last executing test programs: 8m40.82555062s ago: executing program 0 (id=367): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000f9ffffff00000000fdffffff850000001700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x232}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742d123e8680d85ff0082762f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x8480) r1 = socket(0x200000000000011, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c400", @ANYBLOB="20000100", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x801) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780080012400000000805000100060000000500f94eba1a7e84d453000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) syz_io_uring_setup(0x620c, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x10, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x15c, &(0x7f0000000080)=0x6, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr={0x32314d56, 0x3}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m37.668545101s ago: executing program 0 (id=378): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f00000000c0)={0x1d, 0xfffff42f, 0x4}) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180), 0x4) madvise(&(0x7f000030f000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) gettid() openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) socket(0x26, 0x800, 0xffffffff) 8m36.918297151s ago: executing program 0 (id=380): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') pread64(r0, &(0x7f0000000940)=""/126, 0x7e, 0xe) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = syz_clone3(&(0x7f0000000500)={0x2000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280), {0x38}, &(0x7f00000003c0)=""/123, 0x7b, &(0x7f0000000440)=""/118, &(0x7f00000004c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r1, r1], 0xa, {r0}}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x80000003, 0x0, 0x8, r4, 0x0, 0x0, 'syz1\x00', &(0x7f0000000180)}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) unshare(0x64000600) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r1) 8m35.732029351s ago: executing program 0 (id=384): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="b717"], 0x0) 8m34.46236446s ago: executing program 2 (id=389): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 8m34.409783424s ago: executing program 2 (id=390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x8004510a, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff0600000000000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/51, 0x33}], 0x4) r8 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r8, 0x400, 0x1) 8m33.479171887s ago: executing program 2 (id=395): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0x100000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0xffffffffffffffdc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006005424285c2d6732b22b4982dcf93201a2ae8c03df3a996249360354e658e58ed085e5a8ff300ffa118a974b54f1ed20f2e78363c3c45ef059445cacca58400a3b4c8dbc62aa8e257f02e4dd7990859c124a719c2d50ddbe9563aa31423ee0eef7492437793aab913c0c56ba4d660454a62d57788f686adae0ff368a432ab38c121cbaa1f31a768b8d10474035e64164501e016421b9cfb0f7a9f59aac0c2d4504773c29405"], 0xdf) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x1f, 0x800, 0x11428, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x400000400, {0x0, 0x0, 0x0, {0x2, 0x10000000, 0x0, 0x6, 0x7ff, 0xfffffffffffffffd, 0x0, 0x3966, 0x3, 0x8000, 0x4, r6, r7, 0xc3d, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r0) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001d5b40620da0b58014b00010203010902120001030980f809048804000806016d5953f2e15326789bdd3cf6c874dc077789f8a7a777905aadaac10112188e0db348698a489bea5121a99afaee205090a3c30df950279b84deebbfd5c0"], 0x0) 8m32.14829568s ago: executing program 0 (id=397): socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeca) r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x2, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b109, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b"], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r6, 0xffffffffffffffff, 0xee01) write$UHID_INPUT(r6, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000019300)={'\x00', 0x400, 0x2000067, 0x200, 0x101, 0x50893277, r0}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102392, 0x18ff8) 8m30.758810002s ago: executing program 0 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x100000000000000, 0x0, 0x4000401}, 0x44084) 8m28.14691767s ago: executing program 2 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x130492, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x80084, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x608001, 0x80) mkdirat(r0, &(0x7f0000000000)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x80001) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000001c0)={0x2, 0x2}) fchdir(r2) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8m27.266750971s ago: executing program 2 (id=407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) 8m27.051071797s ago: executing program 2 (id=409): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bind$inet6(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x5c, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_emit_ethernet(0x29c, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x2, 0x28e, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "e526072a076ae0e6d6b16c8a0418f874f080afbf32d91cc256a695f1885b4c2b244fda5dd83cbf9c93ad17a6c5ca3e896f400d5c9789b7ecec780c32c8d7b8a8b293b95ff25efc770397d378df205dec379ca2638b7e3d2c821a123cdeb374c9553e094c235921e77404505bffee3a7d36d0976275bfeeb83aed74f325b28c3b00bc1f83d9a18f73ac26eae75e31f27100fa4fd332b00cc052e54afe4811be2b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4b4244ba48ac0eb230732ddc4f5366c66a66a56b34e9f57dfb0af6dbec17de1363d1e62edff835d955caeb3d1f9ad337ffd8618afb765a445d8704139498331a513b9596f91021cb9f36d7d92b8c9bee3e330c39cebdc1ebc0d8443a32e2b1216843deb27a221bd7ee20bcd37e5cd2b432660c5ea886aa221e387f3ebc7e84adcf026ec054554f02fb21ba9bdc4459c159aeba045841b942ff"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xef], "be89a95f0f7c82b59657248ffcface0514e989700a893445ea9d5c0bb0ebeb34261392057a5733842f2a56c903d411ee258968773189c70196f443819d8d18767359d3acb3c6b3b8e6aed6f70cbb7a4e9c4fcbdd7d0844efd7cfdbd2198d8af6141e34ab7cf2abaa7987ea5dcc24b6eb31c34f6ed11afab0f9443bd167bae19c77727de95abc4fdc82a2e73b18388cac3a050f1644b1f38019a1754d2912c3c693be525b10d4e3e2e17d28e861d6f481bfcc98113350887ba19c4f08759a100ffab1257dc3fded45f816d718fd125a9053d14e7ba9223349b904ab1e1ac286ae841b"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x3, 0x0, 0x1, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfc}, 0x2, {0x10, 0x8, 0x3, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "3214db542e56943b1e25aed4442a56a85d32bd9f42"}}}}}}, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb86dd60122d9200383afffe58df29de10000000000000000000bbff02000000000000000000000000000102009078fffffffc662682c500083a01fe800000000000000000000000000034fe8000000000000000000000010000aa8700890300000000786b2736312e20cdf95500a69ce7970f383fb07e9074837a5eeb1d02ccc235e937a1c21f62ea73e3a0ef2e409f15d3067403b76263f0625365772a446ed1c8174b78a882dd302e3c3dff49067a13bf233125d9b929a7623a397d9a5ce1c48513dd621c1161ab50318e3556d4"], 0x0) 8m26.742530579s ago: executing program 32 (id=409): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bind$inet6(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x5c, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_emit_ethernet(0x29c, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x2, 0x28e, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "e526072a076ae0e6d6b16c8a0418f874f080afbf32d91cc256a695f1885b4c2b244fda5dd83cbf9c93ad17a6c5ca3e896f400d5c9789b7ecec780c32c8d7b8a8b293b95ff25efc770397d378df205dec379ca2638b7e3d2c821a123cdeb374c9553e094c235921e77404505bffee3a7d36d0976275bfeeb83aed74f325b28c3b00bc1f83d9a18f73ac26eae75e31f27100fa4fd332b00cc052e54afe4811be2b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4b4244ba48ac0eb230732ddc4f5366c66a66a56b34e9f57dfb0af6dbec17de1363d1e62edff835d955caeb3d1f9ad337ffd8618afb765a445d8704139498331a513b9596f91021cb9f36d7d92b8c9bee3e330c39cebdc1ebc0d8443a32e2b1216843deb27a221bd7ee20bcd37e5cd2b432660c5ea886aa221e387f3ebc7e84adcf026ec054554f02fb21ba9bdc4459c159aeba045841b942ff"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xef], "be89a95f0f7c82b59657248ffcface0514e989700a893445ea9d5c0bb0ebeb34261392057a5733842f2a56c903d411ee258968773189c70196f443819d8d18767359d3acb3c6b3b8e6aed6f70cbb7a4e9c4fcbdd7d0844efd7cfdbd2198d8af6141e34ab7cf2abaa7987ea5dcc24b6eb31c34f6ed11afab0f9443bd167bae19c77727de95abc4fdc82a2e73b18388cac3a050f1644b1f38019a1754d2912c3c693be525b10d4e3e2e17d28e861d6f481bfcc98113350887ba19c4f08759a100ffab1257dc3fded45f816d718fd125a9053d14e7ba9223349b904ab1e1ac286ae841b"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x3, 0x0, 0x1, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfc}, 0x2, {0x10, 0x8, 0x3, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "3214db542e56943b1e25aed4442a56a85d32bd9f42"}}}}}}, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb86dd60122d9200383afffe58df29de10000000000000000000bbff02000000000000000000000000000102009078fffffffc662682c500083a01fe800000000000000000000000000034fe8000000000000000000000010000aa8700890300000000786b2736312e20cdf95500a69ce7970f383fb07e9074837a5eeb1d02ccc235e937a1c21f62ea73e3a0ef2e409f15d3067403b76263f0625365772a446ed1c8174b78a882dd302e3c3dff49067a13bf233125d9b929a7623a397d9a5ce1c48513dd621c1161ab50318e3556d4"], 0x0) 8m15.474604673s ago: executing program 33 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x100000000000000, 0x0, 0x4000401}, 0x44084) 14.479593041s ago: executing program 6 (id=1883): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="e950d200449c04a77d33a2da27ea95b265a4d3d7b289ad15554293f7a81ab9aae1971e6638af4462cab700626ef5ae738e9b9d1c2901f8001b3991f90b8baf45d77d816420523a88a146f6f5e73d41b8f5bd1d17a2b0fd6e32b36bff82244170b8b672074b99c1eaafc01b9905c6a5c6441e4c1f13137a6a4a4d7f8cf8d3db09296cb029ba8262452f3da2982b321912efdd9451074164395278756bb2f7e9", @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4008041}, 0xb80) dup(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x4, 0x10000, @value=r5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000004c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e280)={0x2020}, 0x2020) 12.592169134s ago: executing program 5 (id=1887): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x20}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e053de45d56b2893dbf00000000000000000f200804"], 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm={{0x10, 0xa3, 0x4}, {0xc4, 0x60e}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0xe5}}]}}, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f00000005c0)="281fb6d48186545cb0971673dc06a8a60ba37a2aea96edfb739a7659c527005c27a85251db92ec29e960ef9de3efc2dd6e48ca987598cae13e2ba24ab56d3088d3", 0x41}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3cea1dcb5fe0f2f878ca", 0x9a}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {&(0x7f0000000680)="1e5cb0c36731951104fa3a30a9c539156480914d7e6debc50147f9d1f21a5669d9c177206ea17dd5b2a8236916e8d53644c0651d886ca4b33f4b38b8db716b917b749d716d394eee7165cb14", 0x4c}], 0x6, &(0x7f0000000380), 0x0, 0x4}, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000900)='./file0\x00', 0x2000004) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0x9, 0x1, {}, 0x2}) ppoll(&(0x7f0000000040)=[{r4, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 12.173457856s ago: executing program 6 (id=1888): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) 11.501395215s ago: executing program 6 (id=1891): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902241401000010000904b8070296d1ca0009050602de010d0006090582020002000110"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xe, 0x4, "bf7ad941"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4040010) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x40, 0xd, 0x4, "c414a166"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x20, 0x2, 0x37, {0x37, 0x6, "e118f8a26eaea5759b7f0494aa7c526215e62623131b71b373af5729e3aded87f21db8672a5146236115f5576e6c756a7ac1a13b68"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x20, 0xe, 0xc3, "c6d1d7841f1dbc36d898017a7540a9c3ff1d2c89b8d854b5126bef13c28062b09ec79f96bbe7d233b2312672d77a3df9e35fa39b7a922e1700f0be9d414b5ebdd101bcc90668c60dac22178400bc6c249b20437379e2cbd5a5bdcc06925bd084fd916ae9a1063fea535345e7fae14fb3b317fdbac8d5fc9ad36d5f2c944ea68ee664e4d5a16784557c3970c46f22a89e3d11756e8950e7a57e81c2c8a43ef646a099cc104f2939b57324e82e7318ff75928f62dad81af6254ba035fc334126496f9600"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0xe5, 0x15a, 0x9, 0x1, 0x40cb, 0x401, 0x4, 0x4a1b289, 0x8, 0x75, 0x3, 0xf4fb}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000480)={0x0, 0x12, 0x4, "e1255b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x44d3e3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x2000000000000006, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4ad24bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x81) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000280)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.862490257s ago: executing program 5 (id=1893): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgget$private(0x0, 0x5bd) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 9.874883083s ago: executing program 5 (id=1894): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 9.20473446s ago: executing program 3 (id=1895): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8=0x0], 0x1c}}, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = dup3(r1, r1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8=r3, @ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x10be, &(0x7f0000002880)=ANY=[], 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x4) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0xa0282) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getpid() 9.179707271s ago: executing program 5 (id=1896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xb}]}, 0x1c}}, 0x80) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) close(r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '(\x7f'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000801}, 0x0) 8.585867528s ago: executing program 5 (id=1897): r0 = socket(0x2d, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a000000021000004000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa4e24ffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041f1ff0050001100fc020000000000000000000000000000ac1414aa000000000000000000000001fe8800000000000000000000001b0001ac1414bb00000000000000000000000000020000000000000a000a00a09d099772a12e79b5ce20bb1243f9f8a940619175e7da002f40f5c3e08a65c76cdb0b86be9f3140b389c936d5e23cc709771a784a27ce4de9f199a637e9e2fd0cfe498e992243a8c44fc9847c3bf204b619db8626252f48bc7f62639fcd71"], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xffe4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="ada1bade99b18b1deaac61ee7383c6d999836c8ffe32c6190094ae77f9617ce9ad41a3ac12aebf9c3933e7894d9f89af37c930df3865b8aee81fd51860385434ef3b27b58143ef401aaddf07abd974699d88c973fcb4a0", 0x57}, {&(0x7f00000001c0)="cc39490352d54a6d81d4863b04bde4a9b00bcfbf7a911583b07aaac3201251ef03f018090f729a0d8ad39236a5c357ae08893b420f17578cdb2aed", 0x3b}, {&(0x7f0000000680)="bbe68053ffcbdda4fd828904afc2137702489ba828b79b31080c468ee7ab8554d45866e2fa9112d491d6b3395747a83bc87521c6a47e0136b86b6eeef44c8396dabbda4243f60f26fb559d1a2f73fc2e9425f58d564abcd7f7f66eaf6a08bc05d7dc72b8953959326dc4ea9a8f3a81b714e6ade046ede7dd07e7338ded7fd370a46809fd7ea6ef", 0x87}, {&(0x7f0000000580)="b51e896e57d0e4db37e12fe3c5065c8f3008b3ce3d9f1b8a4c01f4f435b1107dfea8bffbe1f7eddcc8ed84c2def47217b5ad028997657eaf8909d6a2795dc7f77fa2ecaa2eb68cc8fd6a06a00fdc66ee358f4e", 0x53}, {&(0x7f0000000740)="413322c4e16a917aaee399924a26be7fd4f2f4de5ef5ae3ed4bf0971811ac2b402068a55f177e1881ecf80343f1e36911432ad487036babb884d51d9c707cf585010cc228af2f5d907d75e9fb03d3b3635593aaa0b023cba58eea0fcdd5d8224f134d1300a62d430c38d2ce8553f996a5560a1440dfd947f916e731487d0", 0x7e}, {&(0x7f0000000800)="a5cc63816f2ed89ea8c85294a89a66150d717aa6382bf439bc79160dc6c93f4b067eb1bb4aa54cbed86ec13596028f25baa26b6aa397e8e2e64100409db49d26ea33f0e12ff578e21be3670260b5b46669b922a0d898ba0817a982b1cb767979a1ac8a56608a3974dc221bd20dadbccfefa20d0c3ef0e11ed658705a39dbac2aa2da42c3f03bd519fdb400b2216b877d9052b14fc643d2e67e15faa78a7337ce9f", 0xa1}, {&(0x7f00000008c0)="6ae3e6ebb84b7d76033ff5d1ec1d55581883871469a412e9b9e84d2d1a646b931c1053581d5209caba90429c43e5dcf8ef67ae22d749c109ec7050cf59eac2e129e20cf5b50e001c22d9fa9b1ebbb0168cf8c5fa3d1cf35a1064578400dd1a3a972bafb9d926b495dc8521f77924ca636abfeb73399f06cdffe10e51d6e79c6cdcaaf57074e584fcba16c2e1e13a8bfd8e9c5ce4d4c45f4fc6768b544ec761f8fae1a4bade376eef08bc592bc110639ac42ed21588a7519deff0361d7e9fcf811f85a2e51e90b63fb9f54de946159453df3028b06b977725a8", 0xd9}, {&(0x7f00000009c0)="c15d7a4f75a63d4b911a0b90f0a836d2f3f8efa3569cd08afe225f7cb341632e4e6f03cec77502d76f77f7f9ac938173", 0x30}], 0x8, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xe60}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3e32}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x78}, 0x4008811) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 8.396175179s ago: executing program 1 (id=1898): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x20}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e053de45d56b2893dbf00000000000000000f200804"], 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm={{0x10, 0xa3, 0x4}, {0xc4, 0x60e}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0xe5}}]}}, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f00000005c0)="281fb6d48186545cb0971673dc06a8a60ba37a2aea96edfb739a7659c527005c27a85251db92ec29e960ef9de3efc2dd6e48ca987598cae13e2ba24ab56d3088d3", 0x41}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3cea1dcb5fe0f2f878ca", 0x9a}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {&(0x7f0000000680)="1e5cb0c36731951104fa3a30a9c539156480914d7e6debc50147f9d1f21a5669d9c177206ea17dd5b2a8236916e8d53644c0651d886ca4b33f4b38b8db716b917b749d716d394eee7165cb14", 0x4c}], 0x6, &(0x7f0000000380), 0x0, 