854][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 406.278449][ T2488] pvrusb2: Device being rendered inoperable [ 406.285682][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 406.288910][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 406.298380][ T2488] pvrusb2: Attached sub-driver cx25840 [ 406.301851][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 406.308894][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 406.411926][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 406.415096][ T7552] openvswitch: netlink: Flow actions attr not present in new flow. [ 406.418929][ T849] usb 6-1: USB disconnect, device number 6 [ 406.536193][ T6001] Bluetooth: hci1: unexpected cc 0x0402 length: 4 > 1 [ 407.057343][ T40] audit: type=1400 audit(1766734255.360:558): avc: denied { ioctl } for pid=7611 comm="syz.3.462" path="socket:[19130]" dev="sockfs" ino=19130 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 407.074716][ T40] audit: type=1400 audit(1766734255.370:559): avc: denied { write } for pid=7614 comm="syz.2.463" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 407.088443][ T7572] kexec: Could not allocate control_code_buffer [ 407.212369][ T7628] netlink: 'syz.0.467': attribute type 13 has an invalid length. [ 407.225159][ T7628] gretap0: refused to change device tx_queue_len [ 407.228268][ T7628] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 407.246569][ T40] audit: type=1400 audit(1766734255.550:560): avc: denied { mounton } for pid=7627 comm="syz.0.467" path="/117/bus" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 407.256624][ T7628] /dev/nullb0: Can't open blockdev [ 407.264587][ T40] audit: type=1400 audit(1766734255.550:561): avc: denied { map } for pid=7630 comm="syz.2.468" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 407.313929][ T7635] geneve2: entered promiscuous mode [ 407.321637][ T7635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7635 comm=syz.0.470 [ 407.328490][ T7635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7635 comm=syz.0.470 [ 407.364833][ T40] audit: type=1400 audit(1766734255.670:562): avc: denied { wake_alarm } for pid=7643 comm="syz.2.473" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.385545][ T7644] netlink: 'syz.2.473': attribute type 11 has an invalid length. [ 407.388140][ T7644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 407.391960][ T7646] kvm: user requested TSC rate below hardware speed [ 407.398824][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 407.403138][ T7646] netlink: 'syz.0.474': attribute type 16 has an invalid length. [ 407.408515][ T7646] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.474'. [ 407.414001][ T7646] netlink: 'syz.0.474': attribute type 2 has an invalid length. [ 407.417282][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 407.458436][ T7655] sp0: Synchronizing with TNC [ 407.466104][ T7656] netlink: zone id is out of range [ 407.474347][ T40] audit: type=1400 audit(1766734255.770:563): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.484770][ T7656] netlink: zone id is out of range [ 407.487520][ T7656] netlink: set zone limit has 8 unknown bytes [ 407.491038][ T40] audit: type=1400 audit(1766734255.770:564): avc: denied { search } for pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.499794][ T40] audit: type=1400 audit(1766734255.770:565): avc: denied { search } for pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.707003][ T40] audit: type=1400 audit(1766734256.010:566): avc: denied { shutdown } for pid=7677 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.746027][ T7683] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 407.752578][ T7683] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 407.753671][ T6065] libceph: connect (1)[c::]:6789 error -101 [ 407.757728][ T7683] cramfs: wrong magic [ 407.759100][ T6065] libceph: mon0 (1)[c::]:6789 connect error [ 407.768158][ T849] libceph: connect (1)[c::]:6789 error -101 [ 407.770027][ T7679] ceph: No mds server is up or the cluster is laggy [ 407.771263][ T849] libceph: mon0 (1)[c::]:6789 connect error [ 407.929617][ T7696] gfs2: path_lookup on \\8< $$&6n @M, priority 0 [ 425.448670][ T8493] syzkaller0: entered promiscuous mode [ 425.451358][ T8493] syzkaller0: entered allmulticast mode [ 425.457606][ T8493] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 425.473371][ T8493] tipc: Resetting bearer [ 425.484959][ T8492] tipc: Resetting bearer [ 425.500856][ T8492] tipc: Disabling bearer [ 425.551883][ T8501] loop6: detected capacity change from 0 to 2640 [ 425.555578][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.559041][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.563337][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.570419][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.573969][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.578186][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.581605][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.594677][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.598290][ T8501] ldm_validate_partition_table(): Disk read failed. [ 425.601625][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.606851][ T8501] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.610439][ T8501] Dev loop6: unable to read RDB block 0 [ 425.616781][ T8501] loop6: unable to read partition table [ 425.624367][ T8501] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 425.647743][ T5342] udevd[5342]: worker [6010] terminated by signal 33 (Unknown signal 33) [ 425.651568][ T5342] udevd[5342]: worker [6010] failed while handling '/devices/virtual/block/loop6' [ 425.664871][ T8502] Invalid logical block size (5) [ 425.727488][ T5960] usb 7-1: USB disconnect, device number 19 [ 425.790416][ T8520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.803311][ T8520] netlink: 'syz.2.742': attribute type 13 has an invalid length. [ 425.813410][ T8520] gretap0: refused to change device tx_queue_len [ 425.820206][ T8527] openvswitch: netlink: IP tunnel dst address not specified [ 425.822716][ T8520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 425.826768][ T8527] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 425.837757][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'. [ 425.846125][ T8527] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 425.849391][ T8527] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 425.854711][ T8527] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 425.861986][ T8527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.745'. [ 425.865502][ T8525] netlink: 52 bytes leftover after parsing attributes in process `syz.3.743'. [ 426.144443][ T8550] erofs (device nbd2): cannot find valid erofs superblock [ 426.152976][ T8552] erofs (device nbd2): cannot find valid erofs superblock [ 426.234830][ T8564] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 426.555351][ T8576] bond3: entered promiscuous mode [ 426.885414][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 426.885425][ T40] audit: type=1400 audit(1766734275.190:676): avc: denied { ioctl } for pid=8590 comm="syz.0.761" path="cgroup:[4026532946]" dev="nsfs" ino=4026532946 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 427.007313][ T8599] xt_cluster: node mask cannot exceed total number of nodes [ 427.009858][ T8600] xt_cluster: node mask cannot exceed total number of nodes [ 427.345167][ T8613] __nla_validate_parse: 2 callbacks suppressed [ 427.345185][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 427.351170][ T8613] bridge_slave_1: left allmulticast mode [ 427.353423][ T8613] bridge_slave_1: left promiscuous mode [ 427.355623][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.360385][ T8613] bridge_slave_0: left allmulticast mode [ 427.362294][ T8613] bridge_slave_0: left promiscuous mode [ 427.364357][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.579786][ T40] audit: type=1400 audit(1766734275.880:677): avc: denied { watch } for pid=8618 comm="syz.0.767" path="/193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 427.611090][ T40] audit: type=1400 audit(1766734275.880:678): avc: denied { watch_sb watch_reads } for pid=8618 comm="syz.0.767" path="/193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 427.634211][ T8622] dns_resolver: Unsupported content type (234) [ 427.691886][ T40] audit: type=1400 audit(1766734275.990:679): avc: denied { read } for pid=8621 comm="syz.3.768" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 427.701344][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 427.710656][ T40] audit: type=1400 audit(1766734276.010:680): avc: denied { create } for pid=8621 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 427.781822][ T40] audit: type=1400 audit(1766734276.080:681): avc: denied { read } for pid=8626 comm="syz.0.770" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 427.789393][ T40] audit: type=1400 audit(1766734276.090:682): avc: denied { open } for pid=8626 comm="syz.0.770" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 427.796916][ T40] audit: type=1400 audit(1766734276.090:683): avc: denied { ioctl } for pid=8626 comm="syz.0.770" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 427.859984][ T40] audit: type=1400 audit(1766734276.160:684): avc: denied { bind } for pid=8629 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 427.862067][ T8630] loop6: detected capacity change from 0 to 2640 [ 427.943738][ T40] audit: type=1400 audit(1766734276.240:685): avc: denied { write } for pid=8629 comm="syz.3.771" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 428.194740][ T849] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 428.357848][ T849] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 428.361927][ T849] usb 6-1: config 0 has no interface number 0 [ 428.365508][ T849] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 428.367532][ T8648] bond0: entered promiscuous mode [ 428.371615][ T849] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 428.371646][ T849] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 428.373643][ T849] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 428.377614][ T8648] bond_slave_0: entered promiscuous mode [ 428.382090][ T849] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 428.385779][ T8648] bond_slave_1: entered promiscuous mode [ 428.388036][ T849] usb 6-1: Product: syz [ 428.393842][ T8648] batadv0: entered promiscuous mode [ 428.395434][ T849] usb 6-1: SerialNumber: syz [ 428.398844][ T849] usb 6-1: config 0 descriptor?? [ 428.402018][ T8648] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 