0x4}, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000900)='./file0\x00', 0x2000004) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0x9, 0x1, {}, 0x2}) ppoll(&(0x7f0000000040)=[{r4, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 7.525993225s ago: executing program 1 (id=1900): bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000400007012bbd7000fedbdf25037ccc2593f48fcdd16eecfd26066600000400c28014000181100010800c000b000800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0x1, 0x3, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0xfffffffe, 0x7fff, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe664, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4bfb, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x803, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x6, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x5a, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7e, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0x10001, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) 6.442149153s ago: executing program 1 (id=1902): socket$netlink(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0xc, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffb, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) close(0xffffffffffffffff) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_open_dev$ttys(0xc, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x81) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000001c0)={r4}) 6.255124866s ago: executing program 6 (id=1903): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r4, &(0x7f0000000180)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000000)="bc62", 0x2}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.409437839s ago: executing program 1 (id=1904): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="16be1300", @ANYRES16=r4, @ANYBLOB="0000ed070000008df9ffff000002"], 0x14}, 0x1, 0x0, 0x0, 0x58001}, 0x880) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x840, 0x43) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',group_', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) close(r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBLED(r7, 0x4b65, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 4.264604207s ago: executing program 1 (id=1905): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x20}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e053de45d56b2893dbf00000000000000000f200804"], 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm={{0x10, 0xa3, 0x4}, {0xc4, 0x60e}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0xe5}}]}}, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f00000005c0)="281fb6d48186545cb0971673dc06a8a60ba37a2aea96edfb739a7659c527005c27a85251db92ec29e960ef9de3efc2dd6e48ca987598cae13e2ba24ab56d3088d3", 0x41}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3cea1dcb5fe0f2f878ca", 0x9a}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {&(0x7f0000000680)="1e5cb0c36731951104fa3a30a9c539156480914d7e6debc50147f9d1f21a5669d9c177206ea17dd5b2a8236916e8d53644c0651d886ca4b33f4b38b8db716b917b749d716d394eee7165cb14", 0x4c}], 0x6, &(0x7f0000000380), 0x0, 0x4}, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000900)='./file0\x00', 0x2000004) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0x9, 0x1, {}, 0x2}) ppoll(&(0x7f0000000040)=[{r4, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 4.213907574s ago: executing program 3 (id=1906): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgget$private(0x0, 0x5bd) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 3.105385961s ago: executing program 3 (id=1907): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x20}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e053de45d56b2893dbf00000000000000000f200804"], 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm={{0x10, 0xa3, 0x4}, {0xc4, 0x60e}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0xe5}}]}}, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f00000005c0)="281fb6d48186545cb0971673dc06a8a60ba37a2aea96edfb739a7659c527005c27a85251db92ec29e960ef9de3efc2dd6e48ca987598cae13e2ba24ab56d3088d3", 0x41}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3cea1dcb5fe0f2f878ca", 0x9a}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {&(0x7f0000000680)="1e5cb0c36731951104fa3a30a9c539156480914d7e6debc50147f9d1f21a5669d9c177206ea17dd5b2a8236916e8d53644c0651d886ca4b33f4b38b8db716b917b749d716d394eee7165cb14", 0x4c}], 0x6, &(0x7f0000000380), 0x0, 0x4}, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000900)='./file0\x00', 0x2000004) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0x9, 0x1, {}, 0x2}) ppoll(&(0x7f0000000040)=[{r4, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 2.614432698s ago: executing program 4 (id=1909): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.543238951s ago: executing program 5 (id=1910): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x40, 0xd, 0x16, "3def53a2d4ba190c43bfa84727e817c51c4f00000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.373952809s ago: executing program 1 (id=1911): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000024c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x100000000000000, &(0x7f0000000540)="8099"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 2.35823106s ago: executing program 4 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c000}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x0, 0x5, 0x8}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000200", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.695635511s ago: executing program 6 (id=1913): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 1.423780016s ago: executing program 4 (id=1914): syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7e}, "b7589b18874b069848bd6407ad4d1d9f04ae584d534479543e25c1297c4f0d6871be6d5fd7e09bae582480ff2cb3df5d8ff1bf6b8b3766703d8527babc37b0096a08117d0525042beabb1ec52a17ab3cb0aa17a6136547a670dbdb685bc436f1e63098009a366b714d8dcbefd8dbde57d0f98cd0df4ae09067020236c66a"}, 0x82) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7100fbdbdf251c003b0008000300", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x2000040) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x54, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ba}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1.331948824s ago: executing program 6 (id=1915): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) 1.192798153s ago: executing program 4 (id=1916): io_setup(0x1, &(0x7f0000000380)=0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0), 0x2081, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x3, 0x0, 0x1}]) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x2, r1, 'id1\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x200001) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x100}}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) read$FUSE(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x3, &(0x7f0000000200)=0x9d38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, r5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1, 0x3, 0x57) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) r8 = epoll_create(0xbb20) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r8, r4, 0x2}) ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x7) 515.78019ms ago: executing program 3 (id=1917): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xfffffe1a) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001040), 0x95, 0x200) fsopen(&(0x7f0000000240)='ceph\x00', 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30002801) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xfd2761e1ed5081c5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x24008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r8, r7, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000013c0)={0x4, &(0x7f0000001340)=[{0xbc2, 0xa1, &(0x7f0000001080)="b32e8ebc516aabedf5e324cbfa93032da742395ad0a800802bcd81a2e45fbfb50b2e2efaa096bf340c8eac56a525efec89ff8efb98855310b802593b3a55376824c9cf9ffcdf3ffea26f6177089ff3da7c561d4fab7a85fea9d81ec0be2dd203ee9723a009c0928a897adb49bcd06aa1970fb5a5d8729829e6e9e2fbfbde71d0cb3c300c460a721ec5e72be9aa1f2a097a2976700005bb186380f613820f4576e1", 0x1, 0x1}, {0x1, 0xf3, &(0x7f0000001140)="d12326b49927d9bf86ebcb9e0db13ed097b0dfad6ad357962ce8832e1b01ad9aee0bba7a2734156505cd8384a400d969d86900342089aaff504faaf7cefc5ddd47490ad9d40e916903c1107d81818bb8cb4eb2367cc00d387777149718d1e121415fd186eed434d99d696f1db7a4c86098b879744f595e10a3bc333ad8ee16c51a4d7babc8191d60ee8ebf44369b289043f0528b019a73752e2d767e9c3a414cb3c97f7357d41b441c1ef1cb628410606293c851da73f3e9bfc4a0f16304d77f2631018d4e3d44cfcf2dc769078d39ae7beddd7a142c8ea6862cbc80b91b93c398b556b1ec7b06b639777a4bc8793e6bc71548", 0x1}, {0xfffffff9, 0x96, &(0x7f0000001240)="23830fdbb372fa8f8716842d6098efae92f1151ce6cc676d022a740eaaa65481a8b4aa62554b2927ce604aac6c19d413dee40a981de999d337f41bb935873a28ae6663c039eea370e9f9dca6047a0d8d00ffb0734e8843ddf713c29c69eac08ab6e17d79e9373e894fe4e1313a9ea09bd407ea16180253108cf8f93456e70c93a74d75455e3daa5a72cd0edf69743f1636f3c88e66b5", 0x1, 0x1}, {0x76, 0x9, &(0x7f0000001300)="04332a614cb83f1217", 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000014c0)={&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001440)=""/121, 0x79}) 337.462505ms ago: executing program 3 (id=1918): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0xfffffe1a) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001040), 0x95, 0x200) fsopen(&(0x7f0000000240)='ceph\x00', 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30002801) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xfd2761e1ed5081c5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x24008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r8, r7, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000013c0)={0x4, &(0x7f0000001340)=[{0xbc2, 0xa1, &(0x7f0000001080)="b32e8ebc516aabedf5e324cbfa93032da742395ad0a800802bcd81a2e45fbfb50b2e2efaa096bf340c8eac56a525efec89ff8efb98855310b802593b3a55376824c9cf9ffcdf3ffea26f6177089ff3da7c561d4fab7a85fea9d81ec0be2dd203ee9723a009c0928a897adb49bcd06aa1970fb5a5d8729829e6e9e2fbfbde71d0cb3c300c460a721ec5e72be9aa1f2a097a2976700005bb186380f613820f4576e1", 0x1, 0x1}, {0x1, 0xf3, &(0x7f0000001140)="d12326b49927d9bf86ebcb9e0db13ed097b0dfad6ad357962ce8832e1b01ad9aee0bba7a2734156505cd8384a400d969d86900342089aaff504faaf7cefc5ddd47490ad9d40e916903c1107d81818bb8cb4eb2367cc00d387777149718d1e121415fd186eed434d99d696f1db7a4c86098b879744f595e10a3bc333ad8ee16c51a4d7babc8191d60ee8ebf44369b289043f0528b019a73752e2d767e9c3a414cb3c97f7357d41b441c1ef1cb628410606293c851da73f3e9bfc4a0f16304d77f2631018d4e3d44cfcf2dc769078d39ae7beddd7a142c8ea6862cbc80b91b93c398b556b1ec7b06b639777a4bc8793e6bc71548", 0x1}, {0xfffffff9, 0x96, &(0x7f0000001240)="23830fdbb372fa8f8716842d6098efae92f1151ce6cc676d022a740eaaa65481a8b4aa62554b2927ce604aac6c19d413dee40a981de999d337f41bb935873a28ae6663c039eea370e9f9dca6047a0d8d00ffb0734e8843ddf713c29c69eac08ab6e17d79e9373e894fe4e1313a9ea09bd407ea16180253108cf8f93456e70c93a74d75455e3daa5a72cd0edf69743f1636f3c88e66b5", 0x1, 0x1}, {0x76, 0x9, &(0x7f0000001300)="04332a614cb83f1217", 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000014c0)={&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001440)=""/121, 0x79}) 179.103222ms ago: executing program 4 (id=1919): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r0, 0x7) 85.784988ms ago: executing program 4 (id=1920): r0 = socket(0x2d, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a000000021000004000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa4e24ffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041f1ff0050001100fc020000000000000000000000000000ac1414aa000000000000000000000001fe8800000000000000000000001b0001ac1414bb00000000000000000000000000020000000000000a000a00a09d099772a12e79b5ce20bb1243f9f8a940619175e7da002f40f5c3e08a65c76cdb0b86be9f3140b389c936d5e23cc709771a784a27ce4de9f199a637e9e2fd0cfe498e992243a8c44fc9847c3bf204b619db8626252f48bc7f62639fcd71"], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xffe4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="ada1bade99b18b1deaac61ee7383c6d999836c8ffe32c6190094ae77f9617ce9ad41a3ac12aebf9c3933e7894d9f89af37c930df3865b8aee81fd51860385434ef3b27b58143ef401aaddf07abd974699d88c973fcb4a0", 0x57}, {&(0x7f00000001c0)="cc39490352d54a6d81d4863b04bde4a9b00bcfbf7a911583b07aaac3201251ef03f018090f729a0d8ad39236a5c357ae08893b420f17578cdb2aed", 0x3b}, {&(0x7f0000000680)="bbe68053ffcbdda4fd828904afc2137702489ba828b79b31080c468ee7ab8554d45866e2fa9112d491d6b3395747a83bc87521c6a47e0136b86b6eeef44c8396dabbda4243f60f26fb559d1a2f73fc2e9425f58d564abcd7f7f66eaf6a08bc05d7dc72b8953959326dc4ea9a8f3a81b714e6ade046ede7dd07e7338ded7fd370a46809fd7ea6ef3b8f755b53", 0x8c}, {&(0x7f0000000580)="b51e896e57d0e4db37e12fe3c5065c8f3008b3ce3d9f1b8a4c01f4f435b1107dfea8bffbe1f7eddcc8ed84c2def47217b5ad028997657eaf8909d6a2795dc7f77fa2ecaa2eb68cc8fd6a06a00fdc66ee358f4e", 0x53}, {&(0x7f0000000740)="413322c4e16a917aaee399924a26be7fd4f2f4de5ef5ae3ed4bf0971811ac2b402068a55f177e1881ecf80343f1e36911432ad487036babb884d51d9c707cf585010cc228af2f5d907d75e9fb03d3b3635593aaa0b023cba58eea0fcdd5d8224f134d1300a62d430c38d2ce8553f996a5560a1440dfd947f916e731487d0", 0x7e}, {&(0x7f0000000800)="a5cc63816f2ed89ea8c85294a89a66150d717aa6382bf439bc79160dc6c93f4b067eb1bb4aa54cbed86ec13596028f25baa26b6aa397e8e2e64100409db49d26ea33f0e12ff578e21be3670260b5b46669b922a0d898ba0817a982b1cb767979a1ac8a56608a3974dc221bd20dadbccfefa20d0c3ef0e11ed658705a39dbac2aa2da42c3f03bd519fdb400b2216b877d9052b14fc643d2e67e15faa78a7337ce9f", 0xa1}, {&(0x7f00000008c0)="6ae3e6ebb84b7d76033ff5d1ec1d55581883871469a412e9b9e84d2d1a646b931c1053581d5209caba90429c43e5dcf8ef67ae22d749c109ec7050cf59eac2e129e20cf5b50e001c22d9fa9b1ebbb0168cf8c5fa3d1cf35a1064578400dd1a3a972bafb9d926b495dc8521f77924ca636abfeb73399f06cdffe10e51d6e79c6cdcaaf57074e584fcba16c2e1e13a8bfd8e9c5ce4d4c45f4fc6768b544ec761f8fae1a4bade376eef08bc592bc110639ac42ed21588a7519deff0361d7e9fcf811f85a2e51e90b63fb9f54de946159453df3028b06b977725a8", 0xd9}, {&(0x7f00000009c0)="c15d7a4f75a63d4b911a0b90f0a836d2f3f8efa3569cd08afe225f7cb341632e4e6f03cec77502d76f77f7f9ac938173", 0x30}], 0x8, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xe60}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3e32}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x78}, 0x4008811) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 0s ago: executing program 3 (id=1921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800100b, r2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r4, 0x0, 0x4) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r8 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r8, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) kernel console output (not intermixed with test programs): me="bus" dev="overlay" ino=1775 res=0 errno=0 [ 556.103340][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 556.468288][T12182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1494'. [ 556.849448][ T5881] usb 6-1: config 2 has an invalid interface number: 208 but max is 0 [ 556.857646][ T5881] usb 6-1: config 2 has no interface number 0 [ 556.863856][ T5881] usb 6-1: config 2 interface 208 has no altsetting 0 [ 556.873055][ T5881] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 556.882486][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.902346][ T5881] usb 6-1: Product: syz [ 556.907900][ T5881] usb 6-1: Manufacturer: syz [ 556.913958][ T5881] usb 6-1: SerialNumber: syz [ 557.159969][ T8282] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 557.320383][ T8282] usb 7-1: Using ep0 maxpacket: 16 [ 557.338843][ T8282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.372580][ T8282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.519643][ T8282] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 557.528756][ T8282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.543915][ T8282] usb 7-1: config 0 descriptor?? [ 557.582005][T12196] set match dimension is over the limit! [ 557.649928][ T5922] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 557.818817][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.842591][ T5922] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.888858][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 557.912376][ T5922] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 557.965321][ T8282] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 557.988688][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.013066][ T5922] usb 5-1: Product: syz [ 558.028229][ T5922] usb 5-1: Manufacturer: syz [ 558.042118][ T5922] usb 5-1: SerialNumber: syz [ 558.161321][ T8282] corsair 0003:1B1C:1B02.000E: Failed to get K90 initial state (error -71). [ 558.262630][ T8282] usb 7-1: USB disconnect, device number 45 [ 558.306984][ T5922] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input39 [ 558.363142][ T5922] usb 5-1: USB disconnect, device number 67 [ 558.363147][ C0] pxrc 5-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 558.401173][ T5173] pxrc 5-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 558.466097][ T5173] pxrc 5-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 558.664440][ T5881] gspca_main: mars-2.14.0 probing 093a:050f [ 558.697765][ T5881] usb 6-1: USB disconnect, device number 42 [ 559.475048][ T30] audit: type=1400 audit(1767303738.852:1774): avc: denied { getopt } for pid=12213 comm="syz.6.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 559.723361][ T5881] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 559.955518][ T30] audit: type=1400 audit(1767303739.332:1775): avc: denied { setopt } for pid=12215 comm="syz.4.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 560.089554][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 560.146278][ T5881] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 560.451615][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.508092][ T5881] usb 2-1: config 0 descriptor?? [ 560.524962][ T5881] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 560.930510][ T5953] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 561.489595][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 561.506829][ T5953] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 561.529733][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.558472][ T5953] usb 5-1: Product: syz [ 561.574382][ T5953] usb 5-1: Manufacturer: syz [ 561.594673][ T5953] usb 5-1: SerialNumber: syz [ 561.617364][ T5953] usb 5-1: config 0 descriptor?? [ 562.064751][ T30] audit: type=1400 audit(1767303741.442:1776): avc: denied { setattr } for pid=12244 comm="syz.5.1511" name="NETLINK" dev="sockfs" ino=42101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.326779][ T5881] gspca_sonixj: reg_w1 err -110 [ 562.360014][ T5881] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 562.410472][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.416829][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.757757][ T5953] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 563.125129][ T5953] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 563.150106][ T5953] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 563.261739][ T5953] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 563.289149][ T5953] usb 5-1: USB disconnect, device number 68 [ 564.217802][T12267] No control pipe specified [ 565.569811][ T30] audit: type=1400 audit(1767303743.592:1777): avc: denied { execute } for pid=12265 comm="syz.5.1515" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 565.607605][ T30] audit: type=1400 audit(1767303743.592:1778): avc: denied { execute_no_trans } for pid=12265 comm="syz.5.1515" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 565.687527][ T5922] usb 2-1: USB disconnect, device number 68 [ 565.715642][ T30] audit: type=1400 audit(1767303743.592:1779): avc: denied { connect } for pid=12265 comm="syz.5.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 566.544081][T12290] tipc: Started in network mode [ 566.606403][T12290] tipc: Node identity fef8840502a1, cluster identity 4711 [ 566.706497][T12290] tipc: Enabled bearer , priority 0 [ 566.766807][T12291] tipc: Disabling bearer [ 566.932744][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1524'. [ 566.977183][ T30] audit: type=1400 audit(1767303746.352:1780): avc: denied { bind } for pid=12302 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 567.077540][ T30] audit: type=1400 audit(1767303746.382:1781): avc: denied { listen } for pid=12302 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 567.161531][ T30] audit: type=1400 audit(1767303746.382:1782): avc: denied { accept } for pid=12302 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.108366][T12313] atomic_op ffff888025913998 conn xmit_atomic 0000000000000000 [ 568.159737][ T30] audit: type=1400 audit(1767303747.482:1783): avc: denied { bind } for pid=12310 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 568.159778][ T30] audit: type=1400 audit(1767303747.482:1784): avc: denied { write } for pid=12310 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 568.159812][ T30] audit: type=1400 audit(1767303747.492:1785): avc: denied { ioctl } for pid=12310 comm="syz.4.1528" path="socket:[43200]" dev="sockfs" ino=43200 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 568.512722][ T5881] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 568.652791][ T30] audit: type=1400 audit(1767303748.032:1786): avc: denied { ioctl } for pid=12320 comm="syz.4.1530" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 568.703328][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 568.722291][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.808516][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.970910][ T5881] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 569.060759][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.194319][ T5881] usb 6-1: config 0 descriptor?? [ 569.524042][T12330] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1518'. [ 569.653534][T12327] bridge1: entered promiscuous mode [ 569.753074][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1534'. [ 569.816392][ T5881] usbhid 6-1:0.0: can't add hid device: -71 [ 569.829237][ T5881] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.841295][ T5881] usb 6-1: USB disconnect, device number 43 [ 569.879953][ T5922] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 570.030337][ T5953] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 570.099590][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 570.467948][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 570.491822][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.502773][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.512785][ T5922] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 570.521820][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.531318][ T5922] usb 2-1: config 0 descriptor?? [ 570.560878][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.571540][ T5953] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 570.580616][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.595300][ T5953] usb 7-1: config 0 descriptor?? [ 570.603665][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 570.639597][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 570.645958][ T10] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 570.654133][ T10] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 570.663470][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 570.673611][ T10] usb 4-1: config 0 has no interface number 0 [ 570.679757][ T10] usb 4-1: config 0 interface 17 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 570.695114][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1016, bcdDevice=a1.a3 [ 570.707867][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.718698][ T10] usb 4-1: Product: syz [ 570.725197][ T10] usb 4-1: Manufacturer: syz [ 570.730495][ T10] usb 4-1: SerialNumber: syz [ 570.737704][ T10] usb 4-1: config 0 descriptor?? [ 570.748005][T12335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 570.760517][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.921620][ T10] snd-usb-audio 4-1:0.17: probe with driver snd-usb-audio failed with error -2 [ 570.971640][ T5922] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 571.146218][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.17/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.331435][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 571.340530][ T5922] corsair 0003:1B1C:1B02.000F: Failed to get K90 initial state (error -71). [ 571.401088][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 571.401102][ T30] audit: type=1400 audit(1767303750.742:1788): avc: denied { ioctl } for pid=12351 comm="syz.4.1539" path="socket:[42471]" dev="sockfs" ino=42471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.443571][ T5922] usb 2-1: USB disconnect, device number 69 [ 571.498392][T12356] fido_id[12356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 571.539904][ T5953] pwc: recv_control_msg error -71 req 02 val 2c00 [ 571.558726][ T5953] pwc: recv_control_msg error -71 req 04 val 1000 [ 571.587007][ T5953] pwc: recv_control_msg error -71 req 04 val 1300 [ 571.603646][ T5953] pwc: recv_control_msg error -71 req 04 val 1400 [ 571.625771][ T5953] pwc: recv_control_msg error -71 req 02 val 2000 [ 571.637737][ T5953] pwc: recv_control_msg error -71 req 02 val 2100 [ 571.668542][T12364] vivid-000: disconnect [ 571.689326][ T5953] pwc: recv_control_msg error -71 req 04 val 1500 [ 571.700575][ T5953] pwc: recv_control_msg error -71 req 02 val 2500 [ 571.714455][ T5953] pwc: recv_control_msg error -71 req 02 val 2400 [ 571.721794][ T5953] pwc: recv_control_msg error -71 req 02 val 2600 [ 571.730602][ T5953] pwc: recv_control_msg error -71 req 02 val 2900 [ 571.742382][ T5953] pwc: recv_control_msg error -71 req 02 val 2800 [ 571.750443][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 571.762021][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 571.774531][ T5953] pwc: Registered as video103. [ 571.783985][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 571.804206][ T5953] usb 7-1: USB disconnect, device number 46 [ 572.321117][ T5953] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 572.332936][T12361] vivid-000: reconnect [ 572.544074][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.694208][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.894248][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 573.021997][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 573.213539][ T10] usb 4-1: USB disconnect, device number 49 [ 573.296294][ T5953] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.320278][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.328288][ T5953] usb 5-1: Product: syz [ 573.353403][ T5953] usb 5-1: Manufacturer: syz [ 573.358813][ T5953] usb 5-1: SerialNumber: syz [ 573.397659][ T5953] usb 5-1: config 0 descriptor?? [ 573.526480][ T5953] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 573.551062][ T5953] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 573.569674][ T5922] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 573.946844][ T5922] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.036113][ T5953] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 574.169185][ T5922] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 574.194102][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.234039][ T5922] usb 6-1: config 0 descriptor?? [ 574.290056][ T5953] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 574.298591][ T5922] pwc: Samsung MPC-C30 USB webcam detected. [ 574.416994][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1550'. [ 574.448343][ T30] audit: type=1400 audit(1767303753.822:1789): avc: denied { read } for pid=12404 comm="syz.6.1550" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 574.489689][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 574.517301][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.528748][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.538535][ T5953] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 574.545830][T12385] serio: Serial port ttyS3 [ 574.554871][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.557768][ T30] audit: type=1400 audit(1767303753.822:1790): avc: denied { open } for pid=12404 comm="syz.6.1550" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 574.597070][ T5953] usb 2-1: config 0 descriptor?? [ 574.629300][ T30] audit: type=1400 audit(1767303753.822:1791): avc: denied { bind } for pid=12404 comm="syz.6.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.672859][ T30] audit: type=1400 audit(1767303753.822:1792): avc: denied { name_bind } for pid=12404 comm="syz.6.1550" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 574.699381][ T30] audit: type=1400 audit(1767303753.822:1793): avc: denied { node_bind } for pid=12404 comm="syz.6.1550" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 574.728096][ T30] audit: type=1400 audit(1767303753.822:1794): avc: denied { ioctl } for pid=12404 comm="syz.6.1550" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 574.777190][ T30] audit: type=1400 audit(1767303754.132:1795): avc: denied { ioctl } for pid=12408 comm="syz.6.1551" path="socket:[43726]" dev="sockfs" ino=43726 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 574.804740][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.823092][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.950577][ T5922] pwc: send_video_command error -71 [ 574.979783][ T5922] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 574.993446][ T5922] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 575.017462][ T5922] usb 6-1: USB disconnect, device number 44 [ 575.034301][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 575.041906][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 575.049448][ T5953] usbhid 2-1:0.0: can't add hid device: -71 [ 575.055666][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 575.081221][ T5953] usb 2-1: USB disconnect, device number 70 [ 575.106241][ T10] usb 5-1: USB disconnect, device number 69 [ 575.125718][ T10] garmin_gps 5-1:0.0: device disconnected [ 575.229644][ T5881] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 576.064367][T12436] vivid-002: disconnect [ 576.515561][T12432] vivid-002: reconnect [ 576.523344][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 576.535582][T12443] netlink: 'syz.1.1559': attribute type 30 has an invalid length. [ 576.543640][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 576.821027][ T30] audit: type=1400 audit(1767303756.172:1796): avc: denied { read } for pid=12442 comm="syz.1.1559" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 577.640107][ T30] audit: type=1326 audit(1767303756.892:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.013651][ T30] audit: type=1326 audit(1767303756.892:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.067211][ T30] audit: type=1326 audit(1767303756.892:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.092962][ T30] audit: type=1326 audit(1767303756.892:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.126070][ T30] audit: type=1326 audit(1767303756.892:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.173262][ T30] audit: type=1326 audit(1767303756.892:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.197215][ T30] audit: type=1326 audit(1767303756.892:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.222817][ T30] audit: type=1326 audit(1767303756.892:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.256893][ T30] audit: type=1326 audit(1767303756.892:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929b58f749 code=0x7ffc0000 [ 578.924589][T12464] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 579.235236][T12478] syzkaller0: entered promiscuous mode [ 579.246642][T12478] syzkaller0: entered allmulticast mode [ 579.267557][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 580.639785][ T5881] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 580.705725][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1573'. [ 580.779151][T12503] usb usb5: usbfs: process 12503 (syz.5.1574) did not claim interface 0 before use [ 581.209806][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 581.221369][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.238414][T12506] bond0: entered promiscuous mode [ 581.248628][T12506] bond_slave_0: entered promiscuous mode [ 581.262848][T12506] bond_slave_1: entered promiscuous mode [ 581.333903][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.344329][ T5881] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 581.354700][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.356391][T12506] bridge0: entered promiscuous mode [ 581.375905][ T5881] usb 2-1: config 0 descriptor?? [ 581.377118][T12506] debugfs: 'hsr1' already exists in 'hsr' [ 581.387373][T12506] Cannot create hsr debugfs directory [ 581.389588][ T10] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 581.393217][T12506] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 581.411951][T12506] hsr1: entered promiscuous mode [ 581.416959][T12506] hsr1: entered allmulticast mode [ 581.422965][T12506] bond0: entered allmulticast mode [ 581.428101][T12506] bond_slave_0: entered allmulticast mode [ 581.434636][T12506] bond_slave_1: entered allmulticast mode [ 581.441110][T12506] bridge0: entered allmulticast mode [ 581.446497][T12506] dummy0: entered allmulticast mode [ 582.003350][ T10] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.019286][ T10] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 582.035095][T12522] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 582.212607][ T5881] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 582.331726][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 582.344476][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 582.603635][ T5881] corsair 0003:1B1C:1B02.0010: Failed to get K90 initial state (error -71). [ 582.834284][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.858735][ T5881] usb 2-1: USB disconnect, device number 71 [ 582.869473][ T10] usb 6-1: config 0 descriptor?? [ 582.926158][T12528] fido_id[12528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 584.041959][T12543] syz.4.1583 (12543): /proc/12542/oom_adj is deprecated, please use /proc/12542/oom_score_adj instead. [ 584.150804][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 584.364440][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 584.466487][ T10] usb 6-1: USB disconnect, device number 45 [ 584.510771][T12552] kAFS: unable to lookup cell 'ÿ' [ 584.760623][T12561] FAULT_INJECTION: forcing a failure. [ 584.760623][T12561] name failslab, interval 1, probability 0, space 0, times 0 [ 584.789204][T12561] CPU: 0 UID: 0 PID: 12561 Comm: syz.1.1587 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.789225][T12561] Tainted: [L]=SOFTLOCKUP [ 584.789229][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.789235][T12561] Call Trace: [ 584.789239][T12561] [ 584.789244][T12561] dump_stack_lvl+0x16c/0x1f0 [ 584.789262][T12561] should_fail_ex+0x512/0x640 [ 584.789278][T12561] ? __kmalloc_cache_noprof+0x5f/0x800 [ 584.789297][T12561] should_failslab+0xc2/0x120 [ 584.789311][T12561] __kmalloc_cache_noprof+0x80/0x800 [ 584.789327][T12561] ? copy_mount_options+0x55/0x190 [ 584.789343][T12561] ? copy_mount_options+0x55/0x190 [ 584.789354][T12561] copy_mount_options+0x55/0x190 [ 584.789366][T12561] __x64_sys_mount+0x1ab/0x310 [ 584.789377][T12561] ? __pfx___x64_sys_mount+0x10/0x10 [ 584.789391][T12561] do_syscall_64+0xcd/0xf80 [ 584.789406][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.789417][T12561] RIP: 0033:0x7f6ca5f8f749 [ 584.789426][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.789436][T12561] RSP: 002b:00007f6ca41f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.789447][T12561] RAX: ffffffffffffffda RBX: 00007f6ca61e5fa0 RCX: 00007f6ca5f8f749 [ 584.789454][T12561] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 584.789460][T12561] RBP: 00007f6ca41f6090 R08: 0000200000000240 R09: 0000000000000000 [ 584.789466][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.789472][T12561] R13: 00007f6ca61e6038 R14: 00007f6ca61e5fa0 R15: 00007ffdc881e2b8 [ 584.789492][T12561] [ 585.079634][T12563] vivid-002: disconnect [ 585.553454][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 585.553465][ T30] audit: type=1400 audit(1767303764.932:1825): avc: denied { mount } for pid=12568 comm="syz.4.1589" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 