428.409935][ T8648] bond0: left promiscuous mode [ 428.412300][ T8648] bond_slave_0: left promiscuous mode [ 428.414717][ T849] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 428.418182][ T8648] bond_slave_1: left promiscuous mode [ 428.418762][ T849] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input16 [ 428.426247][ T8648] batadv0: left promiscuous mode [ 428.600421][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 428.633211][ T8635] dvmrp1: tun_chr_ioctl cmd 1074025678 [ 428.633227][ T8635] dvmrp1: group set to 0 [ 428.699072][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 428.702868][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 428.703853][ T24] usb 6-1: USB disconnect, device number 9 [ 428.705260][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 428.719958][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 428.901230][ T8667] futex_wake_op: syz.3.782 tries to shift op by -1; fix this program [ 428.905327][ T8668] futex_wake_op: syz.3.782 tries to shift op by -1; fix this program [ 428.919126][ T8668] [U] TX85 ~Dž\_(K?1KAFQ 22@1$SwMj^s12T]_~gxp24 [ 428.926585][ T8667] [U] TX85 ~Dž\_(K?1KAFQ 22@1$SwMj^s12T]_~gxp24 [ 429.119181][ T8685] bond3 (unregistering): Released all slaves [ 429.198891][ T8692] /dev/nullb0: Can't open blockdev [ 429.374641][ T6257] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 429.543923][ T6257] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.551437][ T6257] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 429.556698][ T6257] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.560263][ T6257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 429.565735][ T6257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 429.572016][ T6257] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.576427][ T6257] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.579507][ T6257] usb 5-1: Product: syz [ 429.581406][ T6257] usb 5-1: Manufacturer: syz [ 429.586743][ T6257] cdc_wdm 5-1:1.0: skipping garbage [ 429.589194][ T6257] cdc_wdm 5-1:1.0: skipping garbage [ 429.599680][ T6257] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 429.603404][ T6257] cdc_wdm 5-1:1.0: Unknown control protocol [ 429.888003][ T8742] overlay: Unknown parameter 'measure' [ 430.025020][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.804'. [ 430.136021][ T8756] No memory to map [ 430.384591][ T849] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 430.534540][ T849] usb 8-1: Using ep0 maxpacket: 8 [ 430.537594][ T849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.539907][ T849] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.542955][ T849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.551707][ T849] usb 8-1: config 0 descriptor?? [ 430.711025][ T8762] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 430.720631][ T8762] ceph: No source [ 430.838364][ T8770] cgroup: Invalid name [ 430.841272][ T8771] cgroup: Invalid name [ 430.961452][ T849] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 431.199295][ T8785] pim6reg: entered allmulticast mode [ 431.212349][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 431.448042][ T8793] pim6reg: left allmulticast mode [ 432.153011][ T849] usb 5-1: USB disconnect, device number 16 [ 432.184619][ T8796] usb usb8: usbfs: process 8796 (syz.0.820) did not claim interface 0 before use [ 432.189791][ T8797] lo: entered allmulticast mode [ 432.237662][ T8800] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 432.246756][ T8800] syz_tun: entered allmulticast mode [ 432.249860][ T8800] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 432.324261][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 432.324274][ T40] audit: type=1400 audit(1766734280.620:712): avc: denied { ioctl } for pid=8799 comm="syz.0.821" path="socket:[27806]" dev="sockfs" ino=27806 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 433.127403][ T8758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.131955][ T8758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 433.141208][ T8758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 433.146600][ T8758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.148586][ T8758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.153069][ T8758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.158904][ T8758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.161576][ T8758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.166250][ T8758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.191489][ T6257] usb 8-1: USB disconnect, device number 7 [ 433.274645][ T6001] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.332151][ T40] audit: type=1400 audit(1766734281.630:713): avc: denied { getopt } for pid=8814 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 433.372818][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 433.377880][ T8821] netlink: 'syz.1.826': attribute type 6 has an invalid length. [ 433.381293][ T8821] netlink: 'syz.1.826': attribute type 6 has an invalid length. [ 433.386465][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 433.404690][ T6090] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 433.433761][ T8827] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 433.437405][ T8827] netlink: 232 