585.597632][T12558] vivid-002: reconnect [ 585.749552][ T8282] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 585.775002][ T30] audit: type=1400 audit(1767303765.152:1826): avc: denied { name_bind } for pid=12568 comm="syz.4.1589" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 585.909655][ T8282] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.919636][ T30] audit: type=1400 audit(1767303765.172:1827): avc: denied { read } for pid=12573 comm="syz.3.1590" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 585.919679][ T30] audit: type=1400 audit(1767303765.172:1828): avc: denied { open } for pid=12573 comm="syz.3.1590" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 586.016362][T12575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 586.022875][T12575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 586.030525][T12575] vhci_hcd vhci_hcd.0: Device attached [ 586.059763][ T8282] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 586.131761][ T8282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 586.176317][ T8282] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 586.189580][ T5922] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 586.220010][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 586.246152][ T8282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.289579][ T10] usb 39-1: new full-speed USB device number 10 using vhci_hcd [ 586.297246][ T5881] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 586.429900][ T8282] usb 2-1: config 0 descriptor?? [ 586.461559][ T5881] usb 4-1: config 0 has no interfaces? [ 586.467078][ T5881] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 586.489089][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.515338][ T5881] usb 4-1: config 0 descriptor?? [ 586.529550][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 586.536411][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.553555][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 586.581084][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.831710][ T5922] usb 5-1: config 0 descriptor?? [ 586.886934][ T5922] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 587.309709][ T8284] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 587.321520][ T30] audit: type=1400 audit(1767303766.702:1829): avc: denied { map } for pid=12581 comm="syz.6.1592" path="socket:[44236]" dev="sockfs" ino=44236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.345640][ T30] audit: type=1400 audit(1767303766.722:1830): avc: denied { read } for pid=12581 comm="syz.6.1592" path="socket:[44236]" dev="sockfs" ino=44236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.409916][ T5922] gspca_vc032x: reg_r err -110 [ 587.414767][ T5922] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 587.469659][ T8284] usb 6-1: Using ep0 maxpacket: 16 [ 587.476145][ T8284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.487309][ T8284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.497119][ T8284] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 587.506214][ T8284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.516608][ T8284] usb 6-1: config 0 descriptor?? [ 587.925051][ C1] raw-gadget.3 gadget.5: ignoring, device is not running [ 587.932711][ T8284] usbhid 6-1:0.0: can't add hid device: -71 [ 587.938740][ T8284] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 587.950955][ T8284] usb 6-1: USB disconnect, device number 46 [ 588.308494][ T8282] usbhid 2-1:0.0: can't add hid device: -71 [ 588.330307][ T8282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 588.354182][ T8282] usb 2-1: USB disconnect, device number 72 [ 588.472688][ T8284] usb 5-1: USB disconnect, device number 70 [ 588.764048][ T5922] usb 4-1: USB disconnect, device number 50 [ 588.766097][T12576] vhci_hcd: connection reset by peer [ 588.975468][ T36] vhci_hcd vhci_hcd.3: stop threads [ 589.027164][ T36] vhci_hcd vhci_hcd.3: release socket [ 589.076383][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 590.260444][ T30] audit: type=1800 audit(1767303769.642:1831): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1600" name="bus" dev="overlay" ino=1883 res=0 errno=0 [ 590.870877][ T30] audit: type=1400 audit(1767303770.162:1832): avc: denied { name_connect } for pid=12612 comm="syz.6.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 590.891475][ T30] audit: type=1400 audit(1767303770.172:1833): avc: denied { accept } for pid=12612 comm="syz.6.1599" lport=54393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 591.384035][T12611] bridge1: entered promiscuous mode [ 591.441409][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 591.715389][ T30] audit: type=1400 audit(1767303771.092:1834): avc: denied { create } for pid=12628 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 591.737575][ T30] audit: type=1400 audit(1767303771.112:1835): avc: denied { write } for pid=12628 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 591.749915][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 591.793868][T12629] veth0_macvtap: left promiscuous mode [ 591.909565][ T5881] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 591.928791][T12634] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 592.549541][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 592.571480][ T5881] usb 5-1: config 2 has an invalid interface number: 208 but max is 0 [ 592.591176][ T5881] usb 5-1: config 2 has no interface number 0 [ 592.659546][ T5881] usb 5-1: config 2 interface 208 has no altsetting 0 [ 592.720490][ T5881] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 592.751379][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.770436][ T5881] usb 5-1: Product: syz [ 592.775309][ T5881] usb 5-1: Manufacturer: syz [ 592.792894][ T5881] usb 5-1: SerialNumber: syz [ 593.042803][ T30] audit: type=1400 audit(1767303772.422:1836): avc: denied { create } for pid=12645 comm="syz.6.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 593.255936][ T30] audit: type=1400 audit(1767303772.422:1837): avc: denied { setopt } for pid=12645 comm="syz.6.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 593.599985][ T5922] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 593.933857][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.953559][ T5922] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.977986][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.012894][ T30] audit: type=1400 audit(1767303773.392:1838): avc: denied { getopt } for pid=12645 comm="syz.6.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.035355][ T5922] usb 2-1: config 0 descriptor?? [ 594.128487][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 594.550249][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 594.634256][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 594.686658][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 594.749882][ T5922] pwc: recv_control_msg error -32 req 04 val 1000 [ 594.827528][ T5922] pwc: recv_control_msg error -32 req 04 val 1300 [ 594.904748][ T5922] pwc: recv_control_msg error -71 req 04 val 1400 [ 594.984432][ T5922] pwc: recv_control_msg error -71 req 02 val 2000 [ 595.056791][ T5922] pwc: recv_control_msg error -71 req 02 val 2100 [ 595.065668][ T5881] gspca_main: mars-2.14.0 probing 093a:050f [ 595.506709][ T5881] usb 5-1: USB disconnect, device number 71 [ 595.525693][ T5922] pwc: recv_control_msg error -71 req 04 val 1500 [ 595.600262][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 595.624098][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 595.659952][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 595.707155][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 595.893075][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 595.951505][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.973896][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 596.004705][ T5922] pwc: Registered as video103. [ 596.052379][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 596.112158][ T5922] usb 2-1: USB disconnect, device number 73 [ 596.131980][T12670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 596.829729][ T5922] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 596.975482][ T30] audit: type=1400 audit(1767303776.352:1839): avc: denied { bind } for pid=12673 comm="syz.3.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.129600][ T5881] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 597.188177][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 597.199814][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.249822][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.262285][ T5922] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 597.276008][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.315123][ T5881] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 597.342532][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.344566][ T5922] usb 2-1: config 0 descriptor?? [ 597.369455][ T5881] usb 6-1: Product: syz [ 597.381766][ T5881] usb 6-1: Manufacturer: syz [ 597.394287][ T5881] usb 6-1: SerialNumber: syz [ 597.407380][ T5881] usb 6-1: config 0 descriptor?? [ 597.620258][T12689] fuse: Unknown parameter 'GPL' [ 597.676667][ T5881] usb 6-1: USB disconnect, device number 47 [ 597.848578][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 597.871676][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 597.887721][T12676] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 597.893374][ T5922] usb 2-1: USB disconnect, device number 74 [ 597.971279][T12676] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.015956][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 598.562049][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1617'. [ 598.852532][T12693] bond8: (slave veth9): Enslaving as an active interface with a down link [ 599.160892][T12700] bond8: (slave dummy0): making interface the new active one [ 599.479787][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 599.589671][ T5881] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 599.639228][T12700] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 599.739572][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 599.746227][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 599.767094][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 599.870999][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.899544][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.907667][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.910016][ T8282] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 600.296580][ T10] usb 4-1: Product: syz [ 600.312709][ T5881] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 600.322972][ T10] usb 4-1: Manufacturer: syz [ 600.334655][ T10] usb 4-1: SerialNumber: syz [ 600.339522][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.357773][ T5881] usb 5-1: config 0 descriptor?? [ 600.363477][T12676] bond8 (unregistering): (slave veth9): Releasing active interface [ 600.366873][ T10] usb 4-1: config 0 descriptor?? [ 600.388769][T12676] bond8 (unregistering): (slave dummy0): Releasing active interface [ 600.412360][T12676] bond8 (unregistering): Released all slaves [ 600.487270][ T8282] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 600.495907][ T8282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.506841][ T8282] usb 2-1: config 0 has no interface number 0 [ 600.516490][ T8282] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 600.525788][ T8282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.540960][ T8282] usb 2-1: Product: syz [ 600.549370][ T8282] usb 2-1: Manufacturer: syz [ 600.559683][ T8282] usb 2-1: SerialNumber: syz [ 600.631571][ T8282] usb 2-1: config 0 descriptor?? [ 600.827354][ T30] audit: type=1400 audit(1767303780.202:1840): avc: denied { ioctl } for pid=12717 comm="syz.6.1626" path="socket:[45464]" dev="sockfs" ino=45464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.828421][ T5881] hid_parser_main: 8 callbacks suppressed [ 600.828451][ T5881] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 600.904341][ T10] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 600.913120][ T8282] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 600.920143][ T5881] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 600.929875][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1626'. [ 600.939683][ T5881] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints? [ 600.949755][ T8282] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 600.960816][ T8282] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 600.977364][ T8282] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 600.999857][ T8282] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 601.020699][ T8282] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 601.029811][ T30] audit: type=1400 audit(1767303780.402:1841): avc: denied { map } for pid=12717 comm="syz.6.1626" path="socket:[45463]" dev="sockfs" ino=45463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 601.116855][T12710] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 601.130558][ C0] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -71 [ 601.131425][ T8282] usb 5-1: USB disconnect, device number 72 [ 601.158391][ T30] audit: type=1400 audit(1767303780.402:1842): avc: denied { read } for pid=12717 comm="syz.6.1626" path="socket:[45463]" dev="sockfs" ino=45463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 601.243643][T12710] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.254136][T12710] bond0: (slave team0): Enslaving as an active interface with an up link [ 601.613463][ T10] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 601.932969][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1628'. [ 602.113277][ T30] audit: type=1400 audit(1767303781.342:1843): avc: denied { map } for pid=12725 comm="syz.6.1628" path="socket:[45481]" dev="sockfs" ino=45481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 602.181331][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 602.255329][ T10] usb 4-1: USB disconnect, device number 51 [ 602.877638][ T5881] usb 2-1: USB disconnect, device number 75 [ 602.913466][ T5881] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 602.936219][ T5881] keyspan 2-1:0.133: device disconnected [ 603.222220][T12743] usb usb5: usbfs: process 12743 (syz.4.1632) did not claim interface 0 before use [ 603.539613][ T8282] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 604.231852][ T8282] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.246727][ T8282] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 604.263902][ T8282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 604.272780][ T5922] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 604.291720][ T8282] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 604.304725][ T8282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.313954][ T5881] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 604.320007][ T8282] usb 5-1: config 0 descriptor?? [ 604.474365][ T5922] usb 4-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 604.485461][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.500239][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 604.501870][ T5922] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 604.522113][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.523420][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 604.575013][ T5881] usb 6-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 604.593393][ T5881] usb 6-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 604.608637][ T5881] usb 6-1: config 1 interface 0 has no altsetting 0 [ 604.608946][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.723872][ T5922] usb 4-1: Product: syz [ 604.732002][ T5922] usb 4-1: Manufacturer: syz [ 604.739701][ T5922] usb 4-1: SerialNumber: syz [ 604.759889][ T5881] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 605.161290][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.174902][ T5881] usb 6-1: Product: syz [ 605.181101][ T5881] usb 6-1: Manufacturer: syz [ 605.189382][ T5881] usb 6-1: SerialNumber: syz [ 605.200626][T12748] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 605.225621][T12748] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 605.478964][T12748] team0: No ports can be present during mode change [ 605.615765][T12742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.618722][ T30] audit: type=1400 audit(1767303784.992:1844): avc: denied { getopt } for pid=12757 comm="syz.1.