bytes leftover after parsing attributes in process `syz.3.830'. [ 433.496780][ T8832] serio: Serial port ptm0 [ 433.525960][ T8818] netlink: 'syz.2.825': attribute type 5 has an invalid length. [ 433.554749][ T6090] usb 5-1: Using ep0 maxpacket: 32 [ 433.560199][ T6090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 433.565696][ T6090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 433.570259][ T6090] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 433.578937][ T6090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 433.585657][ T6090] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 433.588891][ T6090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.591711][ T6090] usb 5-1: Product: syz [ 433.593168][ T6090] usb 5-1: Manufacturer: syz [ 433.596543][ T6090] usb 5-1: SerialNumber: syz [ 433.601275][ T6090] usb 5-1: config 0 descriptor?? [ 433.613326][ T6090] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input17 [ 433.627890][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.632600][ C3] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 433.641739][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.651525][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.661983][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.684553][ T849] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 433.693794][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.697909][ T6139] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.702472][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.717714][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.722403][ T5327] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.806421][ T8802] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 433.846190][ T849] usb 8-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 433.851122][ T849] usb 8-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 433.856819][ T849] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 433.860364][ T849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.863440][ T849] usb 8-1: Product: syz [ 433.865044][ T849] usb 8-1: Manufacturer: syz [ 433.866616][ T849] usb 8-1: SerialNumber: syz [ 434.079788][ T40] audit: type=1400 audit(1766734282.380:714): avc: denied { read } for pid=8826 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 434.110145][ T24] usb 8-1: USB disconnect, device number 8 [ 434.679982][ T8846] netlink: 'syz.3.834': attribute type 21 has an invalid length. [ 434.683347][ T8846] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.840253][ T40] audit: type=1400 audit(1766734283.140:715): avc: denied { read } for pid=8849 comm="syz.3.836" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.850651][ T40] audit: type=1400 audit(1766734283.150:716): avc: denied { open } for pid=8849 comm="syz.3.836" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.899872][ T40] audit: type=1400 audit(1766734283.200:717): avc: denied { map } for pid=8852 comm="syz.1.837" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.919414][ T40] audit: type=1400 audit(1766734283.220:718): avc: denied { ioctl } for pid=8852 comm="syz.1.837" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.970645][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 434.975072][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'. [ 434.996899][ T40] audit: type=1400 audit(1766734283.300:719): avc: denied { ioctl } for pid=8854 comm="syz.1.838" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 435.006184][ T8855] tipc: Cannot configure node identity twice [ 435.076782][ T8862] netlink: 'syz.2.840': attribute type 11 has an invalid length. [ 435.079445][ T8862] netlink: 244 bytes leftover after parsing attributes in process `syz.2.840'. [ 435.148134][ T8866] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 435.151109][ T8866] netlink: 'syz.2.842': attribute type 4 has an invalid length. [ 435.154302][ T8866] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.842'. [ 435.160355][ T8866] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 435.164022][ T8866] netlink: 'syz.2.842': attribute type 4 has an invalid length. [ 435.168573][ T8866] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.842'. [ 435.194702][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.197163][ T6001] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.222682][ T40] audit: type=1400 audit(1766734283.520:720): avc: denied { view } for pid=8871 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 435.230176][ T40] audit: type=1400 audit(1766734283.530:721): avc: denied { getopt } for pid=8871 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.248791][ T849] usb 5-1: USB disconnect, device number 17 [ 435.354626][ T5292] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.401830][ T8888] tmpfs: Bad value for 'mpol' [ 435.405033][ T8888] SELinux: unknown common r [ 435.407600][ T8888] SELinux: failed to load policy [ 435.493525][ T8894] macvtap0: entered allmulticast mode [ 435.497427][ T8894] veth0_macvtap: entered allmulticast mode [ 435.504037][ T8894] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.624627][ T6090] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 435.756615][ T837] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 435.777148][ T6090] usb 6-1: Using ep0 maxpacket: 32 [ 435.816640][ T8887] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 435.875559][ T6090] usb 6-1: unable to get BOS descriptor or descriptor too short [ 435.880092][ T6090] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 435.883712][ T6090] usb 6-1: can't read configurations, error -71 [ 435.913201][ T837] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 435.916942][ T837] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 435.921279][ T837] usb 8-1: config 0 interface 0 has no altsetting 0 [ 435.926579][ T8916] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 435.933158][ T837] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 435.937321][ T837] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 435.940899][ T837] usb 8-1: Product: syz [ 435.943399][ T837] usb 8-1: Manufacturer: syz [ 435.945543][ T837] usb 8-1: SerialNumber: syz [ 435.949904][ T837] usb 8-1: config 0 descriptor?? [ 435.954146][ T837] hub 8-1:0.0: bad descriptor, ignoring hub [ 435.956977][ T837] hub 8-1:0.0: probe with driver hub failed with error -5 [ 435.971169][ T837] usb 8-1: selecting invalid altsetting 0 [ 436.243065][ T6257] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 436.265833][ T8922] /dev/nullb0: Can't open blockdev [ 436.406912][ T6257] usb 7-1: Using ep0 maxpacket: 16 [ 436.417310][ T6257] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 436.442915][ T6257] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 436.447032][ T6257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.458517][ T6257] usb 7-1: Product: syz [ 436.460519][ T6257] usb 7-1: Manufacturer: syz [ 436.462662][ T6257] usb 7-1: SerialNumber: syz [ 436.474435][ T6257] usb 7-1: config 0 descriptor?? [ 436.489652][ T6257] hub 7-1:0.0: bad descriptor, ignoring hub [ 436.492651][ T6257] hub 7-1:0.0: probe with driver hub failed with error -5 [ 436.501480][ T6257] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input18 [ 436.700373][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.705947][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.854294][ T837] usb 7-1: USB disconnect, device number 20 [ 436.903840][ T8896] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 437.079838][ T8896] usb 8-1: device firmware changed [ 437.086081][ T24] usb 8-1: USB disconnect, device number 9 [ 437.191692][ T8935] syzkaller0: entered promiscuous mode [ 437.193709][ T8935] syzkaller0: entered allmulticast mode [ 437.262702][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 437.324408][ T6001] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.324452][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.334728][ T837] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 437.429199][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 437.432487][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.436298][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 437.436308][ T40] audit: type=1400 audit(1767258573.678:725): avc: denied { listen } for pid=8934 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 437.443765][ T8942] sctp: [Deprecated]: syz.1.867 (pid 8942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.443765][ T8942] Use struct sctp_sack_info instead [ 437.445834][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 437.448970][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.458239][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 437.461098][ T24] usb 8-1: Product: syz [ 437.462797][ T24] usb 8-1: Manufacturer: 䟒郧飿ぬ﬋憎㜇뵷ᬕ著墽껗ꅻ鶰ॽ짯ﭐ䆗씜闭먲嗡﵅迴辑擺눕腸蝮동㟌虸啜ꡁ㋘ [ 437.467806][ T24] usb 8-1: SerialNumber: 釞퍋﯑䗼褸 [ 437.471993][ T24] usb 8-1: config 0 descriptor?? [ 437.477502][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 437.479741][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 437.484164][ T24] usb 8-1: selecting invalid altsetting 0 [ 437.491118][ T837] usb 7-1: Using ep0 maxpacket: 32 [ 437.491730][ T5292] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.496542][ T837] usb 7-1: config 3 has an invalid interface number: 58 but max is 2 [ 437.500195][ T837] usb 7-1: config 3 has an invalid interface number: 107 but max is 2 [ 437.503751][ T837] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 437.507757][ T837] usb 7-1: config 3 has an invalid interface number: 237 but max is 2 [ 437.512091][ T837] usb 7-1: config 3 has an invalid interface number: 60 but max is 2 [ 437.515595][ T837] usb 7-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 437.521775][ T837] usb 7-1: config 3 has no interface number 0 [ 437.524536][ T837] usb 7-1: config 3 has no interface number 1 [ 437.527230][ T837] usb 7-1: config 3 has no interface number 2 [ 437.529985][ T837] usb 7-1: config 3 has no interface number 3 [ 437.532923][ T837] usb 7-1: config 3 interface 58 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 437.537632][ T837] usb 7-1: config 3 interface 58 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 437.542495][ T837] usb 7-1: config 3 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 2007, setting to 64 [ 437.547580][ T837] usb 7-1: config 3 interface 58 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 437.552874][ T837] usb 7-1: config 3 interface 58 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 437.557356][ T837] usb 7-1: config 3 interface 58 