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 605.711354][T12742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.941967][ T30] audit: type=1400 audit(1767303785.322:1845): avc: denied { map } for pid=12740 comm="syz.3.1633" path="socket:[44579]" dev="sockfs" ino=44579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.038173][ T30] audit: type=1400 audit(1767303785.342:1846): avc: denied { read } for pid=12740 comm="syz.3.1633" path="socket:[44579]" dev="sockfs" ino=44579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.042693][ T8282] usbhid 5-1:0.0: can't add hid device: -71 [ 606.083388][ T5881] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 606.127277][ T30] audit: type=1400 audit(1767303785.462:1847): avc: denied { create } for pid=12740 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 606.167634][ T5881] usb 6-1: USB disconnect, device number 48 [ 606.174461][ T8282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 606.269131][ T5881] usblp0: removed [ 606.279542][ T30] audit: type=1400 audit(1767303785.532:1848): avc: denied { sys_admin } for pid=12740 comm="syz.3.1633" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 606.507245][ T8282] usb 5-1: USB disconnect, device number 73 [ 606.573668][T12766] bridge2: entered promiscuous mode [ 607.279512][ T30] audit: type=1800 audit(1767303785.772:1849): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1638" name="bus" dev="overlay" ino=1943 res=0 errno=0 [ 607.549540][ T8282] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 607.618618][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 607.736756][ T8282] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 607.752961][ T8282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 607.801864][ T8282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 607.891925][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1642'. [ 608.083024][ T30] audit: type=1400 audit(1767303787.262:1850): avc: denied { connect } for pid=12774 comm="syz.1.1642" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.155320][ T8282] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 608.179950][ T8282] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 608.201444][ T8282] usb 5-1: Manufacturer: syz [ 608.220247][ T8282] usb 5-1: config 0 descriptor?? [ 608.280606][T12768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.297008][ T8282] igorplugusb 5-1:0.0: endpoint incorrect [ 610.289687][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 610.402557][ T5922] cdc_ncm 4-1:1.0: bind() failure [ 610.433862][ T5922] usbtest 4-1:1.1: probe with driver usbtest failed with error -32 [ 610.479690][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 610.488618][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.539783][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.579856][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 610.638897][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.725233][ T10] usb 2-1: config 0 descriptor?? [ 611.227269][T12811] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 611.233805][T12811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 611.241373][T12811] vhci_hcd vhci_hcd.0: Device attached [ 611.308361][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 611.392170][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 611.450133][ T10] usb 2-1: USB disconnect, device number 76 [ 611.483354][ T5881] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 611.493313][ T5953] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 611.522626][ T89] usb 4-1: USB disconnect, device number 52 [ 611.559150][ T30] audit: type=1400 audit(1767303790.932:1851): avc: denied { create } for pid=12817 comm="syz.6.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.579645][ T5953] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 611.606500][ T30] audit: type=1400 audit(1767303790.962:1852): avc: denied { setopt } for pid=12817 comm="syz.6.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.631107][ T5921] usb 5-1: USB disconnect, device number 74 [ 611.642665][ T30] audit: type=1400 audit(1767303790.962:1853): avc: denied { bind } for pid=12817 comm="syz.6.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.702790][ T5881] usb 6-1: config 0 has no interfaces? [ 611.709868][ T30] audit: type=1400 audit(1767303790.962:1854): avc: denied { name_bind } for pid=12817 comm="syz.6.1649" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 611.719104][ T5881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 611.748962][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.774510][ T5881] usb 6-1: config 0 descriptor?? [ 611.789931][ T30] audit: type=1400 audit(1767303790.962:1855): avc: denied { node_bind } for pid=12817 comm="syz.6.1649" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 612.037112][T12833] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 612.202937][ T30] audit: type=1400 audit(1767303791.422:1856): avc: denied { relabelto } for pid=12830 comm="syz.4.1655" name="316" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 612.366163][ T30] audit: type=1400 audit(1767303791.432:1857): avc: denied { associate } for pid=12830 comm="syz.4.1655" name="316" dev="tmpfs" ino=1681 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 612.550574][ T30] audit: type=1400 audit(1767303791.922:1858): avc: denied { setopt } for pid=12828 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 612.717660][T12839] vivid-002: disconnect [ 612.779283][ T30] audit: type=1400 audit(1767303792.152:1859): avc: denied { remove_name } for pid=5817 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 612.862889][ T30] audit: type=1400 audit(1767303792.182:1860): avc: denied { rmdir } for pid=5817 comm="syz-executor" name="316" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 613.006033][T12846] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 613.850696][ T5922] usb 6-1: USB disconnect, device number 49 [ 613.862341][T12813] vhci_hcd: connection reset by peer [ 613.875995][ T50] vhci_hcd vhci_hcd.5: stop threads [ 613.947259][ T50] vhci_hcd vhci_hcd.5: release socket [ 613.953633][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 614.133187][T12838] vivid-002: reconnect [ 614.600291][T12860] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 614.606823][T12860] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 614.614655][T12860] vhci_hcd vhci_hcd.0: Device attached [ 614.829662][ T5922] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 615.099249][ T8282] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 615.099650][T12868] vivid-008: disconnect [ 615.142043][ T5922] usb 7-1: config 0 has no interfaces? [ 615.149329][ T5922] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 615.167951][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.201616][ T8282] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 615.210060][ T5922] usb 7-1: config 0 descriptor?? [ 615.278055][T12859] vivid-008: reconnect [ 616.490994][T12878] usb usb5: usbfs: process 12878 (syz.3.1662) did not claim interface 0 before use [ 617.235758][ T5922] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 617.378358][T12861] vhci_hcd: connection reset by peer [ 617.383946][ T5953] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 617.628243][ T5922] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.641297][ T4291] vhci_hcd vhci_hcd.6: stop threads [ 617.646500][ T4291] vhci_hcd vhci_hcd.6: release socket [ 617.670119][ T5922] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 617.684140][ T4291] vhci_hcd vhci_hcd.6: disconnect device [ 617.684438][ T8284] usb 7-1: USB disconnect, device number 48 [ 617.723841][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 617.751869][ T5922] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 617.806465][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.838026][ T5922] usb 4-1: config 0 descriptor?? [ 618.045591][ T30] audit: type=1400 audit(1767303797.412:1861): avc: denied { mount } for pid=12888 comm="syz.6.1672" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 618.980687][T12907] fuse: Bad value for 'group_id' [ 618.985709][T12907] fuse: Bad value for 'group_id' [ 619.269553][ T5921] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 619.307913][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 619.315295][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 619.338113][ T5922] usb 4-1: USB disconnect, device number 53 [ 619.459535][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 619.472614][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.491210][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.509061][ T30] audit: type=1400 audit(1767303798.882:1862): avc: denied { map } for pid=12915 comm="syz.6.1676" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 619.520327][T12916] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 619.540718][ T5921] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 619.554350][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.569339][ T5921] usb 5-1: config 0 descriptor?? [ 619.840166][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 620.098817][ T5921] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 620.131300][T12926] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 620.213853][ T5921] corsair 0003:1B1C:1B02.0012: Read invalid backlight brightness: d4. [ 620.312767][ T8282] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 620.427976][ T5921] usb 5-1: USB disconnect, device number 75 [ 621.024254][T12946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 621.704398][T12952] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 622.581515][ T30] audit: type=1400 audit(1767303801.942:1863): avc: denied { shutdown } for pid=12962 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 622.624391][ T30] audit: type=1400 audit(1767303801.952:1864): avc: denied { create } for pid=12962 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 623.843897][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.873377][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.299554][ T5921] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 625.360710][ T30] audit: type=1400 audit(1767303804.652:1865): avc: denied { ioctl } for pid=12987 comm="syz.5.1695" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 625.533388][ T30] audit: type=1400 audit(1767303804.912:1866): avc: denied { audit_read } for pid=12992 comm="syz.3.1696" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.583759][ T5921] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 625.609131][ T5921] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 625.668212][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 625.696685][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 625.724718][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.747791][ T5921] usb 5-1: Product: syz [ 625.772637][ T5921] usb 5-1: Manufacturer: syz [ 625.782756][ T5921] usb 5-1: SerialNumber: syz [ 625.803115][T12984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.811836][T12984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 626.227679][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.246263][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.315922][ T5921] usbhid 5-1:1.0: can't add hid device: -71 [ 626.332848][ T5921] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 626.394158][ T5921] usb 5-1: USB disconnect, device number 76 [ 626.771813][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.778985][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.390754][T13012] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 627.397286][T13012] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 627.404737][T13012] vhci_hcd vhci_hcd.0: Device attached [ 627.411281][ T8284] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 627.542950][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.562599][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.582961][ T8284] usb 6-1: config 0 has no interfaces? [ 627.588429][ T8284] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 627.600463][ T8283] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 627.609942][ T8284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.624210][ T8284] usb 6-1: config 0 descriptor?? [ 627.659579][ T5922] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 627.667189][ T8283] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 627.762544][T13003] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 627.794830][ T8611] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.814235][ T8611] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.826890][ T5922] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 627.836148][ T5922] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 627.846616][ T8611] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.855750][ T5922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 627.865298][ T8611] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.876458][ T5922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 627.895314][ T5922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 627.917358][ T5922] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 627.920539][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 627.939745][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 627.948416][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 627.998528][ T5922] usb 7-1: Product: syz [ 628.140022][ T5922] usb 7-1: Manufacturer: syz [ 628.267340][ T5922] cdc_wdm 7-1:1.0: skipping garbage [ 628.284250][ T5922] cdc_wdm 7-1:1.0: skipping garbage [ 628.299299][ T5922] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 628.310501][ T5922] cdc_wdm 7-1:1.0: Unknown control protocol [ 628.410836][ T30] audit: type=1400 audit(1767303807.792:1867): avc: denied { setopt } for pid=13025 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 628.441562][ T30] audit: type=1400 audit(1767303807.812:1868): avc: denied { getopt } for pid=13025 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 628.513238][ T30] audit: type=1400 audit(1767303807.892:1869): avc: denied { read write } for pid=13009 comm="syz.6.1700" name="cdc-wdm0" dev="devtmpfs" ino=3946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 628.604828][ T30] audit: type=1400 audit(1767303807.922:1870): avc: denied { open } for pid=13009 comm="syz.6.1700" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 628.606826][ T5953] usb 7-1: USB disconnect, device number 49 [ 629.194014][T13032] sctp: [Deprecated]: syz.1.1705 (pid 13032) Use of int in maxseg socket option. [ 629.194014][T13032] Use struct sctp_assoc_value instead [ 629.915828][ T5881] usb 6-1: USB disconnect, device number 50 [ 629.981090][T13013] vhci_hcd: connection reset by peer [ 629.998003][ T5936] vhci_hcd vhci_hcd.5: stop threads [ 630.013904][ T5936] vhci_hcd vhci_hcd.5: release socket [ 630.548365][ T5936] vhci_hcd vhci_hcd.5: disconnect device [ 630.709652][ T5881] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 631.036327][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 631.046114][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.052361][ T30] audit: type=1400 audit(1767303810.312:1871): avc: denied { name_bind } for pid=13044 comm="syz.5.1708" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 631.077511][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 631.089668][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.099671][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 631.109209][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.119418][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 631.128993][T13051] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.138471][T13051] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 631.197726][ T5881] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.208339][ T5881] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 631.222734][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 631.229416][ T5881] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 631.231943][T13054] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 631.238662][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.267000][ T5881] usb 2-1: config 0 descriptor?? [ 632.594399][ T30] audit: type=1400 audit(1767303811.942:1872): avc: denied { bind } for pid=13067 comm="syz.4.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.668518][ T30] audit: type=1400 audit(1767303812.022:1873): avc: denied { bind } for pid=13067 comm="syz.4.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 632.799636][ T8283] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 633.183945][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 633.369363][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 633.379984][ T5881] usb 2-1: USB disconnect, device number 77 [ 633.416480][T13078] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 635.617496][T13101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 635.624035][T13101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 635.631722][T13101] vhci_hcd vhci_hcd.0: Device attached [ 635.819593][ T5881] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 635.850813][ T5922] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 636.174857][ T8283] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 636.239585][ T5922] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 636.391180][ T8283] usb 2-1: config 0 has no interfaces? [ 636.479706][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 636.591901][ T8283] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.629850][ T8283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.647455][ T5953] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 636.649168][ T8283] usb 2-1: config 0 descriptor?? [ 636.690328][ T5818] Bluetooth: hci2: unexpected event for opcode 0x5de4 [ 636.711041][ T5881] usb 4-1: device descriptor read/all, error -71 [ 636.730312][ T5818] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 636.934295][ T5953] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 637.055884][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 637.086960][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 637.116847][ T5953] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 637.155358][ T5953] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 637.181271][ T5953] usb 5-1: Manufacturer: syz [ 637.230661][ T5953] usb 5-1: config 0 descriptor?? [ 637.235674][ T30] audit: type=1400 audit(1767303816.612:1874): avc: denied { compute_member } for pid=13120 comm="syz.6.1728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 637.265995][T13111] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 637.275708][ T5953] igorplugusb 5-1:0.0: endpoint incorrect [ 637.982541][T13103] vhci_hcd: connection reset by peer [ 638.004446][ T4291] vhci_hcd vhci_hcd.1: stop threads [ 638.014058][ T5881] usb 2-1: USB disconnect, device number 78 [ 638.043272][ T4291] vhci_hcd vhci_hcd.1: release socket [ 638.069326][ T4291] vhci_hcd vhci_hcd.1: disconnect device [ 638.667406][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'. [ 638.844046][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 638.861779][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 638.869842][ T8283] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 639.044970][ T8283] usb 7-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 639.055168][ T8283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.095390][ T8283] usb 7-1: config 0 descriptor?? [ 639.542054][T13149] usb usb5: usbfs: process 13149 (syz.1.1736) did not claim interface 0 before use [ 639.819607][ T8282] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 639.871545][ T8283] aquacomputer_d5next 0003:0C70:F010.0013: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.6-1/input0 [ 639.943472][ T5881] usb 5-1: USB disconnect, device number 77 [ 640.051787][ T8282] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.070206][ T8282] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 640.086326][ T8282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.093201][ T8282] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 640.102761][ T8282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.120196][ T8282] usb 2-1: config 0 descriptor?? [ 640.405858][ T8283] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 640.659523][ T8283] usb 4-1: Using ep0 maxpacket: 32 [ 640.666292][ T8283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.693209][ T8283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.714967][ T8283] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 640.743452][ T8283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.764170][ T8283] usb 4-1: config 0 descriptor?? [ 640.786079][ T8283] hub 4-1:0.0: USB hub found [ 640.922532][ T5881] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 640.995236][ T4291] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.003001][ T4291] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.100101][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 641.177721][ T5881] usb 5-1: config 2 has an invalid interface number: 208 but max is 0 [ 641.186187][ T5881] usb 5-1: config 2 has no interface number 0 [ 641.192877][ T5881] usb 5-1: config 2 interface 208 has no altsetting 0 [ 641.202225][ T5881] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 641.213752][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.234399][ T5953] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 641.252873][ T5881] usb 5-1: Product: syz [ 641.320620][ T5881] usb 5-1: Manufacturer: syz [ 641.522996][ T5881] usb 5-1: SerialNumber: syz [ 641.620080][ T8284] usb 7-1: USB disconnect, device number 50 [ 641.626092][ T5922] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 641.652348][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.680819][ T5953] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 641.712748][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.732511][ T5953] usb 6-1: config 0 descriptor?? [ 641.791402][T13171] macvtap0: entered promiscuous mode [ 641.802320][T13171] macvtap0: left promiscuous mode [ 641.984319][ T30] audit: type=1400 audit(1767303821.362:1875): avc: denied { bind } for pid=13173 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.004856][ T30] audit: type=1400 audit(1767303821.362:1876): avc: denied { setopt } for pid=13173 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.044420][ T30] audit: type=1400 audit(1767303821.362:1877): avc: denied { connect } for pid=13173 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.065413][ T30] audit: type=1400 audit(1767303821.362:1878): avc: denied { accept } for pid=13173 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.269377][ T5953] lenovo 0003:17EF:6047.0014: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 642.308896][ T8282] usbhid 2-1:0.0: can't add hid device: -71 [ 642.314989][ T8282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 642.377887][ T8282] usb 2-1: USB disconnect, device number 79 [ 643.039654][ T5818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.065191][ T8283] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 643.109246][ T5953] lenovo 0003:17EF:6047.0014: Sensitivity setting failed: -71 [ 643.127126][ T5953] usb 6-1: USB disconnect, device number 51 [ 643.154293][ T8283] usbhid 4-1:0.0: can't add hid device: -71 [ 643.177365][ T8283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 643.208587][ T5881] gspca_main: mars-2.14.0 probing 093a:050f [ 643.245555][ T5881] usb 5-1: USB disconnect, device number 78 [ 643.298449][ T8283] usb 4-1: USB disconnect, device number 56 [ 644.566294][ T5881] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 644.806752][ T5881] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 645.018433][T13206] bridge2: entered promiscuous mode [ 645.052385][ T30] audit: type=1800 audit(1767303824.392:1879): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1750" name="bus" dev="overlay" ino=1400 res=0 errno=0 [ 645.705232][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.713659][ T5881] usb 5-1: Product: syz [ 645.718587][ T5881] usb 5-1: Manufacturer: syz [ 645.723229][ T5881] usb 5-1: SerialNumber: syz [ 645.734013][ T5881] usb 5-1: config 0 descriptor?? [ 645.739032][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 645.755731][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 646.140771][ T5881] usb 5-1: USB disconnect, device number 79 [ 646.296917][ T30] audit: type=1800 audit(1767303825.672:1880): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1755" name="bus" dev="overlay" ino=1430 res=0 errno=0 [ 646.329450][T13218] bridge2: entered promiscuous mode [ 646.387410][T13187] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 646.555408][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 648.072957][T13187] 8021q: adding VLAN 0 to HW filter on device bond7 [ 648.102166][T13220] bond7: (slave veth13): Enslaving as an active interface with a down link [ 648.369055][T13244] netlink: 'syz.1.1762': attribute type 5 has an invalid length. [ 648.549632][ T8282] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 648.613609][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 648.621712][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 648.699623][ T8282] usb 7-1: Using ep0 maxpacket: 8 [ 648.713068][ T8282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.724475][ T8282] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.734526][ T8282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.775214][ T8282] usb 7-1: config 0 descriptor?? [ 649.206617][ T30] audit: type=1800 audit(1767303828.562:1881): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1763" name="bus" dev="overlay" ino=2054 res=0 errno=0 [ 649.262863][T13251] bridge1: entered promiscuous mode [ 649.400500][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1758'. [ 649.538510][ T8282] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 650.020407][ T8282] usb 7-1: USB disconnect, device number 51 [ 651.169597][ T8282] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 651.312302][ T30] audit: type=1400 audit(1767303830.692:1882): avc: denied { getopt } for pid=13267 comm="syz.4.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 651.373528][ T30] audit: type=1400 audit(1767303830.742:1883): avc: denied { listen } for pid=13267 comm="syz.4.1768" laddr=172.20.20.38 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.560006][ T8282] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.720564][T13273] 9p: Unknown uid 00000000004294967295 [ 651.752217][ T8282] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 651.769670][ T8282] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.776650][ T8282] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 651.785784][ T8282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.796867][ T8282] usb 6-1: config 0 descriptor?? [ 653.240355][ T30] audit: type=1400 audit(1767303832.612:1884): avc: denied { write } for pid=13286 comm="syz.1.1775" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 653.323376][T13287] tipc: Enabling of bearer rejected, already enabled [ 653.402632][T13287] tipc: Resetting bearer [ 654.019558][ T5881] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 654.059563][ T5921] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 654.180159][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.199659][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 654.207804][ T8282] usbhid 6-1:0.0: can't add hid device: -71 [ 654.229962][ T8282] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 654.231756][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.246372][ T8282] usb 6-1: USB disconnect, device number 52 [ 654.254401][ T5921] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 654.291390][ T5818] Bluetooth: hci2: unexpected event for opcode 0x5de4 [ 654.293110][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.310371][ T5818] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 654.320894][ T5881] usb 2-1: config 0 descriptor?? [ 654.328127][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 654.349936][ T5921] usb 7-1: Product: syz [ 654.354116][ T5921] usb 7-1: Manufacturer: syz [ 654.659564][ T5921] usb 7-1: SerialNumber: syz [ 654.695661][ T5921] usb 7-1: config 0 descriptor?? [ 654.784058][ T30] audit: type=1400 audit(1767303834.162:1885): avc: denied { bind } for pid=13308 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 655.256666][ T5921] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 655.344344][ T5881] usb 7-1: USB disconnect, device number 52 [ 655.461157][ T5921] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 655.472180][ T5921] usb 4-1: config 0 has no interface number 0 [ 655.492780][ T5921] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 655.508209][ T5921] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 655.520762][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.535216][ T5921] usb 4-1: config 0 descriptor?? [ 655.544960][T13312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 655.557275][ T5921] hub 4-1:0.3: bad descriptor, ignoring hub [ 655.568722][ T5921] hub 4-1:0.3: probe with driver hub failed with error -5 [ 655.574325][T13302] netlink: 'syz.6.1774': attribute type 1 has an invalid length. [ 655.601665][ T5921] sierra 4-1:0.3: Sierra USB modem converter detected [ 655.669669][ T8282] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 655.729629][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'. [ 655.757396][T13312] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 655.763913][T13312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 655.781035][T13302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.790607][T13312] vhci_hcd vhci_hcd.0: Device attached [ 655.796697][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 655.815066][T13325] vhci_hcd: cannot find the pending unlink 53968 [ 655.823856][T13325] vhci_hcd: connection closed [ 655.829719][ T8282] usb 6-1: Using ep0 maxpacket: 16 [ 655.840037][ T3575] vhci_hcd vhci_hcd.3: stop threads [ 655.845245][ T3575] vhci_hcd vhci_hcd.3: release socket [ 655.851168][ T3575] vhci_hcd vhci_hcd.3: disconnect device [ 655.861430][ T8282] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 655.863963][ T5921] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 655.870793][ T8282] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.899055][T13323] bond2: (slave veth13): Enslaving as an active interface with a down link [ 655.913502][ T5921] usb 4-1: USB disconnect, device number 57 [ 655.918773][ T8282] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.933199][ T5921] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 655.944166][ T5921] sierra 4-1:0.3: device disconnected [ 655.947725][ T8282] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.978707][ T8282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.987869][ T8282] usb 6-1: Product: syz [ 655.992361][ T8282] usb 6-1: Manufacturer: syz [ 655.996975][ T8282] usb 6-1: SerialNumber: syz [ 656.098166][T13302] bond2 (unregistering): (slave veth13): Releasing active interface [ 656.108218][T13302] bond2 (unregistering): Released all slaves [ 656.197189][T13333] tipc: Trying to set illegal importance in message [ 656.359420][ T30] audit: type=1400 audit(1767303835.732:1886): avc: denied { connect } for pid=13334 comm="syz.3.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 656.433740][T13321] dvmrp6: entered allmulticast mode [ 657.073894][T13298] orangefs_mount: mount request failed with -4 [ 657.085969][ T30] audit: type=1400 audit(1767303836.032:1887): avc: denied { bind } for pid=13320 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 657.121363][ T30] audit: type=1400 audit(1767303836.122:1888): avc: denied { write } for pid=13320 comm="syz.5.1783" path="socket:[47101]" dev="sockfs" ino=47101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 657.200502][ T5922] usb 2-1: USB disconnect, device number 80 [ 657.229539][ T5921] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 657.359050][T13347] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 657.385107][T13347] bond1: (slave lo): Enslaving as a backup interface with an up link [ 657.397755][T13347] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 657.417244][ T5921] usb 4-1: config index 0 descriptor too short (expected 36451, got 36) [ 657.428917][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 657.491968][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 658.000857][ T5881] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 658.095903][ T5921] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 658.107258][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=223, SerialNumber=2 [ 658.115855][ T5921] usb 4-1: Product: syz [ 658.314172][ T5921] usb 4-1: Manufacturer: syz [ 658.337375][ T5921] usb 4-1: SerialNumber: syz [ 658.347966][ T5921] usb 4-1: config 0 descriptor?? [ 658.356053][ T5881] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.371012][ T5881] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 658.385537][ T5881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 658.393079][T13341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.396434][ T5881] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 658.402113][T13341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.414132][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.427997][ T5881] usb 7-1: config 0 descriptor?? [ 658.457731][T13343] delete_channel: no stack [ 658.492068][ T8282] usb 6-1: 0:2 : does not exist [ 658.511466][ T8282] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 658.572696][ T8282] usb 6-1: USB disconnect, device number 53 [ 658.643699][T13341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.651679][T13341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.867096][ T5921] Error reading MAC address [ 658.877774][ T5921] usb 4-1: USB disconnect, device number 58 [ 658.899751][ T8282] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 659.049741][ T8282] usb 6-1: Using ep0 maxpacket: 16 [ 659.056397][ T8282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.067548][ T8282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.077653][ T8282] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 659.087044][ T8282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.099276][ T8282] usb 6-1: config 0 descriptor?? [ 659.423327][T13365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13365 comm=syz.3.1794 [ 659.858367][ T8282] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 659.929481][ C0] hrtimer: interrupt took 24430 ns [ 660.142218][ T30] audit: type=1400 audit(1767303839.462:1889): avc: denied { ioctl } for pid=13370 comm="syz.3.1795" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 660.377245][ T5921] usb 6-1: USB disconnect, device number 54 [ 660.456660][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 661.189567][T13385] veth0_to_team: entered promiscuous mode [ 661.881285][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 662.002394][ T5881] usb 7-1: USB disconnect, device number 53 [ 662.530392][T13397] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 662.817948][T13400] bridge2: entered promiscuous mode [ 664.869935][ T5922] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 665.051510][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 665.051520][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 665.064814][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.077412][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 665.086764][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.109768][ T5922] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 665.119359][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.140504][ T8282] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 665.267212][ T5922] usb 6-1: config 0 descriptor?? [ 665.304194][ T8282] usb 5-1: Using ep0 maxpacket: 16 [ 665.322987][ T8282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.459856][ T8282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.475569][ T8282] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 665.485313][ T8282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.497582][ T8282] usb 5-1: config 0 descriptor?? [ 665.769697][ T5921] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 666.016887][ T30] audit: type=1400 audit(1767303845.282:1890): avc: denied { map } for pid=13437 comm="syz.3.1814" path="socket:[49361]" dev="sockfs" ino=49361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 666.059585][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.082755][ T5922] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 666.090020][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.094814][ T8282] corsair 0003:1B1C:1B02.0017: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 666.139505][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.160584][ T5922] corsair 0003:1B1C:1B02.0016: Read invalid backlight brightness: d4. [ 666.211656][ T5921] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.228746][ T8282] corsair 0003:1B1C:1B02.0017: Failed to get K90 initial state (error -71). [ 666.315401][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.333150][ T8282] usb 5-1: USB disconnect, device number 80 [ 666.382399][ T5818] Bluetooth: hci5: unexpected event for opcode 0x5de4 [ 666.389285][ T5818] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 666.710562][ T5881] usb 6-1: USB disconnect, device number 55 [ 666.744132][ T5921] usb 2-1: config 0 descriptor?? [ 666.837730][ T30] audit: type=1400 audit(1767303846.212:1891): avc: denied { bind } for pid=13448 comm="syz.6.