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 437.562031][ T837] usb 7-1: config 3 interface 58 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 437.566439][ T837] usb 7-1: config 3 interface 58 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 437.571251][ T837] usb 7-1: config 3 interface 58 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 437.576160][ T837] usb 7-1: config 3 interface 107 altsetting 9 has an endpoint descriptor with address 0x14, changing to 0x4 [ 437.581318][ T837] usb 7-1: config 3 interface 107 altsetting 9 has an endpoint descriptor with address 0x98, changing to 0x88 [ 437.587294][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0x88, skipping [ 437.591781][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 437.596579][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 437.600834][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 437.604888][ T837] usb 7-1: config 3 interface 107 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 437.608566][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 437.612150][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 437.616037][ T837] usb 7-1: config 3 interface 107 altsetting 9 has an endpoint descriptor with address 0x71, changing to 0x1 [ 437.619874][ T837] usb 7-1: config 3 interface 107 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 437.623659][ T837] usb 7-1: config 3 interface 107 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 437.628079][ T837] usb 7-1: config 3 interface 107 altsetting 9 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 437.632725][ T837] usb 7-1: config 3 interface 237 altsetting 5 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 437.637536][ T837] usb 7-1: config 3 interface 237 altsetting 5 endpoint 0x82 has invalid maxpacket 29607, setting to 1024 [ 437.642686][ T837] usb 7-1: config 3 interface 237 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 437.647539][ T837] usb 7-1: config 3 interface 237 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 437.652762][ T837] usb 7-1: config 3 interface 237 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 437.658756][ T837] usb 7-1: too many endpoints for config 3 interface 60 altsetting 51: 82, using maximum allowed: 30 [ 437.663733][ T837] usb 7-1: config 3 interface 60 altsetting 51 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 437.668983][ T837] usb 7-1: config 3 interface 60 altsetting 51 has a duplicate endpoint with address 0xE, skipping [ 437.674110][ T837] usb 7-1: config 3 interface 60 altsetting 51 has a duplicate endpoint with address 0x8, skipping [ 437.679017][ T837] usb 7-1: config 3 interface 60 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 437.683609][ T837] usb 7-1: config 3 interface 60 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 437.687578][ T837] usb 7-1: config 3 interface 60 altsetting 51 has a duplicate endpoint with address 0x9, skipping [ 437.687904][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.691420][ T837] usb 7-1: config 3 interface 60 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 437.691441][ T837] usb 7-1: config 3 interface 60 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 437.691452][ T837] usb 7-1: config 3 interface 60 altsetting 51 has 8 endpoint descriptors, different from the interface descriptor's value: 82 [ 437.691468][ T837] usb 7-1: config 3 interface 107 has no altsetting 0 [ 437.691478][ T837] usb 7-1: config 3 interface 237 has no altsetting 0 [ 437.691488][ T837] usb 7-1: config 3 interface 60 has no altsetting 0 [ 437.693872][ T837] usb 7-1: string descriptor 0 read error: -22 [ 437.696296][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.699299][ T837] usb 7-1: New USB device found, idVendor=1435, idProduct=0827, bcdDevice=e0.11 [ 437.726592][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.734421][ T8932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.741043][ T837] usb 7-1: Could not find all expected endpoints [ 437.750020][ T837] usb 7-1: Could not find all expected endpoints [ 437.757923][ T837] usb 7-1: Could not find all expected endpoints [ 437.764123][ T837] usb 7-1: Could not find all expected endpoints [ 438.034912][ T6065] usb 8-1: USB disconnect, device number 10 [ 438.079667][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.087758][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.127430][ T837] usb 7-1: USB disconnect, device number 21 [ 438.287334][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.775634][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.785021][ T8975] exFAT-fs (loop0): unable to read boot sector [ 438.789459][ T8975] exFAT-fs (loop0): failed to read boot sector [ 438.791805][ T8975] exFAT-fs (loop0): failed to recognize exfat type [ 438.920499][ T8983] /dev/nullb0: Can't open blockdev [ 439.038254][ T8987] netlink: 172 bytes leftover after parsing attributes in process `syz.2.881'. [ 439.104979][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8993 comm=syz.2.882 [ 439.232459][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 439.363286][ T9003] netem: change failed [ 439.463984][ T5292] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.464103][ T6001] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.777796][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.027351][ T6065] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 440.044842][ T9031] syz.3.894 (9031): drop_caches: 2 [ 440.171778][ T9047] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 440.203677][ T6065] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 440.207657][ T6065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.211193][ T6065] usb 5-1: Product: syz [ 440.213250][ T6065] usb 5-1: Manufacturer: syz [ 440.215467][ T6065] usb 5-1: SerialNumber: syz [ 440.220088][ T6065] usb 5-1: config 0 descriptor?? [ 440.587687][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 440.652050][ T837] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 440.816052][ T837] usb 7-1: Using ep0 maxpacket: 32 [ 440.820152][ T837] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 440.823796][ T837] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 440.828481][ T837] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 440.833425][ T837] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 440.838056][ T837] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 440.843265][ T40] audit: type=1400 audit(1767258576.999:726): avc: denied { append } for pid=9098 comm="syz.3.912" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 440.843568][ T837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 440.856436][ T837] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 440.860866][ T837] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 440.864402][ T837] usb 7-1: Product: syz [ 440.866635][ T837] usb 7-1: Manufacturer: syz [ 440.868814][ T837] usb 7-1: SerialNumber: syz [ 440.872933][ T837] usb 7-1: config 0 descriptor?? [ 440.877137][ T837] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 440.881952][ T837] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 440.888498][ T9100] ------------[ cut here ]------------ [ 440.891949][ T9100] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1b21/0x2490, CPU#2: syz.3.912/9100 [ 440.897593][ T9100] Modules linked in: [ 440.901173][ T9100] CPU: 2 UID: 0 PID: 9100 Comm: syz.3.912 Not tainted syzkaller #0 PREEMPT(full) [ 440.904619][ T9100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.908313][ T9100] RIP: 0010:__kvm_gpc_refresh+0x1b21/0x2490 [ 440.910495][ T9100] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 10 cb 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 02 cb 85 00 48 85 db 0f 84 b4 04 00 00 [ 440.917714][ T9100] RSP: 0018:ffffc90003797608 EFLAGS: 00010293 [ 440.919916][ T9100] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff81390119 [ 440.922717][ T9100] RDX: ffff88802a604980 RSI: ffffffff81391b60 RDI: 0000000000000000 [ 440.926313][ T9100] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 440.926356][ T9100] R10: 0000000000000001 R11: ffff88802a6054b0 R12: ffff888000000000 [ 440.926368][ T9100] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003797870 [ 440.926380][ T9100] FS: 00007f079459c6c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 440.926420][ T9100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.926434][ T9100] CR2: 000000110c370053 CR3: 0000000033a41000 CR4: 0000000000352ef0 [ 440.926443][ T9100] Call Trace: [ 440.926449][ T9100] [ 440.926456][ T9100] ? kvm_gpc_refresh+0x25/0x190 [ 440.926481][ T9100] ? __pfx___mutex_lock+0x10/0x10 [ 440.926525][ T9100] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 440.926587][ T9100] kvm_gpc_refresh+0xec/0x190 [ 440.926610][ T9100] kvm_xen_set_evtchn.part.0+0x19c/0x270 [ 440.926630][ T9100] ? kvm_xen_set_evtchn.part.0+0x187/0x270 [ 440.926655][ T9100] evtchn_set_fn+0x69/0x90 [ 440.926668][ T9100] kvm_set_irq+0x244/0x490 [ 440.926685][ T9100] ? __pfx_kvm_set_irq+0x10/0x10 [ 440.926697][ T9100] ? __pfx_evtchn_set_fn+0x10/0x10 [ 440.926726][ T9100] ? __might_fault+0xe3/0x190 [ 440.926738][ T9100] ? __might_fault+0xe3/0x190 [ 440.926748][ T9100] ? __might_fault+0x13b/0x190 [ 440.926769][ T9100] kvm_vm_ioctl_irq_line+0xc6/0x160 [ 440.926781][ T9100] ? _copy_from_user+0x59/0xd0 [ 440.926809][ T9100] kvm_vm_ioctl+0xb1b/0x4090 [ 440.926838][ T9100] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 440.926875][ T9100] ? kasan_quarantine_put+0x10a/0x240 [ 440.926889][ T9100] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.926918][ T9100] ? find_held_lock+0x2b/0x80 [ 440.926949][ T9100] ? tomoyo_path_number_perm+0x295/0x580 [ 440.926970][ T9100] ? tomoyo_path_number_perm+0x18d/0x580 [ 440.927000][ T9100] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.927047][ T9100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.927075][ T9100] ? do_vfs_ioctl+0x128/0x14f0 [ 440.927097][ T9100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.927112][ T9100] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 440.927141][ T9100] ? hook_file_ioctl_common+0x144/0x410 [ 440.927170][ T9100] ? selinux_file_ioctl+0x180/0x270 [ 440.927185][ T9100] ? selinux_file_ioctl+0xb4/0x270 [ 440.927203][ T9100] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 440.927220][ T9100] __x64_sys_ioctl+0x18e/0x210 [ 440.927272][ T9100] do_syscall_64+0xcd/0xf80 [ 440.927304][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.927318][ T9100] RIP: 0033:0x7f079378f7c9 [ 440.927338][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.927351][ T9100] RSP: 