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 667.114876][T13451] FAT-fs (loop13): unable to read boot sector [ 667.139323][ T30] audit: type=1400 audit(1767303846.472:1892): avc: denied { create } for pid=13448 comm="syz.6.1816" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 667.267968][ T30] audit: type=1400 audit(1767303846.482:1893): avc: denied { mounton } for pid=13448 comm="syz.6.1816" path="/273/file0" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 667.440734][ T5921] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xe [ 667.448251][ T5921] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 667.473862][ T5921] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 667.534560][ T5921] usb 2-1: USB disconnect, device number 81 [ 667.610704][T13459] bridge2: entered promiscuous mode [ 667.831638][ T30] audit: type=1400 audit(1767303847.202:1894): avc: denied { unlink } for pid=7744 comm="syz-executor" name="file0" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 668.463436][ T30] audit: type=1400 audit(1767303847.812:1895): avc: denied { write } for pid=13464 comm="syz.6.1820" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 668.530660][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 668.553683][T13463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1819'. [ 668.657594][T13467] binder: 13464:13467 ioctl c0306201 200000000600 returned -14 [ 668.747513][T13465] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 668.754112][T13465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 668.781815][T13465] vhci_hcd vhci_hcd.0: Device attached [ 669.089565][ T5921] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 669.171641][ T5881] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 669.257002][ T30] audit: type=1400 audit(1767303848.632:1896): avc: denied { create } for pid=13476 comm="syz.1.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 669.600466][ T5881] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 669.616279][ T5921] usb 7-1: config 0 has no interfaces? [ 669.629534][ T30] audit: type=1400 audit(1767303848.632:1897): avc: denied { write } for pid=13476 comm="syz.1.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 669.635256][ T5921] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 669.673681][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 669.690456][T13480] ceph: No mds server is up or the cluster is laggy [ 669.701242][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 669.730877][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.876201][ T5921] usb 7-1: config 0 descriptor?? [ 670.142387][T13473] vhci_hcd: connection reset by peer [ 670.147943][ T50] vhci_hcd vhci_hcd.6: stop threads [ 670.174341][ T50] vhci_hcd vhci_hcd.6: release socket [ 670.215606][ T5921] usb 7-1: USB disconnect, device number 54 [ 670.254147][ T50] vhci_hcd vhci_hcd.6: disconnect device [ 671.694206][ T8282] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 671.979532][ T8282] usb 4-1: Using ep0 maxpacket: 16 [ 672.589015][ T8282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.608454][ T8282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.638424][ T8282] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 672.681144][ T8282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.850475][ T8282] usb 4-1: config 0 descriptor?? [ 673.344703][ T5921] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 673.561357][ T8282] corsair 0003:1B1C:1B02.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 673.889535][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 673.932672][ T30] audit: type=1400 audit(1767303853.312:1898): avc: denied { read } for pid=13539 comm="syz.1.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 673.959750][ T8282] corsair 0003:1B1C:1B02.0019: Read invalid backlight brightness: d4. [ 674.017000][ T5921] usb 6-1: config 2 has an invalid interface number: 208 but max is 0 [ 674.027919][ T5921] usb 6-1: config 2 has no interface number 0 [ 674.209285][ T8282] usb 4-1: USB disconnect, device number 59 [ 674.806310][ T5921] usb 6-1: config 2 interface 208 has no altsetting 0 [ 674.827995][T13535] fido_id[13535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 674.869589][ T5881] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 674.953818][ T5818] Bluetooth: hci3: unexpected event for opcode 0x5de4 [ 674.960726][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 675.609685][ T5953] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 675.752639][ T5921] usb 6-1: string descriptor 0 read error: -71 [ 675.769900][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 675.782092][ T5921] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=24.3a [ 675.819636][ T5953] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 675.836090][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.844159][ T89] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 675.852802][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.875698][ T5921] usb 6-1: can't set config #2, error -71 [ 675.886445][ T5953] usb 2-1: Product: syz [ 675.893567][ T5921] usb 6-1: USB disconnect, device number 56 [ 675.902019][ T5953] usb 2-1: Manufacturer: syz [ 675.918602][ T5953] usb 2-1: SerialNumber: syz [ 675.938623][ T5953] usb 2-1: config 0 descriptor?? [ 676.007718][ T30] audit: type=1400 audit(1767303855.382:1899): avc: denied { ioctl } for pid=13563 comm="syz.5.1845" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 676.014532][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.188773][ T89] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 676.228460][ T5953] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 676.237731][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.297821][ T89] usb 4-1: config 0 descriptor?? [ 676.349846][ T5921] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 676.358536][ T30] audit: type=1400 audit(1767303855.732:1900): avc: denied { create } for pid=13568 comm="syz.6.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 676.440393][T13567] binder: 13561:13567 ioctl c0306201 200000000600 returned -14 [ 676.450058][T13567] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 676.456657][T13567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 676.464379][T13567] vhci_hcd vhci_hcd.0: Device attached [ 676.599537][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 676.606341][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 676.702242][ T5921] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 676.724644][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.778745][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 677.116546][ T5921] usb 6-1: Product: syz [ 677.126827][ T89] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 677.142763][ T5921] usb 6-1: Manufacturer: syz [ 677.147392][ T5921] usb 6-1: SerialNumber: syz [ 677.170689][ T5921] usb 6-1: config 0 descriptor?? [ 677.179167][ T5921] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 677.186281][ T10] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 677.193791][ T5881] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 678.042023][ T5881] usb 5-1: config 0 has no interfaces? [ 678.047544][ T5881] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 678.074394][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.094299][ T5818] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 678.101172][ T5818] Bluetooth: hci1: unexpected event for opcode 0x203e [ 678.109406][ T5881] usb 5-1: config 0 descriptor?? [ 678.147205][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 678.181336][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 678.270566][ T89] lenovo 0003:17EF:6047.001A: Fn-lock setting failed: -71 [ 678.289955][ T89] lenovo 0003:17EF:6047.001A: Sensitivity setting failed: -71 [ 678.313629][ T89] usb 4-1: USB disconnect, device number 60 [ 679.168653][ T5953] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 679.413013][ T5953] usb 2-1: USB disconnect, device number 82 [ 679.472368][ T8282] usb 5-1: USB disconnect, device number 81 [ 679.499235][T13573] vhci_hcd: connection reset by peer [ 679.519886][ T8609] vhci_hcd vhci_hcd.4: stop threads [ 679.535115][ T8609] vhci_hcd vhci_hcd.4: release socket [ 679.553466][ T8609] vhci_hcd vhci_hcd.4: disconnect device [ 679.608003][T13601] Cannot find add_set index 0 as target [ 680.143137][ T5818] Bluetooth: hci5: unexpected event for opcode 0x5de4 [ 680.269689][ T5818] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 680.699731][ T8282] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 681.367563][ T5921] gspca_zc3xx: reg_r err -110 [ 682.350288][ T8282] usb 5-1: Using ep0 maxpacket: 8 [ 683.359521][ T5921] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 683.365814][ T5921] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 683.490679][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 683.509708][ T5921] usb 6-1: USB disconnect, device number 57 [ 683.874115][T13639] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 684.060449][ T8282] usb 5-1: device descriptor read/all, error -71 [ 684.160352][ T5922] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 684.321994][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 684.341806][ T5922] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 684.369929][ T5922] usb 6-1: config 0 has no interface number 0 [ 684.376049][ T5922] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 684.419519][ T5922] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 684.453047][ T5922] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 684.494880][ T5922] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 684.528516][ T5922] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 684.559812][ T5922] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 684.583151][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.078606][ T5922] usb 6-1: config 0 descriptor?? [ 685.094602][T13639] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 685.113644][ T5922] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 685.129579][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 685.299211][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.309133][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.325755][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 685.588808][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 685.603826][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.616153][ T5921] usb 6-1: USB disconnect, device number 58 [ 685.626933][ T5921] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 685.646153][ T10] usb 2-1: config 0 descriptor?? [ 685.717972][T13659] fuse: Bad value for 'fd' [ 685.724273][T13661] binder: 13649:13661 ioctl c0306201 200000000600 returned -14 [ 685.738852][T13663] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 685.745447][T13663] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 685.752879][T13663] vhci_hcd vhci_hcd.0: Device attached [ 685.797637][ T10] as10x_usb: device has been detected [ 685.815770][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 685.880325][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 685.984373][ T8282] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 686.019526][ T5953] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 686.049536][ T8282] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 686.521352][ T30] audit: type=1400 audit(1767303865.902:1901): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 686.522021][ T10] as10x_usb: error during firmware upload part1 [ 686.587479][ T10] Registered device nBox DVB-T Dongle [ 686.591464][ T5953] usb 4-1: config 0 has no interfaces? [ 686.627470][ T5953] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 686.654071][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.675449][ T5953] usb 4-1: config 0 descriptor?? [ 686.684493][ T5818] Bluetooth: hci2: unexpected event for opcode 0x5de4 [ 686.691978][ T5818] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 686.749556][ T5922] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 687.114317][ T10] usb 2-1: USB disconnect, device number 83 [ 687.121183][ T5922] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.147904][ T5922] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 687.154362][ T10] Unregistered device nBox DVB-T Dongle [ 687.167148][ T10] as10x_usb: device has been disconnected [ 687.179537][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 687.179572][ T5922] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 687.179592][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.201538][ T5922] usb 7-1: config 0 descriptor?? [ 687.346162][ T5818] Bluetooth: hci2: unexpected event for opcode 0x5de4 [ 687.375627][ T5818] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 687.499531][ T5953] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 687.728744][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 687.939514][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 687.946222][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.957249][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.967569][ T5953] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 687.976664][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.985360][ T10] usb 2-1: config 6 has an invalid interface number: 28 but max is 0 [ 687.993993][ T10] usb 2-1: config 6 has no interface number 0 [ 688.000840][ T5953] usb 5-1: config 0 descriptor?? [ 688.006018][ T10] usb 2-1: config 6 interface 28 has no altsetting 0 [ 688.015856][ T10] usb 2-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=44.74 [ 688.026538][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.034681][ T10] usb 2-1: Product: syz [ 688.038908][ T10] usb 2-1: Manufacturer: syz [ 688.049542][ T10] usb 2-1: SerialNumber: syz [ 688.072317][ T5921] usb 4-1: USB disconnect, device number 61 [ 688.081411][T13664] vhci_hcd: connection reset by peer [ 688.092973][ T3430] vhci_hcd vhci_hcd.3: stop threads [ 688.103123][ T3430] vhci_hcd vhci_hcd.3: release socket [ 688.109290][ T3430] vhci_hcd vhci_hcd.3: disconnect device [ 688.139558][ T8283] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 688.205520][ T30] audit: type=1400 audit(1767303867.582:1902): avc: denied { execute } for pid=13694 comm="syz.3.1879" path="/file1" dev="ramfs" ino=50024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 688.282503][T13695] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 688.284420][ T10] usb 2-1: USB disconnect, device number 84 [ 688.312890][ T8283] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 688.330800][ T8283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.344022][ T8283] usb 6-1: Product: syz [ 688.352400][ T8283] usb 6-1: Manufacturer: syz [ 688.361917][ T8283] usb 6-1: SerialNumber: syz [ 688.372649][ T8283] usb 6-1: config 0 descriptor?? [ 688.439258][ T5953] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 688.587287][ T10] usb 6-1: USB disconnect, device number 59 [ 688.613638][T13703] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 688.635731][ T5953] corsair 0003:1B1C:1B02.001B: Failed to get K90 initial state (error -71). [ 688.663773][ T5953] usb 5-1: USB disconnect, device number 84 [ 688.797566][T13691] netlink: 'syz.5.1877': attribute type 1 has an invalid length. [ 688.831258][T13691] 8021q: adding VLAN 0 to HW filter on device bond8 [ 688.857730][T13691] bond8: (slave veth11): Enslaving as an active interface with a down link [ 688.869772][ T5921] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 688.888077][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 688.988489][ T5922] usbhid 7-1:0.0: can't add hid device: -71 [ 689.003210][ T5922] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 689.018931][ T5922] usb 7-1: USB disconnect, device number 55 [ 689.031872][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1877'. [ 689.057174][T13691] bond8: (slave dummy0): making interface the new active one [ 689.065902][T13691] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 689.182433][T13710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 689.188958][T13710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 689.196535][T13710] vhci_hcd vhci_hcd.0: Device attached [ 689.469544][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 689.481442][ T8283] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 689.482428][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 689.495998][ T5921] usb 4-1: config 0 has no interface number 0 [ 689.519603][ T5922] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 689.521109][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 689.559648][ T8283] usb 35-1: new full-speed USB device number 8 using vhci_hcd [ 689.561636][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 689.613262][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 689.629675][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 689.660633][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 689.683598][ T5922] usb 2-1: config 0 has no interfaces? [ 689.689081][ T5922] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.698899][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.760149][ T5922] usb 2-1: config 0 descriptor?? [ 689.830501][T13691] bond8 (unregistering): (slave veth11): Releasing active interface [ 689.882426][T13691] bond8 (unregistering): (slave dummy0): Releasing active interface [ 689.884946][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 689.902630][T13691] bond8 (unregistering): Released all slaves [ 689.941416][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.958857][ T5818] Bluetooth: hci3: unexpected event for opcode 0x5de4 [ 690.012037][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 690.052933][ T5921] usb 4-1: config 0 descriptor?? [ 690.299818][T13703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 690.326455][ T5921] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 690.684063][T13731] bridge3: entered promiscuous mode [ 691.373050][ T5818] Bluetooth: hci2: unexpected event for opcode 0x5de4 [ 691.381965][ T5818] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 691.611345][ T8282] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 691.941488][ T5921] usb 2-1: USB disconnect, device number 85 [ 691.953466][T13711] vhci_hcd: connection reset by peer [ 692.006654][ T7495] vhci_hcd vhci_hcd.1: stop threads [ 692.024556][ T7495] vhci_hcd vhci_hcd.1: release socket [ 692.045410][ T7495] vhci_hcd vhci_hcd.1: disconnect device [ 692.145117][ T5922] usb 4-1: USB disconnect, device number 62 [ 692.220347][ T5922] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 692.415838][ T8284] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 692.492852][ T8281] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 692.877106][ T8284] usb 7-1: Using ep0 maxpacket: 32 [ 692.882355][ T8281] usb 5-1: Using ep0 maxpacket: 16 [ 692.890113][ T8284] usb 7-1: config index 0 descriptor too short (expected 5156, got 36) [ 693.614669][ T8281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.625838][ T8284] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 693.645710][ T8284] usb 7-1: config 0 has no interface number 0 [ 693.679815][ T8281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.725977][ T8284] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 478 [ 693.742270][ T8281] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 693.757626][ T8284] usb 7-1: config 0 interface 184 has no altsetting 0 [ 693.766508][ T8281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.781763][ T8284] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 693.798076][ T8284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.814292][ T8284] usb 7-1: Product: syz [ 693.823656][ T8284] usb 7-1: Manufacturer: syz [ 693.833230][ T8281] usb 5-1: config 0 descriptor?? [ 693.846544][ T8284] usb 7-1: SerialNumber: syz [ 693.863211][ T8284] usb 7-1: config 0 descriptor?? [ 693.882143][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 693.896050][ T8284] smsc75xx v1.0.0 [ 694.102121][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 694.258899][ T8281] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 694.877864][ T8281] corsair 0003:1B1C:1B02.001C: Read invalid backlight brightness: d4. [ 694.889575][ T8284] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 694.914774][ T8284] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 694.939594][ T8283] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 695.095282][ T5921] usb 5-1: USB disconnect, device number 85 [ 695.948391][ T8284] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 695.988318][ T8284] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 696.025464][ T8284] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 696.058885][ T8284] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 696.600925][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1900'. [ 696.610115][T13781] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 696.773237][T13779] bridge4: entered promiscuous mode [ 697.105729][ T5921] usb 7-1: USB disconnect, device number 56 [ 697.659666][T13790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 697.666200][T13790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 697.673653][T13790] vhci_hcd vhci_hcd.0: Device attached [ 697.735125][ T5953] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 697.991737][T13797] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 698.059965][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 698.129519][ T10] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 698.140038][ T8284] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 698.142847][ T5953] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 698.193225][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.201752][ T5953] usb 6-1: Product: syz [ 698.205916][ T5953] usb 6-1: Manufacturer: syz [ 698.210581][ T5953] usb 6-1: SerialNumber: syz [ 698.226018][ T5953] usb 6-1: config 0 descriptor?? [ 698.269554][ T8281] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 698.349829][ T8284] usb 5-1: config 0 has no interfaces? [ 698.365466][ T8284] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.382533][ T8284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.442981][ T5953] usb 6-1: USB disconnect, device number 60 [ 698.659197][T13784] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 698.708056][ T8281] usb 7-1: Using ep0 maxpacket: 8 [ 698.713496][T13784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 698.722087][ T8281] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 698.734914][ T8281] usb 7-1: config 0 has no interface number 0 [ 698.763990][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1897'. [ 698.764691][ T8284] usb 5-1: config 0 descriptor?? [ 698.784049][ T8281] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.877179][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1897'. [ 698.910599][ T8281] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 698.952882][ T8281] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 698.969888][T13805] bond8: (slave veth13): Enslaving as an active interface with a down link [ 698.989213][T13806] bond8: (slave dummy0): making interface the new active one [ 699.012359][T13806] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 699.204496][T13784] bond8 (unregistering): (slave veth13): Releasing active interface [ 699.214023][ T8281] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 699.251087][T13784] bond8 (unregistering): (slave dummy0): Releasing active interface [ 699.259656][ T8281] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.275552][T13784] bond8 (unregistering): Released all slaves [ 699.288178][ T8281] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 699.308484][ T8281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.326168][ T8281] usb 7-1: config 0 descriptor?? [ 699.333065][T13797] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 700.455314][T13792] vhci_hcd: connection reset by peer [ 700.461035][ T8284] usb 5-1: USB disconnect, device number 86 [ 700.473290][ T3798] vhci_hcd vhci_hcd.4: stop threads [ 700.478750][ T8281] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 700.489816][ T3798] vhci_hcd vhci_hcd.4: release socket [ 700.822448][ T3798] vhci_hcd vhci_hcd.4: disconnect device [ 700.853554][ T8281] usb 7-1: USB disconnect, device number 57 [ 700.875118][ T8281] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 701.259697][ T8281] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 701.315768][T13827] bridge5: entered promiscuous mode [ 701.409511][ T8281] usb 6-1: Using ep0 maxpacket: 16 [ 702.057940][ T8281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.079522][ T8281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.089754][ T8281] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 702.098777][ T8281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.121544][ T8281] usb 6-1: config 0 descriptor?? [ 702.167432][ T5818] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 702.182391][T13833] tipc: Enabling of bearer rejected, failed to enable media [ 702.237971][T13833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1914'. [ 702.246589][ T5818] Bluetooth: hci1: unexpected event for opcode 0x5de4 [ 702.259142][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 702.617895][T13844] usb usb5: usbfs: process 13844 (syz.6.1915) did not claim interface 0 before use [ 702.878259][ T8281] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 703.007346][T13847] binder: 13828:13847 ioctl c0306201 200000000600 returned -14 [ 703.016590][T13848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 703.023195][T13848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 703.030925][T13848] vhci_hcd vhci_hcd.0: Device attached [ 703.046629][T13852] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 703.116902][ T8284] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 703.128242][ T8281] corsair 0003:1B1C:1B02.001D: Read invalid backlight brightness: d4. [ 703.197637][T13855] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 703.220526][ T8283] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 703.280769][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 703.287194][ T5953] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 703.289669][ T8283] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 703.331266][ T8284] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.336991][ T89] usb 6-1: USB disconnect, device number 61 [ 703.357251][ T8284] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 703.384564][ T8284] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.410516][ T8284] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 703.432391][ T8284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.460927][ T8284] usb 7-1: config 0 descriptor?? [ 703.470975][ T5953] usb 2-1: config 0 has no interfaces? [ 703.480341][ T5953] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 703.489698][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.520495][ T5953] usb 2-1: config 0 descriptor?? [ 703.545154][ T30] audit: type=1400 audit(1767303882.922:1903): avc: denied { watch watch_reads } for pid=13861 comm="syz.3.1921" path="pipe:[5313]" dev="pipefs" ino=5313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 703.572568][T13862] [ 703.574904][T13862] ====================================================== [ 703.581903][T13862] WARNING: possible circular locking dependency detected [ 703.588893][T13862] syzkaller #0 Tainted: G L [ 703.594839][T13862] ------------------------------------------------------ [ 703.601830][T13862] syz.3.1921/13862 is trying to acquire lock: [ 703.607877][T13862] ffff88804315f540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 703.616386][T13862] [ 703.616386][T13862] but task is already holding lock: [ 703.623725][T13862] ffff888032ab9068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 703.631965][T13862] [ 703.631965][T13862] which lock already depends on the new lock. [ 703.631965][T13862] [ 703.642443][T13862] [ 703.642443][T13862] the existing dependency chain (in reverse order) is: [ 703.651522][T13862] [ 703.651522][T13862] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 703.658890][T13862] __mutex_lock+0x1aa/0x1ca0 [ 703.664008][T13862] anon_pipe_write+0x15d/0x1bd0 [ 703.669372][T13862] __kernel_write_iter+0x720/0xb10 [ 703.674994][T13862] __kernel_write+0xf5/0x140 [ 703.680112][T13862] autofs_notify_daemon+0x4db/0xd60 [ 703.685821][T13862] autofs_wait+0x10f3/0x1ac0 [ 703.690910][T13862] autofs_mount_wait+0x132/0x3c0 [ 703.696350][T13862] autofs_d_automount+0x4b2/0x960 [ 703.701876][T13862] __traverse_mounts+0x1b9/0x830 [ 703.707320][T13862] step_into_slowpath+0x772/0xf50 [ 703.712849][T13862] path_lookupat+0x627/0xc40 [ 703.717944][T13862] filename_lookup+0x224/0x5f0 [ 703.723214][T13862] kern_path+0x35/0x50 [ 703.727784][T13862] lookup_bdev+0xd8/0x280 [ 703.732626][T13862] resume_store+0x1d6/0x490 [ 703.737634][T13862] kobj_attr_store+0x58/0x80 [ 703.742729][T13862] sysfs_kf_write+0xf2/0x150 [ 703.747818][T13862] kernfs_fop_write_iter+0x3af/0x570 [ 703.753610][T13862] vfs_write+0x7d3/0x11d0 [ 703.758454][T13862] ksys_write+0x12a/0x250 [ 703.763283][T13862] do_syscall_64+0xcd/0xf80 [ 703.768290][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.774688][T13862] [ 703.774688][T13862] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 703.782402][T13862] __mutex_lock+0x1aa/0x1ca0 [ 703.787497][T13862] autofs_notify_daemon+0x4a6/0xd60 [ 703.793194][T13862] autofs_wait+0x10f3/0x1ac0 [ 703.798284][T13862] autofs_mount_wait+0x132/0x3c0 [ 703.803720][T13862] autofs_d_automount+0x4b2/0x960 [ 703.809241][T13862] __traverse_mounts+0x1b9/0x830 [ 703.814680][T13862] step_into_slowpath+0x772/0xf50 [ 703.820207][T13862] path_lookupat+0x627/0xc40 [ 703.825297][T13862] filename_lookup+0x224/0x5f0 [ 703.830558][T13862] kern_path+0x35/0x50 [ 703.835125][T13862] lookup_bdev+0xd8/0x280 [ 703.839957][T13862] resume_store+0x1d6/0x490 [ 703.844961][T13862] kobj_attr_store+0x58/0x80 [ 703.850055][T13862] sysfs_kf_write+0xf2/0x150 [ 703.855143][T13862] kernfs_fop_write_iter+0x3af/0x570 [ 703.860929][T13862] vfs_write+0x7d3/0x11d0 [ 703.865759][T13862] ksys_write+0x12a/0x250 [ 703.870587][T13862] do_syscall_64+0xcd/0xf80 [ 703.875587][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.881979][T13862] [ 703.881979][T13862] -> #1 (&of->mutex){+.+.}-{4:4}: [ 703.889161][T13862] __mutex_lock+0x1aa/0x1ca0 [ 703.894255][T13862] kernfs_seq_start+0x4f/0x2a0 [ 703.899525][T13862] seq_read_iter+0x2c1/0x12d0 [ 703.904701][T13862] kernfs_fop_read_iter+0x46c/0x610 [ 703.910405][T13862] copy_splice_read+0x618/0xc20 [ 703.915759][T13862] do_splice_read+0x285/0x370 [ 703.920935][T13862] splice_direct_to_actor+0x2a1/0xa30 [ 703.926809][T13862] do_splice_direct+0x174/0x240 [ 703.932159][T13862] do_sendfile+0xb06/0xe50 [ 703.937072][T13862] __x64_sys_sendfile64+0x1d8/0x220 [ 703.942770][T13862] do_syscall_64+0xcd/0xf80 [ 703.947772][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.954163][T13862] [ 703.954163][T13862] -> #0 (&p->lock){+.+.}-{4:4}: [ 703.961173][T13862] __lock_acquire+0x1669/0x2890 [ 703.966524][T13862] lock_acquire+0x179/0x330 [ 703.971525][T13862] __mutex_lock+0x1aa/0x1ca0 [ 703.976614][T13862] seq_read_iter+0xe1/0x12d0 [ 703.981707][T13862] kernfs_fop_read_iter+0x46c/0x610 [ 703.987427][T13862] copy_splice_read+0x618/0xc20 [ 703.992797][T13862] do_splice_read+0x285/0x370 [ 703.997985][T13862] splice_file_to_pipe+0x109/0x120 [ 704.003606][T13862] do_sendfile+0x400/0xe50 [ 704.008530][T13862] __x64_sys_sendfile64+0x1d8/0x220 [ 704.014236][T13862] do_syscall_64+0xcd/0xf80 [ 704.019243][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.025639][T13862] [ 704.025639][T13862] other info that might help us debug this: [ 704.025639][T13862] [ 704.035846][T13862] Chain exists of: [ 704.035846][T13862] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 704.035846][T13862] [ 704.048073][T13862] Possible unsafe locking scenario: [ 704.048073][T13862] [ 704.055498][T13862] CPU0 CPU1 [ 704.060839][T13862] ---- ---- [ 704.066178][T13862] lock(&pipe->mutex); [ 704.070309][T13862] lock(&sbi->pipe_mutex); [ 704.077303][T13862] lock(&pipe->mutex); [ 704.083953][T13862] lock(&p->lock); [ 704.087736][T13862] [ 704.087736][T13862] *** DEADLOCK *** [ 704.087736][T13862] [ 704.095849][T13862] 1 lock held by syz.3.1921/13862: [ 704.100933][T13862] #0: ffff888032ab9068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 704.109611][T13862] [ 704.109611][T13862] stack backtrace: [ 704.115479][T13862] CPU: 1 UID: 0 PID: 13862 Comm: syz.3.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.115497][T13862] Tainted: [L]=SOFTLOCKUP [ 704.115502][T13862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.115510][T13862] Call Trace: [ 704.115515][T13862] [ 704.115521][T13862] dump_stack_lvl+0x116/0x1f0 [ 704.115538][T13862] print_circular_bug+0x275/0x340 [ 704.115554][T13862] check_noncircular+0x146/0x160 [ 704.115570][T13862] __lock_acquire+0x1669/0x2890 [ 704.115586][T13862] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 704.115601][T13862] lock_acquire+0x179/0x330 [ 704.115615][T13862] ? seq_read_iter+0xe1/0x12d0 [ 704.115631][T13862] ? __pfx___might_resched+0x10/0x10 [ 704.115645][T13862] __mutex_lock+0x1aa/0x1ca0 [ 704.115666][T13862] ? seq_read_iter+0xe1/0x12d0 [ 704.115681][T13862] ? do_splice_read+0x285/0x370 [ 704.115698][T13862] ? do_sendfile+0x400/0xe50 [ 704.115713][T13862] ? __x64_sys_sendfile64+0x1d8/0x220 [ 704.115731][T13862] ? do_syscall_64+0xcd/0xf80 [ 704.115747][T13862] ? seq_read_iter+0xe1/0x12d0 [ 704.115763][T13862] ? __pfx___mutex_lock+0x10/0x10 [ 704.115783][T13862] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 704.115797][T13862] ? seq_read_iter+0xe1/0x12d0 [ 704.115812][T13862] seq_read_iter+0xe1/0x12d0 [ 704.115828][T13862] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 704.115844][T13862] kernfs_fop_read_iter+0x46c/0x610 [ 704.115866][T13862] copy_splice_read+0x618/0xc20 [ 704.115886][T13862] ? __pfx_copy_splice_read+0x10/0x10 [ 704.115906][T13862] ? __fget_files+0x204/0x3c0 [ 704.115924][T13862] ? __pfx_copy_splice_read+0x10/0x10 [ 704.115941][T13862] do_splice_read+0x285/0x370 [ 704.115959][T13862] splice_file_to_pipe+0x109/0x120 [ 704.115978][T13862] do_sendfile+0x400/0xe50 [ 704.115994][T13862] ? __pfx_do_sendfile+0x10/0x10 [ 704.116008][T13862] ? __pfx___seccomp_filter+0x10/0x10 [ 704.116029][T13862] __x64_sys_sendfile64+0x1d8/0x220 [ 704.116048][T13862] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 704.116067][T13862] ? __secure_computing+0x28e/0x3b0 [ 704.116087][T13862] do_syscall_64+0xcd/0xf80 [ 704.116103][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.116116][T13862] RIP: 0033:0x7f49f838f749 [ 704.116127][T13862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.116140][T13862] RSP: 002b:00007f49f91be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 704.116152][T13862] RAX: ffffffffffffffda RBX: 00007f49f85e5fa0 RCX: 00007f49f838f749 [ 704.116160][T13862] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 704.116168][T13862] RBP: 00007f49f8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.116176][T13862] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 704.116183][T13862] R13: 00007f49f85e6038 R14: 00007f49f85e5fa0 R15: 00007ffe8c24d118 [ 704.116197][T13862] [ 704.749525][ T89] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 704.901977][ T89] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 704.911536][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.919840][ T89] usb 5-1: Product: syz [ 704.924153][ T89] usb 5-1: Manufacturer: syz [ 704.928773][ T89] usb 5-1: SerialNumber: syz [ 704.934519][ T89] usb 5-1: config 0 descriptor?? [ 705.144476][ T8281] usb 5-1: USB disconnect, device number 87 [ 705.352985][T13860] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 705.366664][T13860] 8021q: adding VLAN 0 to HW filter on device bond8 [ 705.381230][T13860] bond8: (slave veth15): Enslaving as an active interface with a down link [ 705.392376][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 705.401787][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 705.412712][T13860] bond8: (slave dummy0): making interface the new active one [ 705.420897][T13860] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 705.433945][T13860] bond8 (unregistering): (slave veth15): Releasing active interface [ 705.443240][T13860] bond8 (unregistering): (slave dummy0): Releasing active interface [ 705.452340][T13860] bond8 (unregistering): Released all slaves [ 705.475528][ T89] usb 2-1: USB disconnect, device number 86 [ 705.527996][ T8284] usbhid 7-1:0.0: can't add hid device: -71 [ 705.534241][T13849] vhci_hcd: connection reset by peer [ 705.550992][ T8284] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 705.559551][ T13] vhci_hcd vhci_hcd.1: stop threads [ 705.561357][ T8284] usb 7-1: USB disconnect, device number 58 [ 705.569288][ T13] vhci_hcd vhci_hcd.1: release socket [ 705.578687][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 708.469518][ T8283] vhci_hcd vhci_hcd.1: vhci_device speed not set