002b:00007f079459c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.927364][ T9100] RAX: ffffffffffffffda RBX: 00007f07939e6090 RCX: 00007f079378f7c9 [ 440.927372][ T9100] RDX: 0000200000000000 RSI: 00000000c008ae67 RDI: 0000000000000005 [ 440.927379][ T9100] RBP: 00007f0793813f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.927386][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.927393][ T9100] R13: 00007f07939e6128 R14: 00007f07939e6090 R15: 00007ffdf0c51768 [ 440.927420][ T9100] [ 440.927427][ T9100] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 440.927437][ T9100] CPU: 2 UID: 0 PID: 9100 Comm: syz.3.912 Not tainted syzkaller #0 PREEMPT(full) [ 440.927450][ T9100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.927458][ T9100] Call Trace: [ 440.927462][ T9100] [ 440.927467][ T9100] dump_stack_lvl+0x3d/0x1f0 [ 440.927483][ T9100] vpanic+0x640/0x6f0 [ 440.927496][ T9100] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 440.927508][ T9100] panic+0xca/0xd0 [ 440.927520][ T9100] ? __pfx_panic+0x10/0x10 [ 440.927536][ T9100] ? check_panic_on_warn+0x1f/0xb0 [ 440.927550][ T9100] check_panic_on_warn+0xab/0xb0 [ 440.927563][ T9100] __warn+0x108/0x3c0 [ 440.927578][ T9100] __report_bug+0x2a0/0x520 [ 440.927591][ T9100] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 440.927604][ T9100] ? __pfx___report_bug+0x10/0x10 [ 440.927621][ T9100] ? lockdep_unlock+0x64/0xd0 [ 440.927637][ T9100] ? __lock_acquire+0x12c2/0x2890 [ 440.927651][ T9100] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 440.927664][ T9100] report_bug+0xb2/0x220 [ 440.927676][ T9100] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 440.927688][ T9100] handle_bug+0x127/0x260 [ 440.927705][ T9100] exc_invalid_op+0x17/0x50 [ 440.927722][ T9100] asm_exc_invalid_op+0x1a/0x20 [ 440.927732][ T9100] RIP: 0010:__kvm_gpc_refresh+0x1b21/0x2490 [ 440.927745][ T9100] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 10 cb 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 02 cb 85 00 48 85 db 0f 84 b4 04 00 00 [ 440.927756][ T9100] RSP: 0018:ffffc90003797608 EFLAGS: 00010293 [ 440.927764][ T9100] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff81390119 [ 440.927771][ T9100] RDX: ffff88802a604980 RSI: ffffffff81391b60 RDI: 0000000000000000 [ 440.927778][ T9100] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 440.927785][ T9100] R10: 0000000000000001 R11: ffff88802a6054b0 R12: ffff888000000000 [ 440.927792][ T9100] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003797870 [ 440.927803][ T9100] ? __kvm_gpc_refresh+0xd9/0x2490 [ 440.927815][ T9100] ? __kvm_gpc_refresh+0x1b20/0x2490 [ 440.927829][ T9100] ? __kvm_gpc_refresh+0x1b20/0x2490 [ 440.927841][ T9100] ? kvm_gpc_refresh+0x25/0x190 [ 440.927855][ T9100] ? __pfx___mutex_lock+0x10/0x10 [ 440.927871][ T9100] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 440.927893][ T9100] kvm_gpc_refresh+0xec/0x190 [ 440.927910][ T9100] kvm_xen_set_evtchn.part.0+0x19c/0x270 [ 440.927928][ T9100] ? kvm_xen_set_evtchn.part.0+0x187/0x270 [ 440.927948][ T9100] evtchn_set_fn+0x69/0x90 [ 440.927959][ T9100] kvm_set_irq+0x244/0x490 [ 440.927971][ T9100] ? __pfx_kvm_set_irq+0x10/0x10 [ 440.927982][ T9100] ? __pfx_evtchn_set_fn+0x10/0x10 [ 440.927999][ T9100] ? __might_fault+0xe3/0x190 [ 440.928009][ T9100] ? __might_fault+0xe3/0x190 [ 440.928018][ T9100] ? __might_fault+0x13b/0x190 [ 440.928032][ T9100] kvm_vm_ioctl_irq_line+0xc6/0x160 [ 440.928043][ T9100] ? _copy_from_user+0x59/0xd0 [ 440.928059][ T9100] kvm_vm_ioctl+0xb1b/0x4090 [ 440.928078][ T9100] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 440.928101][ T9100] ? kasan_quarantine_put+0x10a/0x240 [ 440.928113][ T9100] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.928130][ T9100] ? find_held_lock+0x2b/0x80 [ 440.928147][ T9100] ? tomoyo_path_number_perm+0x295/0x580 [ 440.928162][ T9100] ? tomoyo_path_number_perm+0x18d/0x580 [ 440.928176][ T9100] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.928195][ T9100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.928208][ T9100] ? do_vfs_ioctl+0x128/0x14f0 [ 440.928222][ T9100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.928235][ T9100] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 440.928255][ T9100] ? hook_file_ioctl_common+0x144/0x410 [ 440.928276][ T9100] ? selinux_file_ioctl+0x180/0x270 [ 440.928290][ T9100] ? selinux_file_ioctl+0xb4/0x270 [ 440.928305][ T9100] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 440.928335][ T9100] __x64_sys_ioctl+0x18e/0x210 [ 440.928352][ T9100] do_syscall_64+0xcd/0xf80 [ 440.928367][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.928378][ T9100] RIP: 0033:0x7f079378f7c9 [ 440.928386][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.928397][ T9100] RSP: 002b:00007f079459c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.928407][ T9100] RAX: ffffffffffffffda RBX: 00007f07939e6090 RCX: 00007f079378f7c9 [ 440.928415][ T9100] RDX: 0000200000000000 RSI: 00000000c008ae67 RDI: 0000000000000005 [ 440.928421][ T9100] RBP: 00007f0793813f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.928428][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.928435][ T9100] R13: 00007f07939e6128 R14: 00007f07939e6090 R15: 00007ffdf0c51768 [ 440.928450][ T9100] [ 440.929287][ T9100] Kernel Offset: disabled